{"report_id":"3b989411-94f8-499c-abea-6d4971d92f6f","version":6,"status":"done","tags":[],"date":"2026-04-19T06:46:23Z","url":{"schema":"http","addr":"www.281880.com/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"title":"新葡京娱乐城","dom":{"size":234483,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65522), with no line terminators","md5":"ffe966b0e05ca04ce05e2c5123e579de","sha1":"a70ef578fd85d7267a19b4841cf7f00feb7a4484","sha256":"d994892baa0aafb85e2b8895e7379c46497e73bcaa6e9470d432b78a7341e1e6","sha512":"f1eff7ec08180fdc9fb05676e6581d429e8b7cd17790feaa561e8d629e3919dc61c4441fc83a2fd75886595f7cbc3baee420cba292b3d3f18e14a97791b8b4e1","ssdeep":"3072:KKhlvZyKcWL5+gOY5Zp8BdYHMdIMyRwbKhZvZyKcWb5+gOY5vBqD:KKhzFXFJ5nHMdIMyRwbKh3FXVJ5O","tlshash":"d1346c399250537ff8010fe678e31071a9e94aadcb91d544c3f69e2ce8560e9c93fa93","dom_hash":"domhash8ca8a94383980638ff1ae55ee0002384","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.281880.com/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-24T06:46:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.281880.com","ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":21,"request_count":21,"received_data":1143376,"sent_data":11353,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]}]},{"fqdn":"3rzeeh.ntbnaq.com","ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2025-05-07","domain_rank":0,"first_seen":"2025-11-29T12:28:12.74604Z","last_seen":"2026-04-18T21:49:16.55897Z","alert_count":0,"request_count":193,"received_data":12982397,"sent_data":95320,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9846b4b0c961f85e4c150bd29f4b86e1","sha1":"adf30369fc215e80b26536f1e24a1824ad3b81d5","sha256":"163a003d567f6d41f861d978c558eced69ed2b25c863055ed8171eefa350784b","sha512":"cf37c88b0608cef82c3627c952577e291343b8f63323da2dd77b34ab0500d5494bf377f85e968cb058124ff32345f184aeea9447eda67d9e887d688e2e5c81de","ssdeep":"","tlshash":"1c80000a8c0088cfac038e00803c00a23acc202a0022c2202a00a803aa00032023a0f2","size":29,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-04-19T09:11:38.431089Z","times_seen":5260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"37f0336a6fe3f56c661b149ecf659efe","sha1":"9aff4163d5da3b8d760f0593c583dd8d1f6dfc14","sha256":"f33f7afadc5c318efdd57d35da2dc2aebe39fd166a61905ce37b9f7363f51c2f","sha512":"d24a42f5f1834957e5616b5f61d52db98c3351e5ab3346f1fee8e7ca6ba62dc7c51f4ae645a8dd403194e2df3f8d2ea2c3b34d371a67dde201979552033cbace","ssdeep":"","tlshash":"279004510f71113ddc305157055c13747050c13ddc1ffcd43413d57c04741300011401","size":48,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-04-19T08:49:21.278693Z","times_seen":11497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"5755bd33351d998f9a8835d8b6b5fc26","sha1":"c8a3bca55ef8cc490ed41cdd158f1ba7bf6fad4b","sha256":"19c658841673f15b9a19062b15d628002637a68d4e9d5cb005e4ad86bdb46862","sha512":"cabc809e1b159603c89a58fb975984cbac35090ea9afdb414eb9cda84a428ed508a1d63e30d904f76afdcc2105d9725906da98c38d6385fa0cd2826813ff3ced","ssdeep":"","tlshash":"21e0c254a4eaf0530382400600fb7c105e9b2f035f58c891327f2048aff9a8c08d3e6c","size":318,"data":"","first_seen":"2024-09-24T19:10:11Z","last_seen":"2026-04-19T09:11:38.432026Z","times_seen":5036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c88c91034e9f42727d170a5cfca4b1e5","sha1":"6942164e782f48e3d9e7a1b6646250178a8e492a","sha256":"91c1ba3d2c81289972f211626e1df827e753f98e8843fd441b69cdfba7264f88","sha512":"06e055dc340536058577192d45b26e69ff374562a84b33879d724d993b7e873d9c4bca82b1093041247f16f734565391c177f4435f964d842d9039baaa30adb6","ssdeep":"","tlshash":"3ce01264f4dbb0a20241801455bb3a000d6b2f529a2894d5b6bf5188aff4a8d0973f5d","size":304,"data":"","first_seen":"2024-09-24T19:10:11Z","last_seen":"2026-04-19T09:11:38.432499Z","times_seen":4052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c88c91034e9f42727d170a5cfca4b1e5","sha1":"6942164e782f48e3d9e7a1b6646250178a8e492a","sha256":"91c1ba3d2c81289972f211626e1df827e753f98e8843fd441b69cdfba7264f88","sha512":"06e055dc340536058577192d45b26e69ff374562a84b33879d724d993b7e873d9c4bca82b1093041247f16f734565391c177f4435f964d842d9039baaa30adb6","ssdeep":"","tlshash":"3ce01264f4dbb0a20241801455bb3a000d6b2f529a2894d5b6bf5188aff4a8d0973f5d","size":304,"data":"","first_seen":"2024-09-24T19:10:11Z","last_seen":"2026-04-19T09:11:38.432499Z","times_seen":4052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c88c91034e9f42727d170a5cfca4b1e5","sha1":"6942164e782f48e3d9e7a1b6646250178a8e492a","sha256":"91c1ba3d2c81289972f211626e1df827e753f98e8843fd441b69cdfba7264f88","sha512":"06e055dc340536058577192d45b26e69ff374562a84b33879d724d993b7e873d9c4bca82b1093041247f16f734565391c177f4435f964d842d9039baaa30adb6","ssdeep":"","tlshash":"3ce01264f4dbb0a20241801455bb3a000d6b2f529a2894d5b6bf5188aff4a8d0973f5d","size":304,"data":"","first_seen":"2024-09-24T19:10:11Z","last_seen":"2026-04-19T09:11:38.432499Z","times_seen":4052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fe7dadf050dad2dcfd386d21b880281","sha1":"07e7feb8dc9309fe66d86d7a9e27f8efd32ab0bd","sha256":"aa891aafe8e98e1e15d81b2b116e6c3808d0bbbec56cd24818e2e7ac911877c9","sha512":"9da40e5132ece9fe346f27aa467b2496545c84197131c633e5b1ff1f641ece723440ec0289e82d7948b85bcd901b9e3eb6e36f8e0339ae05e4a32621e895accf","ssdeep":"384:yC+tJn9Dbvbf1P3QSBxDrdiewZnnoTW39if+04xSlR4nbiamdrjNfrzInGINYlor:NWJnlN3QSBxDMewZnnoTW39L0MSR4biK","tlshash":"a762954d3a9514bb4adf31b770ab204f767e8800852c91c4bdbca0d166b5ee072e7e6d","size":14857,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-04-19T08:49:21.122145Z","times_seen":12066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/websocket/CometMarathon.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"466a7ed7d00986d45375c0cbffb5233c","sha1":"68845ead668e9abd29c24b491dbf97b219226c08","sha256":"7ddafae5a0a552d2d56101cdc8306403e8fb9570759d66c48b25893b409f0123","sha512":"752801557c12ee7830f1f2e55352ab9c033aff01ff79abdffaee1601c54cdfc85a2041facfc5a7e180706812be5ad08668eada116544197fd2a784bac1903ea0","ssdeep":"192:0Pf+0Sn4NyRSTTPhvygOdWuTdC3d7QPXLHOm8cSCl1Ej3m7YAPzhsoqFncJ0j:0Pf+fnwfcXSaGLj","tlshash":"9e32314b6cf75085592b32b50f9f24447239d8572605e81c7dccaae48f98b6c0b6bfb8","size":11905,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.214688Z","times_seen":12015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/message_zh_CN.js?v=1776067717568","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f122062201cd2cedac9761f4c46b2a3","sha1":"5bced4febcad095851dd9d0dc4438d8e96aa8715","sha256":"96e43037ced41b7e8dfe16f604a02f6093aa1b65e9f349ea697e486e29bcd814","sha512":"b9cfd2e598fe9a778bea162e5180ca88bf01d2c02cceaeb27304e827fd0814662733d0df3ed07e2f3d5d0c34fea3f0e25b277d75fdc1a4de20c41eb169d225c0","ssdeep":"384:vTrBmS53qEviCysRI/2aTvfyxtvgfG+S7MjRBQP1RODaP5YnRn21IRBGN9Jaqxk7:IIy92nyfB+vODR01IRBG3JpfsIU","tlshash":"38e23ba604bedffb581615d6d44700c921d96b895afc7928bed0ee1e1b863c604f3387","size":32151,"data":"","first_seen":"2026-01-15T08:15:21.591485Z","last_seen":"2026-04-19T09:11:38.434012Z","times_seen":1447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c88c91034e9f42727d170a5cfca4b1e5","sha1":"6942164e782f48e3d9e7a1b6646250178a8e492a","sha256":"91c1ba3d2c81289972f211626e1df827e753f98e8843fd441b69cdfba7264f88","sha512":"06e055dc340536058577192d45b26e69ff374562a84b33879d724d993b7e873d9c4bca82b1093041247f16f734565391c177f4435f964d842d9039baaa30adb6","ssdeep":"","tlshash":"3ce01264f4dbb0a20241801455bb3a000d6b2f529a2894d5b6bf5188aff4a8d0973f5d","size":304,"data":"","first_seen":"2024-09-24T19:10:11Z","last_seen":"2026-04-19T09:11:38.432499Z","times_seen":4052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c88c91034e9f42727d170a5cfca4b1e5","sha1":"6942164e782f48e3d9e7a1b6646250178a8e492a","sha256":"91c1ba3d2c81289972f211626e1df827e753f98e8843fd441b69cdfba7264f88","sha512":"06e055dc340536058577192d45b26e69ff374562a84b33879d724d993b7e873d9c4bca82b1093041247f16f734565391c177f4435f964d842d9039baaa30adb6","ssdeep":"","tlshash":"3ce01264f4dbb0a20241801455bb3a000d6b2f529a2894d5b6bf5188aff4a8d0973f5d","size":304,"data":"","first_seen":"2024-09-24T19:10:11Z","last_seen":"2026-04-19T09:11:38.432499Z","times_seen":4052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/ftl/commonPage/js/sprite_logo_h5.js","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"01a7a44d1e991edace3178d8adb28462","sha1":"abd4e088c6cf974c0e468dfd3673c9a02d4aefd9","sha256":"8b6d4a810163ac6f3b848425af836c2356283789e16e4dc3ca64ed62baeb4c12","sha512":"8a0300e2b8f19329e77cb7f458fba139c78b468ad6b930b829c80eccd24fb2cd3d3f0e37f7fe8c3dda4f4064b9ce98f74c2ce9f23568c11291bc0142486f6adf","ssdeep":"384:5AlUE7v7hB8ja+MZhsw+gRP9Gg481ZOzotgSV:0UE7vz8XMrtTbHgQ","tlshash":"4ca2977e36672732a98a61d59c3f66d16af124349c028d6c3a5ccdeb8a6cd0424b7f34","size":21918,"data":"","first_seen":"2023-10-24T19:57:06Z","last_seen":"2026-04-19T09:11:38.389006Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/jquery/jquery.super-marquee.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f77d83590bc0a69298f2fbcc5d9911cd","sha1":"1d6aa25d7052f53ad0181385e5efe72f224bbdb9","sha256":"1d042b9441e860ddcc01b9e9e5e8d354121ee0e31b47f6e18a321e2e633d22e7","sha512":"a39dc6c01df32c8f72842af346f4d67e1278d37a74a0541537b8274b421bcfbc547a2f4844f3c4b6c5cdda4c78f0a8f41171c87ffd149ab52526a95bc6c5bf61","ssdeep":"96:nwzrUsI9/8w/ISEgOGXFRNcrc8PQjc3Pb:+rUsk88OnJQA3D","tlshash":"2991252d7290f5d559cf3c3be02b0b050c785123a54e00927a65def279ba379a607e1f","size":4433,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-04-19T08:49:21.261485Z","times_seen":12076,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/bootstrap-dialog.min.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ce8851dc823429a42ab6147554403cc","sha1":"28f381f0e0aa4f5d56690e65723bd97fb59a38e6","sha256":"dd1edf5e54071903c4c1e81e33636444899d645df6b18bad22249da07f91c811","sha512":"f42a4d48c666d9c78fcb6c6061141452899085c504bf15e23749611dda00b6913e75ebbe47ca436a2ed016175d0918f193e474f13974a2f6a5304e18909a87ee","ssdeep":"384:3ai3F3N3VKUINthDa7Vnq86z3JCDKSz1m0hMtkJI2Cg0WEUOv5Dq:T3l3INthDu1YCDKS5flC9m1","tlshash":"6a9261ccb2d9b54c47abe072143f200df03a996951496119bc79e9ebecf060aa077f79","size":20132,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-04-19T08:49:21.145633Z","times_seen":12107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/lazyload.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"d87854586672bff7f886a47da85da5ed","sha1":"8d0537030dc7a81ade87a41a75fd5a75e4e33da1","sha256":"17859187f895c27de8869fb6bfec579fd68c4588d0af71d08d334be92d144ada","sha512":"d8c3e724f00bcf1ebfe1f8e96dda01243cf22aef18a0fc5a25a42d84458ff58a22a316dabf1d80d1b4f4c28db79edbdf9ba19df755d72f2b0b9f64497137672f","ssdeep":"192:Cdr+EgBD7NiM7B1wV20jSCQrF/bcbe7/bgdCx4RTsmS3KDsS3CggvBSChKRJ0Suk:Cdr+JBDYpV20Ez+obgdsm3ROCJIqSJvG","tlshash":"304200483deb51aba1d3b0f89a5f11447235810b160eee253d6c9395af6093932f2ff9","size":12053,"data":"","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-04-19T08:49:21.267598Z","times_seen":11807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/websocket/Comet.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"1008fe6a5e1a182d7775963b85405bb2","sha1":"e174a7b08cc3cb5545af1cd33d2814e604119392","sha256":"7479f6f22194ac37dd6d3f5a579b4682ac8dcb6389fb961cf4140f3fcc707a20","sha512":"26e07821ee1e8e94c4bada028e049df7572cac06f2e8dae958baa7a011eb201a6a1d4ed0cfa15017a3f52a0cb949343de0b33ca6da7c245f763c86d5adfb0223","ssdeep":"192:4Pf+aTbLSru4NyRs8VDv1KygOdWuTyVC3d7QPXLHOm8cSCl1Ej7bY8l7YJIJvO5N:4Pf+aTbe4M2cXzsjDUfj","tlshash":"ab721e4a2cf76086552732b90f5f64543235a8172605e91c7dcca6e08f98b7c1babff8","size":17162,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.23672Z","times_seen":12021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c88c91034e9f42727d170a5cfca4b1e5","sha1":"6942164e782f48e3d9e7a1b6646250178a8e492a","sha256":"91c1ba3d2c81289972f211626e1df827e753f98e8843fd441b69cdfba7264f88","sha512":"06e055dc340536058577192d45b26e69ff374562a84b33879d724d993b7e873d9c4bca82b1093041247f16f734565391c177f4435f964d842d9039baaa30adb6","ssdeep":"","tlshash":"3ce01264f4dbb0a20241801455bb3a000d6b2f529a2894d5b6bf5188aff4a8d0973f5d","size":304,"data":"","first_seen":"2024-09-24T19:10:11Z","last_seen":"2026-04-19T09:11:38.432499Z","times_seen":4052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4e19a24a1531073e3d7bd193dba0099","sha1":"31268adce9932d5339c03d3d44c6ce3135ec0a0f","sha256":"14204111ca598f87e139e54218656c144a43490c768eecad2653eb780e2df04f","sha512":"3b943b5f62bb40557240b4a9bf92f25f99f6b3491c07a17f2efdc08eedb5f3912498963c930e724751b23acf4331965366c8907490abf0fcfbf42967a60ecdaa","ssdeep":"","tlshash":"e12130524f048a9b77cdc7195060241c6ccc906f7c80b988f6ce9ba70f5ea9e06fd083","size":1289,"data":"","first_seen":"2026-03-16T12:56:55.405005Z","last_seen":"2026-04-19T09:11:38.433027Z","times_seen":1103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad3a4627d1ec85fab4800307ffa4bf68","sha1":"c1fc481a47a60a9302b7f6d569b648091b79b523","sha256":"5852e34b404e24dabd1596e3292f89cabb07d1a53673739aeb9bef171edbab52","sha512":"896b37e641502033d9bfedf9e391e71e8d5c305bdcc5fd16959afafc1da05c53a6e028092b5470287a63fe72d6fa11cf67c5c9df90a71a459bef10ebb0f958d4","ssdeep":"","tlshash":"4d01cb204c3840813c500350533b7b0db532423b4c81e54c720e5fa03fda86f11863da","size":708,"data":"","first_seen":"2025-11-29T12:28:28.101297Z","last_seen":"2026-04-19T09:11:38.433526Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4e19a24a1531073e3d7bd193dba0099","sha1":"31268adce9932d5339c03d3d44c6ce3135ec0a0f","sha256":"14204111ca598f87e139e54218656c144a43490c768eecad2653eb780e2df04f","sha512":"3b943b5f62bb40557240b4a9bf92f25f99f6b3491c07a17f2efdc08eedb5f3912498963c930e724751b23acf4331965366c8907490abf0fcfbf42967a60ecdaa","ssdeep":"","tlshash":"e12130524f048a9b77cdc7195060241c6ccc906f7c80b988f6ce9ba70f5ea9e06fd083","size":1289,"data":"","first_seen":"2026-03-16T12:56:55.405005Z","last_seen":"2026-04-19T09:11:38.433027Z","times_seen":1103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95956,"data":"","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-04-19T08:49:21.266493Z","times_seen":12783,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95956,"data":"","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-04-19T08:49:21.266493Z","times_seen":12783,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/layer.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb96339625e9d456e32f86cdb3c7a7a1","sha1":"1301165c58bbb13c542cba493b7ab5774e87e31f","sha256":"17fb047ba6828fcbdf2ca226fa4594cfded2b2fdfeaff89a5bd81c7cf0359919","sha512":"53083bf4d6d450b1e9402c3f3dc40fb3434a27d47fbabee51f4ce1d3577f2a0aabe90cf5f6dfc22830a3878ec7552a6bf6bff605c82a4f832c79f34f7657ccef","ssdeep":"384:r1dCih92A3DgrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:r1YiV3D+WtXItqF13k8","tlshash":"6aa2b76a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":21994,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.268992Z","times_seen":12011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"75d6da1989cc41cc36da617111851d22","sha1":"227e04372e0252ca52ad51fec797cbf2682f267d","sha256":"a282cfe02fdf1deda0dfcf6189661ecba78e03d86356b7679f0a0b86343d9f8a","sha512":"0c167b701372a3dad9eabceb10e5750d78d6166d018c4b265d69c4e9216a654101bed29194d9aa2f1d379a0d967cc0cedf89495fac8d34ad4b3882b29df18a84","ssdeep":"384:2F05MtGUz1xvZdHXl3PEkdn69oz1R0f6Iem:2KytGU/LlF6e1A6Iem","tlshash":"2972208968ea0075a5cbf0bd5a9f4c58773880db0b898d0f7c4e66b4df6497013ba5f8","size":17240,"data":"","first_seen":"2026-03-17T07:56:24.144149Z","last_seen":"2026-04-19T09:11:38.434984Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab8b1bcffc72e505e0f37f693d6a87a5","sha1":"849c792d84445ff1cc946c4458255dce152a68da","sha256":"36e8c37b1055713547aa080372b86615e1f9858d3f632cb0f949e05247f8e607","sha512":"cb717ce8dccbd48d7b8ac79f8018ff327637fce9ef4441b832a9ba7af57cfae5e476170ec2490374e8026a0b6a6a265399d4ad2801ebdb37b7a0092d8f9331a3","ssdeep":"192:1BDi+KreB5FlJ7KRn8rVavN3nryOcCxiAcJGw/d2mi7yn:TTKCBRhKRn6YEDdV","tlshash":"ec42c8a821fe392301d371394f1e6a072532599bc396ad013e5e8b884fe977c46b36c7","size":12737,"data":"","first_seen":"2024-06-28T11:39:26Z","last_seen":"2026-04-19T09:11:38.435467Z","times_seen":7289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"6681856885ee92601b7711c11d19553f","sha1":"95ab4437869df8c790cad28e0753a4c9ea362e73","sha256":"ce52fd46b2a5cfd741a2f0c39bc2d5218271b5690bdf8ec33af94f1062e98d23","sha512":"5f2a2fe1e899778e0687301ff306fd8c35b869c0675f726653be98393da31fedc388b4d3ed25d7075a0da69656458fc929bb00daf92e1381e19bb49764bea4b5","ssdeep":"192:dvbLsKRfG3Ncq2w30CowkzcDC/L04alCUM:d93d3","tlshash":"1722cb08f1bb1da540b3203c1faff082ae64564b9d89cd02bc4d59c45f09aede971f9a","size":10725,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.283075Z","times_seen":11901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/commonPage/lan/i18n.js?t=1776581157.172","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae45643bf587685ff88386dd7c864c15","sha1":"683bd7e17404d8ac7f7445c4dbd6a0839e7998b2","sha256":"2da2eaff4f4d9c790cebb662e4b42eec955c82d32c329c9e3317e969cef7af18","sha512":"dbc41a99a81d2d0b43482a48c499c870bbcd6408e30d29780d23fc4178dce98cd818099eec7deb0d2453e35785e5aaf8e1d3f4f923e0c73ac54c76b06dfbfb1d","ssdeep":"","tlshash":"5c21f158f6e061d32d5e8aa3eda13f6f1575097d00973503437831ce1179ba79c6c408","size":1310,"data":"","first_seen":"2026-04-19T06:46:39.295388Z","last_seen":"2026-04-19T06:46:39.295388Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"cf0aad09d2e7287c48d72501c4ed8cbd","sha1":"7950b8c00d5a278b662dbccd11af31398a408e51","sha256":"72512199b29d971b5fe854b1f610604dcbdec2c38666c106f1d15863e0df32db","sha512":"2c1680bded9b22be2e6c38d76e46ef67bd438c6c9d99c804f9dcb77ca30bd5aa6f090c89a51205cc7efb466040a171eaa318ffe6fdf046c924394ce7867218f7","ssdeep":"","tlshash":"75d02b4472e3280c08f22b214cde250508a271b610484d08b10ce9d64bb5522b97773c","size":278,"data":"","first_seen":"2023-04-14T20:29:13Z","last_seen":"2026-04-19T08:49:21.279263Z","times_seen":7817,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d15a9b513acdcf3e9b08901384511565","sha1":"f1fe72392137895e4952f835c0330f76aacfecdf","sha256":"9fa644edfd9af9be6b244016e8f4f0eaee414732edc6ba3641e8647253359995","sha512":"9bb3e57667fd095c42db5514ac18c9b41baf50b81ded3ff810486ce394e1034751a941fefdb4e0e09bb98613b5dfc0a842d37cd9802671928e5f49380b9eda29","ssdeep":"","tlshash":"b071013cf4fa2228282b6085779b2821a5915427144dfd0cbb1ff3389fe9d25ee566c7","size":3647,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.28416Z","times_seen":11894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/jquery/jquery.nicescroll.min.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5bc8cd626b389bde727a91e6ce79436","sha1":"3df6c39300ac286cf596b3bda273cb39ff825429","sha256":"a1eb48eeb3b3f2ba41940d3041464f0b386b7a7c4a8acb42f3017e691f4b116e","sha512":"2c1dde58ce83d9b716919dfc42602aef3022be012b3f92e61b17b674303ecbf0b9d308064b6d6c2443cf3e3dfd36bfb332eab62e64b56bef0be801e6f4610f12","ssdeep":"768:CwJl9VwAdGuMbJVAOi9ee9RjOEe1sdMv5rjITry:Cxb7AdRjOEKhHay","tlshash":"9553a7cd7522346b05de5235d18b4b4a623a9857730b90e4762c8cf46d29bbaf223f7c","size":64651,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-04-19T08:49:21.238014Z","times_seen":12189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/gui-base.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6ce47d880d7a50ddf91b074c8572edf","sha1":"6a3657c67209136e5b544859daecf16f2d153b72","sha256":"c49e04c7ecfd07c74b58cf161ef2b58f2bc837a9091ed1ae090a33734cdaa734","sha512":"0946a1cb9d048b485dadf4056a4aa7be685a8906240a828a5ac776a4e1eae2ed5ef238bd0724da41cce33324357ba44704d34a6766430f1552630f9a17b664f4","ssdeep":"768:+lkflKVlvREcS38xHmuqrRO/5IS3oFaJX+mQdudqD9jAXImsUh8H3yALdODRG4eK:6ClKVlvREcYoHz0PszIfoALkMEY16pB","tlshash":"4353c80a72b130a106efb1b6515f460d323a6927d44ac458b97c9ae43f74f28316bf7e","size":60909,"data":"","first_seen":"2023-08-26T00:19:56Z","last_seen":"2026-04-19T09:11:38.420627Z","times_seen":11267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"bfef323734a94996394a36fd338a53f1","sha1":"b0881f37c0ddacdc29b9324676c5d2e6759a756d","sha256":"63c718a2d2170b555aae58e611348697e338f39dad9fd4f6a0d61abbc87142ab","sha512":"b286ef97e05b8729eea42eef6b2b21b68b3a57780911cd8657be1990e0c0dea09cd430067639a2723cb7af536fdab05db4ba778b45157e3327ffaa920009d3a3","ssdeep":"192:yveWE9kFg3b9CCCiC+Vd2BX6p54JiVXargvn4n6SnEFvcWaSgNqEcIyY1hFIyD1W:E+GhcqJmYcIyaFIy/BIyv3IyPlpK","tlshash":"9392621824f7006859a371785baf6088f578802b4809ce45bc8e92986fd4d6c7bf7bfd","size":19661,"data":"","first_seen":"2026-03-17T07:56:24.148473Z","last_seen":"2026-04-19T09:11:38.437121Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f5bce1aa50f72fd0834901c70db4f43","sha1":"41771079bee5eb45539e694a5eff580732ab26b0","sha256":"a50724b65a2657f6e67adbf98a3dd135de52b4786350f0b1bd142adff38c7ffd","sha512":"d1445eef1431e8e11779bb3aa9da243cfc04ea0abe4cb9a62b6b0f5940a9ea17ad7d0926a51925feb06ce2afc435ce9050c3955ce973407eebfa4dd1d0ca35af","ssdeep":"192:cyzyMkzf77qsBQXbhG1SUnqpT7H8DvswVAJ4jy7j3vU4P8eaoCrHoQcasI4kHwCW:mMkjq0TqEVAJ184P4DiQzR0KmgqQ2N","tlshash":"599210b876f701b24c667477875a2144e100f0ebb648ee087d4e56dc4fa8a34b3a6fd5","size":19701,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.285184Z","times_seen":11868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/061410/rcenter/common/static/js/gb.validation.min.js?v=1776067717568","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55780dc13cbf1a8d375f14ebb659cf2","sha1":"9548cc269bcde0dc48e166fa6bab37af8a649e57","sha256":"35d147a863ab8828e073ca1ae89d476a9cede797c410ac555597c1f442452cc8","sha512":"3514366118d038da9131739e4557dc5fd92b8b7d3a27af00a7c2d8f4cfd49f4932991cba899fcc8171ac59eb356b25e717494225912f37d65600305ce2d3ace9","ssdeep":"768:WqBveMjZ1oE/eL8hhMjm9a1hI4vhej4pZ:Xpo5GhMjm9a1hI4vheUpZ","tlshash":"cee231166b7701e2916b71e10e4f9a083174952b5a87ce08bdac92e09f18d787373ff8","size":32679,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.203956Z","times_seen":12289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"edaddb8132e9e0880252c5b6c47bf1c1","sha1":"dc08b5b6ca432b46cca94f1f297491e1b08736ea","sha256":"b98809417c0240085bf70f2a1127f0b622c1514651737e7e4ffac4b39e4da17e","sha512":"00dbcc0a7b89e5e377bc26573fa3b9f1d09267044b3ee1c594e22522f8a17733bf041ebfa09ddb2e70a9f495437933f8a4e42875a16a3221067bf1df558c090b","ssdeep":"","tlshash":"da4000000000000000000000000000000000000300000000300000000f000000000000","size":6,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-04-19T08:49:21.285677Z","times_seen":14348,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/websocket/PopUp.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"07864ad2e2759d53f8f2f14dd4295bd9","sha1":"95144219e2eb702c4c4a707c3622b086876cf41c","sha256":"871bf30791bb89605b61cea815c3786246274b65ede3b8a8b8c2dd9244cfa89d","sha512":"f469d0f23c75e918d55e076d72481fca7043ac5eff9025aaac1f26860d080e4fc3c5d28f8f9ee1dae80719aca2b83f39ea82a129c221980bd7d63c212bacc119","ssdeep":"","tlshash":"9041ae54baf359a12c9b71f3aaaf30413160f2479505ed017d0cb9945f1d228b2cf7e9","size":2088,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-04-19T08:49:21.144255Z","times_seen":12080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/idangerous.swiper.min.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f15409fb02c527ce1f66a2fd3c4aa0e9","sha1":"1e1e1bcc0f49e99e14ba34991cffe0745178d302","sha256":"1a1b5d3d6fbfc28abe37a668abd59494208c63c5f0b5d040cf4bbbd137f87c27","sha512":"66a384d6ad5fba862e778e24c43326a718328b6f860469fb5eb69c2687b0bbdc3c2dfa9049b0e3d5509214db1dbec4477f5c3654dc04446a505379a4300d4908","ssdeep":"768:oTFZ8CkWyYzh9MTvl7prcAgQW5ppZ+rPPWRqKDyBuq0t:cZiY9uTJuAgQW5LZ+rPPWRLt","tlshash":"5613f8c1b32031a741f3626e91fecb4271f54966aa05d4dcb5ed84c41ab489a03beff9","size":45187,"data":"","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-04-19T08:49:21.222285Z","times_seen":11871,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f1681b5a72417b33c2869aab85af152","sha1":"b40a6d9c6d058c2bd6e126a1b0191182926b9d04","sha256":"eabdfd0c5237f406e0acbef879968e72e5e3d62dd8e8b6bcee48e5ab7f4d0154","sha512":"d9190153595e85b071dbf1c92212e7c30a5de2e1d6c4533558bb5f4235d6227c327751799ce20fa50a875a4ceb25227f4eb7d133c3257d8770c1131117d8bda4","ssdeep":"","tlshash":"1631d8d2f3cd01fd42099504248620d9b11dc2394219d48efa9d3c8e73d696e232f32f","size":1761,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.286224Z","times_seen":11845,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c3f7d9e5de3b764c32a679ad06ae3db","sha1":"9ab260e36b46c6ca6f58066ee914f3826d86a37f","sha256":"fefe9a763127c0f92edfe95be1000aeed2eda7690482769c90dc9488dbe5d33a","sha512":"1517bde6929159474692270e256f6021611365d30618b57d1fd325e7170bc7540bac8500e1ccd438d2a3d5f3b6cf1456ba39560d5cbc685f4b56b4c2b4126ad3","ssdeep":"","tlshash":"0e51462618e8c076a31b639d0b9f1141b53c750bc3ac8d357d0d5b758fe451452dabdd","size":2561,"data":"","first_seen":"2023-11-23T15:36:17Z","last_seen":"2026-04-19T09:11:38.440269Z","times_seen":9852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"f273edb13e6e0a635e516c01e90a3325","sha1":"c1865fe90b56e6ed3db3f5868b1c3ba9e4bb61ba","sha256":"d027f38e596bbdfbafe04868b4b8e22498940df44d427bc3ec491f28943e856c","sha512":"323ad4229c66c45ec79ed40688a7a854f783b73c2fcd3f823ea9dc988a75404847f5549c98deba78affb272c9bfe4c0d6d06bd318074c9e75f7bcb6e34c8331c","ssdeep":"768:cCHmhEOPRtPvJdcz4nPVCKJV+3/svMIR0Ks3gYeLLvcOvBea/u+IaAVbaa1aTKOX:P0Lq/jIIa4aTuUwlo8/x0vwr90AIC8","tlshash":"f2c3c71c75e712a664b330791baf31007072941b690ddd08bd5dbac07f98a2da3b67ee","size":128016,"data":"","first_seen":"2026-03-17T07:56:24.154384Z","last_seen":"2026-04-19T09:11:38.441056Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"479c01001c455527cf2aafec087accad","sha1":"230c5d853a00977d890c25cb56b5a07c5e0acd0e","sha256":"0ad2a7081ff475ce3a2068fe69547248166c0fd39f26fbf03f2ac5db073a16cf","sha512":"ebedabe18db451b91ae6cfe4a55712d0401a1cd5545a5b9344edcbb68c7cb678a1a8a6efc20f101d99e8cc094a060bb32deccf9e694a837ee17a8f8585bd43c6","ssdeep":"","tlshash":"1f21233e1c17a1b52ef7046a9b7bd5a63af2051b2442e400bc8cd8193f14fc11c25bde","size":1389,"data":"","first_seen":"2023-08-21T11:10:45Z","last_seen":"2026-04-19T09:11:38.441696Z","times_seen":11504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"7932637ac9b0a1125acfaeffa837b6af","sha1":"01107a42cef642f68e70ef30502ecb6c0de6a0d6","sha256":"f938651bd7efeb3c523dcca3df1c9a0cc63b12f604816c8e49636fda5b1b1c7e","sha512":"6ee9dd22796803d3a44aaf8a59219dc077e2cf7ebe2b58efe545c7f08028496e595fbea31d2990cc0f210054f6cd91055326484acd544aa29889712c2c050f57","ssdeep":"","tlshash":"bc71315e7559bc949bd3202a4a7f1008727b486f2928c850fa5dcc50af5cf0f2362b9f","size":3486,"data":"","first_seen":"2023-10-24T11:42:08Z","last_seen":"2026-04-19T09:11:38.442346Z","times_seen":10584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd4934ec50598a49950c57836d268ba9","sha1":"9830d9f40b0baf411ea1e7b7a4b65675cf35ae04","sha256":"89e8ae92a48e530a676704a7858edcc65fdd1488e39280ba8da4cb80dc5729d5","sha512":"1b7e75147ff199dc7900be58df3ab41039a70322ab2db2d697238b166447a915cefafb3e1cc17377a7ecfc08b641fd9ab51351f060abb405ceed36ee1e5b1b9c","ssdeep":"","tlshash":"c641df0d25ee1008d01729a9fbbbf50c632994272ca4ed08b50dd2154f6ed7ed2b9a9f","size":2036,"data":"","first_seen":"2023-11-22T16:18:01Z","last_seen":"2026-04-19T09:11:38.443541Z","times_seen":9799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/float.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"829af863b0cdc4a603919824ae046299","sha1":"1d417b1553e4ecb7125ebf2005b74255291fbf73","sha256":"1dbe4afbc9ed220c08b9e95577b56f83e2e8e0f7620c5dc18266bb325e5bb271","sha512":"e1202fa26fd353dfb2f989d3d45512e0691c062076297399f5fe62f63e7f5b194fec4a3d7fe2f09be1a6a945e197e7d68445d33dcc6f80b23a315112d9ae5b6c","ssdeep":"96:G4SXFXVXDL+R5NxuHie/moRUgIm/Kv3RKXg+Iw3qCNv5IC80b7Yr+HpH:G7xhDL+jNxzeBVLKJ1LeqCwCxb7YspH","tlshash":"04e1506e03b1212195aff1beaf1e424c6631905b2507dd057e0c87c46fa493c4636fee","size":6959,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-04-19T08:49:21.255636Z","times_seen":12059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c41709c2b64126b909c101a27f39153","sha1":"4ab666b36c092577acb41390ad90e96d5fea7711","sha256":"c1963697eeafb63b6c29e95da2d38d91dd907ab656e130e6e1c34d1dcd149f60","sha512":"f235dccead15199e58495c6faee849c50252b9beed29a04ae46a7a9bdbccfd569a8ab452e7fcf923b7048dfda0c3d7bd51261874642d40e994d1640ca89e330e","ssdeep":"768:u4ygd0iB6d9zYDO5qYT8fwTW3Jny+XiKZNtrt2tG:NB0iB6d9zYDO5qYTMwTW3Jny+jrP","tlshash":"e6c2b7093585102f4ecf30fbb897524f72ba95a45019a069b5fca4d1bef9f8530a6f38","size":27822,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.249879Z","times_seen":12001,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/moment.