{"report_id":"59b47f3c-17cc-47cd-afdc-42ad8bbeaa01","version":6,"status":"done","tags":[],"date":"2026-03-12T11:10:14Z","url":{"schema":"http","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"title":"welcome-bet365","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T22:24:30.70154Z","times_seen":17768422,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"116.213.38.211","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-16T11:10:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.bet38d.com","ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-12T11:10:18.984048Z","last_seen":"2026-03-12T11:10:18.984048Z","alert_count":244,"request_count":61,"received_data":3967578,"sent_data":35611,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"rtt2-img-cn.hb-zpod.com","ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2025-07-02","domain_rank":0,"first_seen":"2026-01-22T17:50:36.341318Z","last_seen":"2026-03-08T10:30:20.254577Z","alert_count":0,"request_count":45,"received_data":2199529,"sent_data":23060,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rcf-img-hk.fdhs31slkoihkkcn.com","ip":{"addr":"172.67.189.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-19","domain_rank":0,"first_seen":"2025-10-26T05:38:08.590719Z","last_seen":"2026-03-12T11:10:04.430616Z","alert_count":0,"request_count":1,"received_data":88786,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"192.178.203.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-08T22:22:58.987044Z","alert_count":0,"request_count":1,"received_data":476877,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.bet38d.com/js/45540.1765800272060.0de97c05.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"68dd30b847b20eb9bc29bf868f8fac50","sha1":"873e370781734561c37f84da9e827c5ef80386d8","sha256":"a5e0b2ac5d67cde62e046977f3ff2f6c572afeecd5cdc1da6652c76ef98118ff","sha512":"79a30452eef58c94b5ab58bb4f691c7a454e60a0f08a60d7b761e958c8da0a1410fdc16dd1819f2641f17424cd31a0c02e0955ce0786ad1c20d06a9bc8cac4fc","ssdeep":"6144:lYD4wFsYiSGfKnIKPP6Xm9Gm3MCrn1OSgpozfEe5a:lYD4wFsYiSAKLJ3T25","tlshash":"3a24e894f294f1be075fc1f1d23b501af35b5e6120cc9ca0d296e6942e20b49da77eac","size":229372,"data":"","first_seen":"2025-12-06T01:35:16.083123Z","last_seen":"2026-04-22T10:03:14.082408Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-07T22:23:56.252171Z","times_seen":739949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee16a86bc3b88782c5c907f9ead0c7d1","sha1":"f405a7c3c791f84e49682c50273fa2d52114b8e4","sha256":"4dcb462e6dc1c81213c9ba9b153f1aa8c7ed17221e80e6cd48becb210afef37e","sha512":"0d3d0b021a145d5393769569321ca87b0308728e65f12c0d93d3d1c654e0da56d99b1dfc5b44488c6a216c03654ed80299a14b91c7c85dec380e491ba042b80e","ssdeep":"","tlshash":"b3c02bcc210b0cb151e72f054b7fb300b005320198d1db31380f33088f21d07eb54828","size":165,"data":"","first_seen":"2024-05-05T06:43:28Z","last_seen":"2026-07-13T05:08:27.73552Z","times_seen":394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-07T22:23:56.252171Z","times_seen":739949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-07T22:23:56.252171Z","times_seen":739949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/chunk-svg.1765800272060.1e4dfc16.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f83e8cb4ca3c7c0b2b494207acb7f80","sha1":"5a61da9e752c5d029239a16a9a4fc3e62a9a3446","sha256":"5f5493bc3ec2df742f870e52ceed89d29a0c1a90f673f0d82f74325243ec9f32","sha512":"4e62e1c631f1c74e4af896559828c3d8c440eed620d18afd897dff96b5230791a3d8569cbca136e94ead823845c672f304b0b4e1c8f42aab2756cc7901eb3b0e","ssdeep":"3072:z8nz2uaLZSZvx6Q/sIPrekK+m36Ua94sRZI7gbpF/:z8nz2uasNxpXPrekK+m36UHsE4pF/","tlshash":"30a4fcb4c190f4edf704ce196e7c9e1c50321688e0a9e9e52da9fe0d9e85d6b241cdec","size":464052,"data":"","first_seen":"2025-12-06T05:02:16.145976Z","last_seen":"2026-04-22T10:03:14.118891Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/21954.1765800272060.57c97863.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ba77e30ee8b74007281a4f81fd8d9f7","sha1":"bde6029b8414bbd2695cabd096e7957d853daa74","sha256":"ecdbef0608b0bf7946a0ad74d1aa1a8aeddf43be3b9188dc0c68234468f9f924","sha512":"5a23a199e2427576a570b26a2ad11da06ab19599db8402d96c08830cf0a53be3e20220b4db2c4b985c44a335f93c2e130e6420f6c4d410b243f2e7387a51fe0a","ssdeep":"768:QlPaSfmzKrMdvf0eMQ/96loumY1PI1yBK9LudEz+yUy51y9y0yk6Dio+ILqpTeY:X81R6Ipyk6o","tlshash":"fd132088fac2b06dd3eb7330857f505ae66a1dc0668c5438e260d6917e7198dc1fb9f8","size":41946,"data":"","first_seen":"2026-01-19T01:13:34.508525Z","last_seen":"2026-04-22T10:03:14.064388Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-07T22:23:39.111179Z","times_seen":237268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/35142.1765800272060.5fa2ea52.