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"36c8f828395a9395549bd6e7307cb7e9","sha1":"f30a4961558e2d3d4405e7d93aa28fdb63245e78","sha256":"5d5e32fa1e06a0bc9396f349d142ad248e82086543e438c890e43f41e692db33","sha512":"40c24a9011e1bbdd98bd95b341c400bdaf48fefd953fcb407368fe3c685ac09196b55e230c03ca9890c35fe9acef2c916bed52423dc1a7b532a1db9817c03a8e","ssdeep":"1536:qOL1yBkBeb9wNoHpH7tjl2Ulwjwaj2BH3fMobEKeYEoZYiMirUw0:qOCWeH70R2BkobE+cw0","tlshash":"aeb35f5a59e31023496362294fdf2011ba388123590dee487d8da3d49f9ed7c47bafec","size":117433,"data":"","first_seen":"2023-07-29T10:21:40Z","last_seen":"2026-04-19T08:49:21.147308Z","times_seen":12058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1880ce6f7e86a563b54412066416edc","sha1":"379f66a5c76c995e8255b0f825f2d2ef05d3ab74","sha256":"dadb28dfc6a383dc589a4c01a6db796fab7be6c40b7f7d413a189394ecac0bf1","sha512":"c5764f5080dc814bc985f6c4b26e18684cfe09bd3bb2dadb92e45500f82f583561e31d4b722d43628a014f5bb0c4f97019f91dbf0432d38909e7468e86e2bc49","ssdeep":"","tlshash":"70312f221117907787f2fb12a27f2406c80f878a953c99ee739f9070bb014fd71aaa4d","size":1827,"data":"","first_seen":"2024-07-12T23:08:52Z","last_seen":"2026-04-19T09:11:38.444179Z","times_seen":6974,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6ea297058f6d52d83390d9ea7f914aa","sha1":"349df987c3c4c50687d993b31f83cfea7f796730","sha256":"2f21ca2376a9112f70c12ecc46d75ff792b067f5edceae5ea06011c13cf14e56","sha512":"80999dd48f3db744a7cc59dc9cec9303b35216f65d2711891705dbc5dcfb34a18c5c015a2615573aaf59315882c5724ab5dc0e218e8f9cfa2579c4ef37d81cc5","ssdeep":"96:Ge2n8LmEhLzcRXKBxap3cSubfC7WjnM9LidafQa+X9MhsvVQCi:D2n8LmEhAXKfapMSu7C7w2WX988QCi","tlshash":"e0c10e4e72e120b199a7a52c929f901024725403080fdd1dbe4d93a4df89d7fb6ba3ef","size":6025,"data":"","first_seen":"2023-08-02T04:42:13Z","last_seen":"2026-04-19T08:49:21.292855Z","times_seen":11763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/ftl/commonPage/js/countUp/countUp.js","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e9a58a52dd5597d17699c8d25c2841a","sha1":"26e032f2abad781cce71814bd6d43138db8f89be","sha256":"b14b3f362ef456b8ef3d9525e5fb6f88f04135a39551edeb88d840e220d012bd","sha512":"6e9cdf308f82ea204e7a97404532d4dfef4b6f1d7c4810d9cdd279112afabb1f982196691718306e21a72b5cb1aef66fc71d0f0546944942ae77b56adc7978e1","ssdeep":"192:a3+jBTUNKveiCoWsyItBF2qb2VAgCy9HLqNx:a3EEKpUo","tlshash":"ebe1db8a55b312212a137a6b9b8b33432a3f8633241dd8a97c7e13811f9542247d6ff8","size":7140,"data":"","first_seen":"2023-03-07T12:39:28Z","last_seen":"2026-04-19T09:11:38.380904Z","times_seen":1583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e6bbb84979a27014e74be230fe8440f","sha1":"aafe0c1dba07e91354abfb25d154c0acbed24d61","sha256":"03e9af072f4db23c6c6cd74a89c796a3c764731da4734682f3ccfc07e0e54e74","sha512":"445744eb54e6f81910f41add7f3ae90b45f311a7a3b5b86bb57079210dbe60c35b0b45ce06f3e4284c55578e2e2878d656ce445fa0040dc5e6edd47017a5a116","ssdeep":"","tlshash":"36e02649d63a68e0507364ac2b7f203129ee920ba009ce68fe2d13c16f444150b71786","size":390,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.293361Z","times_seen":9561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d24a27b56a588bcb83462bf72dfe16a","sha1":"5a3a122a406ad4445c3b78f44ec4c32b7a13f7a0","sha256":"56287f4aa127f4034565f096be5459fa251e64215fa4e2c3979e5b7f2399d526","sha512":"1f76fc8263164bc9f876f7e50591d96e0302f065841ffbe3218632f94e5de2bb96ae02507c69f570ff6ade45bd2ae472f516f1e7bfd5d8f1404a6e979c326c0a","ssdeep":"48:Lh9J1waQo72wlPxv13vhvh9J1tato72tlMxv16oBJIOBf1ra/TJIDF1IeoUdvDBh:LzY67b1hvzVv7y4PaPxIfaZWGi17YjM","tlshash":"3781d07a32f24881907b50b91f2e37809335588fbf3d6868be5d0ac01f2a41ac096f5f","size":4121,"data":"","first_seen":"2023-04-19T10:42:24Z","last_seen":"2026-04-19T09:11:38.445723Z","times_seen":959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ff167d9ae0ccd81b964c97f9a668809","sha1":"3099f6c4ae7c805e381a2627277eb4d7201d4023","sha256":"c94cb951b54b9642bc48cbfc61aeb5a7248a556a63363b6daf02be50e5942c81","sha512":"45f899e898c6db468be3dc4eb6af12ab391477064c2c2443fbcea842b552ed58253031040c6a62ca30364e094d26b8a143aa78c22685b73fbc150bdfba9c16b6","ssdeep":"96:fMjpSTGTXFP/T3m5tTGPvT3m5S4/dGV4/llyuo/llCqGbiu00W1DG+/:fMwTGTXFP/T3m5tTGPvT3m5S41GV4/li","tlshash":"3a916316649330f61433b04e6fdf29016571704b1504cc4abd6f8ae4bf8c63daaa6ec6","size":4322,"data":"","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.446304Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"44c700e4637f69872e24c01492c27978","sha1":"0d1ce3ea182fffbd766aa32196d88b83563874ac","sha256":"9bcc784fc6d36a673785e67bddf23ece5d357bbf3ea9da9a6e7d0346cbd3b708","sha512":"3b0b3e9c6288468e7ccc9940918956061d6bebc2a43c565d8278c69134f3f35f8fa36555c17117a358e89b2f80c0337a04caabdcda177977ac717c72e6af49c1","ssdeep":"","tlshash":"3151ed09219d806e586320a24cee7188076191378765d564b48f7360dfe8e9e2bb7bec","size":2879,"data":"","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.447304Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/ftl/bet365-1003_02/images/iframe/logo.html","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4763eea336d0723d906584fcfe25a57","sha1":"3efe3b22a2486adb3e87b5e5f869cb39ec43982c","sha256":"1737868f07a4f584653e65f1cf0d7e50ed53bb118255ffef7962107b0e701bf4","sha512":"86478466249a76334ecc2b2c58ca37e49457a135ff0e5f216a8d4642c664a957e69917c089f928bca9ef71c2cf5e1b598a35da9f4c0030f0550ab39ea99bf6cd","ssdeep":"1536:nSkw0KhT+yh7QQZymYypp6qCfMJZwQ3ik+iVOYbVZppNxPTg5f/piO57ZzfTaGRa:LKhlvZyKcWL5+gOY5Zp8BdYHMdIMyRwe","tlshash":"fcc318398640226ff8015fd738a3207398ea8eaddba4c54483e5ed5ce8670e9d53f653","size":127364,"data":"","first_seen":"2023-11-03T17:00:48Z","last_seen":"2026-04-19T09:11:38.434497Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.281880.com:8989/mobile-api/v5/origin/getFloat.html","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"POST /mobile-api/v5/origin/getFloat.html HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 68\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nCookie: sticket=akUwTFdKbE5qRXlPR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"locale=zh_CN\u0026terminal=pc\u0026is_native=false\u0026version=v3055\u0026resolution=2x"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: https://www.281880.com:8989\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Sun, 19 Apr 2026 06:46:00 GMT\r\nout-line: gb-cdn-010\r\nset-cookie: route=169b5c290b6963ddbef067cfad367b83; Path=/\r\nsub-sys: mobile\r\nuuid: 01003-01-00000000-177658116066f9\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5393,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"2a299d90dbff964fdf59c1aadb83feda","sha1":"9952436d568e02069d0616a34412525c4433d09d","sha256":"ac4ca4425a808047eb93dd612fa3a450c3ea43a988454b0022b6018b62664123","sha512":"57f12c25584c231ebc667360ff000a2ca6c0b95144f71159c939cf5055ecf3fc5b76a28e061eb25b7554a91f2328cc34dc7e986b78ab7527431546514b1ed286","ssdeep":"96:Sq94t+JEy/Ljp/jwSJjBNMsijbjjjLjgpfjqCij44ijfPgjW1juPz:Sq9rEyvHqcAC0S5mz","tlshash":"97b1aab13ab41cae53ca67da5cce7d0bf9ca0086c3c92953fe4ecc4845e2366125675b","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.401106Z","times_seen":53,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl//commonPage/commonContent/nav/images/icon-menu-api-chess.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/icon-menu-api-chess.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 26 Jun 2024 06:30:19 GMT\r\ncontent-encoding: gzip\r\netag: W/\"667bb57b-6691\"\r\ndate: Wed, 21 Jan 2026 08:24:46 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 24 Jan 2026 08:24:46 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 19784\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 473374176303344113\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26257,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"2b2b86e3f47aa8dc657a0739103a4c2c","sha1":"c95bd8f8f6c88ca24b6dd4cf4cb5cfe16ab026b4","sha256":"ed3501127a1c0edf05c6faaf1b98de005cd0807b3c4b3621e9785502c942e8d0","sha512":"096b862b0aee48baa5dcd58d58aceacbd7f7b011bb81ad5adec543fa007ae00f2e4f4a1996aed2992a718b40894b7996adea3f1df9272c270a0d7228972d5418","ssdeep":"384:jEGr5XxkpArm62ZT06d7FZSW9sfG2IRD//hdHmf9hYHjmHRBp/uKrKSE0VTC2bwM:jJ5XBq6LavgG/hdw/ajmHHvrtTVAM","tlshash":"37c2e1abba236eeca1d107317483de67ca5b78c3b065328451513c39efaa2530751fa8","first_seen":"2024-09-24T19:10:13Z","last_seen":"2026-04-19T09:11:38.418447Z","times_seen":3146,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-1208c\"\r\ndate: Sat, 18 Apr 2026 09:05:40 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 21 Apr 2026 09:05:40 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 56211\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17185985315136283625\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73868,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"8578626b45164e503428d8ecbef1c819","sha1":"b27c3cb92c516a269f4200a48b851075bc575ee2","sha256":"45cab7ed8432f5be7d1541283109f884467ee14cdf72a5b4ed46e17152b982f4","sha512":"ce343616dbefb2d54483a22a03cafcb2938f3fb348f864f2a17b8d1e3fec6d61b512ac49c06ae836c0df5a91a056caddc36db0828273294486f7d36947cf872f","ssdeep":"1536:bgbqfFJ1ARyDOz0Z+Rjm5X4SQYIbpsCeaYxr3exoVPCa3iPr1:EbqfFXARyDOocRWovYKiCoxrkoVKtPr1","tlshash":"3d7302f90e12e4e5e7b5230d4811b19ab9d4dc7e64c334832a97042f9462a0f876c9fb","first_seen":"2026-04-18T12:10:13.86413Z","last_seen":"2026-04-19T09:11:38.377052Z","times_seen":7,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/favicon.ico","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nCookie: sticket=akUwTFdKbE5qRXlPR; route=44d17259ab44b1b54887077d522d7137\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 19 Apr 2026 06:46:01 GMT\r\nout-line: gb-cdn-010\r\nuuid: -\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T09:23:21.870352Z","times_seen":13929305,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/mobile-api/v5/origin/getThirdParam.html","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /mobile-api/v5/origin/getThirdParam.html HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nCookie: sticket=akUwTFdKbE5qRXlPR; route=251410696cadec6a5b6c74aa4706df12\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Sun, 19 Apr 2026 06:46:01 GMT\r\nout-line: gb-cdn-010\r\nsub-sys: mobile\r\nuuid: 01003-01-00000000-177658116101e3\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 86\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"9ac55fe189e4f53f37156e563e0f542e","sha1":"18b13b1360ce9fbd973e046d2652be38d58a15e0","sha256":"d7e02321006e1520d4c3e8d26428462419388e022cc89f3c974d0b87ad83af7b","sha512":"45b140d1bb3f3f06ff883448128956edda4d8ae0820dbb6b10f13860896cd611921dadb5b11b8d1577f22a80aefdfdbf8a2d54f6076b1e05f69d262df93b94f0","ssdeep":"","tlshash":"12b012816118adb39f0317e120ec380142fc11d180d48408dc5c8e5847948d7a202933","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.241631Z","times_seen":10710,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 442480828752507969\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 7771908766543320104\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 3765637868650935806\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 5434880861066844994\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":826,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/game_title04_h.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/game_title04_h.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-13fb\"\r\ndate: Mon, 09 Feb 2026 04:08:41 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 12 Feb 2026 04:08:41 GMT\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 3948\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 15366929777226651798\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5115,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"56ebf9ed3f6d22623a8f83182fb03fe2","sha1":"e3a163eda7d52ee661128cd3f914a52507e2416f","sha256":"8327d5b5e13607ec29b52ee8ba0929f4764baad08d6bb9f37c974e9962da47b5","sha512":"df6e0cf252da87572b5bd8df1413510c6afe60f9437bdd2dfb439bfcfa813b676a75c939260bc269142097deb54d30e9887c9fb872ca05bafe909a37a759781f","ssdeep":"96:H67E558jhVcvRBrKBaiqxWesDsieD82oSEXFKRvupiyW/+AW5OouHjn63VeG:HIRjI5xJsRSwFKVupTim5IjmT","tlshash":"c3b17d2a50e331eaf41f46d6a324a1b2d5f607f8690550fcdbcbe8d06d26d1eb52e09c","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.422822Z","times_seen":455,"resource_available":false,"data":null}},"time_used":853,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/fserver/files/gb/1003/floatImage/205/1599154485987.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /fserver/files/gb/1003/floatImage/205/1599154485987.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Nov 2022 04:11:28 GMT\r\ncontent-encoding: gzip\r\netag: W/\"637705f0-2d07\"\r\ndate: Mon, 02 Feb 2026 06:40:02 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 05 Feb 2026 06:40:02 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 8606\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 303605948640028707\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11527,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (11526)","md5":"58b2609e3d08d3e858ebdffcb7570a08","sha1":"318fbc693592cd421dda24065911227411dd95ad","sha256":"078a5ba02822903e8ddd759ca425c83c4c51bfaec47f5838e61a3cb8d45de96a","sha512":"11666f456de0f1e1809b3e9f7c718e8d390b67122764dcf643da95c1e861d85f71dcb28efd0632162f71a4dd12fda622ff3eb1ad672546084ad62265a233b8fa","ssdeep":"192:nK9Mc+hD5c/fFjLCiGk2+5nfVzg/XrMyQExCxbrMd7DfbZSl5j9I12/zFuws7XpB:k9cD2Fj/G1+xfVs/oynsbc45BIQl4T","tlshash":"7e32c07e7a6c747444bd0f1aa78c553cfd21829a083514963c91423e91a3b2cfe4a07d","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.417364Z","times_seen":46,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/fserver/files/gb/1003/floatImage/206/1599154415319.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /fserver/files/gb/1003/floatImage/206/1599154415319.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Nov 2022 04:11:29 GMT\r\ncontent-encoding: gzip\r\netag: W/\"637705f1-2cd6\"\r\ndate: Mon, 02 Feb 2026 05:44:18 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 05 Feb 2026 05:44:18 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 8640\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 16308659378714478236\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11478,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (11477)","md5":"6a97e00546fa4a57968ff001e9a209f6","sha1":"479a43dc50fa3fab13ac928b1ecc4ae44b5fd36e","sha256":"4fe106e5b52a8547e9fef800d112b982f27e69591173f6b5df8105576e7154c9","sha512":"fb2a3d03c6b329ce4d56459be1dd19b88c35ce2d055990b9eebbaee6db80146f87635f3ab047b25eb6c3a78ced06be71275bfc1cd2ceae0f65c3c5c68a9f5f7c","ssdeep":"192:Qq9Mc+hDpCAR1q0ZGwBB4dTrwDCUCRcaspu7S/iJqGt+zLbyNNBOpxwVGCM8bsBv:QE9cDom1RZGk4Br5mmHyvKfOeGR8bsBv","tlshash":"c732b024e8e05fc9e4f04eae33a96066bce47dc79319517bb4d00ab75e2e1043a0324f","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.386216Z","times_seen":46,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/float.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/js/float.js HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 26 Aug 2021 07:50:18 GMT\r\ncontent-encoding: gzip\r\netag: W/\"612747ba-1b2f\"\r\ndate: Sun, 25 Jan 2026 14:32:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Wed, 28 Jan 2026 14:32:08 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 11733\r\ncontent-length: 1929\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 7467366698443724270\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6959,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"829af863b0cdc4a603919824ae046299","sha1":"1d417b1553e4ecb7125ebf2005b74255291fbf73","sha256":"1dbe4afbc9ed220c08b9e95577b56f83e2e8e0f7620c5dc18266bb325e5bb271","sha512":"e1202fa26fd353dfb2f989d3d45512e0691c062076297399f5fe62f63e7f5b194fec4a3d7fe2f09be1a6a945e197e7d68445d33dcc6f80b23a315112d9ae5b6c","ssdeep":"96:G4SXFXVXDL+R5NxuHie/moRUgIm/Kv3RKXg+Iw3qCNv5IC80b7Yr+HpH:G7xhDL+jNxzeBVLKJ1LeqCwCxb7YspH","tlshash":"04e1506e03b1212195aff1beaf1e424c6631905b2507dd057e0c87c46fa493c4636fee","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-04-19T08:49:21.255636Z","times_seen":12059,"resource_available":true,"data":null}},"time_used":4148,"timings":{"blocked":1684,"dns":1069,"connect":306,"send":0,"wait":775,"receive":0,"ssl":311},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-1208c\"\r\ndate: Sat, 18 Apr 2026 09:05:40 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 21 Apr 2026 09:05:40 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 56211\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 6773920325532412274\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73868,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"8578626b45164e503428d8ecbef1c819","sha1":"b27c3cb92c516a269f4200a48b851075bc575ee2","sha256":"45cab7ed8432f5be7d1541283109f884467ee14cdf72a5b4ed46e17152b982f4","sha512":"ce343616dbefb2d54483a22a03cafcb2938f3fb348f864f2a17b8d1e3fec6d61b512ac49c06ae836c0df5a91a056caddc36db0828273294486f7d36947cf872f","ssdeep":"1536:bgbqfFJ1ARyDOz0Z+Rjm5X4SQYIbpsCeaYxr3exoVPCa3iPr1:EbqfFXARyDOocRWovYKiCoxrkoVKtPr1","tlshash":"3d7302f90e12e4e5e7b5230d4811b19ab9d4dc7e64c334832a97042f9462a0f876c9fb","first_seen":"2026-04-18T12:10:13.86413Z","last_seen":"2026-04-19T09:11:38.377052Z","times_seen":7,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 26 Jun 2024 06:30:20 GMT\r\netag: \"667bb57c-e3\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 227\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 9054546724648498885\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"77546ee8bcab279aee067f7794d08541","sha1":"e1ace21ee1e968151b5b0ad8da4b0ebf8420bdcf","sha256":"9f967376ac77e445b313fbebbab9a4572c0984edb80f6b5baa9c10f9bf68d647","sha512":"d56ff9fcf76a2153287b4b016b7e59f40c60859b36ac5d12bc96a43237a828cfcd4c0b5de142dbf178ebccef9092c3ae167ea7e3a59d359f50db78df36263b21","ssdeep":"","tlshash":"09d097310605283062ce68013802d1000e222b8f52a760407ff86023581b3c88a9a3c0","first_seen":"2024-09-24T19:10:13Z","last_seen":"2026-04-19T09:11:38.371429Z","times_seen":1881,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/bt_sign.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/bt_sign.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-90f\"\r\ndate: Mon, 02 Feb 2026 11:17:27 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:27 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 1830\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 16916941962774635354\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2319,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"f997e57bd415b687ea5f31e43fe3d7c9","sha1":"018eeaaf4e2e5eb2d197572db0d2ba457d2a1f66","sha256":"123e18970a6aed894f6324d621831f5220562d8a021c164b3e6a4ccfa108fe4d","sha512":"690679c2c48fe8c4ac27b5c47fc55b4761dcd4f4652a6f62de854cb0df6085bc59a28553cdad66ebbaee96409321f27ceaadac0bc2275886757ce1521e8a522c","ssdeep":"","tlshash":"a8416d1d638f726ac7cf77f500874eed4ca4b1dc2745aade5dd98009c9031205f52b0a","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.393478Z","times_seen":47,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10593265945394417068\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 6873872235209929564\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/headerbg.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/headerbg.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-d8c5\"\r\ndate: Thu, 02 Apr 2026 08:47:14 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sun, 05 Apr 2026 08:47:14 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 41578\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 5319181023624790755\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55493,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a2c75e94b9edd0a20885aec9b5eafb0a","sha1":"fc6cf6fa2d74d53a33a7fb0bac183b8dc9b50001","sha256":"55ae1e2a7431566bbec6d14af1494513ca11d89cb996c2182aec3717176a09b0","sha512":"fb5ca60c7e02ec673adadee744482ccd88f0ee35b61918812cf5954163acc18b4c1f07362f1a4603cc54dd52e670e29758ee6ef6e03878d4c0a6c3a6711a72ae","ssdeep":"1536:7Gr4H1XnHZJHCz8myUyVezFr6S3LC6wAH:6aTCIO0enbCRAH","tlshash":"d943f17a14526b74174b9ade80393f159f18accbf5f622b816ef6e4e22d817cc3900d5","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.384059Z","times_seen":452,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 4682673860352041552\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/websocket/Comet.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/js/websocket/Comet.js HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 19 Jul 2021 23:50:13 GMT\r\ncontent-encoding: gzip\r\netag: W/\"60f60fb5-43bc\"\r\ndate: Sun, 25 Jan 2026 14:32:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Wed, 28 Jan 2026 14:32:08 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 11733\r\ncontent-length: 4031\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 2532022076697326858\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17340,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1008fe6a5e1a182d7775963b85405bb2","sha1":"e174a7b08cc3cb5545af1cd33d2814e604119392","sha256":"7479f6f22194ac37dd6d3f5a579b4682ac8dcb6389fb961cf4140f3fcc707a20","sha512":"26e07821ee1e8e94c4bada028e049df7572cac06f2e8dae958baa7a011eb201a6a1d4ed0cfa15017a3f52a0cb949343de0b33ca6da7c245f763c86d5adfb0223","ssdeep":"192:4Pf+aTbLSru4NyRs8VDv1KygOdWuTyVC3d7QPXLHOm8cSCl1Ej7bY8l7YJIJvO5N:4Pf+aTbe4M2cXzsjDUfj","tlshash":"ab721e4a2cf76086552732b90f5f64543235a8172605e91c7dcca6e08f98b7c1babff8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.23672Z","times_seen":12021,"resource_available":true,"data":null}},"time_used":4180,"timings":{"blocked":1756,"dns":1065,"connect":347,"send":0,"wait":635,"receive":24,"ssl":351},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/bootstrap-dialog.min.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/js/bootstrap-dialog.min.js HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\ncontent-encoding: gzip\r\netag: W/\"5d848f4f-4ea4\"\r\ndate: Tue, 27 Jan 2026 06:24:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Fri, 30 Jan 2026 06:24:45 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 11733\r\ncontent-length: 5007\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 2869802540778646702\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20132,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20132), with no line terminators","md5":"5ce8851dc823429a42ab6147554403cc","sha1":"28f381f0e0aa4f5d56690e65723bd97fb59a38e6","sha256":"dd1edf5e54071903c4c1e81e33636444899d645df6b18bad22249da07f91c811","sha512":"f42a4d48c666d9c78fcb6c6061141452899085c504bf15e23749611dda00b6913e75ebbe47ca436a2ed016175d0918f193e474f13974a2f6a5304e18909a87ee","ssdeep":"384:3ai3F3N3VKUINthDa7Vnq86z3JCDKSz1m0hMtkJI2Cg0WEUOv5Dq:T3l3INthDu1YCDKS5flC9m1","tlshash":"6a9261ccb2d9b54c47abe072143f200df03a996951496119bc79e9ebecf060aa077f79","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-04-19T08:49:21.145633Z","times_seen":12107,"resource_available":true,"data":null}},"time_used":1939,"timings":{"blocked":1577,"dns":0,"connect":0,"send":0,"wait":296,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/jquery/jquery.nicescroll.min.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery.nicescroll.min.js HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\ncontent-encoding: gzip\r\netag: W/\"5d848f4f-fc8b\"\r\ndate: Wed, 18 Feb 2026 03:21:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 21 Feb 2026 03:21:25 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 11733\r\ncontent-length: 17446\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 8184852899849682404\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64651,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (64577)","md5":"b5bc8cd626b389bde727a91e6ce79436","sha1":"3df6c39300ac286cf596b3bda273cb39ff825429","sha256":"a1eb48eeb3b3f2ba41940d3041464f0b386b7a7c4a8acb42f3017e691f4b116e","sha512":"2c1dde58ce83d9b716919dfc42602aef3022be012b3f92e61b17b674303ecbf0b9d308064b6d6c2443cf3e3dfd36bfb332eab62e64b56bef0be801e6f4610f12","ssdeep":"768:CwJl9VwAdGuMbJVAOi9ee9RjOEe1sdMv5rjITry:Cxb7AdRjOEKhHay","tlshash":"9553a7cd7522346b05de5235d18b4b4a623a9857730b90e4762c8cf46d29bbaf223f7c","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-04-19T08:49:21.238014Z","times_seen":12189,"resource_available":true,"data":null}},"time_used":2117,"timings":{"blocked":1575,"dns":0,"connect":0,"send":0,"wait":502,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/themes/hb/css/pc.css","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/themes/hb/css/pc.css HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\ncontent-encoding: gzip\r\netag: W/\"5d848f4f-b5d\"\r\ndate: Sat, 18 Apr 2026 05:01:59 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 21 Apr 2026 05:01:59 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 1458\r\ncontent-length: 911\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 14566344791342273535\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2909,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1da71520b7a0a61526a8fa8d0feb40d1","sha1":"ba1bf69dad8783563328054cae58ccabf1b00829","sha256":"5eb4d895bcb33061cda238c8ff4985ede69a866819b980c732cf3802ec101e8d","sha512":"d1cb92160523c231c4942f27c018bd3b30f89fc60153e23eb0a49d0696c896b0904ebe5db7cb97a0686f656d04a58f3ccf8fc0f09f2be703fa8400bd3270dfa8","ssdeep":"","tlshash":"d451dd305a02b1aaf42ffa677420874c2537004373169b3e72fd7ad1cfca9696136ad4","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.222903Z","times_seen":11801,"resource_available":false,"data":null}},"time_used":2395,"timings":{"blocked":1570,"dns":0,"connect":0,"send":0,"wait":801,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/nav_h.jpg.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/nav_h.jpg.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-621b\"\r\ndate: Mon, 02 Feb 2026 11:52:37 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:37 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 12623\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 14138936245290779241\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25115,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"fe1e39c6bf188a9f885905f6cbfe51c0","sha1":"7ce2cd12f445e75828c56313418aca9f28aecb4f","sha256":"298e179e6965cf51957ccc7025087e1ffd26efbd8052932a169fe2f1b9a902fc","sha512":"7077ff0efd2a44de7d7486d1428258b172b622caa7c747bbd5c64141388e1e72bb8cca08960c63845ae52bc8de7ac9e3cd4e6aaeb0525bc544997874165b6556","ssdeep":"384:B7PXD+mT12N7pH3TLpNnQPAxKhyveejk2d1EqsKs/isAS:B7PD+mToN13DnQa2yaqsOA","tlshash":"99b26a3bae537d0b4b340b2198ceaac31d8d6f474b576878966d38e506e4b03c7cd968","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.422303Z","times_seen":463,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/images/logos.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/logos.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-5cad\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 17611\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 3896698389253118938\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23725,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"2afec15771594611d2ff61eeb68e5c8d","sha1":"3bd40f24461d69b6b9e0c48700c43592a993a71d","sha256":"f6d67d21ef77736671d7f4d66b27d0fb73e66a031e7168963747cf69d41ab76c","sha512":"9ce9c00801fd75fc01bcffc98d2a0c23a4e45fe7abb0b017b76df9781fdc1f22f8de0ad75646fe08c80773834dfcf200fed10c08e6a58bac3d1a238859940314","ssdeep":"384:z5wuZmyFp19ZX7oM8OQ+kk3+jHkt/c5wHJz7jG6ocXeURJZfvhUPdwfhmkpYx:z5wu5RykEEtKEQcrJwK6","tlshash":"c0b2d03ff57eb4afd018c349f64cbc499f058bff04241aba952f4a25672e0694259c83","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.373502Z","times_seen":47,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/images/icon_cooperation03.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/icon_cooperation03.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-3014\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 9394\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 13736902798702076150\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12308,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"b12a8b8119cc5d9afa8b7cc45fe66ddc","sha1":"db2fd002900f7c59bc519e8e8b843a5aab474696","sha256":"c7d14c75fbad30fa0701162e287e4a65258a22314cbd33df6ce0f68c9126d855","sha512":"d4f0d7a0876b1a2625abf199ac3a2543694dcb7a7b35c010ef97714e6f6dcdc1a10ef3eff8c24f13fe14db59323f9acbbbcc8eedde1bc2f6269e51c6591defac","ssdeep":"384:1VFLNTlcd7VDuagVc+sTXlHiJISYC4yRMku/J5d:1Ved7vgs1VG4yTu/d","tlshash":"d442c0a920ab77cd20a9979df3e938997e3b31ae919920563ffa07d05199c0314c0d79","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.406998Z","times_seen":458,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/service02.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/service02.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-1914\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 4802\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 7943866617070345186\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6420,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d519a8b6b4112be8e3c0bb02d0f8ae52","sha1":"e5335e2517d0653bb4329e8f73ee103f3985a523","sha256":"d9b8759445c552bcb3fc7967c9d19ec134f0abf0626af3b10a9855bc0e25fcef","sha512":"f01222c3912b86fd0157bf7faa5e3c7d829dd731a4a4ac11b3f303aac0d3f342041c6179b3f446d148e1c148bca151396c34f5ba5b427c26314fda46a6c33ca9","ssdeep":"192:zI0LJrsMY1TxrQFAaiwtyAVCBRW6HqKCm:z3LdsMoaiwvoBRWlTm","tlshash":"6fd17e6f37c234ba64b643396d8a16177e2eb93842379fe80655130b1355fb4b06bdd0","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.374406Z","times_seen":439,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/message_zh_CN.js?v=1776067717568","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /message_zh_CN.js?v=1776067717568 HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript;charset=UTF-8\r\ndate: Sun, 19 Apr 2026 06:45:57 GMT\r\nexpires: Wed, 22 Apr 2026 06:45:57 GMT\r\nout-line: gb-cdn-010\r\nuuid: 01003-01-00000000-1776581157cb77\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33499,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (15759), with LF, NEL line terminators","md5":"5e29a736bb07482814f4fb40f94618e3","sha1":"95031dd994aa15757b741e35e8165e6e54b396e6","sha256":"9cc0606e9e078be2bd4a7f0128364ad8a989ba363258d3d6058d8cf79b1fd3a8","sha512":"6df469c4d40670119fc0071f8339fc104ef3f9b8e96608462fb533295ae361da6c177d7d67a3ea50bb2da87e8c27cab6f4a54019f8feb61c5a846350d315c8c8","ssdeep":"768:IIy92nyfB+vODR01IRBG3Jpf3OEg7/wiwL38:Ib9BB+vF1IRBG/Op","tlshash":"05f24c8746fecbf68a4a0af99c5301ae22b557c8c9ec79147f90ddd92b457c900a7383","first_seen":"2026-01-15T08:15:21.544222Z","last_seen":"2026-04-19T09:11:38.417941Z","times_seen":1410,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-19T06:45:56.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Apr 2026 06:45:57 GMT\r\nout-line: gb-cdn-010\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-html-cache: HIT-3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]}],"data":{"size":357302,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"bc020ebd855a478a82f76c20d6e160eb","sha1":"4b80a55828bae48f08e9c449c18492a8d872628e","sha256":"6bca823250afe6f45fdd381e6d7700b091f86272340affc0c3b232f5fd7030c7","sha512":"1a4f9b2f15f19527d99b62db4f192acd7a7edd2c8bfb95d14fd0ed35a683a01aeb7b5f407bf43ce0f5feac94bcc0e44aa1ac628ad4e370991ce0d7c135bbd1a6","ssdeep":"3072:Z5dlZBazYGyHQ5xBlpK69gyEed0nIbdRTLUnaqx0vs2kY4M0wCh0qDXJ:bh4d9bdRQao0vsDhM0wCh0I","tlshash":"d474fa09b5f710a215a3a0680bff22047ab2a157de08cc197c6f65ccaf9495962f3fdd","first_seen":"2026-04-19T06:46:39.240697Z","last_seen":"2026-04-19T06:46:39.240697Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1268,"timings":{"blocked":506,"dns":1,"connect":249,"send":0,"wait":256,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery-1.11.3.min.js HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\ncontent-encoding: gzip\r\netag: W/\"5d848f4f-176d4\"\r\ndate: Sat, 18 Apr 2026 11:41:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 21 Apr 2026 11:41:28 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9932\r\ncontent-length: 33545\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 1674608656921618003\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95956,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-04-19T08:49:21.266493Z","times_seen":12783,"resource_available":true,"data":null}},"time_used":4067,"timings":{"blocked":1647,"dns":1085,"connect":281,"send":0,"wait":509,"receive":258,"ssl":284},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/images/partner/partner-hongtu-purple-02.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-purple-02.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-1bc9f\"\r\ndate: Fri, 17 Apr 2026 09:21:39 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Mon, 20 Apr 2026 09:21:39 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 86404\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 741163106263411974\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":113823,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"55a196015ca6029a6e47b109b810bd08","sha1":"9351902068877dc3e727809223f2275dd3b0be33","sha256":"471a344534f0e1b2dd2591b938b33305618da1bf62385615261c21ed3638ba54","sha512":"cbe2c51012d31f7672c5a4ce1c57fc7df126f62e127ad7cf55d25df5c1f2d1bf10bb90e412301b19c61e8915c787cd64e5e1fb4a529107bb28e5b57d95869574","ssdeep":"3072:BjwNlyMZKJPbqgI3jOASHxiVLPJVZuQX3:1ay+KJPbYOASHAZ9n","tlshash":"7db312b52b6665bb1303574538abe00f0e43075803ee79e809763db39d6b693e0bb0b5","first_seen":"2026-04-17T09:22:00.735938Z","last_seen":"2026-04-19T09:11:38.426595Z","times_seen":222,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/navli.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/navli.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\netag: \"6434c9cb-271\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 625\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 11350514716812847770\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":625,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7cb32677e20110fc24ac0ed83ab9dc93","sha1":"11bb8187c64139bf535d82b3e69ac4dda28c882c","sha256":"5dc39cc58aa2473d9803451419d14086f6d501a0d3ea6fa520b8d0ff3e55c6f7","sha512":"fd3ced3df06b89c21b3702f7d8c5a0fee59b93bc67c46b84bef0cd1f6347c31ea02a82730a08455bbd2739fce1240b8b8eafbd397d5327a39fde2719b66f73bf","ssdeep":"","tlshash":"a6f002f14216ace411fc51b4971945930e762d0824481f85edc485aa01c05f394a691b","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.369299Z","times_seen":443,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 4007561095164113885\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/footer_bg.jpg.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/footer_bg.jpg.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-bd4a\"\r\ndate: Thu, 02 Apr 2026 08:47:15 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sun, 05 Apr 2026 08:47:15 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 22884\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 13979121046264602612\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48458,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"89d9b99e344dcc13a5e3c0bf4cbd3f44","sha1":"c473f78438f22672a2059e0f4cbf254bf77c1e47","sha256":"5edde9a261c2b70e5c381a8d8f7f1b80c77c7b2ffe0e5204e0c6b3c763056ed6","sha512":"61a6f06b7b54dddb2f418b8b4f18c58c22ccc58b3be0fd50f07f7b616c79d8614ca023c7601320abcc1013682602900c08793284ac84772d0372226f07d00f1a","ssdeep":"768:12/0yWBNO4I3TiyZZfI7Va9u0dqGfqg4ownzA:12/VWBA4IDJ8haoFgu0","tlshash":"f6236c776cd7be4e2b3e588a83cf62f11c2c3bc78b449498a95a3cde5d6121185db039","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.395032Z","times_seen":447,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 117489805162761023\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/index/getAppsUrl.html?device=android","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /index/getAppsUrl.html?device=android HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nCookie: sticket=akUwTFdKbE5qRXlPR; route=44d17259ab44b1b54887077d522d7137\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Sun, 19 Apr 2026 06:46:01 GMT\r\nout-line: gb-cdn-010\r\nsub-sys: msite\r\nuuid: 01003-01-00000000-17765811615b6a\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 902\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1136,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"1bc5a42ab362af378ca1ffe22445311c","sha1":"eee0a09e57e8876cf18668ef2d7b4e56c85ac96d","sha256":"9aaf991212fd5d7817eee8484b1f5eb58a658acb21c5dc32faceeca66cea8b2d","sha512":"70eeffeece8ba48bd16e04dd457d721706f794be7cc15a256dd9979fd962f49048ea493fa094bab1e94d10b4ed43868db8361758a4e833dec97cd2b186868182","ssdeep":"","tlshash":"1821fd6a6cfdd03d415c3cd04d5d14f5cd3914f115a415597ed8092147c1af11cd4d9a","first_seen":"2026-04-19T06:46:39.245006Z","last_seen":"2026-04-19T06:46:39.245006Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/notebg.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/notebg.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-18ac1\"\r\ndate: Mon, 02 Feb 2026 11:52:37 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:37 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 76819\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 6723081808250811656\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":101057,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"b3614a9988b8f8412382efe44e0ae5dc","sha1":"f826774406a3a44c4f1c959aa326e1248bc68dde","sha256":"65d2f1e55dde706650e411f4663f66f72bb21eb4bd54faa64c8bca115c7deaeb","sha512":"866dd85c4280fe00d82bf7c80f9e79d524d69ba582009171aa9d7611af8e61ca37c7bd7b0a786bbf337ea42fd08afe23912db785e40bed11db6f1d638ecc8298","ssdeep":"1536:wQdbNzIhnbFBwo96L1/th8VQ1tkc3yRZnf58t2NmcS1HkL1Amk5epe5XLWkcGPcO:t1wJA1gZnqtGS1Lb0I5nt/h","tlshash":"e8a30165d447eb649ae1a256a2f8b1f82ee01e7decc938f1036f7401ab0db14c02197f","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.387904Z","times_seen":446,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17312295758324037258\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":873,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":866,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10601353762001866147\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":865,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/fserver/files/gb/1003/floatImage/205/1599154485398.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /fserver/files/gb/1003/floatImage/205/1599154485398.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Nov 2022 04:11:28 GMT\r\ncontent-encoding: gzip\r\netag: W/\"637705f0-49ae\"\r\ndate: Mon, 02 Feb 2026 06:40:02 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 05 Feb 2026 06:40:02 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 14176\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 12013504142975697078\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18862,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (18861)","md5":"de5363f49567a38b287de17ea1461f11","sha1":"0babc392027fe8a367040487771e5d9107a58e2d","sha256":"6cf7184e57c9e180cb9999edf4913eadab3a9809e4d5c9f4365214e62fc8b53a","sha512":"e34703b1bf3ae0675ebdc064ab9aba8a88b03b2731fed40e3a6615a63afa71dca7f5d52b89cb70d5495fcec68ac87a50f65a1aebc48dfbe76f26264e14806ced","ssdeep":"384:K9cDKrgyam/PW+jWEXieXH7tiksuoAk7T13NrkTfwRn09:0aVya0W+jWEXTrtObrSfUn09","tlshash":"7882e0655ade443e60c03b582effab317c7d64745418227ce8ec34e3ca499e6a2c9479","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.428782Z","times_seen":46,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":794,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/images/game_pic02.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/game_pic02.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-70c7\"\r\ndate: Mon, 09 Feb 2026 04:37:45 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 12 Feb 2026 04:37:45 GMT\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 21706\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 13696125431058413373\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28871,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"dcbe6e8f2b21eca14440e35c44ade662","sha1":"20e2b49d07abc3249029128eb902019bb1691828","sha256":"2e31427c2c86e42891c755cdf11f2e61a6c1f56305f3c1b61ea7bf976b56f457","sha512":"bd0ae46acc4d55566d1b6d8f75e1ec2d89b628727cd934ce8c362a4ee86aaf00c75a2ac1bbfa932271b61171a6d0a19db6802be441b180fd377faaf1272f34d4","ssdeep":"768:cMpIcDsmiqajmzObPWos/ZYzrV41RbZYpIGNfc6bxglYQHw:cMpDYmrMJjGhYV41R6NU6IQ","tlshash":"83d2e234b563269bfebf60c3e332253f59ad8d587527e19266c8ba1470401d9e17d8e0","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.392048Z","times_seen":463,"resource_available":false,"data":null}},"time_used":996,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":814,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com/","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-19T06:45:55.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.281880.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://www.281880.com:8989/\r\ncontent-length: 63\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":357302,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T09:23:21.870352Z","times_seen":13929305,"resource_available":true,"data":null}},"time_used":2049,"timings":{"blocked":900,"dns":396,"connect":248,"send":0,"wait":248,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery-1.11.3.min.js HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\ncontent-encoding: gzip\r\netag: W/\"5d848f4f-176d4\"\r\ndate: Sat, 18 Apr 2026 11:41:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 21 Apr 2026 11:41:28 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9933\r\ncontent-length: 33545\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 18358457766819534301\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95956,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-04-19T08:49:21.266493Z","times_seen":12783,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/images/partner/partner-hongtu-brown01.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-brown01.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-1c93d\"\r\ndate: Fri, 17 Apr 2026 05:15:56 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Mon, 20 Apr 2026 05:15:56 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 88900\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 4238467345245405973\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117053,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"593f1f576bf8a92ef3bd57546e859a26","sha1":"8a15408be20b33554e7a267c3d120d1f4a550802","sha256":"63ff2e2b3db11f9ba90e4ef6147e3927fe2b63659bb05d86bca4e7e3214b9431","sha512":"9cd1fc2b4a9995c9499964d4fee25a9d40e55163e66e6f71f53cada6ba826fef48bd4cc01197e0f3a52fbe3453e146f1d7051b4993c489f4f47f92d3a2d4b5f9","ssdeep":"3072:87CqCiFczvRw1vTHIH5hNxuGFfFEQ+qAoJL/+Sevf:+VPEpwdHIZdHtFcqVl/+d","tlshash":"63b312729a7fb2445a4b12957514a329e8e3b307526fd6f8db7fe1050fea3828035d30","first_seen":"2026-04-17T06:17:43.721927Z","last_seen":"2026-04-19T09:11:38.381883Z","times_seen":258,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/headerbg.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/headerbg.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-d8c5\"\r\ndate: Thu, 02 Apr 2026 08:47:14 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sun, 05 Apr 2026 08:47:14 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 41578\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 6370320379228455672\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55493,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a2c75e94b9edd0a20885aec9b5eafb0a","sha1":"fc6cf6fa2d74d53a33a7fb0bac183b8dc9b50001","sha256":"55ae1e2a7431566bbec6d14af1494513ca11d89cb996c2182aec3717176a09b0","sha512":"fb5ca60c7e02ec673adadee744482ccd88f0ee35b61918812cf5954163acc18b4c1f07362f1a4603cc54dd52e670e29758ee6ef6e03878d4c0a6c3a6711a72ae","ssdeep":"1536:7Gr4H1XnHZJHCz8myUyVezFr6S3LC6wAH:6aTCIO0enbCRAH","tlshash":"d943f17a14526b74174b9ade80393f159f18accbf5f622b816ef6e4e22d817cc3900d5","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.384059Z","times_seen":452,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/navli.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/navli.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\netag: \"6434c9cb-271\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 625\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 8971479914877055088\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":625,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7cb32677e20110fc24ac0ed83ab9dc93","sha1":"11bb8187c64139bf535d82b3e69ac4dda28c882c","sha256":"5dc39cc58aa2473d9803451419d14086f6d501a0d3ea6fa520b8d0ff3e55c6f7","sha512":"fd3ced3df06b89c21b3702f7d8c5a0fee59b93bc67c46b84bef0cd1f6347c31ea02a82730a08455bbd2739fce1240b8b8eafbd397d5327a39fde2719b66f73bf","ssdeep":"","tlshash":"a6f002f14216ace411fc51b4971945930e762d0824481f85edc485aa01c05f394a691b","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.369299Z","times_seen":443,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 9850383687605388472\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 12545104455967766609\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/fserver/files/gb/1003/carousel/10007/1599149685268.jpg.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /fserver/files/gb/1003/carousel/10007/1599149685268.jpg.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Nov 2022 04:11:17 GMT\r\ncontent-encoding: gzip\r\netag: W/\"637705e5-53960\"\r\ndate: Mon, 09 Feb 2026 04:37:44 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 12 Feb 2026 04:37:44 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 256498\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 13192476706740826008\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":342368,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4bf4497e915e2c962d132b3b0fcf9836","sha1":"25d7953df18f27a045723a6ab85eba9e8bce7154","sha256":"971f56af00fe7af50e65e07d22554d638bced88510f137f64d7762c0ce816db0","sha512":"c73be593df2f74b29392b166d596e03fa8ca6ec66e4361da6d3641d0b14720ff03f24f0982a27c9bdb2ae7a6fefcfe4da926eefa18b2f05abb03a4386ad4ef5e","ssdeep":"6144:6zEWZlbs/Xt3OqmXz7sjwW8p2jpEJNNwmKxftDUJEdrRmBjSUi46557BYtyN:6YclgXteXp21yNNHcfoEY655FZN","tlshash":"c0741232da4ad85242711474610ebd8cffed2defa50ca8b7a1c5e8f1e4c7722691d4b8","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.393107Z","times_seen":47,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/service01.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/service01.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-1b23\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 5329\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 12091112607008484785\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6947,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"65ae00add0b631b23c79ba99a3344d61","sha1":"62681ef5e6782a1ebf1ad5e8a777dc2cd79d073b","sha256":"de0806c2c2672cc8cebb41e4bdd9b1f519588f410d7e28413a5902ac36f476e2","sha512":"40669b3fb7c7a8c133d194ee73764ab4f9b51f6432fa0b919740d93ea2755f78cf03e9e994d11546c23b5debc0714a2f8088221837537721d09a13d98e4f6e1d","ssdeep":"192:wdq9ZswFL9z9EKi3cKDSo7XucxI08oAdTFR98GZGh9jYFVTO/M:jVFLNTlcd7VIaAX7zWjYFo/M","tlshash":"f8e18e155ba37edc60e11f77f297e1927d62b609700c3e7d6f8d4605d1530423262eda","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.373945Z","times_seen":438,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/bt_register.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/bt_register.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\netag: \"6434c9cb-2081\"\r\ndate: Sat, 14 Feb 2026 19:45:13 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 17 Feb 2026 19:45:13 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 8321\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10081580426642726869\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8321,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"9560fc447e0c783cccf6caf80143a8a9","sha1":"a0b67ae888a1bab9f84ee461e537e104121d1f2d","sha256":"7b2498c45beb6c85e03773f68406d178fc276f57f9a85ea360ea0d995e23d331","sha512":"f15f813c721629a30bfb0117f5f8ebc65ee82d8d9240107336f3c82159b206224d91e5855ceaf724f4efeaf942313df48409ca45f2738f642159bf1c150fb030","ssdeep":"192:P0W3hrfnUCLKhNl57/9BPASyDz17k4EWALGIqcc0KMF:cGrf9mhNz/9pjyfFk4FA6I80BF","tlshash":"3b029f3e6a2a315d80f0dbd33b12b85a872307891d3a187fc0f9659b179268137f5285","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.382373Z","times_seen":47,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":639,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17134830975522120293\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/fserver/files/gb/1003/floatImage/206/1599154414895.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /fserver/files/gb/1003/floatImage/206/1599154414895.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Nov 2022 04:11:29 GMT\r\ncontent-encoding: gzip\r\netag: W/\"637705f1-3889\"\r\ndate: Mon, 02 Feb 2026 05:44:18 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 05 Feb 2026 05:44:18 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 10902\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 436286966759562686\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14473,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (14472)","md5":"e3bf554abc77b5b6cd5c2f978828432e","sha1":"a4ceea3096b9665ce3c6f66522c293339484feae","sha256":"2484b61c101eb7df225c3b5affa85f107d506ff69c13f9551e86b480b44154e7","sha512":"a65982adb9edc513870719b6c27c6e75b27f347560b291f6c2c7115e9a54bbf5d69ec653e2b24cc7aa116a08ad08a1c792639f45682b20a63a5ef3edd1b85f4d","ssdeep":"384:R9cDD9m5e861V1rJGCeaIIkG7R0zZvhFmrRsEs6WxR48u:zaD9e6DvjeaO4iUrRor4j","tlshash":"c352c026b1f63d7d145201c7eb02a337bcbe797a684465ab2a5df365014bf213b93380","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.416167Z","times_seen":47,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":834,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/index_contentbg.jpg.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/index_contentbg.jpg.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-17c41\"\r\ndate: Mon, 09 Feb 2026 04:37:45 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 12 Feb 2026 04:37:45 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 65136\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10937064252266947502\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97345,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"8f00ef17b4db3b3d27ceaf36b462fc38","sha1":"49f0e9b9d7d5c894c398cb4513ebe26173c5b027","sha256":"0688e5e2ec17d41f7f6fa71f8ac58c7382c09dbd1ac797ca28dc87ceecb25712","sha512":"dd05f81ac10f6eeed88a515cd70cc362ddaba451c431736927b95be6adb8322e5218cfe5c197fd6c466a2f626a01f1d8a06e57e99918f8a6a6986b643faa9535","ssdeep":"1536:72/hpdTR8jBE0SS4JwTZCKOt4MWCi7LyWpphxVzb/mP6vVGxHPh1dufrVEbZ5JjL:KprTRsSSbZCKO2MWN+WpprVzTmivVGPz","tlshash":"5393f1ff2ea7ff122b61a941a3df3ed62d2e2f23984d5894550d70c624f012b87ca454","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.429406Z","times_seen":521,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/game_title03.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/game_title03.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-1dc7\"\r\ndate: Mon, 09 Feb 2026 04:09:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 12 Feb 2026 04:09:54 GMT\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 8747\r\ncontent-length: 5835\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 9724005968022029594\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7623,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"fca6a2a81c305e4c94763a11b2bb0439","sha1":"793aa53ec6389d556cf3fd6dc098b2ccdb185660","sha256":"e1db6576d4550c89ec0870a56d497cd6cc771c38ae20703085a943bf225feb7f","sha512":"fadbd55a968c44f89876066eb4a6491e8ab16cbe10b13d12505d0c752b4bc489b65b5f80ad01282cc6e7554a2bceffebadc71890df3d60732e66ef621f793490","ssdeep":"192:HIRjI5xJsRSwFKVupTiVLVx/PZEIPpqzeeeFfexhu5:sI7GTpTEPPyIPpiUF6hu5","tlshash":"eaf1af4654e331a3f679ce52c2254483aa7c47f4695866ee5fc8fce1e905b25308f48c","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.40457Z","times_seen":510,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/fserver/files/gb/1003/carousel/10010/1551942775091.jpg.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:03.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /fserver/files/gb/1003/carousel/10010/1551942775091.jpg.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Nov 2022 04:11:19 GMT\r\ncontent-encoding: gzip\r\netag: W/\"637705e7-868eb\"\r\ndate: Wed, 18 Feb 2026 09:31:11 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Sat, 21 Feb 2026 09:31:11 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 411478\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 2331677421011896788\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":551147,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"503018d1fbca19a88b3cab31a6234714","sha1":"4fd1868479e121ad6e1081a8aa76bd6a202a362a","sha256":"49ccd6311511131c14b9694887b5990415a74caa4e0fbbc93d4cb28037dc1299","sha512":"824e8afd84a7d4eeb844a80bcfe95a9e52ace43b958d314077899288af58faea12d049678d259b290c993e41980d683a626d30d6e63cc1d260bf2b4d32f3fb50","ssdeep":"12288:HB8kVPe0HTxq4nBUIBqiZis+W0p8rMTx3:hbVJq4nBUwSRT5","tlshash":"36c423641c6729f80e04d520732f9a0f5b5489fe803dcaf6fd58ccdf9589a38b95e2a4","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.425555Z","times_seen":47,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/ftl/commonPage/themes/gui-skin-default.css","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /ftl/commonPage/themes/gui-skin-default.css HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 19 Apr 2026 06:45:57 GMT\r\netag: W/\"64ad1569-7b6e\"\r\nexpires: Wed, 22 Apr 2026 06:45:57 GMT\r\nlast-modified: Tue, 11 Jul 2023 08:40:09 GMT\r\nout-line: gb-cdn-010\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31598,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7014)","md5":"1d6c464e8e5800ca483689206174ec6e","sha1":"d5ff05232c516152a711ec5c6d060a2f2cc791e3","sha256":"08d29322d883091252b3348e9514dac589896516374e8a319fd1190dd67f8e30","sha512":"4e259baddb36f5a8894c26f0f50c453200cb738c5e9d8131e146288a0d25ed3d4dd42f173392f8dbae521fd8344425b2b6e1ade92bd08edf7ab010cb577f775e","ssdeep":"384:/FboUEeh9ScJRfc0uGWw8Ms4N4muQh8v8brn8w/NtSmdz:/FbPSVGmNQjLPFtSi","tlshash":"7be29834f20022a9b563c7a570d1dd4a362de592d2170ebdf26b319c8f425ce263bb6c","first_seen":"2025-04-07T03:18:03.900415Z","last_seen":"2026-04-19T09:11:38.405581Z","times_seen":5300,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/images/pic01.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/pic01.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-5319\"\r\ndate: Mon, 02 Feb 2026 11:52:37 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:37 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 15355\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10767181987338107044\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21273,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"1b29a7e9dcd682b2f0a23cb0d5dc3e45","sha1":"728bd43bf9aafe08b2b4c35aa69ab3aadb796c91","sha256":"d1cb960e369336d93077b21d9663ea6b7a88344d5ad7ee1f2af9928ffe2715c7","sha512":"8dd39008b63e86d50398098a1537cba4ddcf330dcb669e2a8acd3c661519fddea23ee306bc28dcb1a218f81af2b65703e8e0bd35f4f55162f5ed55f58a0bed4d","ssdeep":"384:0h3qsVmKC92L/QsskxJ+9VIVLNi7WpXaxiKzUK4tEWHmtSV27JEz2Os3079HG2Bg:0VLVeIYID2aXasw46qkD6796","tlshash":"59a2d1eb39513c4edca1cb256dd5e5757c1204df489be8f4997f0a04bb3ab14088b5d8","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.419052Z","times_seen":47,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/bar.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/bar.