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e159b23d16e0cd3fef757384d7c5aa4","sha1":"76b3df7600a2aedb4e12888da1c6cd099fc3d7ac","sha256":"964fa385dd24920fae27faaaa86b2dca87940e5bc4176e6516fd348d017b5844","sha512":"3f8f20286581e757e9207ed73d15c9ece5cc64e2432057414a9a310f28c1f18b0d6cabafc428d920f6172b33dca56a9b183c72e9ea46380cf23a2a8993bf06d3","ssdeep":"6144:irhhkpltrniyveBHlBfb04De7Ancbt84ijafIL8oSlthWe/futUDhrRtZsD5jMDg:irhhkplRniyv0HlBfb04DaAncbt84ijJ","tlshash":"bf743c84b690b17883af86fb721a9194d24e0e9460ccace4f37d6e40bf15746b8775ec","size":337283,"data":"","first_seen":"2026-01-19T01:13:34.540093Z","last_seen":"2026-04-22T10:03:14.004355Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-07T22:23:39.111179Z","times_seen":237268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/configPage.js?v=12/15/2025,%2020:09:35","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9a1da2795b6ac069691e02b6934b110","sha1":"3b31f29574988e3f8253cac52a29500e246be6e1","sha256":"288bd90db96659b95b35830382e465d3b48ab13b5aee95b36fbc3a004bc91d95","sha512":"d760cddf6e74524c7ae79dfb7748ad3841aa07fa97ff0c7683123f29f2dc0e5be8d4cd8e611e54271dcd2facf8da72963dec0c28bf16e610fe4e53a164803f9e","ssdeep":"","tlshash":"ad31428e22594cfb874b7f95736b060c68a631419445ad91bcddcf1c530994111249bc","size":1542,"data":"","first_seen":"2025-06-09T14:55:55.160162Z","last_seen":"2026-07-13T05:08:27.653737Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc082b0ab6ff81d400b562683a0bfe0e","sha1":"8f0f379b9d23cb03b67e6c1639957887b836dd75","sha256":"3cf06ed5d08ddf527c14004e765a03425b315c43679d2e10498ca7e5b3aa34ee","sha512":"0323db814be66229a2e38e29f1a3c538af88e2c8e93d622642d44ec7906590801da09d5434344e6e0c2285e5bf0ebc38103833d91356ea9a99aa966a0e6402b5","ssdeep":"","tlshash":"0d31e3296db298319423313a176bf3443535c21b314ddf003b1cc754af24daba532ac5","size":1552,"data":"","first_seen":"2025-11-05T12:10:48.372322Z","last_seen":"2026-04-26T06:01:10.146593Z","times_seen":1068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"5281f83487c386b7836c0a61310eee71","sha1":"b69aa5eb7750fa2d18540f7a8f28dab10d4b2631","sha256":"5c4f27503b020517fa4d8a831ce6ea7c9b425cbda5603e8e6ce9119aa406cea4","sha512":"4d7ca7094121bc51fd7e24de7f2b9218624f1c7c2b5949e25ad2be53f4b1babc0ac6265a9e20acd2d51fec4e844baebdd7d1aa300a7f52f3b360bf36a8979ca2","ssdeep":"","tlshash":"5c8004047d5d50540000503014740c0d5c133c57403f0314340dcc013fd5c401447441","size":36,"data":"","first_seen":"2025-03-03T20:54:16.013922Z","last_seen":"2026-06-23T09:11:58.933356Z","times_seen":2969,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-07T22:23:56.252171Z","times_seen":739949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KVN8M54JBZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.203.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4730a858007684d9acdaf0b4f351ddd1","sha1":"9476862a0b4cdd72e73cc939df6651db35a1f0f2","sha256":"78258d0657e11db204fd501ce9ee769a7843098477fcfd8ac2d01960e064abc6","sha512":"3654680fbc405d40d398e0ff8d0bbbbfae7ac2548ae3721c08c1c4fd28645685686cadcc212ac24e28872c673e526b1ee0259a05c1ce942e3365613fa9f91952","ssdeep":"6144:ob8J5tq8191Gzb0mD8+t3Rnp/XAphEn22cf0NTPBA:prq81XJmD86n2Is","tlshash":"86a4f8ceb3d674229396e478503f01cba57b29a2b45cc89af189cce42d7469a4137f7c","size":476273,"data":"","first_seen":"2026-03-12T11:10:09.7764Z","last_seen":"2026-03-12T11:10:30.650129Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-07T22:23:56.252171Z","times_seen":739949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-07T22:23:56.252171Z","times_seen":739949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/52388.1765800272060.60a7d897.