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-f6c\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 3031\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 13743701322497006\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3948,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ec831b5d5560d9efad210c4142e01307","sha1":"d0f627fbc33b8d3e596b5fe2dedd2f40b7c36814","sha256":"4426e90c1b6462c16b6f2b9f54ed06d3b1c43b6c64f0ef7022a29aa2ff447e11","sha512":"3117995321dd41b3683756518ecc98163f5e695f97980ff89045484d24516434418e835fe1dc203dfb656934208ba68e44d3d17923da2a913c1909a8691f9044","ssdeep":"","tlshash":"88817d2147d3a9ec21d18bdbe367b190bd223e5ff00c39792bde0241e6a404311d2ea6","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362655Z","times_seen":438,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/fserver/files/gb/1003/floatImage/205/1599154485762.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /fserver/files/gb/1003/floatImage/205/1599154485762.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Nov 2022 04:11:28 GMT\r\ncontent-encoding: gzip\r\netag: W/\"637705f0-2d0f\"\r\ndate: Mon, 02 Feb 2026 06:40:02 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 05 Feb 2026 06:40:02 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 8624\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 8634551136888252120\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11535,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (11534)","md5":"dee9207636d12da073d5e4245303a660","sha1":"5d9c71ceb2b4cfd6f42a7912c77697215ea936c3","sha256":"7233acb09673144b2bd079d2478e77d68d82c1e68b29003a94a3646230562e33","sha512":"b6a249172776e1be8b86e3bf4647fbb764451951b4a124c527f946c7f9df071d768cb8d4513ce652ff26b63f19ae2a5f990b41ad6e83212fbb905f3b1843de73","ssdeep":"192:t9Mc+hDHIqHgM3v6vi3FiVCseLHeFi3m2LFc5qxB4pmEvEoYsanwww5QVoEQ1xjZ:D9cDoWn3FkXe6U3mq4rECmw956Q6w","tlshash":"7332c0fed5eb3f1a90ccb65c15c063a0767ac723625960578d9c10a3ee5bf9812881df","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.414113Z","times_seen":46,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/fserver/files/gb/1003/floatImage/206/1599154415044.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /fserver/files/gb/1003/floatImage/206/1599154415044.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Nov 2022 04:11:29 GMT\r\ncontent-encoding: gzip\r\netag: W/\"637705f1-2dad\"\r\ndate: Mon, 02 Feb 2026 05:44:18 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 05 Feb 2026 05:44:18 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 8804\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 9489744278879807068\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11693,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (11692)","md5":"d77571f63ff1390141eeb52504702c81","sha1":"d5454ae888f2644486e5948cd79d0ce10f779d2c","sha256":"70e27b4f5d1ea7b5c386661da1b1036b1a9ebf0e70492532f13977c5bf774f7a","sha512":"6c07db5f16099214d40bf8525c3b33f445eb3938aae362045ce3e4b58f72cf8fa9fb24e0ae01fb3a265838f4c88737743533ac8158d2ebee16b0a3ccdf983f13","ssdeep":"192:z9Mc+hDMCARop1KrN1unClG9kvQeqFbcl3AXfOJ5DFCGowwTrebM6cacili0osYg:R9cDbmq1KrbMCl0WQLbaXDFC1rEVcav5","tlshash":"8232c0780caaf74c604c4a9583e781353e1e09452efca79fe09e3a47428d3705aca3b1","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.419579Z","times_seen":46,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 15819161086626819814\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/fserver/files/gb/1003/floatImage/206/1599154414673.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /fserver/files/gb/1003/floatImage/206/1599154414673.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Nov 2022 04:11:29 GMT\r\ncontent-encoding: gzip\r\netag: W/\"637705f1-443c\"\r\ndate: Fri, 20 Feb 2026 16:58:04 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Mon, 23 Feb 2026 16:58:04 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 13194\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 11246330270092275444\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17468,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (17467)","md5":"8741d90e6d60487837f9bc74e255b5e8","sha1":"c3b87f2503541ee0b526c2a7b55380ef2358b939","sha256":"2a1b69f60d3845600565c0442308c9b409912d5a1b8bc5182bc99259d0c10111","sha512":"706aec84c8e29d862dc406fd08b13e3dc6e93ff5cecf80fa84a75ba6463c12b052647161c5cb1f4e47d6bffd86dec46753caa55dd092144d96a88f410c5e4a34","ssdeep":"384:R9cDLmMVUKps1lbOwzFyPlaUTr0ehMOLHL9UkNUNz:zaLHVUHVzFy9TTr0G+s4z","tlshash":"b472d058f6de7fc940e06995952e6a73fc686802307004fe0da075b78f479b33a22c9a","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.365986Z","times_seen":46,"resource_available":false,"data":null}},"time_used":828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":826,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/ftl/commonPage/js/sprite_logo_h5.js","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/ftl/bet365-1003_02/images/iframe/logo.html","date":"2026-04-19T06:46:03.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /ftl/commonPage/js/sprite_logo_h5.js HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/ftl/bet365-1003_02/images/iframe/logo.html\r\nCookie: sticket=akUwTFdKbE5qRXlPR; route=a1a97600d4111120168c5ba2bb9e992f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 19 Apr 2026 06:46:04 GMT\r\netag: W/\"5d848f4f-559e\"\r\nexpires: Wed, 22 Apr 2026 06:46:04 GMT\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nout-line: gb-cdn-010\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21918,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (532)","md5":"01a7a44d1e991edace3178d8adb28462","sha1":"abd4e088c6cf974c0e468dfd3673c9a02d4aefd9","sha256":"8b6d4a810163ac6f3b848425af836c2356283789e16e4dc3ca64ed62baeb4c12","sha512":"8a0300e2b8f19329e77cb7f458fba139c78b468ad6b930b829c80eccd24fb2cd3d3f0e37f7fe8c3dda4f4064b9ce98f74c2ce9f23568c11291bc0142486f6adf","ssdeep":"384:5AlUE7v7hB8ja+MZhsw+gRP9Gg481ZOzotgSV:0UE7vz8XMrtTbHgQ","tlshash":"4ca2977e36672732a98a61d59c3f66d16af124349c028d6c3a5ccdeb8a6cd0424b7f34","first_seen":"2023-10-24T19:57:06Z","last_seen":"2026-04-19T09:11:38.389006Z","times_seen":93,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 27 Aug 2024 03:30:00 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66cd4838-3a09\"\r\ndate: Wed, 21 Jan 2026 07:57:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 24 Jan 2026 07:57:33 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 11733\r\ncontent-length: 4126\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 5858949661040294868\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14857,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14855), with no line terminators","md5":"4fe7dadf050dad2dcfd386d21b880281","sha1":"07e7feb8dc9309fe66d86d7a9e27f8efd32ab0bd","sha256":"aa891aafe8e98e1e15d81b2b116e6c3808d0bbbec56cd24818e2e7ac911877c9","sha512":"9da40e5132ece9fe346f27aa467b2496545c84197131c633e5b1ff1f641ece723440ec0289e82d7948b85bcd901b9e3eb6e36f8e0339ae05e4a32621e895accf","ssdeep":"384:yC+tJn9Dbvbf1P3QSBxDrdiewZnnoTW39if+04xSlR4nbiamdrjNfrzInGINYlor:NWJnlN3QSBxDMewZnnoTW39L0MSR4biK","tlshash":"a762954d3a9514bb4adf31b770ab204f767e8800852c91c4bdbca0d166b5ee072e7e6d","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-04-19T08:49:21.122145Z","times_seen":12066,"resource_available":true,"data":null}},"time_used":2115,"timings":{"blocked":1572,"dns":0,"connect":0,"send":0,"wait":542,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/bar.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/bar.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-f6c\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 3031\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 2955164694010215996\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3948,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ec831b5d5560d9efad210c4142e01307","sha1":"d0f627fbc33b8d3e596b5fe2dedd2f40b7c36814","sha256":"4426e90c1b6462c16b6f2b9f54ed06d3b1c43b6c64f0ef7022a29aa2ff447e11","sha512":"3117995321dd41b3683756518ecc98163f5e695f97980ff89045484d24516434418e835fe1dc203dfb656934208ba68e44d3d17923da2a913c1909a8691f9044","ssdeep":"","tlshash":"88817d2147d3a9ec21d18bdbe367b190bd223e5ff00c39792bde0241e6a404311d2ea6","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362655Z","times_seen":438,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/langs.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/langs.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-1036\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 2978\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 8008068472973422721\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4150,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"477442fe487cc7a820f96b5322d23be3","sha1":"6cf3844eade237b9025c9ecbefcd5e9a587fa3c1","sha256":"860799234bdbdcf72ef591956f1277a58a27aea0e3c0a492a741ee407869c7e1","sha512":"9d962d05155cac6c8c2b4223def9aaf6ce779c9b516cee15a6147819584bb9212b33c81bee853155e95de9f4c58697ee1f4a773fc5842bd3a9acfcae0beb209b","ssdeep":"96:MMSUHH5W3hSodnemDkDTIdnD64BoovNZ3pzWqsWn3zg3Y39eCBZrV:My5W3hrnemDkDkdnDxBNlpzZUijV","tlshash":"a4815d3b1a267e0e4415e24cf2d65c726f9d055eb858273de1b83b6268447886f22262","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.384935Z","times_seen":477,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 9077319118030690131\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/game_title01_h.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/game_title01_h.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-12d3\"\r\ndate: Mon, 09 Feb 2026 04:37:45 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 12 Feb 2026 04:37:45 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 3720\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 210599503021336825\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4819,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"75d5409899b13e776e74ee1e96cb48aa","sha1":"3740e206435df41682c4bedbf0512a625c0f524e","sha256":"21d867c2b3499a6e8a01d7a1d3368af16ddb17131b907a8fb4af1a08c7747a52","sha512":"b27a84bd3c692e8c282c7b88114821173bdc56b5a0feb2c0082c5d67a406f09dfbba9d108bf20f529390267b1693ae02c5ab1d6717fe60751bf910323a99ac5c","ssdeep":"96:H67E558jhVcvRBrKBaiqxWesDsieD82oSEXFKRvupiyW/+AW75dKgDrMUCJiKzr:HIRjI5xJsRSwFKVupTiUdKUwJdzr","tlshash":"d6a18e0790d3297ae65fc9e2936d615385a706387c2542bcabcfac51e465c1c517b088","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.37868Z","times_seen":456,"resource_available":false,"data":null}},"time_used":859,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":858,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/fserver/files/gb/1003/carousel/10009/1551942755538.jpg.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:05.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /fserver/files/gb/1003/carousel/10009/1551942755538.jpg.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Nov 2022 04:11:19 GMT\r\ncontent-encoding: gzip\r\netag: W/\"637705e7-6df3a\"\r\ndate: Fri, 17 Apr 2026 21:21:46 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Mon, 20 Apr 2026 21:21:46 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 335897\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 210844340554629988\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":450362,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a7484cb9e5da5499b4969c1881bfb118","sha1":"7470c515f2b31751146cf9b77b473f7c84e9d99a","sha256":"8259c73dfd79fe0b02520af63d31a18a0392d8e88e5bdc1f742fe105b9670e93","sha512":"0b2c262492020be1cbdecead1e889b299fedc1dcb33f445a6797ebd9fa14e651781657ccdabb76fcd54b61b231ad74d7dcd9197e17751929269047d113496a60","ssdeep":"12288:ocaUlGaDJWrSyfYEaGt1jOymcDXbWW9D1/P4:ocfGNrSyffaS1t7Lt5/w","tlshash":"64a422a12e288ebe7ed6c02056736d281cc85df9c466c05a23793edea7d276043dbcc5","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.389495Z","times_seen":47,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/websocket/CometMarathon.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/js/websocket/CometMarathon.js HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 21 Apr 2022 04:30:12 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6260ddd4-2f13\"\r\ndate: Mon, 26 Jan 2026 01:00:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 29 Jan 2026 01:00:41 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 11733\r\ncontent-length: 3316\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 5211207654677305233\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12051,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"466a7ed7d00986d45375c0cbffb5233c","sha1":"68845ead668e9abd29c24b491dbf97b219226c08","sha256":"7ddafae5a0a552d2d56101cdc8306403e8fb9570759d66c48b25893b409f0123","sha512":"752801557c12ee7830f1f2e55352ab9c033aff01ff79abdffaee1601c54cdfc85a2041facfc5a7e180706812be5ad08668eada116544197fd2a784bac1903ea0","ssdeep":"192:0Pf+0Sn4NyRSTTPhvygOdWuTdC3d7QPXLHOm8cSCl1Ej3m7YAPzhsoqFncJ0j:0Pf+fnwfcXSaGLj","tlshash":"9e32314b6cf75085592b32b50f9f24447239d8572605e81c7dccaae48f98b6c0b6bfb8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.214688Z","times_seen":12015,"resource_available":true,"data":null}},"time_used":1963,"timings":{"blocked":1585,"dns":0,"connect":0,"send":0,"wait":296,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/index/getUserTimeZoneDate.html?t=mo5ejxmm","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /index/getUserTimeZoneDate.html?t=mo5ejxmm HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nCookie: sticket=akUwTFdKbE5qRXlPR; route=251410696cadec6a5b6c74aa4706df12\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncachettl: 3\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Sun, 19 Apr 2026 06:46:01 GMT\r\nout-line: gb-cdn-010\r\nset-cookie: route=a1a97600d4111120168c5ba2bb9e992f; Path=/\r\nsub-sys: msite\r\nuuid: 01003-01-00000000-17765811614b07\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 97\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":119,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"0ae05c714ddfade5c5cfbac12686910d","sha1":"ec09b702ff153d5b342cd1c912fa55c253d08a74","sha256":"66d1c0e0917ed7bee2f1c352935d170d3dc7b806b85990d1b59ac77cbf938880","sha512":"f590f5aeb8db3adc59e4f0eb309f98106835f5180a557285ce980a37267f180cfadd0b2a6d6d794618701deedd55043d7a8613e891dd02e96044a426088a526c","ssdeep":"","tlshash":"63b0926846a2af5e0a3084e0c609b6cd4e99766f08d2c9625b5add2ca85ce9a1809312","first_seen":"2026-04-19T06:46:39.261879Z","last_seen":"2026-04-19T06:46:39.261879Z","times_seen":1,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/bt_login.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/bt_login.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-980\"\r\ndate: Mon, 02 Feb 2026 11:17:27 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:27 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 1713\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 8015864013638607214\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2432,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"96599b5f98a62f2b71def470fe19897c","sha1":"e8409dd99af157de78872dc9d1ec63520a2a5cdb","sha256":"f8c055f1ac3317c186a1a8f8360c167f477b72f90a82e0910a134fb98e47fef4","sha512":"760c8b61d2dc9e4a9e1e84c235edd2dcd350a50dd2a610ea4a18d39fcab2d84cf94b96dfa724936a1791693c88ab8b4a1df96c77a152fa88f9cc6263cb4cf9b7","ssdeep":"","tlshash":"4c415b3da73e3a8e4816c1195ac2673a8f678f08056f3b3ec5a73023104abc00d950b5","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.408561Z","times_seen":47,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/images/icon_cooperation04.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/icon_cooperation04.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2c74\"\r\ndate: Mon, 02 Feb 2026 11:52:37 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:37 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 8691\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10582175116278962487\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11380,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"75a5c0b38f0d0338dc85169168486235","sha1":"52c3287a9650237a3d833edfff513ea1c5a9ee7d","sha256":"5681103a96854355d323cb35c2487eaeb8ec5baa0ec203857df7d7b2b39f88f4","sha512":"0bd55564fac0d2c812345e7d0e1ea8154ecb9202ef23da647fa8c275e9aad11564fa00a19d1f6f7cd43e96d4ff213114d70c98fb2f4da8bb329ab9c1576f0b5c","ssdeep":"192:tHdq9ZswFL9z9EKi3cKDSo7XucxOfDittsgo+o7axjgJ4wkgGpnVjkgfk6u56PJN:tIVFLNTlcd7VOfDitegrxjgJVO9VSgBN","tlshash":"4f32c01666a3aee9f17f87ebee5130d578503e136c0c4e351be97142c2c648625d1de8","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.416737Z","times_seen":454,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 3340775536494006869\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":234,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17341561012497176374\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":237,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/images/favicon/favicon_1003.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_1003.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 05 Dec 2022 08:15:08 GMT\r\ncontent-encoding: gzip\r\netag: W/\"638da88c-163e\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 4241\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 2273602401933610871\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5694,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7773fd6e42ab9a135bd4a032bca831e9","sha1":"0d8ba56f4710ff235ca14a92eb73ff68bb5fcb90","sha256":"bfa740c9d0f5b265d085355df31094294f76fa8c183f2d56018856b4799271c2","sha512":"70195012bff7e7538bc53ffd22b323c6caee44509472ea490e989a2307edd4a1f4e033d8470b575164ace9e5ae80127445eeb7171b6534f0086225044794bf2f","ssdeep":"96:pMSUAv4W3hSodYGY8DuAkKhAl0Njxe1m7UlZNvkZAQs0KFa3HBBau1vRz4Q/:p0W3hrYGrDuAkKQ6oZyKIBLNR8Q/","tlshash":"dcc1af61347b721c71389e0ce3b1df773e3f46641848241c26abb65b841539ce588b88","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.369827Z","times_seen":47,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/fserver/files/gb/1003/floatImage/212/1554000959997.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /fserver/files/gb/1003/floatImage/212/1554000959997.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Nov 2022 04:11:29 GMT\r\ncontent-encoding: gzip\r\netag: W/\"637705f1-1ab6\"\r\ndate: Mon, 02 Feb 2026 03:24:42 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 05 Feb 2026 03:24:42 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 12842\r\ncontent-length: 5260\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 3596350480253126522\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6838,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (6837)","md5":"f273af66e6761800cd0139ec81584141","sha1":"811e67c669595592d57fcbb91498655de4ae2349","sha256":"51fcd30078e0fec7b9d7500834a2f13a2e982fb08fea80a584f06a723d05ede8","sha512":"5295bb510274a6b68e08aaa637d82d26e4312058fcfcde62b801a8b56f151f961f26f9697cdc918a4129b9b5d369cf1b7bd6caa9f279efe28918108e6ac6d477","ssdeep":"96:pfr8UfkciEfIYWM4O5pJqwzhzUkSLFU07mcU2G9RzfaoFMDw6wxHSTZx0:pT8QeEfgM/JR5UTG07mr5MDtceD0","tlshash":"17e18eb60a0d446f2a4db49021a85b5347a009717eadff74171d57e903fafc2353e971","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.374893Z","times_seen":46,"resource_available":false,"data":null}},"time_used":837,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":836,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/footer_bg.jpg.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/footer_bg.jpg.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-bd4a\"\r\ndate: Thu, 02 Apr 2026 08:47:15 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sun, 05 Apr 2026 08:47:15 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 22884\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 1545345141760796\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48458,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"89d9b99e344dcc13a5e3c0bf4cbd3f44","sha1":"c473f78438f22672a2059e0f4cbf254bf77c1e47","sha256":"5edde9a261c2b70e5c381a8d8f7f1b80c77c7b2ffe0e5204e0c6b3c763056ed6","sha512":"61a6f06b7b54dddb2f418b8b4f18c58c22ccc58b3be0fd50f07f7b616c79d8614ca023c7601320abcc1013682602900c08793284ac84772d0372226f07d00f1a","ssdeep":"768:12/0yWBNO4I3TiyZZfI7Va9u0dqGfqg4ownzA:12/VWBA4IDJ8haoFgu0","tlshash":"f6236c776cd7be4e2b3e588a83cf62f11c2c3bc78b449498a95a3cde5d6121185db039","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.395032Z","times_seen":447,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/ftl/commonPage/themes/gui-layer.css","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /ftl/commonPage/themes/gui-layer.css HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/ftl/commonPage/themes/gui-base.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 19 Apr 2026 06:45:57 GMT\r\netag: W/\"64ddd5e1-c760\"\r\nexpires: Wed, 22 Apr 2026 06:45:57 GMT\r\nlast-modified: Thu, 17 Aug 2023 08:10:09 GMT\r\nout-line: gb-cdn-010\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51040,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (489)","md5":"858eefc3fa70af7d0115c901908471f5","sha1":"29c181bbbc09a424f7de7cb57629bd8a9e3c679a","sha256":"9f6a77c93f998e065f1ed52eb9943a3c560a50366bba2c8a34a4a1223c793caf","sha512":"3731234bfa0b2abf45883da0ab74960a77f167dc158f4eae4f9c58293bfe6ccf322fabdbd4100bd5fdba0f463cbf18ba44d89b0bed695b65b8edce7edc9441ec","ssdeep":"384:RCEe+wekUqKrIQycnvqP9bQmAJS0OuaIHmOKpPg+2fF93sJJ:RCf+wekUqjpqCP+OuaIHmOK6+2fFVSJ","tlshash":"67330d22a16816cd7156eac8705dbab7b7fc8c02e21717bcf8ab304fd28d5439476a47","first_seen":"2023-08-17T12:06:57Z","last_seen":"2026-04-19T09:11:38.363722Z","times_seen":10907,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/images/logo1.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/logo1.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-76e8\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 23038\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 1396605753495420258\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30440,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"87b1ca9ab19cce54b6994c3f50805890","sha1":"397b31bccfe8765c848570d5046ed3aa7c1facbc","sha256":"5927e2be5b7328122c735aa97632d408dc52891254c9b5ad9658141e80a9fed3","sha512":"810b42cc9d158330dd199e4ad7ec537125f90c48d707b6b1b59a778aa2dff965a63ef6498ad7cf4497051da823ada166a8685060f053befb32eed5f4c1606522","ssdeep":"768:IOHn2vZg4rGUsYUY8V+AvPtSE3o7gTCXBrVuuqKJSJOf4zR:IOHsrJqY80QPgCo7yCRBuuqHJOf8","tlshash":"12d2f13708bb3e76053f922a7ea2e0c5152d774d1a95b350fefd3d87394696021bc8a0","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.399275Z","times_seen":47,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/langs.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/langs.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-1036\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 2978\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 4881939517532417800\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4150,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"477442fe487cc7a820f96b5322d23be3","sha1":"6cf3844eade237b9025c9ecbefcd5e9a587fa3c1","sha256":"860799234bdbdcf72ef591956f1277a58a27aea0e3c0a492a741ee407869c7e1","sha512":"9d962d05155cac6c8c2b4223def9aaf6ce779c9b516cee15a6147819584bb9212b33c81bee853155e95de9f4c58697ee1f4a773fc5842bd3a9acfcae0beb209b","ssdeep":"96:MMSUHH5W3hSodnemDkDTIdnD64BoovNZ3pzWqsWn3zg3Y39eCBZrV:My5W3hrnemDkDkdnDxBNlpzZUijV","tlshash":"a4815d3b1a267e0e4415e24cf2d65c726f9d055eb858273de1b83b6268447886f22262","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.384935Z","times_seen":477,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 4667493682956206917\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/bar.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/bar.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-f6c\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 3031\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 7692409221092257350\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3948,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ec831b5d5560d9efad210c4142e01307","sha1":"d0f627fbc33b8d3e596b5fe2dedd2f40b7c36814","sha256":"4426e90c1b6462c16b6f2b9f54ed06d3b1c43b6c64f0ef7022a29aa2ff447e11","sha512":"3117995321dd41b3683756518ecc98163f5e695f97980ff89045484d24516434418e835fe1dc203dfb656934208ba68e44d3d17923da2a913c1909a8691f9044","ssdeep":"","tlshash":"88817d2147d3a9ec21d18bdbe367b190bd223e5ff00c39792bde0241e6a404311d2ea6","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362655Z","times_seen":438,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 16784299239284038544\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/jquery/jquery.super-marquee.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery.super-marquee.js HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\ncontent-encoding: gzip\r\netag: W/\"5d848f4f-1151\"\r\ndate: Mon, 26 Jan 2026 02:34:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 29 Jan 2026 02:34:45 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 11733\r\ncontent-length: 1421\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10859161985183406370\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4433,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4433), with no line terminators","md5":"f77d83590bc0a69298f2fbcc5d9911cd","sha1":"1d6aa25d7052f53ad0181385e5efe72f224bbdb9","sha256":"1d042b9441e860ddcc01b9e9e5e8d354121ee0e31b47f6e18a321e2e633d22e7","sha512":"a39dc6c01df32c8f72842af346f4d67e1278d37a74a0541537b8274b421bcfbc547a2f4844f3c4b6c5cdda4c78f0a8f41171c87ffd149ab52526a95bc6c5bf61","ssdeep":"96:nwzrUsI9/8w/ISEgOGXFRNcrc8PQjc3Pb:+rUsk88OnJQA3D","tlshash":"2991252d7290f5d559cf3c3be02b0b050c785123a54e00927a65def279ba379a607e1f","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-04-19T08:49:21.261485Z","times_seen":12076,"resource_available":true,"data":null}},"time_used":1921,"timings":{"blocked":1576,"dns":0,"connect":0,"send":0,"wait":295,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/ftl/commonPage/themes/hongbao.css","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /ftl/commonPage/themes/hongbao.css HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/ftl/commonPage/themes/gui-base.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 19 Apr 2026 06:45:57 GMT\r\netag: W/\"64252e4f-d530\"\r\nexpires: Wed, 22 Apr 2026 06:45:57 GMT\r\nlast-modified: Thu, 30 Mar 2023 06:38:07 GMT\r\nout-line: gb-cdn-010\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54576,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (336), with LF, NEL line terminators","md5":"a212ec8d2af1172e5fe97229a8cdd470","sha1":"676b870b21e2b4f18dd23dd24baa8a30955b8362","sha256":"910aca19fa0a1df0c76607fdde36968687403343a50022bed3693011abee9fc8","sha512":"6f8ef1e9c22978fe39412ca413b132e9ae54d5b84c1b95b6f40b5c7bd44e726212ca20b731de29294e77fadf0651f3cbc8bfad1d6a4ec6b808064faa4aa3811b","ssdeep":"1536:qsgR4FlccsG7TCbzG3ArEDTgkvudNssvmp13ZUcPGZ10iS9EvlBcovGF5XAso/GQ:qiu","tlshash":"78336d05e241abab21dad174230bca3bcdd81485fea4dfb7223971f4cba55e5b03625c","first_seen":"2025-04-07T03:18:03.889172Z","last_seen":"2026-04-19T09:11:38.398276Z","times_seen":5325,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 26 Jun 2024 06:30:20 GMT\r\netag: \"667bb57c-e3\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 227\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 5909100694067098108\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"77546ee8bcab279aee067f7794d08541","sha1":"e1ace21ee1e968151b5b0ad8da4b0ebf8420bdcf","sha256":"9f967376ac77e445b313fbebbab9a4572c0984edb80f6b5baa9c10f9bf68d647","sha512":"d56ff9fcf76a2153287b4b016b7e59f40c60859b36ac5d12bc96a43237a828cfcd4c0b5de142dbf178ebccef9092c3ae167ea7e3a59d359f50db78df36263b21","ssdeep":"","tlshash":"09d097310605283062ce68013802d1000e222b8f52a760407ff86023581b3c88a9a3c0","first_seen":"2024-09-24T19:10:13Z","last_seen":"2026-04-19T09:11:38.371429Z","times_seen":1881,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17449824980798826790\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/input_bg.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/input_bg.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-c41\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 2110\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 13696510617099965866\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3137,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5e856841a4674936e0efd8ca64f6a7b0","sha1":"ea5d402d087a9f5a9e059de177ebf9b27419dbfc","sha256":"a5b134ceb0cd13ce9c89ebc7949b0fa27b454d895879a167dcccb3ad656da1d1","sha512":"a63b4fca1eb4f190fc754e6b0a349472597d81e77d369589f5e745b12c5a24c4d96c23d12b57b963096e03dbf3c5400dd0957557234958fb8c416923995fa8b3","ssdeep":"","tlshash":"f351f776b73f3b8a94f5ca57b1467066ae2d49ef10369d30803a3f96092430c94b52fa","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.368822Z","times_seen":47,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/navli.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/navli.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\netag: \"6434c9cb-271\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 625\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 11955767980722483186\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":625,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7cb32677e20110fc24ac0ed83ab9dc93","sha1":"11bb8187c64139bf535d82b3e69ac4dda28c882c","sha256":"5dc39cc58aa2473d9803451419d14086f6d501a0d3ea6fa520b8d0ff3e55c6f7","sha512":"fd3ced3df06b89c21b3702f7d8c5a0fee59b93bc67c46b84bef0cd1f6347c31ea02a82730a08455bbd2739fce1240b8b8eafbd397d5327a39fde2719b66f73bf","ssdeep":"","tlshash":"a6f002f14216ace411fc51b4971945930e762d0824481f85edc485aa01c05f394a691b","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.369299Z","times_seen":443,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/bar.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/bar.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-f6c\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 3031\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 8121892219437266613\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3948,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ec831b5d5560d9efad210c4142e01307","sha1":"d0f627fbc33b8d3e596b5fe2dedd2f40b7c36814","sha256":"4426e90c1b6462c16b6f2b9f54ed06d3b1c43b6c64f0ef7022a29aa2ff447e11","sha512":"3117995321dd41b3683756518ecc98163f5e695f97980ff89045484d24516434418e835fe1dc203dfb656934208ba68e44d3d17923da2a913c1909a8691f9044","ssdeep":"","tlshash":"88817d2147d3a9ec21d18bdbe367b190bd223e5ff00c39792bde0241e6a404311d2ea6","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362655Z","times_seen":438,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/ftl/commonPage/js/countUp/countUp.js","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /ftl/commonPage/js/countUp/countUp.js HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 19 Apr 2026 06:45:57 GMT\r\netag: W/\"5d848f4f-1be4\"\r\nexpires: Wed, 22 Apr 2026 06:45:57 GMT\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nout-line: gb-cdn-010\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 2080\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7140,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"3e9a58a52dd5597d17699c8d25c2841a","sha1":"26e032f2abad781cce71814bd6d43138db8f89be","sha256":"b14b3f362ef456b8ef3d9525e5fb6f88f04135a39551edeb88d840e220d012bd","sha512":"6e9cdf308f82ea204e7a97404532d4dfef4b6f1d7c4810d9cdd279112afabb1f982196691718306e21a72b5cb1aef66fc71d0f0546944942ae77b56adc7978e1","ssdeep":"192:a3+jBTUNKveiCoWsyItBF2qb2VAgCy9HLqNx:a3EEKpUo","tlshash":"ebe1db8a55b312212a137a6b9b8b33432a3f8633241dd8a97c7e13811f9542247d6ff8","first_seen":"2023-03-07T12:39:28Z","last_seen":"2026-04-19T09:11:38.380904Z","times_seen":1583,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/idangerous.swiper.min.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/js/idangerous.swiper.min.js HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 11 Aug 2023 04:30:09 GMT\r\ncontent-encoding: gzip\r\netag: W/\"64d5b951-b083\"\r\ndate: Sat, 31 Jan 2026 05:25:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 03 Feb 2026 05:25:41 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 11732\r\ncontent-length: 11957\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17020367268883900597\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45187,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32034)","md5":"f15409fb02c527ce1f66a2fd3c4aa0e9","sha1":"1e1e1bcc0f49e99e14ba34991cffe0745178d302","sha256":"1a1b5d3d6fbfc28abe37a668abd59494208c63c5f0b5d040cf4bbbd137f87c27","sha512":"66a384d6ad5fba862e778e24c43326a718328b6f860469fb5eb69c2687b0bbdc3c2dfa9049b0e3d5509214db1dbec4477f5c3654dc04446a505379a4300d4908","ssdeep":"768:oTFZ8CkWyYzh9MTvl7prcAgQW5ppZ+rPPWRqKDyBuq0t:cZiY9uTJuAgQW5LZ+rPPWRLt","tlshash":"5613f8c1b32031a741f3626e91fecb4271f54966aa05d4dcb5ed84c41ab489a03beff9","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-04-19T08:49:21.222285Z","times_seen":11871,"resource_available":true,"data":null}},"time_used":4191,"timings":{"blocked":1748,"dns":1067,"connect":341,"send":0,"wait":647,"receive":41,"ssl":345},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 26 Jun 2024 06:30:20 GMT\r\netag: \"667bb57c-e3\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 227\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 1569818352295169285\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"77546ee8bcab279aee067f7794d08541","sha1":"e1ace21ee1e968151b5b0ad8da4b0ebf8420bdcf","sha256":"9f967376ac77e445b313fbebbab9a4572c0984edb80f6b5baa9c10f9bf68d647","sha512":"d56ff9fcf76a2153287b4b016b7e59f40c60859b36ac5d12bc96a43237a828cfcd4c0b5de142dbf178ebccef9092c3ae167ea7e3a59d359f50db78df36263b21","ssdeep":"","tlshash":"09d097310605283062ce68013802d1000e222b8f52a760407ff86023581b3c88a9a3c0","first_seen":"2024-09-24T19:10:13Z","last_seen":"2026-04-19T09:11:38.371429Z","times_seen":1881,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/images/partner/partner-hongtu-goldGradient.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-goldGradient.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-1f1e8\"\r\ndate: Fri, 17 Apr 2026 09:21:39 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Mon, 20 Apr 2026 09:21:39 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 96897\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 11806162807734481776\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":127464,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"b72372682ace000908a570f7fd23b701","sha1":"1ec4d7f721a29697b1fdc8dc8c288caa4ea7aa76","sha256":"4fd56786de57683391b68b5ca7863158019ef5802c7c892b35f8e2b61ec150d6","sha512":"0e80d83d07ce9c7ad09b4b4d1fe8e04c6ff110174238af5b4c743c3e355949eee65f7abb661a4bb710c47080a5290e931cee0f58855f036da144f4849ea86622","ssdeep":"3072:un+2JvRI0m5PXhdDAlogSuz5cM2n1CALt6WIFE2:IHJe0mxdDXuz5cf1FLy","tlshash":"26c312a84ad79fa33088e310956e8855fd6d568257bea04827f1207e5cfffa0530bc95","first_seen":"2026-04-17T09:22:00.659781Z","last_seen":"2026-04-19T09:11:38.412725Z","times_seen":223,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/images/partner/partner-hongtu-brown01.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-brown01.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-1c93d\"\r\ndate: Fri, 17 Apr 2026 05:15:56 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Mon, 20 Apr 2026 05:15:56 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 88900\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 18429938581053739072\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117053,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"593f1f576bf8a92ef3bd57546e859a26","sha1":"8a15408be20b33554e7a267c3d120d1f4a550802","sha256":"63ff2e2b3db11f9ba90e4ef6147e3927fe2b63659bb05d86bca4e7e3214b9431","sha512":"9cd1fc2b4a9995c9499964d4fee25a9d40e55163e66e6f71f53cada6ba826fef48bd4cc01197e0f3a52fbe3453e146f1d7051b4993c489f4f47f92d3a2d4b5f9","ssdeep":"3072:87CqCiFczvRw1vTHIH5hNxuGFfFEQ+qAoJL/+Sevf:+VPEpwdHIZdHtFcqVl/+d","tlshash":"63b312729a7fb2445a4b12957514a329e8e3b307526fd6f8db7fe1050fea3828035d30","first_seen":"2026-04-17T06:17:43.721927Z","last_seen":"2026-04-19T09:11:38.381883Z","times_seen":258,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10941367362371247666\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/images/favicon/favicon_1003.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_1003.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 05 Dec 2022 08:15:08 GMT\r\ncontent-encoding: gzip\r\netag: W/\"638da88c-163e\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 4241\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 18171292820600144938\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5694,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7773fd6e42ab9a135bd4a032bca831e9","sha1":"0d8ba56f4710ff235ca14a92eb73ff68bb5fcb90","sha256":"bfa740c9d0f5b265d085355df31094294f76fa8c183f2d56018856b4799271c2","sha512":"70195012bff7e7538bc53ffd22b323c6caee44509472ea490e989a2307edd4a1f4e033d8470b575164ace9e5ae80127445eeb7171b6534f0086225044794bf2f","ssdeep":"96:pMSUAv4W3hSodYGY8DuAkKhAl0Njxe1m7UlZNvkZAQs0KFa3HBBau1vRz4Q/:p0W3hrYGrDuAkKQ6oZyKIBLNR8Q/","tlshash":"dcc1af61347b721c71389e0ce3b1df773e3f46641848241c26abb65b841539ce588b88","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.369827Z","times_seen":47,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 8278379642088269956\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/websocket/PopUp.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/js/websocket/PopUp.js HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 21 Apr 2022 04:30:12 GMT\r\netag: \"6260ddd4-828\"\r\ndate: Tue, 27 Jan 2026 01:06:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Fri, 30 Jan 2026 01:06:22 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 11733\r\ncontent-length: 2088\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 8402249449920857811\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2088,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"07864ad2e2759d53f8f2f14dd4295bd9","sha1":"95144219e2eb702c4c4a707c3622b086876cf41c","sha256":"871bf30791bb89605b61cea815c3786246274b65ede3b8a8b8c2dd9244cfa89d","sha512":"f469d0f23c75e918d55e076d72481fca7043ac5eff9025aaac1f26860d080e4fc3c5d28f8f9ee1dae80719aca2b83f39ea82a129c221980bd7d63c212bacc119","ssdeep":"","tlshash":"9041ae54baf359a12c9b71f3aaaf30413160f2479505ed017d0cb9945f1d228b2cf7e9","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-04-19T08:49:21.144255Z","times_seen":12080,"resource_available":true,"data":null}},"time_used":1968,"timings":{"blocked":1582,"dns":0,"connect":0,"send":0,"wait":296,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/zh_CN/mobileTopic/images/special_3.jpg","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/zh_CN/mobileTopic/images/special_3.jpg HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\netag: \"5d848f4f-1ad7\"\r\ndate: Wed, 21 Jan 2026 07:57:34 GMT\r\ncontent-type: image/jpeg\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 24 Jan 2026 07:57:34 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 11733\r\ncontent-length: 6871\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 3141774587790530193\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6871,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 168x168, components 3","md5":"99be4bfe275809d4e436b77c991b1381","sha1":"54eadee77394eb62ccf377ae68d9f49acb5b6785","sha256":"4ca35131972acdf420b94f0d64a5a0f504eb5a7b0e6fb7b8b467916a12aae37d","sha512":"452a79b02619ed5c1e4f81fc5a4a209cb8a11d03aadb1841ae9be18fbca088652cdb54340329c1bf57771abfb02ffed4bf75b61f4df96866b7f2358c36ae75a3","ssdeep":"192:p7FikLUR+6X7MCy5nSb1jSG99DX8yclWGo2yscY8:pfA3+gSGjX25+Y8","tlshash":"4ae18e26da8bdb85c4a4f2713f7d881a5551da1a5bd3f02160f8c41b3c9327c15e7a8f","first_seen":"2023-04-30T20:28:22Z","last_seen":"2026-04-19T08:49:21.250801Z","times_seen":12006,"resource_available":false,"data":null}},"time_used":2174,"timings":{"blocked":1340,"dns":0,"connect":0,"send":0,"wait":809,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/images/partner/partner-hongtu-silver.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-silver.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-1f5b0\"\r\ndate: Fri, 17 Apr 2026 09:18:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Mon, 20 Apr 2026 09:18:54 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 97678\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 8859048417734688950\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128432,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d4c1a078cc9292abf4eeb2dc631d3db7","sha1":"2ef525323a98bd1724712739b1b0357d96c64b18","sha256":"82fd09288e2bd2ad914b10b4ec0d2fd6db1987b0895df50b7dfa3ce9c9bcbaed","sha512":"8a3ce62daa1f38e2cc5f9440351dafacb5ff6aa321fd8ee675a524dbe35c5196a9e5da340af016d57ba1c521815d1cf5c0b1e1638b45aa8d2b0c72682692adb1","ssdeep":"3072:egjBEhhDTlhiCn3XiGXRcVttkJugwr5rz96LXeFNqLqcdS:DBEXlhiGiWmkggwrt56jeC2cdS","tlshash":"e3c31215afd8bcbad6da400e2c89db1b8eab1f200d9c90d257dcb5b3d950c1cc766517","first_seen":"2026-04-17T09:22:00.726289Z","last_seen":"2026-04-19T09:11:38.42414Z","times_seen":223,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":231,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/mobile-api/v5/origin/loginSwitchCheck.html","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /mobile-api/v5/origin/loginSwitchCheck.html HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nCookie: sticket=akUwTFdKbE5qRXlPR; route=44d17259ab44b1b54887077d522d7137\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Sun, 19 Apr 2026 06:46:01 GMT\r\nout-line: gb-cdn-010\r\nset-cookie: route=251410696cadec6a5b6c74aa4706df12; Path=/\r\nsub-sys: mobile\r\nuuid: 01003-01-00000000-17765811616b82\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 113\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"1452cebf3e2bb129b06762f43f09e5c8","sha1":"0ec65f1e79233e8c59f76c55fb89ac8637cfb070","sha256":"99a31cd18b8ce37d3725d0a77d5e314452d2906ed2b54b8b19d4de849d1bf13d","sha512":"758e5238156c2ffef164019c0090d96ae3567b56cdb9180b179f9f20dbefa3d184a9b0776e96d10667ecc0bef04ebccad0959b1eecbf5526077c096e22cfe919","ssdeep":"","tlshash":"b6c08c49f00458abce02239456d828402fec189270c9eccddc0c4a58f2cb4dfe322c2b","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.166438Z","times_seen":10636,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/images/pic02.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/pic02.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-5a85\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 17636\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 11276153292989388748\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23173,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"6f42190846cfb865ab7f5b6a2c35b7d5","sha1":"9b10919696e23899fbb2825dc918cca7bdc337f0","sha256":"a522f163260e8f0cc401f1480a7314453632e16fbe1c0f788e255b54995253d3","sha512":"240d39a383b69c9fb386361edc20b570eee4f53746bd1c83b101686e4c431e7aa6a3728932ae4990bb3aeebd53628aa3ffd2669835cb41d1ae27463df6a517eb","ssdeep":"384:SVFLNTlcd7V9r5JzOEXHsP9uZ0ylAhhLt3u9X33YzIdbE8kq21w5I3iPWILfEa:SVed7LjakMP6SduGgw8kJwoiAa","tlshash":"96a2e1423e709dbf9fc8ef6e475464d0bd843d0ebe6c4204e6c6468485f194366b782b","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.415529Z","times_seen":454,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/images/footer_title03.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/footer_title03.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-1bf9\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 5490\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10172741273399257867\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7161,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"644ebf0d21ef0a388a0fb8cf09996200","sha1":"b0f20bb8799c4ab71293628fe28f60606708f0b2","sha256":"547f738e89eda7b42be8a7de9f7d34d291a5c653e33c9e6f15a7bedd2fa62099","sha512":"098d3f880539b2f14792f760bf17c6a2375d9c5fd68b3171d42db29ce42a74c1f3143c2202ff198b2fa6cb89b3725e8f46c7e1df08161f1f2a6c3949629fbc2f","ssdeep":"192:Qdq9ZswFL9z9EKi3cKDSo7XucxhVnGLDe+RleRQVxbMl:DVFLNTlcd7VsPRleRgMl","tlshash":"63e19d268173fada51e2cf8ec3e772933d933d6ae10c6a6e3bcc910192b61031093912","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.427143Z","times_seen":445,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/bar.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/bar.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-f6c\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 3031\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10408411636115373542\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3948,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ec831b5d5560d9efad210c4142e01307","sha1":"d0f627fbc33b8d3e596b5fe2dedd2f40b7c36814","sha256":"4426e90c1b6462c16b6f2b9f54ed06d3b1c43b6c64f0ef7022a29aa2ff447e11","sha512":"3117995321dd41b3683756518ecc98163f5e695f97980ff89045484d24516434418e835fe1dc203dfb656934208ba68e44d3d17923da2a913c1909a8691f9044","ssdeep":"","tlshash":"88817d2147d3a9ec21d18bdbe367b190bd223e5ff00c39792bde0241e6a404311d2ea6","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362655Z","times_seen":438,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/service03.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/service03.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-1e04\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 5890\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 1009680885058010679\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7684,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"640b3c2c2494d223e659abd537d00790","sha1":"dc52770e42a35dc84bc7b43386e4940807ae0ee2","sha256":"dc88f3e1cbe3e6b29b6b4f67be213604df634322f901af6da539f9bb3cf29bfe","sha512":"6772af292c571fefd28016312a1ac90c7db853a7b8601ebc64e0090f0795c19a0d20a4571bfc64224e1f8d3a12a5a3cc7f79a8381bc087881ea34b5c0d1b121e","ssdeep":"192:adq9ZswFL9z9EKi3cKDSo7Xucxv5b9Dy++DR9tvk0:hVFLNTlcd7Vvh9DsvT","tlshash":"2cf19f1d13b235fc49d5abefd2a281d10c55fb9bf60c69a327e729419350106a242ee3","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.378204Z","times_seen":437,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/images/partner/partner-hongtu-gold.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-gold.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-1b65e\"\r\ndate: Fri, 17 Apr 2026 05:15:51 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Mon, 20 Apr 2026 05:15:51 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 85185\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 16427187557621890281\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":112222,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"9a361b9e4edc412966bbdeec9c5fe802","sha1":"fcf0f37d927e601310c09ee37813d1136db986af","sha256":"85827a3eb658c7f74f3ae7b6c3263a66969538f37e146d85239f241b5aa19426","sha512":"34a51a5cbb240d57f9762154c127251676eb5acef46e44d8f6cd34958fb2584cb42a8cafd11c8ef32a368240a6105c47fadeb42b04b6d19db2abdc198b4ec384","ssdeep":"1536:N/G7AYtSmoszR65Zo+J/a4Ttm9d3m6QjMahrEbHs5lWzYfvQBHgXrCxRDRg+ETR4:Zn75Ms5byutWd3+j9hobH4lWaroDSV6R","tlshash":"37b3122db87fac7b4d6450a8a93cd78d4c7cb9a4214119d232e433a10debb11bbf991d","first_seen":"2026-04-17T06:17:43.775581Z","last_seen":"2026-04-19T09:11:38.421733Z","times_seen":258,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/bt_register.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/bt_register.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\netag: \"6434c9cb-2081\"\r\ndate: Sat, 14 Feb 2026 19:45:13 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 17 Feb 2026 19:45:13 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 8321\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 6382915868059364725\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8321,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"9560fc447e0c783cccf6caf80143a8a9","sha1":"a0b67ae888a1bab9f84ee461e537e104121d1f2d","sha256":"7b2498c45beb6c85e03773f68406d178fc276f57f9a85ea360ea0d995e23d331","sha512":"f15f813c721629a30bfb0117f5f8ebc65ee82d8d9240107336f3c82159b206224d91e5855ceaf724f4efeaf942313df48409ca45f2738f642159bf1c150fb030","ssdeep":"192:P0W3hrfnUCLKhNl57/9BPASyDz17k4EWALGIqcc0KMF:cGrf9mhNz/9pjyfFk4FA6I80BF","tlshash":"3b029f3e6a2a315d80f0dbd33b12b85a872307891d3a187fc0f9659b179268137f5285","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.382373Z","times_seen":47,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/navli.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/navli.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\netag: \"6434c9cb-271\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 625\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17309617048988864602\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":625,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7cb32677e20110fc24ac0ed83ab9dc93","sha1":"11bb8187c64139bf535d82b3e69ac4dda28c882c","sha256":"5dc39cc58aa2473d9803451419d14086f6d501a0d3ea6fa520b8d0ff3e55c6f7","sha512":"fd3ced3df06b89c21b3702f7d8c5a0fee59b93bc67c46b84bef0cd1f6347c31ea02a82730a08455bbd2739fce1240b8b8eafbd397d5327a39fde2719b66f73bf","ssdeep":"","tlshash":"a6f002f14216ace411fc51b4971945930e762d0824481f85edc485aa01c05f394a691b","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.369299Z","times_seen":443,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/navli.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/navli.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\netag: \"6434c9cb-271\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 625\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10252716135299774971\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":625,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7cb32677e20110fc24ac0ed83ab9dc93","sha1":"11bb8187c64139bf535d82b3e69ac4dda28c882c","sha256":"5dc39cc58aa2473d9803451419d14086f6d501a0d3ea6fa520b8d0ff3e55c6f7","sha512":"fd3ced3df06b89c21b3702f7d8c5a0fee59b93bc67c46b84bef0cd1f6347c31ea02a82730a08455bbd2739fce1240b8b8eafbd397d5327a39fde2719b66f73bf","ssdeep":"","tlshash":"a6f002f14216ace411fc51b4971945930e762d0824481f85edc485aa01c05f394a691b","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.369299Z","times_seen":443,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 276006644204057933\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 15560645600982343017\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/images/favicon/favicon_1003.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_1003.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 05 Dec 2022 08:15:08 GMT\r\ncontent-encoding: gzip\r\netag: W/\"638da88c-163e\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 4241\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 7763994999586284637\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5694,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7773fd6e42ab9a135bd4a032bca831e9","sha1":"0d8ba56f4710ff235ca14a92eb73ff68bb5fcb90","sha256":"bfa740c9d0f5b265d085355df31094294f76fa8c183f2d56018856b4799271c2","sha512":"70195012bff7e7538bc53ffd22b323c6caee44509472ea490e989a2307edd4a1f4e033d8470b575164ace9e5ae80127445eeb7171b6534f0086225044794bf2f","ssdeep":"96:pMSUAv4W3hSodYGY8DuAkKhAl0Njxe1m7UlZNvkZAQs0KFa3HBBau1vRz4Q/:p0W3hrYGrDuAkKQ6oZyKIBLNR8Q/","tlshash":"dcc1af61347b721c71389e0ce3b1df773e3f46641848241c26abb65b841539ce588b88","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.369827Z","times_seen":47,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":861,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/fserver/files/gb/1003/floatImage/205/1599154485618.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /fserver/files/gb/1003/floatImage/205/1599154485618.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Nov 2022 04:11:28 GMT\r\ncontent-encoding: gzip\r\netag: W/\"637705f0-465b\"\r\ndate: Mon, 02 Feb 2026 05:44:18 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 05 Feb 2026 05:44:18 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 13546\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 1357907616316304168\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18011,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (18010)","md5":"4c9b1c2e9b033189832876e644971e44","sha1":"8fe57f46a80e72b3286780f2bfd034bc4d337b4b","sha256":"fc47f2dea51ed0800b355a599ba421f24faccee525c340396506b97b79b6b085","sha512":"86c9eaf46787ae11910898e2f60c0238a625f06407a7d9a77dc16fac3562d34834593c88872ac4296691574b0eaf090f4a0c3898177af477a6727a03de3a520c","ssdeep":"384:t9cDSHX1yANjnonkFCYchrgoJCQWjFj/431k8daOrOjqiCZ61h:/aSHXNjIkFmLJ/SFjg1LaOrEHh","tlshash":"4c82c0aa31dc514c242685c8d641eb934f3b832fa49164d6b1bbae45d98a53c2f8acd8","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.396021Z","times_seen":46,"resource_available":false,"data":null}},"time_used":843,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":841,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/images/partner/partner-hongtu-gray01.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-gray01.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-1a5f3\"\r\ndate: Fri, 17 Apr 2026 09:18:53 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Mon, 20 Apr 2026 09:18:53 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 82032\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17012246813788333589\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":108019,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"39d55622cf2612cf420822efab5f3039","sha1":"d3cccda6b2b6adc3ec24672e0887e32baa58922f","sha256":"efdc0201c548f87d4f9edd28cb004e210ac146ff37f88cab35c4850c7e33bed9","sha512":"fa146dd7c7e970dd125c1efce70e8e1f98228b570c3dd8a275b405be220fa7733b3fb741fd40695ac543ecf2f75dd3e69977eb9f33f6ae60cacf27b5ce9deb4d","ssdeep":"1536:qPWeXY+UxifUocV4HjgkIuJOkVOq3iLZUi+G5XOBmgGkKZ/PSzxFeP13B+:KWeeLocGDgk7JXhSegO8nkKIzCho","tlshash":"f0b3120f26f4371876cdc7d7b3127a85acf3514a7368dee96652da8204a8be0864ed05","first_seen":"2026-04-17T09:22:00.675087Z","last_seen":"2026-04-19T09:11:38.426087Z","times_seen":223,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 1836374635772858566\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":232,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/navli.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/navli.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\netag: \"6434c9cb-271\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 625\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 15199222921908773383\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":625,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7cb32677e20110fc24ac0ed83ab9dc93","sha1":"11bb8187c64139bf535d82b3e69ac4dda28c882c","sha256":"5dc39cc58aa2473d9803451419d14086f6d501a0d3ea6fa520b8d0ff3e55c6f7","sha512":"fd3ced3df06b89c21b3702f7d8c5a0fee59b93bc67c46b84bef0cd1f6347c31ea02a82730a08455bbd2739fce1240b8b8eafbd397d5327a39fde2719b66f73bf","ssdeep":"","tlshash":"a6f002f14216ace411fc51b4971945930e762d0824481f85edc485aa01c05f394a691b","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.369299Z","times_seen":443,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":631,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 11986352768201876091\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/game_title02.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/game_title02.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-1d83\"\r\ndate: Mon, 09 Feb 2026 04:37:45 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 12 Feb 2026 04:37:45 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 8747\r\ncontent-length: 5790\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17596744520304404828\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7555,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"cf3ded2fe402dc6465304f7785c0e7dc","sha1":"0779f6e1a01f3325412c56d7e74d33ec12cfe627","sha256":"76a4f0f13cef54f825f8c3b39170c6a061f58cb72c823f489354786dcb299a09","sha512":"87c6c86d508c018f610198c646e5ee07ea3d9fb29e6788d61af780c5132f0e3033942ad785022ccb4bec07596aafb906adab6ea69cdbf48aefdeb8e6a7a52aa1","ssdeep":"192:HIRjI5xJsRSwFKVupTi+X8/rqkp0+DC4hKv4RR:sI7GTpTJ+qkp9W4b","tlshash":"24f1bf3fa4963689a2fec1a25375b853c8b448fe6a14039ddf8b98983497d1f821e44c","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.386768Z","times_seen":514,"resource_available":false,"data":null}},"time_used":993,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":993,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/images/game_pic04.