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"09d9a5186a308ae70fda961f2489fa5b","sha1":"6954aa705b8845d14c8c70349bf19e7d757b958b","sha256":"c998668f8feb43336f0395ec2780b01793cdf14b0941faaab93e505d4c5bfbfc","sha512":"40f42724482f280e12937fff35af78b49220b8593d6e378af6821895700d1a22e10a27f9b1cd890eb8026e275f312d18ed8284f3d4b88b3a956ccc4cb0fe39cc","ssdeep":"384:z9Z4Y8ufnffgBpZZrWUE6zP8sICXZOIu9pCXjBiJpG19EfkK8zyD1hfPfIghoL8Y:zEY8u/ffsp3aNWEsZ4IIATAJ016fkmDi","tlshash":"9a82b4809ab4faf0227fd5ea863681b0642a37d5f0c87ca0a6dd5f483d557aa74704fc","size":19286,"data":"","first_seen":"2026-01-19T01:13:34.51213Z","last_seen":"2026-04-22T10:03:14.047552Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-07T22:23:39.111179Z","times_seen":237268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-07T22:23:56.252171Z","times_seen":739949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-07T22:23:39.111179Z","times_seen":237268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-07T22:23:39.111179Z","times_seen":237268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-07T22:23:56.252171Z","times_seen":739949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"361f3b361329ab12f7aa8598f4474596","sha1":"d10885271a35c30e2543a7a1faa395e6ec408a52","sha256":"ebe041ac9d8f2e5d225dafed52312a9da5bb32fdc9d918e799c3883ade9edd09","sha512":"e030ded5300ca29133055e51be6cfcbce4ebb590d95d89abb526c767d50deb6db00700523b5cc19770b93a91c785b448f30f90eb3e240adb929c4eed4de3b123","ssdeep":"","tlshash":"1ee0614e342954e555a3b5f737b3450c7416270e5850faa37d5d854c1f1059544ab3ec","size":415,"data":"","first_seen":"2024-05-05T06:43:28Z","last_seen":"2026-07-13T05:08:27.730149Z","times_seen":394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-07T22:23:56.252171Z","times_seen":739949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-07T22:23:39.111179Z","times_seen":237268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-07T22:23:56.252171Z","times_seen":739949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/home.1765800272060.28b13b76.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e081ae3dc47bc3e01abe6c5adfa8f40","sha1":"f9ec7414b1bd119ce7ead46fc1c4da9bec523500","sha256":"70d45b25937137fa87055672449ca78d872963346e8d64323ee0c2fe8b888830","sha512":"d516cc23f3b13c71ad494ce645070d264042b7a01ff9e327b93d2a3af7efedd615577c70f35b73f13dc749a6d7f02b6c11c87f29d7f60565c25704e0b058d0e5","ssdeep":"768:L6Lu/ffsp3aNWEsZ4IIATAJ016fkmD1DwuO2KSIMcK1jaJ7wBq+JbWk8q9G+pV/B:N3D8O1GSIMcrmbJqCPjdd","tlshash":"a1f2f884eff0e7f8229fca9b8e319170652537c1e0c8b8a461ed5f187d1a396b4745e8","size":34278,"data":"","first_seen":"2026-01-19T01:13:34.510295Z","last_seen":"2026-04-22T10:03:14.045894Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-07T22:23:39.111179Z","times_seen":237268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/chunk-common.1765800272060.76d281b9.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b66702ee389ecb030b0b1d55bd67755","sha1":"8d85e984dd9c12ec8a75d88840530daec5efc115","sha256":"b18f4a858b242e6c822cd5b038310cc245a045ac0a38079df09fa0c8de5dbc52","sha512":"46630add12b37d6377229fec903a43faf8e351f2780e41d7912522aeb510617b93749ec2daf7ee02878d5fddf51303fc91656c478fa6f584a44aa5f048fc1b20","ssdeep":"3072:WZVBM9To6yjFetHkui7N9t/voaGAcgD3t:WZVBM9To6aRGGt","tlshash":"17f3e8c5b3a0f07e9a1ed53779331499b12f758274c87c60f1a1ade6bf1a704a436ca8","size":162318,"data":"","first_seen":"2026-01-19T01:13:34.585241Z","last_seen":"2026-04-22T10:03:14.043813Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"49bea4e1330b9d3f17c1c143ce23cb3e","sha1":"3a8874032b5979ba1fadfe141c0ebf28baa32fc7","sha256":"07f2a8f457d336c5a0cb2267f53a4be2676d30140da225305675f4b3957eb68c","sha512":"9cf0ea9cec23fb496db40aae14fe1df1a305d4a847e23a724645052c742a5995250f9d7f3f0584d3226aa17c6af04201f72cf7fca01bf4c788df2ab4cf488ad0","ssdeep":"","tlshash":"b580040cdc5544570000501014500cc57c170417453f435f750c04451fd34700007c40","size":36,"data":"","first_seen":"2023-03-08T15:23:49Z","last_seen":"2026-06-23T09:11:58.930085Z","times_seen":3036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/75351.1765800272060.6e695611.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f46685ca63ff62ead38548bf1c598e88","sha1":"28793c7a74ac57e2d56cad4090c4de03c87e086d","sha256":"f71c7bb50ec4b47e4f47c57e75bf78ec80913245c2616c2abac0b8f9b1225c63","sha512":"10dca9a26cb3b8bd5a6925360e5cf50a6a34e1dfb04ec8c4f32cb0743d8f02e33484816c3dbcbba7121bd6c4d2f53278b84d7b0172077b2d8c5f0393f9accff6","ssdeep":"1536:J17BBHFeKRKp+3ELSPtj6x2DgJoG7PIDmj9VA+s69JAFdE6WIzl+Ik1+eXMa7a4z:fjHoKRKphCnDgJoec+IDWIzls+xXr0X7","tlshash":"ca141a84764170b8c396a165322f601ae22f789650dd9c24f3789ba47f7470df26fabc","size":195288,"data":"","first_seen":"2025-12-06T01:35:16.113538Z","last_seen":"2026-04-22T10:03:14.053829Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/65246.1765800272060.c40b56f1.