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/game_pic04.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-6049\"\r\ndate: Mon, 09 Feb 2026 04:09:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 12 Feb 2026 04:09:54 GMT\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 18520\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 13790235518943303033\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24649,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5a655c78ec7317362788900c07729cc1","sha1":"685d28a43c34446f0130361def7146ae56b162f1","sha256":"6bdbbbb23d9d44687e98f8c0b23ba737803965b751f4976352782dd4e7fb0b98","sha512":"c2deeffb76b5e123ec5e708f1126dd919a5a2a26054493bf6ff730ac8cf767757fcb60420d1b97c73cb781a7365e7c6ef209529d6b9cb99578b861b9e5a8afe7","ssdeep":"768:cMpKcx7g+UFYyvY8NDwr6XdSBBszBeDGprryag5:cMpQ+A5B66wrsECprOag5","tlshash":"7db2f15ec01a33bef12e949d9a76b1b3a9f305706e4dc552c1f6f22f290d9a9123e0c4","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.366483Z","times_seen":462,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":803,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/lazyload.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/js/lazyload.js HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 07 Aug 2023 03:05:10 GMT\r\ncontent-encoding: gzip\r\netag: W/\"64d05f66-2f79\"\r\ndate: Sat, 18 Apr 2026 00:11:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 21 Apr 2026 00:11:04 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 5720\r\ncontent-length: 2731\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10479510487927262174\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12153,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d87854586672bff7f886a47da85da5ed","sha1":"8d0537030dc7a81ade87a41a75fd5a75e4e33da1","sha256":"17859187f895c27de8869fb6bfec579fd68c4588d0af71d08d334be92d144ada","sha512":"d8c3e724f00bcf1ebfe1f8e96dda01243cf22aef18a0fc5a25a42d84458ff58a22a316dabf1d80d1b4f4c28db79edbdf9ba19df755d72f2b0b9f64497137672f","ssdeep":"192:Cdr+EgBD7NiM7B1wV20jSCQrF/bcbe7/bgdCx4RTsmS3KDsS3CggvBSChKRJ0Suk:Cdr+JBDYpV20Ez+obgdsm3ROCJIqSJvG","tlshash":"304200483deb51aba1d3b0f89a5f11447235810b160eee253d6c9395af6093932f2ff9","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-04-19T08:49:21.267598Z","times_seen":11807,"resource_available":true,"data":null}},"time_used":1833,"timings":{"blocked":1580,"dns":0,"connect":0,"send":0,"wait":252,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/061410/rcenter/common/static/css/gb.validation.min.css","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /061410/rcenter/common/static/css/gb.validation.min.css HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 05 Oct 2022 09:40:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"633d510e-2d52\"\r\ndate: Wed, 21 Jan 2026 07:57:34 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 24 Jan 2026 07:57:34 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 11733\r\ncontent-length: 3788\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 4681355750356720233\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11602,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2295)","md5":"12630e8fd95b53f705159b9cd1c2b372","sha1":"1be26841536b82ff280211796e9de339c642795f","sha256":"2c0c712726319f142f14ea06ccdba0ddb9f880571581ab1d0c193d4083a5baa8","sha512":"3084c7d3f917e379235e29b0f641e69f7a9a89b9c30b088292e3b3800cc67e16414b2df9aed1ed144cd2c37bbd035a8f6389d71ace13d17dd32a315c7719a88b","ssdeep":"192:zyzNcfuLLpjyFp291taF4lcrCQ4RFvVhkxP4OKyptj6ZqQ:znmdyF24F6crCQ4R4P4Dx","tlshash":"ed32a673ba220244790d9d442f46ee02bb1b40176a4f8eabff91786cdf825c9b67074c","first_seen":"2025-04-07T03:18:03.798848Z","last_seen":"2026-04-19T09:11:38.376291Z","times_seen":5351,"resource_available":false,"data":null}},"time_used":2140,"timings":{"blocked":1567,"dns":0,"connect":0,"send":0,"wait":542,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/mobile-api/v5/chess/getActivityMsg.html?function=sign","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /mobile-api/v5/chess/getActivityMsg.html?function=sign HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nCookie: sticket=akUwTFdKbE5qRXlPR; route=44d17259ab44b1b54887077d522d7137\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Sun, 19 Apr 2026 06:46:01 GMT\r\nout-line: gb-cdn-010\r\nset-cookie: route=4bf55577ceef236451cccfe77519a18d; Path=/\r\nsub-sys: mobile\r\nuuid: 01003-01-00000000-1776581161029a\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 112\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":140,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"5d062bc93ef9d75b27e852ed745d170f","sha1":"1ecf82a0589608b26ee6a29b2cc3229916596626","sha256":"26e77aa8c61c230db13c8fd74d4ab3adf8be54c3192c4e16f94e633a71efc2e1","sha512":"44400ff6867b380b16fdfda60ff144dfcc9bc4d7adc38c84a98f20d2a8911304f694eca3afe2cf9ce9538a7c49b1fb471694b4b68215c6ccc6027571b8b5ac34","ssdeep":"","tlshash":"f2c02b86f21818b38b030bd010e83d41c3fd11b2c0c84848dc4c8e4802b48ffd301837","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T09:11:38.371938Z","times_seen":7209,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/bar.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/bar.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-f6c\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 3031\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 7775055896418569891\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3948,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ec831b5d5560d9efad210c4142e01307","sha1":"d0f627fbc33b8d3e596b5fe2dedd2f40b7c36814","sha256":"4426e90c1b6462c16b6f2b9f54ed06d3b1c43b6c64f0ef7022a29aa2ff447e11","sha512":"3117995321dd41b3683756518ecc98163f5e695f97980ff89045484d24516434418e835fe1dc203dfb656934208ba68e44d3d17923da2a913c1909a8691f9044","ssdeep":"","tlshash":"88817d2147d3a9ec21d18bdbe367b190bd223e5ff00c39792bde0241e6a404311d2ea6","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362655Z","times_seen":438,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 4517996082756747556\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10436744156710419581\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":853,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 5336091491615434058\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/game_title03_h.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/game_title03_h.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-12e3\"\r\ndate: Wed, 18 Feb 2026 09:30:20 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 21 Feb 2026 09:30:20 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 3730\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 3057810469918566122\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4835,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"99803b6b1831571c0a4c199bc9aa11bc","sha1":"104f4f609dfe07055a7497bdeeb2b3a1c8ecf265","sha256":"0174ece7123913e93e0fb778dc4c2af00fe745b17ba49b5fc5c951d08610ae58","sha512":"76adf641205f5dfb4ff01973a2c2aa5d16b85b39f3475a7fa1c882b25eb9c3f0912c279261390b772acc15b7e0d644e5e4ad191d90030001d64f3d9503257e95","ssdeep":"96:H67E558jhVcvRBrKBaiqxWesDsieD82oSEXFKRvupiyW/+AWDs6147H:HIRjI5xJsRSwFKVupTiCsc+","tlshash":"d0a17e1354d335aaf25fc192e36a7153c45642b4242842fe9bcef851ed54a3d712b0cc","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.391025Z","times_seen":456,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-1208c\"\r\ndate: Sat, 18 Apr 2026 09:05:40 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 21 Apr 2026 09:05:40 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 56211\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 7680655775970659575\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73868,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"8578626b45164e503428d8ecbef1c819","sha1":"b27c3cb92c516a269f4200a48b851075bc575ee2","sha256":"45cab7ed8432f5be7d1541283109f884467ee14cdf72a5b4ed46e17152b982f4","sha512":"ce343616dbefb2d54483a22a03cafcb2938f3fb348f864f2a17b8d1e3fec6d61b512ac49c06ae836c0df5a91a056caddc36db0828273294486f7d36947cf872f","ssdeep":"1536:bgbqfFJ1ARyDOz0Z+Rjm5X4SQYIbpsCeaYxr3exoVPCa3iPr1:EbqfFXARyDOocRWovYKiCoxrkoVKtPr1","tlshash":"3d7302f90e12e4e5e7b5230d4811b19ab9d4dc7e64c334832a97042f9462a0f876c9fb","first_seen":"2026-04-18T12:10:13.86413Z","last_seen":"2026-04-19T09:11:38.377052Z","times_seen":7,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/images/footer_title02.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/footer_title02.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-21a4\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 6596\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 3536259813244899698\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8612,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"3b7ab8b78d5718e8d597f3d36c58490b","sha1":"c1a163946577765d1140caef512f607b9f8e6667","sha256":"dab7e4ed640a511626f59c85a0dff218c172a257d33081384b47fe447aae2231","sha512":"c62d0272a5b463045a29056fd68ce400c4a52970a5936f7437893f863db623ac270c465d784674f621af81b5a993f5697f5ade07f6443d8f5002754a1f7bc86d","ssdeep":"192:yAdq9ZswFL9z9EKi3cKDSo7XucxRcDyfeJsEouKKWVQE/iC7UPsSCm:yTVFLNTlcd7VyDDsEozOBPN","tlshash":"4a029f9065b36bec26c546d2dab6d1e12de1769bf1483fb527ce47c684694430092c39","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.427651Z","times_seen":445,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 4012006671541089247\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/game_title04.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/game_title04.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-210e\"\r\ndate: Mon, 09 Feb 2026 04:09:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 12 Feb 2026 04:09:54 GMT\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 8747\r\ncontent-length: 6455\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 3427425074860423089\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8462,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"58cf3c7c11f1150e78d2fdf6c258fc75","sha1":"793a88ac7a5c96b9d4e28c499360dfe09571397f","sha256":"97fca9e26fec9746ed6caf605af5709347b6e4297ea4e35ad4f4683fd6f284bb","sha512":"cd18ccf11314633edb4028c8e5f0d7bb1e8459a4d2bd03ad9245728c0440d20c32c33a1d880f9d5e2206f639d71ebd11ee101c2cefc8571e3e734733abfa736b","ssdeep":"192:HIRjI5xJsRSwFKVupTimxAEZq9sQZqOsnHphVvG:sI7GTpTLq4XnB+","tlshash":"e502b03740ab2599f93e8cb253d4b713a9f00a3d48055ab4eb9fa7952153d3db4270d8","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.388449Z","times_seen":510,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":130,"dns":0,"connect":0,"send":0,"wait":797,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/style/bootstrap-dialog.min.css","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/style/bootstrap-dialog.min.css HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 03 Jan 2022 08:51:07 GMT\r\ncontent-encoding: gzip\r\netag: W/\"61d2b8fb-add\"\r\ndate: Sat, 18 Apr 2026 08:25:43 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 21 Apr 2026 08:25:43 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 5079\r\ncontent-length: 624\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 14397465352420645742\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2781,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8c95e76a067c76400cbb86e170ed37db","sha1":"37193a6bca22ea127c44b5ad4c2999add4eb899a","sha256":"5eacbe4405d9979bcf79561a3c574f27d6bde167a3d4eb4e845568c4db1622d9","sha512":"50fc5d04d3306c77e5b285dfa4c65fa187229a96acf86dc18fb319cde12f3ebb5a8b61de760dc86986a521fdd4f4dca4aefa1f07b8b2fd08399c075712661142","ssdeep":"","tlshash":"45519c0c0eaa0891d15f45cc37ee6f2164b83093444eae9937ef332c8f85466b9f6b05","first_seen":"2023-05-07T20:04:35Z","last_seen":"2026-04-19T09:11:38.397046Z","times_seen":614,"resource_available":false,"data":null}},"time_used":3869,"timings":{"blocked":1646,"dns":1115,"connect":279,"send":0,"wait":512,"receive":31,"ssl":284},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/images/partner/partner-hongtu-blueGrey.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-blueGrey.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-1a4ab\"\r\ndate: Fri, 17 Apr 2026 05:10:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Mon, 20 Apr 2026 05:10:54 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 81761\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 13955044983721767450\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":107691,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7b4d6ac7e93306ed2f199864c1ec293a","sha1":"810e15fa2f6b6e961acfc70380e7c867de208dc7","sha256":"973df72460353de9a7f2923b54e73e4af58111b3a71abff5d7141d43a7d91619","sha512":"88e5e460582dd3210b3a69053e5bfd65ac3e8192a2d1247d3bbbba8d6a48c25489eb16fc8ec3c39144b5c2ef38fc66fff2edf57ba0d07d148c2cc98a54adae4f","ssdeep":"3072:Ljo1cEDiyoc/I3W/tAz47biXUNq/3fuboSn:fDZ01xboUNq3urn","tlshash":"0db312b1f5b57ce5ad4f3116b8b5cf286e525a919b0a6edf0541f2d77b828c1c300836","first_seen":"2026-04-17T06:17:43.754834Z","last_seen":"2026-04-19T09:11:38.38141Z","times_seen":258,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/input_bg.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/input_bg.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-c41\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 2110\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 1163698745369895371\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3137,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5e856841a4674936e0efd8ca64f6a7b0","sha1":"ea5d402d087a9f5a9e059de177ebf9b27419dbfc","sha256":"a5b134ceb0cd13ce9c89ebc7949b0fa27b454d895879a167dcccb3ad656da1d1","sha512":"a63b4fca1eb4f190fc754e6b0a349472597d81e77d369589f5e745b12c5a24c4d96c23d12b57b963096e03dbf3c5400dd0957557234958fb8c416923995fa8b3","ssdeep":"","tlshash":"f351f776b73f3b8a94f5ca57b1467066ae2d49ef10369d30803a3f96092430c94b52fa","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.368822Z","times_seen":47,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/fserver/files/gb/1003/floatImage/206/1599154415700.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /fserver/files/gb/1003/floatImage/206/1599154415700.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Nov 2022 04:11:29 GMT\r\ncontent-encoding: gzip\r\netag: W/\"637705f1-9ecd\"\r\ndate: Mon, 02 Feb 2026 05:44:18 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 05 Feb 2026 05:44:18 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 30813\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 6726723937728639669\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40653,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (40652)","md5":"adfb035656d7f6c70056afc3e2093a48","sha1":"afa7fcdc9a1d268f2c1f2e0d23c73315b671476b","sha256":"2d51c5c8809f6912c42f9053f47e7013daafa72cd3d613f05bfbb9ad3e3c07c1","sha512":"4ce161f1a0a955fe5838d6d2250c1104156ef5cf1f33e33cadf15a81ca81a3555ba9b9bf066d737e2d027038699d23fce7e787458981d0696c882cbed14ce7c9","ssdeep":"768:2ab3XpZsgVL1p96DAmvp71lyhbAvLZCxNstuiqPb5WlpnxaRBg:2ab3XD3xsAopSxAtCxNs0PiaRBg","tlshash":"2003f216f36b1d0612cd6e79f7cf845e2c769686523a1a1bb032b3174c1aff064f458a","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.420126Z","times_seen":46,"resource_available":false,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 26 Jun 2024 06:30:20 GMT\r\netag: \"667bb57c-e3\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 227\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17654469493259130145\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"77546ee8bcab279aee067f7794d08541","sha1":"e1ace21ee1e968151b5b0ad8da4b0ebf8420bdcf","sha256":"9f967376ac77e445b313fbebbab9a4572c0984edb80f6b5baa9c10f9bf68d647","sha512":"d56ff9fcf76a2153287b4b016b7e59f40c60859b36ac5d12bc96a43237a828cfcd4c0b5de142dbf178ebccef9092c3ae167ea7e3a59d359f50db78df36263b21","ssdeep":"","tlshash":"09d097310605283062ce68013802d1000e222b8f52a760407ff86023581b3c88a9a3c0","first_seen":"2024-09-24T19:10:13Z","last_seen":"2026-04-19T09:11:38.371429Z","times_seen":1881,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/input_bg.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/input_bg.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-c41\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 2110\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 12474934297493826648\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3137,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5e856841a4674936e0efd8ca64f6a7b0","sha1":"ea5d402d087a9f5a9e059de177ebf9b27419dbfc","sha256":"a5b134ceb0cd13ce9c89ebc7949b0fa27b454d895879a167dcccb3ad656da1d1","sha512":"a63b4fca1eb4f190fc754e6b0a349472597d81e77d369589f5e745b12c5a24c4d96c23d12b57b963096e03dbf3c5400dd0957557234958fb8c416923995fa8b3","ssdeep":"","tlshash":"f351f776b73f3b8a94f5ca57b1467066ae2d49ef10369d30803a3f96092430c94b52fa","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.368822Z","times_seen":47,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 9313201549773604528\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 651374858397962358\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":827,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/fserver/files/gb/1003/floatImage/205/1599154486231.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /fserver/files/gb/1003/floatImage/205/1599154486231.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Nov 2022 04:11:28 GMT\r\ncontent-encoding: gzip\r\netag: W/\"637705f0-51a5\"\r\ndate: Mon, 02 Feb 2026 05:44:18 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 05 Feb 2026 05:44:18 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 15706\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17202174491061513200\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20901,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (20900)","md5":"d2ea6e052a456cb106f629e0c7f26698","sha1":"1bae777df3c65f8c8406b88f32e53238ff07df37","sha256":"32ab195027f9ac2d3f325698a740049bc9a0ec338d1b8199c535d7c632a225e7","sha512":"f05e492fa39396b6e52b7f02601b99f824db02f6a37cc527cfd0eb735a435653a1d45bb66b5d4adab6a9a20f174f99ab1feecdb5669fe6535970838df43d9b30","ssdeep":"384:s9cDj/V754fF9zPNB8vw8qzJu/RLZCkeGheJ9Eb817CQU1cqXc3QIrG:iaj/VK9jNIwdULderJ9Eb27qoG","tlshash":"1d92e0232fdd5dab00714e0a77b83f255a3e2d26f0051b75ed2836520a4ee7782f4a85","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.385536Z","times_seen":46,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/images/game_pic03.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/game_pic03.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-6d91\"\r\ndate: Mon, 09 Feb 2026 04:37:45 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 12 Feb 2026 04:37:45 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 21094\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 427930337147133822\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28049,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"8192d83c3777b7b4b56042df49810283","sha1":"2aca57f95f0cb953261973aa61237d97f5733225","sha256":"2f33f47b872eb629528f2cf448461a93930692fedf3514bceb27a6cf5f30cc7b","sha512":"6e17c180c3115c987df154af3d32de20ae4cd2b03a0ff7405274ce957b9e61ebaf3fb3effbf4f3c276b2d641e9427b4c6773ef8c190dc14054c2b377f6e2a7ef","ssdeep":"768:cMptuSqdEKFTVgJIUmuA1C3tPhcfWtjQDQ4M:cMptuSqdfFpg+umbOK8L","tlshash":"e7c2e211a8df39cf91ca5de0ba134491b467e6ac12349c390fee72ea6487e5450e7cc4","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.398777Z","times_seen":463,"resource_available":false,"data":null}},"time_used":990,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":989,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/headerInfo.html?t=mo5ejx4q","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /headerInfo.html?t=mo5ejx4q HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nCookie: sticket=akUwTFdKbE5qRXlPR; route=44d17259ab44b1b54887077d522d7137\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Sun, 19 Apr 2026 06:46:01 GMT\r\nout-line: gb-cdn-010\r\nsub-sys: msite\r\nuuid: 01003-01-00000000-1776581161862c\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 116\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":127,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"8a2b825eaefced272c7f578d5d86e1ef","sha1":"52699d4952da3feba6a0ff2063d023da35c23c98","sha256":"e50bb91bc41f44602f59081593b1d2ffdab99b248b7633cc8b915f6e19a39a8f","sha512":"3b1a76a050d7a1f3771d5bfa07f8223c169f134bed35a5b04e957275ad77a6612ef138f3179bf805dcdf2d80d362b09a3c9453c6cb2bbc022f2045243ff0ffbe","ssdeep":"","tlshash":"1ab09238261adeaea887a651c280069442190919f6c7ba0ee2bc960929ca6f99127617","first_seen":"2026-04-19T06:46:39.28643Z","last_seen":"2026-04-19T06:46:39.28643Z","times_seen":1,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-1208c\"\r\ndate: Sat, 18 Apr 2026 09:05:40 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 21 Apr 2026 09:05:40 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 56211\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 13927863377386206212\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73868,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"8578626b45164e503428d8ecbef1c819","sha1":"b27c3cb92c516a269f4200a48b851075bc575ee2","sha256":"45cab7ed8432f5be7d1541283109f884467ee14cdf72a5b4ed46e17152b982f4","sha512":"ce343616dbefb2d54483a22a03cafcb2938f3fb348f864f2a17b8d1e3fec6d61b512ac49c06ae836c0df5a91a056caddc36db0828273294486f7d36947cf872f","ssdeep":"1536:bgbqfFJ1ARyDOz0Z+Rjm5X4SQYIbpsCeaYxr3exoVPCa3iPr1:EbqfFXARyDOocRWovYKiCoxrkoVKtPr1","tlshash":"3d7302f90e12e4e5e7b5230d4811b19ab9d4dc7e64c334832a97042f9462a0f876c9fb","first_seen":"2026-04-18T12:10:13.86413Z","last_seen":"2026-04-19T09:11:38.377052Z","times_seen":7,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 11550862894071202960\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/navli.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/navli.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\netag: \"6434c9cb-271\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 625\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 1997902100427653683\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":625,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7cb32677e20110fc24ac0ed83ab9dc93","sha1":"11bb8187c64139bf535d82b3e69ac4dda28c882c","sha256":"5dc39cc58aa2473d9803451419d14086f6d501a0d3ea6fa520b8d0ff3e55c6f7","sha512":"fd3ced3df06b89c21b3702f7d8c5a0fee59b93bc67c46b84bef0cd1f6347c31ea02a82730a08455bbd2739fce1240b8b8eafbd397d5327a39fde2719b66f73bf","ssdeep":"","tlshash":"a6f002f14216ace411fc51b4971945930e762d0824481f85edc485aa01c05f394a691b","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.369299Z","times_seen":443,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":639,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/bar.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/bar.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-f6c\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 3031\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 11666862168692556807\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3948,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ec831b5d5560d9efad210c4142e01307","sha1":"d0f627fbc33b8d3e596b5fe2dedd2f40b7c36814","sha256":"4426e90c1b6462c16b6f2b9f54ed06d3b1c43b6c64f0ef7022a29aa2ff447e11","sha512":"3117995321dd41b3683756518ecc98163f5e695f97980ff89045484d24516434418e835fe1dc203dfb656934208ba68e44d3d17923da2a913c1909a8691f9044","ssdeep":"","tlshash":"88817d2147d3a9ec21d18bdbe367b190bd223e5ff00c39792bde0241e6a404311d2ea6","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362655Z","times_seen":438,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/service03.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/service03.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-1e04\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 5890\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 5127388181675845142\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7684,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"640b3c2c2494d223e659abd537d00790","sha1":"dc52770e42a35dc84bc7b43386e4940807ae0ee2","sha256":"dc88f3e1cbe3e6b29b6b4f67be213604df634322f901af6da539f9bb3cf29bfe","sha512":"6772af292c571fefd28016312a1ac90c7db853a7b8601ebc64e0090f0795c19a0d20a4571bfc64224e1f8d3a12a5a3cc7f79a8381bc087881ea34b5c0d1b121e","ssdeep":"192:adq9ZswFL9z9EKi3cKDSo7Xucxv5b9Dy++DR9tvk0:hVFLNTlcd7Vvh9DsvT","tlshash":"2cf19f1d13b235fc49d5abefd2a281d10c55fb9bf60c69a327e729419350106a242ee3","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.378204Z","times_seen":437,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 4423690712319815795\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 5811480432919533341\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/moment.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/js/moment.js HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 18 Jul 2023 06:40:10 GMT\r\ncontent-encoding: gzip\r\netag: W/\"64b633ca-1cab9\"\r\ndate: Thu, 19 Feb 2026 09:07:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sun, 22 Feb 2026 09:07:48 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 11733\r\ncontent-length: 26968\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 13231603565618168934\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117433,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"36c8f828395a9395549bd6e7307cb7e9","sha1":"f30a4961558e2d3d4405e7d93aa28fdb63245e78","sha256":"5d5e32fa1e06a0bc9396f349d142ad248e82086543e438c890e43f41e692db33","sha512":"40c24a9011e1bbdd98bd95b341c400bdaf48fefd953fcb407368fe3c685ac09196b55e230c03ca9890c35fe9acef2c916bed52423dc1a7b532a1db9817c03a8e","ssdeep":"1536:qOL1yBkBeb9wNoHpH7tjl2Ulwjwaj2BH3fMobEKeYEoZYiMirUw0:qOCWeH70R2BkobE+cw0","tlshash":"aeb35f5a59e31023496362294fdf2011ba388123590dee487d8da3d49f9ed7c47bafec","first_seen":"2023-07-29T10:21:40Z","last_seen":"2026-04-19T08:49:21.147308Z","times_seen":12058,"resource_available":true,"data":null}},"time_used":2364,"timings":{"blocked":1571,"dns":0,"connect":0,"send":0,"wait":542,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/navli.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/navli.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\netag: \"6434c9cb-271\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 625\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 16818092419394184962\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":625,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7cb32677e20110fc24ac0ed83ab9dc93","sha1":"11bb8187c64139bf535d82b3e69ac4dda28c882c","sha256":"5dc39cc58aa2473d9803451419d14086f6d501a0d3ea6fa520b8d0ff3e55c6f7","sha512":"fd3ced3df06b89c21b3702f7d8c5a0fee59b93bc67c46b84bef0cd1f6347c31ea02a82730a08455bbd2739fce1240b8b8eafbd397d5327a39fde2719b66f73bf","ssdeep":"","tlshash":"a6f002f14216ace411fc51b4971945930e762d0824481f85edc485aa01c05f394a691b","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.369299Z","times_seen":443,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/bar.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/bar.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-f6c\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 3031\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 15206087804162840695\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3948,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ec831b5d5560d9efad210c4142e01307","sha1":"d0f627fbc33b8d3e596b5fe2dedd2f40b7c36814","sha256":"4426e90c1b6462c16b6f2b9f54ed06d3b1c43b6c64f0ef7022a29aa2ff447e11","sha512":"3117995321dd41b3683756518ecc98163f5e695f97980ff89045484d24516434418e835fe1dc203dfb656934208ba68e44d3d17923da2a913c1909a8691f9044","ssdeep":"","tlshash":"88817d2147d3a9ec21d18bdbe367b190bd223e5ff00c39792bde0241e6a404311d2ea6","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362655Z","times_seen":438,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 7346315255806713362\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/fserver/files/gb/1003/floatImage/212/1554000343642.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /fserver/files/gb/1003/floatImage/212/1554000343642.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Nov 2022 04:11:29 GMT\r\netag: \"637705f1-19f\"\r\ndate: Mon, 02 Feb 2026 05:44:19 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nexpires: Thu, 05 Feb 2026 05:44:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 415\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 7505606357790148538\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":415,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (414)","md5":"8333f4c62175d853d220afd4f3d34eec","sha1":"0341611c12d7baaa1abfb6ed29ceec14708491a8","sha256":"3bcea6a5f5c23242923ef3c2ca2aa36589b3bc3b1a1392d21194a04e8f3bce22","sha512":"f1793b0d4f5bccab7bcfc74c1f95bc7b3e01175dc997e2dc5373ce7ef662debb849e3a4f924adc551e06e8fca7dec5055bb58cbb78c9bec34b34a7febe0c3c72","ssdeep":"","tlshash":"c9e0ab78b274dfb3665b0389340ee6b4ac07458d61ad480a99cca211c0e1128406fec4","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.413562Z","times_seen":46,"resource_available":false,"data":null}},"time_used":839,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":838,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/fserver/files/gb/1003/floatImage/206/1599154415180.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /fserver/files/gb/1003/floatImage/206/1599154415180.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Nov 2022 04:11:29 GMT\r\ncontent-encoding: gzip\r\netag: W/\"637705f1-2a7b\"\r\ndate: Mon, 02 Feb 2026 05:44:19 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 05 Feb 2026 05:44:19 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 8183\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 6916387151180603129\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10875,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (10874)","md5":"62c2c6da1a9d1be770d62808491c4976","sha1":"e7d087dc9385bbeec5386828e3d1062aeceef5e6","sha256":"10b522ea709f99e249d69e779a489d622bd47332c065fe59dda7291c9c4d15c3","sha512":"35211e4639617d87df39383bfa0edcbefc2a975805b8c7b076ff83dc5dee26976af6fb1a0348fbac434921d203c3793ac45b1bed64ef3e0a718491e18b188e59","ssdeep":"192:R9Mc+hDeCARVBzVBcJ9VGOf2cnOzBYI1fdukPIb+7cyzSH3DBAvbWuNPaG+ll1ZQ:P9cDBmV/BoVPucNI1dTO+7cymdAjPkG3","tlshash":"e022bf0a74e73f0c47a7352cd7169f18aa3992ce1e8d6a124c7e38214ca776d94316fc","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.375371Z","times_seen":46,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/images/game_pic01.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/game_pic01.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-5ce9\"\r\ndate: Mon, 09 Feb 2026 04:37:45 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 12 Feb 2026 04:37:45 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 17873\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17487384099976037298\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23785,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"b41dea45750c7adad88596bdb06332b5","sha1":"8a69c192d7f5b7f3b97cf96a648c6e5edf9ba92a","sha256":"31c295d42f36215e33c7a46254da9a897c949d52ba76020509efb1a91d63b6b3","sha512":"ae808f17b2cc5041e2fe3722576f4c2c25930d78c954894e5a60ec3ac3c40b8b82a662e5992b795b4a9a1c8d68bf695845d000dc486f6923f315b23b95d00001","ssdeep":"384:ysvnt7ZAaO5OQ6FSsOdiET2/mi9/sl6CkJYGIQtRRIecOEOTiW8CL1OzrUYHmp:yg/AaOV64sOz2TRsUgGIQtRR7cW31krK","tlshash":"03b2e1064b906fd6dd8904ddc273e0966ad4d3810df277aa87a3b4a8c4c5a5257bccf2","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.391531Z","times_seen":463,"resource_available":false,"data":null}},"time_used":1006,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl//commonPage/themes/images/hongbao/icon-close-1.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl//commonPage/themes/images/hongbao/icon-close-1.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 07 Aug 2024 04:00:08 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66b2f148-2023\"\r\ndate: Wed, 21 Jan 2026 07:57:39 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 24 Jan 2026 07:57:39 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 6277\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10557287950549322830\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5ff41d2becd0689589fd8afb58c0913e","sha1":"9f463b57b27260b19c93d533046f893360933d76","sha256":"7f97dfd7455fb76be00f454b95e3b28c114f9164b49a504bf34200da41d9db8d","sha512":"d502dc1bf29166726ba9183c01efa1b698dcbf22d79de614a4772b4150add3f308d597732844c9febef77b1d85568604b729f2c16e4c66f2f86b0b724fdb4d72","ssdeep":"192:JkkBHNqwnjSJuxF1drKn9K79LDQXFj4NLaYQ7ar/:rBHI8BHkn9Kx4+LhQ7ar/","tlshash":"4d02bf013bd42b6a1dbb10d3f1684da88c83819232f43d99371fef7b658812c6253a68","first_seen":"2024-08-07T18:17:10Z","last_seen":"2026-04-19T09:11:38.403611Z","times_seen":4177,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/input_bg.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/input_bg.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-c41\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 2110\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 5078444641231999945\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3137,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5e856841a4674936e0efd8ca64f6a7b0","sha1":"ea5d402d087a9f5a9e059de177ebf9b27419dbfc","sha256":"a5b134ceb0cd13ce9c89ebc7949b0fa27b454d895879a167dcccb3ad656da1d1","sha512":"a63b4fca1eb4f190fc754e6b0a349472597d81e77d369589f5e745b12c5a24c4d96c23d12b57b963096e03dbf3c5400dd0957557234958fb8c416923995fa8b3","ssdeep":"","tlshash":"f351f776b73f3b8a94f5ca57b1467066ae2d49ef10369d30803a3f96092430c94b52fa","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.368822Z","times_seen":47,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/navli.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/navli.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\netag: \"6434c9cb-271\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 625\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 12790043825712068840\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":625,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7cb32677e20110fc24ac0ed83ab9dc93","sha1":"11bb8187c64139bf535d82b3e69ac4dda28c882c","sha256":"5dc39cc58aa2473d9803451419d14086f6d501a0d3ea6fa520b8d0ff3e55c6f7","sha512":"fd3ced3df06b89c21b3702f7d8c5a0fee59b93bc67c46b84bef0cd1f6347c31ea02a82730a08455bbd2739fce1240b8b8eafbd397d5327a39fde2719b66f73bf","ssdeep":"","tlshash":"a6f002f14216ace411fc51b4971945930e762d0824481f85edc485aa01c05f394a691b","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.369299Z","times_seen":443,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/bar.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/bar.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-f6c\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 3031\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 12370310570297648035\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3948,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ec831b5d5560d9efad210c4142e01307","sha1":"d0f627fbc33b8d3e596b5fe2dedd2f40b7c36814","sha256":"4426e90c1b6462c16b6f2b9f54ed06d3b1c43b6c64f0ef7022a29aa2ff447e11","sha512":"3117995321dd41b3683756518ecc98163f5e695f97980ff89045484d24516434418e835fe1dc203dfb656934208ba68e44d3d17923da2a913c1909a8691f9044","ssdeep":"","tlshash":"88817d2147d3a9ec21d18bdbe367b190bd223e5ff00c39792bde0241e6a404311d2ea6","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362655Z","times_seen":438,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 18048984577548674661\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/navli.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/navli.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\netag: \"6434c9cb-271\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 625\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 1992521855817500852\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":625,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7cb32677e20110fc24ac0ed83ab9dc93","sha1":"11bb8187c64139bf535d82b3e69ac4dda28c882c","sha256":"5dc39cc58aa2473d9803451419d14086f6d501a0d3ea6fa520b8d0ff3e55c6f7","sha512":"fd3ced3df06b89c21b3702f7d8c5a0fee59b93bc67c46b84bef0cd1f6347c31ea02a82730a08455bbd2739fce1240b8b8eafbd397d5327a39fde2719b66f73bf","ssdeep":"","tlshash":"a6f002f14216ace411fc51b4971945930e762d0824481f85edc485aa01c05f394a691b","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.369299Z","times_seen":443,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":635,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/bar.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/bar.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-f6c\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 3031\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 15915991586511146445\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3948,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ec831b5d5560d9efad210c4142e01307","sha1":"d0f627fbc33b8d3e596b5fe2dedd2f40b7c36814","sha256":"4426e90c1b6462c16b6f2b9f54ed06d3b1c43b6c64f0ef7022a29aa2ff447e11","sha512":"3117995321dd41b3683756518ecc98163f5e695f97980ff89045484d24516434418e835fe1dc203dfb656934208ba68e44d3d17923da2a913c1909a8691f9044","ssdeep":"","tlshash":"88817d2147d3a9ec21d18bdbe367b190bd223e5ff00c39792bde0241e6a404311d2ea6","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362655Z","times_seen":438,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/theme/default/layer.css?v=3.1.0","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/js/theme/default/layer.css?v=3.1.0 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 03 Sep 2021 08:10:10 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6131d862-48e4\"\r\ndate: Sat, 31 Jan 2026 05:03:53 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 03 Feb 2026 05:03:53 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 11733\r\ncontent-length: 3111\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 18003062545379465796\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18660,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5cf9259b7dd27aacd46161ec23d261cf","sha1":"ba0c399616a5ae9cdd8aec5b76ba4aae4822367c","sha256":"7f73a66b3a9a38576d124b6243a8984d795028e3493b8fa3f688d8dbe10cbccc","sha512":"834ae73090b76f7dad48a5efa850a0009d5104cfcab402b7c343ceb49410584c3a60a4eea800d366f380dc8364f5f00e3d38101c379fd5fa19f9492781d9ada1","ssdeep":"192:99OUf4PBsPIOpyNYpyBVpkgdpkqg60yQG0yrGlwSlyDXLIXiYHIli5aT6XeFTfb1:C4CyFP/FgkFxUE6QS","tlshash":"b7821de599a31584751b8214dbee267232f85c83e40fcc6cf7df354f4f086a592a1a4b","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.238681Z","times_seen":12291,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/navli.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/navli.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\netag: \"6434c9cb-271\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 625\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 7653337256761696084\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":625,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7cb32677e20110fc24ac0ed83ab9dc93","sha1":"11bb8187c64139bf535d82b3e69ac4dda28c882c","sha256":"5dc39cc58aa2473d9803451419d14086f6d501a0d3ea6fa520b8d0ff3e55c6f7","sha512":"fd3ced3df06b89c21b3702f7d8c5a0fee59b93bc67c46b84bef0cd1f6347c31ea02a82730a08455bbd2739fce1240b8b8eafbd397d5327a39fde2719b66f73bf","ssdeep":"","tlshash":"a6f002f14216ace411fc51b4971945930e762d0824481f85edc485aa01c05f394a691b","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.369299Z","times_seen":443,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/images/favicon/favicon_1003.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_1003.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 05 Dec 2022 08:15:08 GMT\r\ncontent-encoding: gzip\r\netag: W/\"638da88c-163e\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 4241\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 13768099270718277924\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5694,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7773fd6e42ab9a135bd4a032bca831e9","sha1":"0d8ba56f4710ff235ca14a92eb73ff68bb5fcb90","sha256":"bfa740c9d0f5b265d085355df31094294f76fa8c183f2d56018856b4799271c2","sha512":"70195012bff7e7538bc53ffd22b323c6caee44509472ea490e989a2307edd4a1f4e033d8470b575164ace9e5ae80127445eeb7171b6534f0086225044794bf2f","ssdeep":"96:pMSUAv4W3hSodYGY8DuAkKhAl0Njxe1m7UlZNvkZAQs0KFa3HBBau1vRz4Q/:p0W3hrYGrDuAkKQ6oZyKIBLNR8Q/","tlshash":"dcc1af61347b721c71389e0ce3b1df773e3f46641848241c26abb65b841539ce588b88","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.369827Z","times_seen":47,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":817,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/game_title01.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/game_title01.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-1de0\"\r\ndate: Mon, 09 Feb 2026 04:09:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 12 Feb 2026 04:09:54 GMT\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 8748\r\ncontent-length: 5861\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 11192142622572753700\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7648,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"281e4af43ab8a2b8293dff5a8dfa34a0","sha1":"b1b75ee403c076b83fab3ddb00112e1b2ce1ec5b","sha256":"3bd37dbb1fe5072779dc30c9721115e9bcddb81f0c37a55e8a05e351c80dc5db","sha512":"5c586a971986cca8a2e3a838e6566c65df55a62727be7ca6dfb99a7d874319c674c1dd1ffce5f8f3c8cc0afde0c4c6ef379f9d05afcbf9c4a27fd528d7169b19","ssdeep":"192:HIRjI5xJsRSwFKVupTirbmSZyaW7I0Mg+zVwpLn16kAK:sI7GTpT6b5d0QzVOnUkAK","tlshash":"67f1af55e4e325a6d45f40f596745e23e2790134388c95380fcfaaadfc43e1d472b849","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.396515Z","times_seen":517,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/input_bg.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/input_bg.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-c41\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 2110\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 15843166653765102588\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3137,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5e856841a4674936e0efd8ca64f6a7b0","sha1":"ea5d402d087a9f5a9e059de177ebf9b27419dbfc","sha256":"a5b134ceb0cd13ce9c89ebc7949b0fa27b454d895879a167dcccb3ad656da1d1","sha512":"a63b4fca1eb4f190fc754e6b0a349472597d81e77d369589f5e745b12c5a24c4d96c23d12b57b963096e03dbf3c5400dd0957557234958fb8c416923995fa8b3","ssdeep":"","tlshash":"f351f776b73f3b8a94f5ca57b1467066ae2d49ef10369d30803a3f96092430c94b52fa","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.368822Z","times_seen":47,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/ftl/bet365-1003_02/images/iframe/logo.html","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:03.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/iframe/logo.html HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nCookie: sticket=akUwTFdKbE5qRXlPR; route=a1a97600d4111120168c5ba2bb9e992f\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=259200\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 19 Apr 2026 06:46:03 GMT\r\netag: W/\"62df60eb-1f26f\"\r\nexpires: Wed, 22 Apr 2026 06:46:03 GMT\r\nlast-modified: Tue, 26 Jul 2022 03:35:07 GMT\r\nout-line: gb-cdn-010\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":127599,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65522), with no line terminators","md5":"789bae736f4131950a96d1151ae50ecd","sha1":"beae5ae06cb362eab2ca95e5b088900182bc9b2b","sha256":"fa7c557aa6cdd5f9208221df8b1e5c6313c9640526fa8313d842e3063eacfcf6","sha512":"88040c81f1b25ae615a839b3f266d35462857805975e4caaf5094d5083756432cff617b14da8530a696079787040b113125e6deba029c50c193ee7d55b16a89c","ssdeep":"1536:/Skw0KhT+yh7QQZymYypp6qCfMJZwQ3ik+iVOYbVZppNxPTg5f/piO57ZzfTaGR0:TKhlvZyKcWL5+gOY5Zp8BdYHMdIMyRw4","tlshash":"73c318398640226ff8015fd738a3207398ea8eadcba4c54483e5ed5ce8670e9d53f653","first_seen":"2025-08-09T11:18:35.097017Z","last_seen":"2026-04-19T09:11:38.405059Z","times_seen":37,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/061410/rcenter/common/static/js/gb.validation.min.js?v=1776067717568","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /061410/rcenter/common/static/js/gb.validation.min.js?v=1776067717568 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 05 Oct 2022 09:40:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"633d510e-7fd7\"\r\ndate: Sun, 19 Apr 2026 06:32:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Wed, 22 Apr 2026 06:32:20 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 819\r\ncontent-length: 5207\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 1526669088201407793\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32727,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (801)","md5":"a55780dc13cbf1a8d375f14ebb659cf2","sha1":"9548cc269bcde0dc48e166fa6bab37af8a649e57","sha256":"35d147a863ab8828e073ca1ae89d476a9cede797c410ac555597c1f442452cc8","sha512":"3514366118d038da9131739e4557dc5fd92b8b7d3a27af00a7c2d8f4cfd49f4932991cba899fcc8171ac59eb356b25e717494225912f37d65600305ce2d3ace9","ssdeep":"768:WqBveMjZ1oE/eL8hhMjm9a1hI4vhej4pZ:Xpo5GhMjm9a1hI4vheUpZ","tlshash":"cee231166b7701e2916b71e10e4f9a083174952b5a87ce08bdac92e09f18d787373ff8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.203956Z","times_seen":12289,"resource_available":true,"data":null}},"time_used":2133,"timings":{"blocked":1568,"dns":0,"connect":0,"send":0,"wait":542,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/images/partner/partner-hongtu-gray.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-gray.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-1a367\"\r\ndate: Fri, 17 Apr 2026 09:21:39 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Mon, 20 Apr 2026 09:21:39 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 81466\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17144645996820367097\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":107367,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"b807b2672b473c5cb06ea03b36e8d79f","sha1":"e9c24836d874e859960c8538e078b044ab174291","sha256":"050ee085405728fc8a13b9767f00a5d6eaa74d938e9442837a69f1bbc1fe3bd6","sha512":"72d8272e96375aeee464cc0c4bfe6b4dca9617893df92031fe1cee43030071dfb84bdaa4b8e9349b205018ed632c5caaa1c68ded87cbe846ddee6637e9105a08","ssdeep":"3072:hndfBAiyz0AIveFWNZxDYczimd5k+qtL69:hnnAi4ENZxDYc+8h","tlshash":"11a30280349a4f79ad79378e631b4e272fce4aa2d692d1df028eb0314875876b3cd574","first_seen":"2026-04-17T09:22:00.74166Z","last_seen":"2026-04-19T09:11:38.423401Z","times_seen":223,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/images/icon_cooperation01.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/icon_cooperation01.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-1b0a\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 5309\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 14969134069695665592\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6922,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7bab6e674241807ac4d0915ae22bb147","sha1":"508ad9c932d72d32d8fa9d951fd25523d3eaf550","sha256":"23454c06e6a861d8c325639e9f2c0441979f53be6078d67f439c8c04cabd934c","sha512":"da489e679da060bad02ed3cb58d78c135310ecd935890943842b37f329e9e7acfa551961a2e4f3e6139f97c6294dd1dce856871bf76a5a04c6be735aeb49a2b6","ssdeep":"192:Yidq9ZswFL9z9EKi3cKDSo7XucxubyrWAeFqJVsPg:YZVFLNTlcd7VuOrWARMg","tlshash":"6ce18d0585d36cdc33865febd273d0d0ae12bedaba741bb94e49aa10c5a340717a0964","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.377569Z","times_seen":452,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/images/icon_cooperation02.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/icon_cooperation02.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2b3c\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 8332\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 9869680581537555076\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11068,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"9cdaeff71445b02a2c756e325900b758","sha1":"0770172a35e6372af9bb85ae7f04719c43ba74b4","sha256":"a5045919497ff2d63b46b3755412664fe130352385c323b41299d514c437908d","sha512":"e1e0c887ee5c412bd6854e62caf4124d366e4e58134eaedcbd4ce8e84a80d73ac02d1cce3d48a1f1d4d0d171dc567083e02e2303c8c03ea02662faab5f3827b5","ssdeep":"192:2I0LJdVVjYvjsONr6Q0JQwY4BNbDp95jbkAE5jEhz++CKfe4xu2HdwQSOPR:23Lz/YvwKrdNwY4Bt5vDmEJ+TKGLaA4R","tlshash":"a132cf2eb11b3c382a53cd1391c753610cab0f231a76057ea4e338a772947ec4499bde","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.4031Z","times_seen":47,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/images/footer_title01.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/footer_title01.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-21a0\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 6593\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 11663491307014470751\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8608,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"74625fe17c67a30922313bf2562cb479","sha1":"1b769e3e3aaaf1774d3da6cde72ef7a8ef0ccad9","sha256":"2ec6c351758cabf9ef12592488e1d1c41b78079c583199b7c5e5ba4fba4f60ea","sha512":"2ffa801b3561915772ba646800f20a9c5b1b7f91f2051180feb013a393eed23401ae471f307e9dd787e2f20c9de17db1fa5d5434e9df31a590263cf197dffad1","ssdeep":"192:Fdq9ZswFL9z9EKi3cKDSo7XucxU1cVTCYEERIIqk0JiBNeqZJfRcpG1:CVFLNTlcd7VUyTZztnIirpJfRe+","tlshash":"0902af1d047239ed1cd683e3e77af9d42c633a2bf02d3a784adf7144a2a4002d8d2d99","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.394517Z","times_seen":448,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/service01.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/service01.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-1b23\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 5329\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 1534179085642901892\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6947,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"65ae00add0b631b23c79ba99a3344d61","sha1":"62681ef5e6782a1ebf1ad5e8a777dc2cd79d073b","sha256":"de0806c2c2672cc8cebb41e4bdd9b1f519588f410d7e28413a5902ac36f476e2","sha512":"40669b3fb7c7a8c133d194ee73764ab4f9b51f6432fa0b919740d93ea2755f78cf03e9e994d11546c23b5debc0714a2f8088221837537721d09a13d98e4f6e1d","ssdeep":"192:wdq9ZswFL9z9EKi3cKDSo7XucxI08oAdTFR98GZGh9jYFVTO/M:jVFLNTlcd7VIaAX7zWjYFo/M","tlshash":"f8e18e155ba37edc60e11f77f297e1927d62b609700c3e7d6f8d4605d1530423262eda","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.373945Z","times_seen":438,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":626,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 987535714208243230\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/game_title02_h.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/game_title02_h.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-12bf\"\r\ndate: Mon, 09 Feb 2026 04:37:45 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 12 Feb 2026 04:37:45 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 3704\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 2459239915838027797\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4799,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"46affeaefd6710b0d14fc35a0d4e849f","sha1":"dc529c8aa217b90fe9afce4da054fe18c10f6f88","sha256":"44904ce86856d58d56068e67c28ae5e33a271821ce0cd24f4307a495754d4e12","sha512":"7d2f30ac121b87f14a52852f5ea891c474d5bd6e4699fc80cb99f1f846303f2de5b00a9d035485f67bbc4e2c9d5ab6084447ddba44e7fe6cc680321db7da6c3c","ssdeep":"96:H67E558jhVcvRBrKBaiqxWesDsieD82oSEXFKRvupiyW/+AWPMpnjt0f04V:HIRjI5xJsRSwFKVupTiXnA0s","tlshash":"90a16c3690d3266ef60f85d2b2266102d5b7063c596b91ac77ded8e4b812d2cb57b08c","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.413232Z","times_seen":457,"resource_available":false,"data":null}},"time_used":858,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":857,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/bar.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/bar.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-f6c\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 3031\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 1260460206909242468\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3948,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ec831b5d5560d9efad210c4142e01307","sha1":"d0f627fbc33b8d3e596b5fe2dedd2f40b7c36814","sha256":"4426e90c1b6462c16b6f2b9f54ed06d3b1c43b6c64f0ef7022a29aa2ff447e11","sha512":"3117995321dd41b3683756518ecc98163f5e695f97980ff89045484d24516434418e835fe1dc203dfb656934208ba68e44d3d17923da2a913c1909a8691f9044","ssdeep":"","tlshash":"88817d2147d3a9ec21d18bdbe367b190bd223e5ff00c39792bde0241e6a404311d2ea6","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362655Z","times_seen":438,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/ftl/commonPage/themes/gui-base.css","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /ftl/commonPage/themes/gui-base.css HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 19 Apr 2026 06:45:57 GMT\r\netag: W/\"69e1de10-146d6\"\r\nexpires: Wed, 22 Apr 2026 06:45:57 GMT\r\nlast-modified: Fri, 17 Apr 2026 07:15:28 GMT\r\nout-line: gb-cdn-010\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83670,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (12023)","md5":"f9ad6345320a5422bebc8c39cc45f5f8","sha1":"dbc3c3d532b57810d81f03c65bd70bfc55fe8b95","sha256":"808f359b2e97c287b17b97dc979e4643bd171fff7fa3a03121233cab11d92b6f","sha512":"6dfede3200927bd784aac5538389b29f710168271cc738e9a92c1851ddf3cdc7d95db1b8ad536df08dcd6ac42420cb11109680f470cfe949addd4cd985df3807","ssdeep":"1536:hh/EEJVfpLdXYSv4H1Y7B/Daf4ZxnVXCg9bI:VXYSvE+RVXW","tlshash":"018385b2e15824e63373c856a381fbda2554b122c5134efdf89f655c8bc738612a2f6c","first_seen":"2026-04-17T08:17:14.604214Z","last_seen":"2026-04-19T09:11:38.370913Z","times_seen":247,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/commonPage/lan/i18n.js?t=1776581157.172","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /commonPage/lan/i18n.js?t=1776581157.172 HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 19 Apr 2026 06:45:57 GMT\r\nout-line: gb-cdn-010\r\nuuid: 01003-01-00000000-17765811570ecf\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 813\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1310,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1217)","md5":"ae45643bf587685ff88386dd7c864c15","sha1":"683bd7e17404d8ac7f7445c4dbd6a0839e7998b2","sha256":"2da2eaff4f4d9c790cebb662e4b42eec955c82d32c329c9e3317e969cef7af18","sha512":"dbc41a99a81d2d0b43482a48c499c870bbcd6408e30d29780d23fc4178dce98cd818099eec7deb0d2453e35785e5aaf8e1d3f4f923e0c73ac54c76b06dfbfb1d","ssdeep":"","tlshash":"5c21f158f6e061d32d5e8aa3eda13f6f1575097d00973503437831ce1179ba79c6c408","first_seen":"2026-04-19T06:46:39.295388Z","last_seen":"2026-04-19T06:46:39.295388Z","times_seen":1,"resource_available":true,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 26 Jun 2024 06:30:20 GMT\r\netag: \"667bb57c-e3\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 227\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 12228740489718207204\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"77546ee8bcab279aee067f7794d08541","sha1":"e1ace21ee1e968151b5b0ad8da4b0ebf8420bdcf","sha256":"9f967376ac77e445b313fbebbab9a4572c0984edb80f6b5baa9c10f9bf68d647","sha512":"d56ff9fcf76a2153287b4b016b7e59f40c60859b36ac5d12bc96a43237a828cfcd4c0b5de142dbf178ebccef9092c3ae167ea7e3a59d359f50db78df36263b21","ssdeep":"","tlshash":"09d097310605283062ce68013802d1000e222b8f52a760407ff86023581b3c88a9a3c0","first_seen":"2024-09-24T19:10:13Z","last_seen":"2026-04-19T09:11:38.371429Z","times_seen":1881,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/images/pic_shangjia.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/pic_shangjia.