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1530184094490b2a07732edfcff2f8b3","sha1":"96da9f4d5005a23393544621288a8b586808b708","sha256":"98d67e399357fec07fd03d6f97db86ef917ec56fbad6a0ab1f7f9ab86266516c","sha512":"597959f9fc104add964b0b96a6823cef67691260e77218b2992e1d23ef76a9b2b53a9fabd74440713f136798c392bbd27b3b87055d373c93a18cbf438f49ac61","ssdeep":"1536:tCS2+iDvYvNjx4Uyao0L8oDNzAuMMsTAQ0mqt2pXYzA4dANVQ:tCT+iDYvPo0L8oZzAuMMsTA7mqt9zA4t","tlshash":"9c73a501f78272384fa7e290220f2026e16e191505ac5bd8f179ffb93ef0954aa7d7b4","size":73516,"data":"","first_seen":"2025-11-05T20:08:30.360534Z","last_seen":"2026-04-22T10:03:14.12517Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/31098.1765800272060.4108b3dd.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b168af2752a6975dd65ef440690c4a5f","sha1":"cb9a6f7ba5c3787d1c55048d573ab72007fcb055","sha256":"290f3e1d0d5682798c1a4bc95f08c84e885d2c5997f2774d24c1a9a96a0a588f","sha512":"2b2622b3e62858033a1a0b5055d524b9166bbbc6e9d9737bc664a008bdd7964de41eb51e60af40e83307fb5432e9957f07674ff1cc7c8318e5852fa816db6536","ssdeep":"1536:X+0YvC9jlTKAUSseG1SY46DCdlBBo3AgXOG9AsqCfCXsvCfCXsLCfCXsyCfCXsfX:6KK5sY4brG7O3SnLJNpL","tlshash":"c474b6f4c248c6fdea04ce0a7e7d6f2d50723783f2ec96c446aaf8865e91857245c4da","size":352758,"data":"","first_seen":"2026-01-19T01:13:34.545115Z","last_seen":"2026-04-22T10:03:14.087965Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-07T22:23:56.252171Z","times_seen":739949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-07T22:23:39.111179Z","times_seen":237268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-07T22:23:39.111179Z","times_seen":237268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-07T22:23:39.111179Z","times_seen":237268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/theme.config.3f776045.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfc3fb58ca6ae3303636f071ce1d6a63","sha1":"8b4e58255c25cc467eb9b0cb6c76ed0b8e3e0c64","sha256":"a0f6cc42097ebbb46f18db3c607454d15477b6788057611f25b93ca46e7641ac","sha512":"4fabd6e18022fc01d6ffd02fd793d67c3b2e06fe29b4c45f4fa81a7a1e49c2f3a7526c82d081a8049a36c0ca70330e516c28e75d5c81b361291f378e9d03bca0","ssdeep":"1536:D2JREobymtlIRM4Sb2mc42mnzyJog9Cc0hM:qftlGu1pnz45HX","tlshash":"c7a3cc7ae24c963a6177b8bfb46de101d12e9c0c9b1d5fdef03e10a25b10669c831de9","size":104560,"data":"","first_seen":"2026-01-19T01:13:34.666271Z","last_seen":"2026-04-22T10:03:14.146566Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-07T22:23:39.111179Z","times_seen":237268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-07T22:23:39.111179Z","times_seen":237268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ce02dcf11f1634908b4afc4e1bcc632","sha1":"f8911bd806c6ddd3daab7f3eba10081d7af38f74","sha256":"46c7be5f428c72dac25551dbcf74f494989a3cf773ff04f9e115e15ad7dc2893","sha512":"c4f56e0a143f096a106956d55a60f07405a2418d8eec9917a027d0ede74e7119884002051c598445519ff87ad5526d035c221bbcfc65ce817539e6162f157ac3","ssdeep":"","tlshash":"1901735d483748107b2225bd537f5045f1a2516f9e87cc103c1e5b00eff48a72591bd9","size":750,"data":"","first_seen":"2025-08-16T16:35:14.594808Z","last_seen":"2026-06-23T09:11:58.933867Z","times_seen":2561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/chunk-init.1765800272060.833a06d6.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e2d515b5a30970c9e6d5e1359d00986","sha1":"d0bbfc3db10244960c664dd3aa1524cf5b5d5f30","sha256":"71c165dcc1fb67e24c20e87ba8b0becc51434f79d661967bc5e05ea6aa66d47c","sha512":"806257558894ebd8436bdc30edc8b0c260e8194f189c91c781dbfb551ca2cafe80b8cd33e4e3fd8243f84d32c1bfff2af2b615ac795179ed607b27d563962ac6","ssdeep":"3072:stwqhOIKENB85doKa/x5wc0dB5/J+UUknCqd7ACifMur0g/C:9ENm5ox2Br+2nCoAlfMu0T","tlshash":"88441b98b3d171b847cb52e5622b1035f6ba1c933098e4f0d219ea947f3168dd52eeec","size":272745,"data":"","first_seen":"2025-12-06T05:02:16.12604Z","last_seen":"2026-04-22T10:03:14.00075Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/30519.1765800272060.0b0c86ee.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"880a4c09efc1b4b51d7bf895124bb720","sha1":"b4bea506511b60dfabab776edc3615b3b2f40f6c","sha256":"e9e521844396e0654137af4979477bb18c069fb127fdaf5c974466f7c8b946ab","sha512":"80a2ed1cd59b434624dd6c575c8f74a8b3e2883299cf683c3804dd3453d5b1887ea989f4f1de6c6c826d959204abf83d7a62ca767e93c6d13024cdb9bcbf54a7","ssdeep":"6144:2/zKTUAavC0Jjytg7DiQPkcsz1WHSou0HrqML:GWcjytgPJPc0HrxL","tlshash":"cc441c84b291f0b4879b42f7a22b4055b17e49a030ccacb4e265ed90be7555c927fbfc","size":268194,"data":"","first_seen":"2026-01-19T01:13:34.587465Z","last_seen":"2026-04-22T10:03:13.98009Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-07T22:23:39.111179Z","times_seen":237268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-07T22:23:56.252171Z","times_seen":739949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-07T22:23:56.252171Z","times_seen":739949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-07T22:23:56.252171Z","times_seen":739949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/config/initGeetest4.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b773fe272ef2f3dc7c7e443cd8a0e98","sha1":"8f81f38f03c362533ba34d119215bf83b7574ed1","sha256":"9bb8b869af3ceacb9261dc2cb9165d2716b150bc35ba9da63dd23674fe0773b0","sha512":"e0539af0bc1ad92c1799b6f5c0c759a68537b8063730bd0577aec9f7cf620d34cd166bd5a15c25d89cad49d80f51938b6072c4aa27d07f010e6aaa83ce6e3c5d","ssdeep":"192:hN3ar8HuCDoNu5dq+ExNiqc4K25MB5VsaiQxta4SScQVy8QRHIqaawzjTki59r8Q:fJe61XHlii5aI2PG4lyUIVKQTwwPlB","tlshash":"2562200d68f750a35553b43c8b9f6014b5388a93041cde41be9ce394af9843d9bbabdc","size":14854,"data":"","first_seen":"2023-12-16T04:09:07Z","last_seen":"2026-07-06T04:48:18.66713Z","times_seen":2858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/index-a3dad144.1765800272060.779c08a6.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"af103c406c9777c84336789d89468526","sha1":"17628e3f7a6af779726fa03d17d3c3c6ac7caf06","sha256":"123797a6fd517f9c26cfccacb7d054e1ec1d632c20946a29325282e74ecb1279","sha512":"a64e60b5894e4981a4994fd8599548a7f6af1c496bb28061e25403bc622dc58601457091e3cee97bfe1d590b8f69991803c5184f19d3261c82d9748831da0005","ssdeep":"6144:Yy1d7B0bhFOuCKXXiBpryMzm4UPQdVNXG/yz95VG4nwTl0s3:Yz0eXiBpryMzm46QdVN8yz9HGYA3","tlshash":"4d742a94f76ce1bd475e55ff792290a4d02c1b41b0c89d58c29e2e44bb6b385fab08bc","size":364731,"data":"","first_seen":"2026-01-19T01:13:34.684763Z","last_seen":"2026-04-22T10:03:14.158619Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/sandbox%20eval%20code","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-07T22:23:39.111179Z","times_seen":237268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-07T22:23:56.252171Z","times_seen":739949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc8a294899b949ca9677d96ab1c49745","sha1":"983c5ec164a83ee42e930da5b41946e6b0884dc6","sha256":"1f235d2a99775c3e5208abb2a05db1d9b6da61997a61ca5f7acb6ecb63caab29","sha512":"544b86acb0f595a5b12b887d5270444b63e23af877db68c8bce9ee5c66b37de75648eb9ea0757f899dba25f6376013beb278c9c8f801674f8886ae4368264e6f","ssdeep":"","tlshash":"4551b16d856684711db3346d2b5fb34835b340a36149de113d4d8f802f6895e82a6bea","size":2590,"data":"","first_seen":"2025-08-16T16:35:14.597318Z","last_seen":"2026-04-26T06:01:10.157524Z","times_seen":1785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-07T22:23:56.252171Z","times_seen":739949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/41269.1765800272060.4bfda6ff.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5fba4a5ee11ebf507f4559755e0af1e","sha1":"62753be2f0df9f9656c34ba9eb01850b6427bcf4","sha256":"92c461a37a9b33e2b1b6ed8efc20af9529a3dc3059ea2767cf0444aaf9394321","sha512":"d74fbcc178021a98cab0b1bb787a35f2bb94b2fcd6b81006caea58e2273218974f521c9c1eda70c14151b773867b8b918a1d14c67e68aa5d4acb00372806fa13","ssdeep":"3072:HR+7tB4Vgj5tNlxyUTYE6fDxCiuUlL5XE4roBlmomj24sp7pmwu:HR+7tBwgttXxyUsEMDxCiuwL5XE4roBQ","tlshash":"83c33ad4f29071f5479b46f2b23744a5727b0c82324898b0f15ae9557f3268cc6ebaec","size":119569,"data":"","first_seen":"2026-01-19T01:13:34.538224Z","last_seen":"2026-04-22T10:03:14.121192Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/index-399e2569.1765800272060.688d63c5.