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-1b5f\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 5370\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 6738683856801882926\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7007,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"9001f5f9ad228c037ce41c28d2ab7235","sha1":"8dd0639c93e54f33a4be31c7e17f8c65c0f4d611","sha256":"ca02567687f88b4f68568e33ab48ab44b3e56162351fe8e7f63862bc15d82933","sha512":"c150868f2352feb60fb59323969a9776d7426268257dd4baaafc79b7424605617cada281e080ffaf23886aa89ac0323f1f841906fbd11f2a2adc7cd52512b631","ssdeep":"192:adq9ZswFL9z9EKi3cKDSo7XucxxKQSwR8tbqiye7O:hVFLNTlcd7VxKHwRmLO","tlshash":"abe19f1227a3b6fd35e2c787f2bab15a3c547caba548163927dd2315d09800703d2ce9","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.430486Z","times_seen":447,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/notebg.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/notebg.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-18ac1\"\r\ndate: Mon, 02 Feb 2026 11:52:37 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:37 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 76819\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 11609332117078424766\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":101057,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"b3614a9988b8f8412382efe44e0ae5dc","sha1":"f826774406a3a44c4f1c959aa326e1248bc68dde","sha256":"65d2f1e55dde706650e411f4663f66f72bb21eb4bd54faa64c8bca115c7deaeb","sha512":"866dd85c4280fe00d82bf7c80f9e79d524d69ba582009171aa9d7611af8e61ca37c7bd7b0a786bbf337ea42fd08afe23912db785e40bed11db6f1d638ecc8298","ssdeep":"1536:wQdbNzIhnbFBwo96L1/th8VQ1tkc3yRZnf58t2NmcS1HkL1Amk5epe5XLWkcGPcO:t1wJA1gZnqtGS1Lb0I5nt/h","tlshash":"e8a30165d447eb649ae1a256a2f8b1f82ee01e7decc938f1036f7401ab0db14c02197f","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.387904Z","times_seen":446,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 6056119398564756061\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/input_bg.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/input_bg.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-c41\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 2110\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 2432674836918143671\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3137,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5e856841a4674936e0efd8ca64f6a7b0","sha1":"ea5d402d087a9f5a9e059de177ebf9b27419dbfc","sha256":"a5b134ceb0cd13ce9c89ebc7949b0fa27b454d895879a167dcccb3ad656da1d1","sha512":"a63b4fca1eb4f190fc754e6b0a349472597d81e77d369589f5e745b12c5a24c4d96c23d12b57b963096e03dbf3c5400dd0957557234958fb8c416923995fa8b3","ssdeep":"","tlshash":"f351f776b73f3b8a94f5ca57b1467066ae2d49ef10369d30803a3f96092430c94b52fa","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.368822Z","times_seen":47,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/style/common.css","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/style/common.css HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 31 May 2023 08:25:23 GMT\r\ncontent-encoding: gzip\r\netag: W/\"64770473-67dc\"\r\ndate: Sun, 05 Apr 2026 14:49:05 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Wed, 08 Apr 2026 14:49:05 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 5079\r\ncontent-length: 5977\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 12398458993491886718\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"ed8381d14f6b5647c4d4e8205db7a85a","sha1":"f69b0027b94e47f424e3b1b7f3f6f578b59420c6","sha256":"c592689097ecec05587156c2e03c687eecf331d0dd819bd65773e51813ccf85d","sha512":"9f66ced21a32d322dee964c9d4bda7910204905e7af3f9a952791c07e8ba5ee18d5a3bc890286f30bed72bf4d33d683a6a3a04749168b18da87a3ef6bedf990b","ssdeep":"384:t/uPvj1Xffmg4tIxBAk29xuVHQCQyrvQk81MfNSU:t/Sj8g4tKBAk29xuVBhvO1MfNSU","tlshash":"bac2b73ad251210eb1a7a6f5f8aad7d9032d9107e21636fd6ce9307dd18e7880173be4","first_seen":"2025-08-09T11:18:35.047966Z","last_seen":"2026-04-19T09:11:38.382856Z","times_seen":37,"resource_available":false,"data":null}},"time_used":3579,"timings":{"blocked":1616,"dns":1118,"connect":249,"send":0,"wait":296,"receive":17,"ssl":279},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-1208c\"\r\ndate: Sat, 18 Apr 2026 09:05:40 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 21 Apr 2026 09:05:40 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 56211\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 2884997457376969713\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73868,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"8578626b45164e503428d8ecbef1c819","sha1":"b27c3cb92c516a269f4200a48b851075bc575ee2","sha256":"45cab7ed8432f5be7d1541283109f884467ee14cdf72a5b4ed46e17152b982f4","sha512":"ce343616dbefb2d54483a22a03cafcb2938f3fb348f864f2a17b8d1e3fec6d61b512ac49c06ae836c0df5a91a056caddc36db0828273294486f7d36947cf872f","ssdeep":"1536:bgbqfFJ1ARyDOz0Z+Rjm5X4SQYIbpsCeaYxr3exoVPCa3iPr1:EbqfFXARyDOocRWovYKiCoxrkoVKtPr1","tlshash":"3d7302f90e12e4e5e7b5230d4811b19ab9d4dc7e64c334832a97042f9462a0f876c9fb","first_seen":"2026-04-18T12:10:13.86413Z","last_seen":"2026-04-19T09:11:38.377052Z","times_seen":7,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/index/getUserTimeZoneDate.html?t=mo5ejwvj","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /index/getUserTimeZoneDate.html?t=mo5ejwvj HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nCookie: sticket=akUwTFdKbE5qRXlPR; route=44d17259ab44b1b54887077d522d7137\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncachettl: 3\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Sun, 19 Apr 2026 06:46:00 GMT\r\nout-line: gb-cdn-010\r\nsub-sys: msite\r\nuuid: 01003-01-00000000-17765811604428\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 97\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":119,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"c8e5e3fdd3a565ea389acdcd42c7478c","sha1":"301dbde848187ee580eb4d03c8780bb37c06278f","sha256":"6a8f808df8ae0829e3af545a0f535adf0200be21a8ddf6edbbac272ff1e5d3ad","sha512":"080f3a4cb2302ea9905d17421c49237ea31e7e14d21a630de414f14ad9cfcefa8cbe74c90f2f64a4c00b3de6988a785741d53fedcac54b150a81c47b7275126a","ssdeep":"","tlshash":"a9b0926803a1af5e0a3044a0c608b6c94e65722f48c2cd222b5aed1ca8ace9a1809312","first_seen":"2026-04-19T06:46:39.297458Z","last_seen":"2026-04-19T06:46:39.297458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/images/partner/partner-hongtu-black.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-black.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-19ec3\"\r\ndate: Fri, 17 Apr 2026 05:15:56 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Mon, 20 Apr 2026 05:15:56 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 80611\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10165217100769276026\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":106179,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ebe1f8979403c9db8bdc7bb55393cb5a","sha1":"b133929cb98d4a76b8790fbfea47e9b36afbaad7","sha256":"5f8ac700589fb58800a911940517e382dc9892c7267f32c24c04a5d4a58c440c","sha512":"4162cdbe05b1e498be96cf8882ef3aec10f088a3e1cdfb7bf48cec5221e5fe274752f8f24f02fd98c1fe29e4d52c8633af30d32ca60f01de0893a151b8d69f4a","ssdeep":"3072:mOTQpV0UxIxdvdFEGXyakLQEu2QiEYPwW:mOuninvddQu25EYP9","tlshash":"48a312148d28163b801451cdf091e8cd2fd97c72fb8d8a2682b1f5a8523c6aadff2757","first_seen":"2026-04-17T06:17:43.728341Z","last_seen":"2026-04-19T09:11:38.37247Z","times_seen":258,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/service02.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/service02.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-1914\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 4802\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 404763030400751364\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6420,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d519a8b6b4112be8e3c0bb02d0f8ae52","sha1":"e5335e2517d0653bb4329e8f73ee103f3985a523","sha256":"d9b8759445c552bcb3fc7967c9d19ec134f0abf0626af3b10a9855bc0e25fcef","sha512":"f01222c3912b86fd0157bf7faa5e3c7d829dd731a4a4ac11b3f303aac0d3f342041c6179b3f446d148e1c148bca151396c34f5ba5b427c26314fda46a6c33ca9","ssdeep":"192:zI0LJrsMY1TxrQFAaiwtyAVCBRW6HqKCm:z3LdsMoaiwvoBRWlTm","tlshash":"6fd17e6f37c234ba64b643396d8a16177e2eb93842379fe80655130b1355fb4b06bdd0","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.374406Z","times_seen":439,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/bar.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/bar.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-f6c\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 3031\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10240944904130754317\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3948,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ec831b5d5560d9efad210c4142e01307","sha1":"d0f627fbc33b8d3e596b5fe2dedd2f40b7c36814","sha256":"4426e90c1b6462c16b6f2b9f54ed06d3b1c43b6c64f0ef7022a29aa2ff447e11","sha512":"3117995321dd41b3683756518ecc98163f5e695f97980ff89045484d24516434418e835fe1dc203dfb656934208ba68e44d3d17923da2a913c1909a8691f9044","ssdeep":"","tlshash":"88817d2147d3a9ec21d18bdbe367b190bd223e5ff00c39792bde0241e6a404311d2ea6","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362655Z","times_seen":438,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 11388575145687185190\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/game_iconbg_h.gif.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/game_iconbg_h.gif.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-12403\"\r\ndate: Wed, 18 Feb 2026 09:30:22 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 21 Feb 2026 09:30:22 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 55294\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 8988120795643433200\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74755,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"bbe17e0cd2f58300c21a16f2b0c2306a","sha1":"b71e88f64f535c51834070be6b42005c2776ca44","sha256":"79061ece841395081764ed03652fe51ec68caf7887f11c84508e3bbad1579eac","sha512":"9139870f41aaf6d2f44d2af8ea0579be90a88974b6fac0ee1810a714c8ef477c55a893283164df8e68d07b80bb994d3a5d44eafbc3e61d56dd8f46a1f5f17b34","ssdeep":"1536:BK8ChohdurK5l8LbiJKh5VKw4vjcmXD9iwxp4LF6cSac3XVAqcV:BK8ChrWWbISVBqiEG3Vc3XC7V","tlshash":"ae7301025616fe67c6a4191e8e1e0507bdc08adac27d50fcf519c8abebc47a43dcd939","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.428185Z","times_seen":462,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/images/iframe/logo.html.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/images/iframe/logo.html.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 19 Apr 2026 06:46:02 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: SLT-MID\r\ncontent-length: 150\r\nx-nws-log-uuid: 10536030785422714243\r\nx-cache-lookup: Cache Miss, Cache Miss\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":150,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-04-19T08:37:21.273379Z","times_seen":33758,"resource_available":true,"data":null}},"time_used":1115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/sub-arrow.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 26 Jun 2024 06:30:20 GMT\r\netag: \"667bb57c-e3\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 227\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 7593374870905653925\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"77546ee8bcab279aee067f7794d08541","sha1":"e1ace21ee1e968151b5b0ad8da4b0ebf8420bdcf","sha256":"9f967376ac77e445b313fbebbab9a4572c0984edb80f6b5baa9c10f9bf68d647","sha512":"d56ff9fcf76a2153287b4b016b7e59f40c60859b36ac5d12bc96a43237a828cfcd4c0b5de142dbf178ebccef9092c3ae167ea7e3a59d359f50db78df36263b21","ssdeep":"","tlshash":"09d097310605283062ce68013802d1000e222b8f52a760407ff86023581b3c88a9a3c0","first_seen":"2024-09-24T19:10:13Z","last_seen":"2026-04-19T09:11:38.371429Z","times_seen":1881,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/images/partner/partner-hongtu-white.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:01.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-white.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-1b169\"\r\ndate: Fri, 17 Apr 2026 09:18:53 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Mon, 20 Apr 2026 09:18:53 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 84165\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 14567298641285027653\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":110953,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d0d91015c9c9d1ae9fd6e205f9023f21","sha1":"9268e3ec35db1b2a3731c92fc58ab01b4980a225","sha256":"f5733bdb7eb0bfe56b1530c657b90709772a909a139657fb2f9cc6884a33c714","sha512":"43594c16556972a1753b9acda468df7826651815465ca625c7a7907a16f42fc100efd1aa6dbe5dad2b6eae33a8b8862ba3e400725949cbfa81cfa32eab8eca86","ssdeep":"3072:2ffaD5xhwG/LPzhtdl3+ghgXiqlNIk62fzifMGw2Bi:2XaD5DwcLX337W1fuw2U","tlshash":"00b312546ba1681b02d3e3593ef434c2741e18d66e9019cf6bb032a77ad9ec0d1f1dea","first_seen":"2026-04-17T09:22:00.718792Z","last_seen":"2026-04-19T09:11:38.408003Z","times_seen":223,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/gui-base.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/js/gui-base.js HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 17 Aug 2023 06:15:09 GMT\r\ncontent-encoding: gzip\r\netag: W/\"64ddbaed-ee5c\"\r\ndate: Sat, 18 Apr 2026 11:41:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 21 Apr 2026 11:41:28 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9303\r\ncontent-length: 15779\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 5096955422925527856\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61020,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11056)","md5":"e6ce47d880d7a50ddf91b074c8572edf","sha1":"6a3657c67209136e5b544859daecf16f2d153b72","sha256":"c49e04c7ecfd07c74b58cf161ef2b58f2bc837a9091ed1ae090a33734cdaa734","sha512":"0946a1cb9d048b485dadf4056a4aa7be685a8906240a828a5ac776a4e1eae2ed5ef238bd0724da41cce33324357ba44704d34a6766430f1552630f9a17b664f4","ssdeep":"768:+lkflKVlvREcS38xHmuqrRO/5IS3oFaJX+mQdudqD9jAXImsUh8H3yALdODRG4eK:6ClKVlvREcYoHz0PszIfoALkMEY16pB","tlshash":"4353c80a72b130a106efb1b6515f460d323a6927d44ac458b97c9ae43f74f28316bf7e","first_seen":"2023-08-26T00:19:56Z","last_seen":"2026-04-19T09:11:38.420627Z","times_seen":11267,"resource_available":true,"data":null}},"time_used":1873,"timings":{"blocked":1578,"dns":0,"connect":0,"send":0,"wait":252,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 8457988387468090660\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/navli.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/navli.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\netag: \"6434c9cb-271\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 625\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 8655736768042475872\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":625,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7cb32677e20110fc24ac0ed83ab9dc93","sha1":"11bb8187c64139bf535d82b3e69ac4dda28c882c","sha256":"5dc39cc58aa2473d9803451419d14086f6d501a0d3ea6fa520b8d0ff3e55c6f7","sha512":"fd3ced3df06b89c21b3702f7d8c5a0fee59b93bc67c46b84bef0cd1f6347c31ea02a82730a08455bbd2739fce1240b8b8eafbd397d5327a39fde2719b66f73bf","ssdeep":"","tlshash":"a6f002f14216ace411fc51b4971945930e762d0824481f85edc485aa01c05f394a691b","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.369299Z","times_seen":443,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":635,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 6523789253670863560\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":826,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/game_iconbg.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/game_iconbg.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-c5b6\"\r\ndate: Mon, 09 Feb 2026 04:08:41 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 12 Feb 2026 04:08:41 GMT\r\nx-cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 38420\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 482051727809232956\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50614,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"35a503fd0041527c612701acee815941","sha1":"18acc4ef45c3f75c0b42c30ade5447c3e919cf4c","sha256":"b9c3369af86c9c783e5f05b1b2a83134e103c0a1100c3154d9692783f023a705","sha512":"fc4dde217380b6239b3fe4c86f8f7c37c93c7a9ce890418b5efac7aaac613e13e3309c947c7dbea5d37c34f874ccaf335c4d91a971fdd21918213c8daba16066","ssdeep":"1536:EMpmb1syDdd3XMOHrTv0+KztFqHfiVwp/B:xpopd3XMwT6U/iVwNB","tlshash":"2e330236c01abbb7256093a82716b533e5e107e1e444b26cc49bd196103bc7e573ae7d","first_seen":"2023-11-03T17:00:50Z","last_seen":"2026-04-19T09:11:38.40412Z","times_seen":46,"resource_available":false,"data":null}},"time_used":853,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":849,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 27 Aug 2024 03:30:00 GMT\r\netag: \"66cd4838-6caf\"\r\ndate: Thu, 22 Jan 2026 17:11:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sun, 25 Jan 2026 17:11:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 11733\r\ncontent-length: 27823\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 17302818046334723421\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27823,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27668)","md5":"9c41709c2b64126b909c101a27f39153","sha1":"4ab666b36c092577acb41390ad90e96d5fea7711","sha256":"c1963697eeafb63b6c29e95da2d38d91dd907ab656e130e6e1c34d1dcd149f60","sha512":"f235dccead15199e58495c6faee849c50252b9beed29a04ae46a7a9bdbccfd569a8ab452e7fcf923b7048dfda0c3d7bd51261874642d40e994d1640ca89e330e","ssdeep":"768:u4ygd0iB6d9zYDO5qYT8fwTW3Jny+XiKZNtrt2tG:NB0iB6d9zYDO5qYTMwTW3Jny+jrP","tlshash":"e6c2b7093585102f4ecf30fbb897524f72ba95a45019a069b5fca4d1bef9f8530a6f38","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.249879Z","times_seen":12001,"resource_available":true,"data":null}},"time_used":2434,"timings":{"blocked":1574,"dns":0,"connect":0,"send":0,"wait":809,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.281880.com:8989/index/getAppsUrl.html?device=android\u0026fPixelId=\u0026accessToken=\u0026apiVersion=","fqdn":"www.281880.com","domain":"281880.com","tld":"com"},"ip":{"addr":"20.6.155.231","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"281880.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:54:19 GMT","end":"Mon, 25 May 2026 15:54:18 GMT"},"fingerprint":{"sha1":"37:0A:43:43:A8:EC:37:DC:E4:7A:4C:BD:49:7D:0E:0F:A5:DF:9F:46","sha256":"CC:10:E1:C3:A4:B8:BC:D2:68:8B:8A:60:54:65:94:5C:30:C1:30:B2:61:A5:99:EF:BA:54:74:AA:08:DA:55:AD"}}},"request":{"raw":"GET /index/getAppsUrl.html?device=android\u0026fPixelId=\u0026accessToken=\u0026apiVersion= HTTP/1.1\r\nHost: www.281880.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nCookie: sticket=akUwTFdKbE5qRXlPR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Sun, 19 Apr 2026 06:46:00 GMT\r\nout-line: gb-cdn-010\r\nset-cookie: route=44d17259ab44b1b54887077d522d7137; Path=/\r\nsub-sys: msite\r\nuuid: 01003-01-00000000-17765811609f1f\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 902\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1136,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"1bc5a42ab362af378ca1ffe22445311c","sha1":"eee0a09e57e8876cf18668ef2d7b4e56c85ac96d","sha256":"9aaf991212fd5d7817eee8484b1f5eb58a658acb21c5dc32faceeca66cea8b2d","sha512":"70eeffeece8ba48bd16e04dd457d721706f794be7cc15a256dd9979fd962f49048ea493fa094bab1e94d10b4ed43868db8361758a4e833dec97cd2b186868182","ssdeep":"","tlshash":"1821fd6a6cfdd03d415c3cd04d5d14f5cd3914f115a415597ed8092147c1af11cd4d9a","first_seen":"2026-04-19T06:46:39.245006Z","last_seen":"2026-04-19T06:46:39.245006Z","times_seen":1,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"www.281880.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl//commonPage/commonContent/nav/images/icon-menu-api.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/icon-menu-api.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-eb77\"\r\ndate: Sat, 18 Apr 2026 09:39:24 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 21 Apr 2026 09:39:24 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 45839\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 14694835120710450963\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60279,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e469de101a0cd46a9b991f26e21c4f28","sha1":"3d7c4e4749adcfbd3391509990d297dd43dfdce3","sha256":"8860ebd04d7021eb4e835eefc90f79349805b1a7c9d19c8f1f2e63b5b09279bf","sha512":"b85c9708a72de077225f26773f2ee94581ecbea40546469708faa2236d8cd94ca544e1baa9905965a3a5f98e932c3b256eaa7a1529a8223cbd306d2ea34df8a1","ssdeep":"1536:94Ewq1BUSkjlFlX94Ignm7/Bf/KYzBjegaMUVO:94U1MjlFVsc/vBCfMUVO","tlshash":"5c4302719f2b948eebd06744e19bc319abb707aeb12370d677c9780d39a00909d79734","first_seen":"2026-04-18T09:39:47.829749Z","last_seen":"2026-04-19T09:11:38.390476Z","times_seen":79,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:00.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite2.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 17 Apr 2026 03:30:30 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69e1a956-1208c\"\r\ndate: Sat, 18 Apr 2026 09:05:40 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 21 Apr 2026 09:05:40 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9996\r\ncontent-length: 56211\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 12471159177533750728\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73868,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"8578626b45164e503428d8ecbef1c819","sha1":"b27c3cb92c516a269f4200a48b851075bc575ee2","sha256":"45cab7ed8432f5be7d1541283109f884467ee14cdf72a5b4ed46e17152b982f4","sha512":"ce343616dbefb2d54483a22a03cafcb2938f3fb348f864f2a17b8d1e3fec6d61b512ac49c06ae836c0df5a91a056caddc36db0828273294486f7d36947cf872f","ssdeep":"1536:bgbqfFJ1ARyDOz0Z+Rjm5X4SQYIbpsCeaYxr3exoVPCa3iPr1:EbqfFXARyDOocRWovYKiCoxrkoVKtPr1","tlshash":"3d7302f90e12e4e5e7b5230d4811b19ab9d4dc7e64c334832a97042f9462a0f876c9fb","first_seen":"2026-04-18T12:10:13.86413Z","last_seen":"2026-04-19T09:11:38.377052Z","times_seen":7,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/hot.gif.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/hot.gif.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\netag: \"6434c9cb-130\"\r\ndate: Mon, 02 Feb 2026 11:52:37 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:37 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 304\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10534161033995846298\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":304,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"eebdd02c527542e9b0803696f446cc82","sha1":"6cc5f40dbca16ce814a4b201e22839026d8a419d","sha256":"34465dc6ff07e1fa4429a733f84dc82d1d7b790209dfa2e26d758c871c5a7a0a","sha512":"3e7d14bd91f03d52b41a977e1fc676554e5690769050e21f8e9971f04d8289e5a440f40d4b2f9b7c985d5c68fccd974f0396f382eada2f083674f8efd0f3defa","ssdeep":"","tlshash":"56e0eb36498034cc4b0c6800b912fbaaef10c45f0aa2f2de3cc42a922cb840448a20a8","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.394052Z","times_seen":442,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/navli.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/navli.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\netag: \"6434c9cb-271\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 625\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 7772027448053186898\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":625,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7cb32677e20110fc24ac0ed83ab9dc93","sha1":"11bb8187c64139bf535d82b3e69ac4dda28c882c","sha256":"5dc39cc58aa2473d9803451419d14086f6d501a0d3ea6fa520b8d0ff3e55c6f7","sha512":"fd3ced3df06b89c21b3702f7d8c5a0fee59b93bc67c46b84bef0cd1f6347c31ea02a82730a08455bbd2739fce1240b8b8eafbd397d5327a39fde2719b66f73bf","ssdeep":"","tlshash":"a6f002f14216ace411fc51b4971945930e762d0824481f85edc485aa01c05f394a691b","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.369299Z","times_seen":443,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/navli.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/navli.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\netag: \"6434c9cb-271\"\r\ndate: Mon, 02 Feb 2026 11:17:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:17:26 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 625\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 14879571522006699190\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":625,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7cb32677e20110fc24ac0ed83ab9dc93","sha1":"11bb8187c64139bf535d82b3e69ac4dda28c882c","sha256":"5dc39cc58aa2473d9803451419d14086f6d501a0d3ea6fa520b8d0ff3e55c6f7","sha512":"fd3ced3df06b89c21b3702f7d8c5a0fee59b93bc67c46b84bef0cd1f6347c31ea02a82730a08455bbd2739fce1240b8b8eafbd397d5327a39fde2719b66f73bf","ssdeep":"","tlshash":"a6f002f14216ace411fc51b4971945930e762d0824481f85edc485aa01c05f394a691b","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.369299Z","times_seen":443,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:46:02.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/bet365-1003_02/themes/images/partner-hongtu.png.base64 HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.281880.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 11 Apr 2023 02:45:31 GMT\r\ncontent-encoding: gzip\r\netag: W/\"6434c9cb-2a893\"\r\ndate: Mon, 02 Feb 2026 11:52:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 05 Feb 2026 11:52:36 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 9997\r\ncontent-length: 117725\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 15187324254645084441\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"80898cac4219caa23bf6a28058f384ad","sha1":"5c422c369500c58b482048c8ca4794b0bff5d934","sha256":"e99414909d1268dd0d0cc0c1442915cb43401565359276e277d144f8bafc319f","sha512":"534f7bae04c0fc15ab410f37559f003c1156020e1c5b2a53e2b61aefb42610f6b1e76cef9db0805ead5237048a9116736b39dd5a075a11236772cfd2d4555d7f","ssdeep":"3072:6O0aPVvHBvYTHU5VCy7TF7w/c3dfCFEH/Jz0p7beLlGKw:+aNhvYEAy7Ty/cNfhH/JzwbeL8Kw","tlshash":"d004022c7d97bd4b0bb58b3699dc5de34e9c172e4847068ab46f0ac452b52370bc7b88","first_seen":"2023-11-03T17:00:49Z","last_seen":"2026-04-19T09:11:38.362133Z","times_seen":47,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3rzeeh.ntbnaq.com/ftl/commonPage/js/layer.js","fqdn":"3rzeeh.ntbnaq.com","domain":"ntbnaq.com","tld":"com"},"ip":{"addr":"60.13.97.57","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.281880.com:8989/","date":"2026-04-19T06:45:57.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ntbnaq.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:AA:BF:F7:40:FE:DF:A3:31:41:4A:40:DE:F6:23:E9:E6:15:95:3D","sha256":"02:9D:CE:EC:47:07:18:F4:B9:4A:8A:DB:02:D8:CA:1B:C8:90:1C:50:62:0E:63:87:D1:E5:41:23:8F:8B:9B:BF"}}},"request":{"raw":"GET /ftl/commonPage/js/layer.js HTTP/1.1\r\nHost: 3rzeeh.ntbnaq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.281880.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 20 Sep 2019 08:35:27 GMT\r\ncontent-encoding: gzip\r\netag: W/\"5d848f4f-55f6\"\r\ndate: Wed, 21 Jan 2026 07:57:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nexpires: Sat, 24 Jan 2026 07:57:33 GMT\r\nx-cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nserver: SLT-MID\r\ncache-control: max-age=259200\r\nage: 11733\r\ncontent-length: 7599\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 12863176028612362576\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22006,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21910)","md5":"cb96339625e9d456e32f86cdb3c7a7a1","sha1":"1301165c58bbb13c542cba493b7ab5774e87e31f","sha256":"17fb047ba6828fcbdf2ca226fa4594cfded2b2fdfeaff89a5bd81c7cf0359919","sha512":"53083bf4d6d450b1e9402c3f3dc40fb3434a27d47fbabee51f4ce1d3577f2a0aabe90cf5f6dfc22830a3878ec7552a6bf6bff605c82a4f832c79f34f7657ccef","ssdeep":"384:r1dCih92A3DgrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:r1YiV3D+WtXItqF13k8","tlshash":"6aa2b76a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-19T08:49:21.268992Z","times_seen":12011,"resource_available":true,"data":null}},"time_used":1913,"timings":{"blocked":1576,"dns":0,"connect":0,"send":0,"wait":295,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}