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1b6efb30512fb837f9069984b25bfc2","sha1":"71387f5532129dd59ed73fa1294b069f498b5af8","sha256":"50879383c8d1b963d4d24791756209312dd9f844e59b7b0c2d7dd89263aaa19a","sha512":"0cee0d5177a63c181bf7179e2ba2d99235f2886064fedb8bf96f49698b8044a17b800a1a721e0d180c49aad8329ef90858e4ca03b660957945731ff65db84859","ssdeep":"384:pZTANHLDaSD7PTlTa3yDJo0hrItBh9geEZKkLZAr+TXN4r5F3oWf0Af/nptU8V:zYDaS/PTdxDJXhruhyVKsZk5FYxAfP3Z","tlshash":"2cb2c6e63392bda4c24f9276f23a68ecc43f9141c34fc4f8d264bdd47da8645a692784","size":23719,"data":"","first_seen":"2026-01-19T01:13:34.653769Z","last_seen":"2026-04-22T10:03:14.148215Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d053d2da6a5968d7b648d3f7360092a","sha1":"32ae5713edeb00288a3f8f3c02462a5d0ca9dbb3","sha256":"8896d194e4c39e87f52924073dd2d56b4aaab46fc9f7c56a57534545eef1d7f3","sha512":"01f9b63cd24ab6e0e097637341b78cda657192f98e37a39f0f75548f8fe0180418a86594df76858aee7d514282ac4dfb8263e1729ff325035897b841d09206a3","ssdeep":"","tlshash":"82f0a00e0ee548131963707a4c0f9201203b2513414eea08bffe9bb24f92a688a679cc","size":550,"data":"","first_seen":"2025-03-03T20:54:16.018132Z","last_seen":"2026-06-23T09:11:58.931662Z","times_seen":3033,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"25ba01da3f0b1b471747da4637862cd0","sha1":"0c5b0ce449b041467ab3bf825d2cb6c5dc9c8250","sha256":"5f9229d7d1276d1475836391ce453b7432244854be7368ae4c4c590f22789af0","sha512":"58d82418709bd36179a89dd6af167368c35512e8abc68ead43e9be0e5c5fd5027d83289b2ee30e6a211239b4d67790af51039cba61a54b4184e556741437c4a4","ssdeep":"192:K2wqx5Cvtib5XOQRzlaECoXZTAoV51nsPhwzvBa/id3+36a/E/97g6I52MdobsIc:K2VwiYwJvSoVXsp+pa/iZcVk97g6nMu6","tlshash":"8e323b69a5b71bba25673036277f301889b080630319fd947c0ff61e4fa5436629bbe3","size":11906,"data":"","first_seen":"2025-11-05T12:10:48.37972Z","last_seen":"2026-06-07T02:49:57.833516Z","times_seen":1842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba4d957ec99a023d40fedffe8f2c9132","sha1":"32e9e162bad0ea93fde3f137877e95bbbb574327","sha256":"24e8b158f0130e4778f80107b4c038c9edda27db68dd815e66221cc1fb5837b0","sha512":"d0e45e79632f3ec13d043d91c87ef458d1ded7256a3aebe641b09e205ccd00b863424342238a41b73fd7173eaf8a260640fb3110c8a48422ef03050b691d5e2c","ssdeep":"","tlshash":"0311c05a59d18132665b303735bd43887724a013d184df413dcc99557f98da5cabf6c4","size":934,"data":"","first_seen":"2025-09-26T05:04:14.419402Z","last_seen":"2026-06-23T09:11:58.936615Z","times_seen":1988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-07T22:23:39.111179Z","times_seen":237268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-07T22:23:39.111179Z","times_seen":237268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/home","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T22:23:40.185519Z","times_seen":91380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.bet38d.com/ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://www.bet38d.com\r\nXign: JZZerNNDgcff/WFUi+g2T7G30aWFHDt7b01CvuYQNLZHHqoR0Gmh4yjIm69LDDFZ45bO/05DTOM2GIqnBDMqVbJRZGV0BavQEyRgoYxlj80SNfo3UiZ+RbsCwJwM7y7amht5y/Jy3ntbcSu2jzSotXp+frdH+XjRcAEjs0gCZ0g=\r\ntimestamp: 1773313793422\r\nsign: 7ln2v4h641m7o6u0\r\nversion: 5.6.9.4\r\nclient-type: web\r\ndevice-id: GwGpPfRDtQFp3ZRcY4GJPHiaZn4z2H3n\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nexpires: Thu, 12 Mar 2026 11:19:53 GMT\r\npragma: public\r\nserver: openresty\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: UPDATING\r\nx-content-type-options: nosniff\r\nx-custom-check: true, true\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2601\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2578,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"802e11ef2234527584a4c7b2a7afa64f","sha1":"49d27818c96601d3dac499e9c6b5a1c83b7bb7e0","sha256":"8eede11014228960102333ae4f55c44ee76d0ee374a2677de9c2b9b976ab0901","sha512":"8dac16275d145f01c6ffd3c04232665c33fb82a19a8f69cc281ef68c61890b0b044847f9cc8822549e9872ef225cbe1471c697ac6066d67fcb5281a8a0810708","ssdeep":"","tlshash":"53817e80f641eb209a76f5e81c3701ec635805eef29460e1ec7d44a4ef5578576bc8b2","first_seen":"2026-03-08T10:33:27.77834Z","last_seen":"2026-03-15T06:02:57.678589Z","times_seen":4,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_214c3d1b-067a-4638-a169-cad6388ef03c.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_214c3d1b-067a-4638-a169-cad6388ef03c.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:45:56 GMT\r\netag: \"a003dda48086b299da0cae22f04aa64b\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AidbEP4DuF%2FgVMr%2B2L%2FGzWg9NnqnMGhfIg8g06r37GZS7WnAKDu1kJuqTRzAF5R1qwlm5UmmHkTvVC%2FKCH%2FhlLQwzbE6NoCADm0p7osLjO8v1%2BLTJod8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9c1ff0d448911bf9-WAW\r\ncontent-length: 6252\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 7039716715794748593\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6252,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"a003dda48086b299da0cae22f04aa64b","sha1":"a0de37d8c0ea336b4ad8e4882d3155aa04b8d5a7","sha256":"3c4f8fde1f0bdec7755c20dfb809f2e5c971db5ae8bc0d92c11065cac8604543","sha512":"80efdaaeff59b9a67185e2412394bd5a83a64e8460ccfd9305bc366c55d1af2d9fa4f8b09283f9f4cb95bd9d7bdc6d1b0dd7b239c65e32108a7ac4b76a88d364","ssdeep":"192:iQZjH6Vlhdku6tWZ9okxrjWYaAn3/jWZs3NbG:iQZT0lzku6tWZ9hxZam3/jWZslG","tlshash":"00d19ef5ae667ce47b3b2548db8664c9d3f55f0494923118b723a80dce823725b65078","first_seen":"2026-01-19T01:13:34.616311Z","last_seen":"2026-04-22T10:03:13.97291Z","times_seen":7,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":90,"dns":0,"connect":20,"send":0,"wait":96,"receive":4,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/202504/_enc_size280x136_3137a7ed-4183-46ab-a90b-87878312c7fb.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /202504/_enc_size280x136_3137a7ed-4183-46ab-a90b-87878312c7fb.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 12:02:10 GMT\r\netag: \"05174967abb0d1dbb1aefb2b8f0cb6b7\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=STtQYdfLw1hdiTm6mtY42o3qX5Yegk%2FDKiwH2vutpJd0UGwu2KTBYbpKr3tZhjDE72TgI6Pr0ejLD5zFZ9h7%2BrU4qlzGfVR%2FzGWmkKGBGag7WEIK%2FLWC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d4d89f03f8-FRA\r\ncontent-length: 4426\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 3361354866128377898\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4426,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"05174967abb0d1dbb1aefb2b8f0cb6b7","sha1":"3c84d323d90758cab103adac5a29227a5f813472","sha256":"9b851151b1874859dd9c6d145aebd438b53ba1131f45b0553fe7d8470edc73e6","sha512":"90dc5b123380fd2dfa3327d79935c009ca699214871f2411f90f47f04026e83047b9f68b17c08a510ba091980371a2cc3ceda3ed35e00582c5ea7ccc90289307","ssdeep":"96:re4ztT4gYKZ8LVfYY4l7n/BbzcW8PMCnmf0uhYcLQhk5:reitsgYKLrzbyPM4aYBhs","tlshash":"17917d9dd42614acd81af8f1354ac85e2c9a543622c8ae854ff48b74a1cdd08ef5100f","first_seen":"2026-01-19T01:13:34.60646Z","last_seen":"2026-04-22T10:03:13.992411Z","times_seen":7,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":77,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x130_795b2a75-2d5f-413b-8d2a-af436052f286.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x130_795b2a75-2d5f-413b-8d2a-af436052f286.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:51:20 GMT\r\netag: \"fab10c664de194fcdf3558b3c2be60d6\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BmBn8dn87iHdWoGXdfB4aPmZ5H%2FsfdwIb6Ps16PD9RtqriC28DGu2fiwHakUU7ietFdNh8FlW2pcLQtHwj%2BTIttkRouUk3XpqAyLamDCD2BwmS8qbQG3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c20075bfc31d26d-FRA\r\ncontent-length: 6478\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 16340241939216508191\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6478,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"fab10c664de194fcdf3558b3c2be60d6","sha1":"32feaa95c821cbeae0bf7b766ad628bab2d8da18","sha256":"65851d88de7acb46eaf3b042d57fbca9d46ef6bbc60bb18abd12f8e37cee7ed6","sha512":"4c3868321969bffa50019939aed1082672052b8eb0f8d5b816cb16896e08b4bfacc853bc108178bd26af2d7fbc2994606b7f83cdf0f58ae3574705999676efc2","ssdeep":"96:CWTOO/2pTlQbajwdEaf0U2cxoRkygc2ehwXprtII1t1/1M/cVmToV8eyhkfeI:CWPCHaj2cxoRuwip5II1f4xee7I","tlshash":"46d19e03b1a90adcd710daa189b9d9c03ad89c43ad20bd70b09a76797945cfd39fd0f1","first_seen":"2026-01-19T01:13:34.536209Z","last_seen":"2026-04-22T10:03:14.110818Z","times_seen":7,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":75,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/ecb/8f8306425ab46d0221b2c56ef50f72e487d5bb0255ee7333091abb7c08c465094a574c3c12d0e1812241fe43c0d5f0ea88d857f698a4fd081b","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /ecb/8f8306425ab46d0221b2c56ef50f72e487d5bb0255ee7333091abb7c08c465094a574c3c12d0e1812241fe43c0d5f0ea88d857f698a4fd081b HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://www.bet38d.com\r\nXign: jkjsKM7D3mM4QP0iRp/N0WAnKAaL2eb/aFA6PscWuRlgUKVDIJlateB9WsLieNWgRa9fctk9NZl3MAxxD4Uii6N1WA9ewfMDNzXanNOnM32CbfNzSKxwz9Ow78VHJ1YPkEhCNM5V4oEOCiyhufgfaYtmtzIipbtr5vjFWhYBqyU=\r\ntimestamp: 1773313793421\r\nsign: 6p52m7f553h4op5c\r\nversion: 5.6.9.4\r\nclient-type: web\r\ndevice-id: 7SRmyRmcidztxJ4KJ5r8hGMkjWb3FNp4\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, s-maxage=300, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nexpires: Thu, 12 Mar 2026 11:14:53 GMT\r\npragma: public\r\nserver: openresty\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: UPDATING\r\nx-content-type-options: nosniff\r\nx-custom-check: true, true\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33477,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"2215dbab942e2892e7a69dd336067ebc","sha1":"2313822dde5c3532b7e9a111b695cffc3008a78b","sha256":"ae7b45be0eef514876db3a88429c748a72ebf02601c3304f6bc28d06bc36fa6b","sha512":"fb1d48e1caa7f3c2205c12749816e84061a1fc19e3bbd758de56ac47dcb2d8ba22fe7c5c4092d96c5cbc0047c98da3dafcea7b91b0295cd6c690ebc86c187bea","ssdeep":"1536:ObQSzr1dpr22z4qWjGm3pyEpt3YrPjRdS1S2:5+r1Pr22M53Aet+ReS2","tlshash":"1a23e0069315e7b0e357a0fa6d430bd47448cfa0ebebbf52da29d9b0448e11934de9d2","first_seen":"2026-03-12T11:10:09.809592Z","last_seen":"2026-03-15T06:02:57.722179Z","times_seen":3,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x130_65acee64-6242-40cf-977e-560e3ac00224.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x130_65acee64-6242-40cf-977e-560e3ac00224.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:50:54 GMT\r\netag: \"076ebc7b5cbb9d8d1a1396f566ffc94a\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8zqybsOAzWqxhKZGz2YQd8Sux%2F2Ec1Y6hTmzCat0kLLK%2FP%2F6aYt0oRU6EuN%2B%2BYxmIJ3Js96fkdb4fb%2BJb9T0L6qXQIoEhfDHByGpazuRvEJJUGl%2BKoK1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c2001cd68d5755e-FRA\r\ncontent-length: 7156\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 15288374087428529122\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7156,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"076ebc7b5cbb9d8d1a1396f566ffc94a","sha1":"18c5f5c4d605104217865d7287f5cd0d7125110c","sha256":"7015e164a0167562620c417c564f835a93cb697df75fcd004d52505e0e65b839","sha512":"5fb238020d1f54f58f62b420f6adaf0a462a97db38b12d27c55e1f068429bf484bb4de49f4cbda632c971fac21d55fe15e55bf14f67f2916182630b9845d6326","ssdeep":"192:CSWdU+S0oguns0Bmb7ehQFW3yrawXMcSNpedBmWW:JWO+S0W3BmmhGFrawXT8iBvW","tlshash":"60e19d821181b6f6e286537cc14d8ea00a7dfcc4b0959ab7497f3dbe4a042a648dbd5c","first_seen":"2026-01-19T01:13:34.567591Z","last_seen":"2026-04-22T10:03:14.037605Z","times_seen":7,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":96,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/202501/_enc_size936x214_c5880c27-80ed-4a8d-bb19-1f1bb1235829.jpg","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:54.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /202501/_enc_size936x214_c5880c27-80ed-4a8d-bb19-1f1bb1235829.jpg HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 10 Oct 2025 14:48:46 GMT\r\netag: \"609c1ce953ba26e7ab6b7b3d99544554\"\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bQBo%2FBQkWZHYDYgZTL%2Fofs9gZBw2Q0xVZIyYmOAGB%2Bd0i4JUJZ9PbncHNAh4YeymjmtGaVJWRfwneW6SW036cBPGPH%2FWqzFBk5fKX2ENVApgtzS5O09q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d49b5cb60d-WAW\r\ncontent-length: 93870\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:54 GMT\r\nage: 1820132\r\neo-log-uuid: 7986036107133653388\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93870,"size_decoded":0,"mime_type":"image/jpeg","magic":"data","md5":"609c1ce953ba26e7ab6b7b3d99544554","sha1":"c46b2c3dd192d89cc3a2995bf9b256ea732b8efb","sha256":"2a400aec86b79e5f52589f3b04846f74ca57b6f0b0e8ee60d8b462282b9cbbeb","sha512":"d830adc6d316e76d323910c41db61841210dbe71cf29bdddab6976d033bc08859e8cd8f19a02472c2c6ca798caee666d88e8d6da0efedd45b59228759e885388","ssdeep":"1536:z/1bmRBAnd3nINu8RBd2623yvYrtCow9Xm/kEBImUJOK6s9Tm3Mp5B3G92:zVq6d3INpbk6KJHGXmujOyTBT","tlshash":"37930220fb7107f741ec10bee8f2a878426e61b5617f698ea2b2045b764e15ddd81f8c","first_seen":"2026-01-19T01:13:34.498145Z","last_seen":"2026-03-15T06:02:57.725207Z","times_seen":6,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/rdao-l-1.d6e3a425.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/rdao-l-1.d6e3a425.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:43 GMT\r\netag: W/\"693ffa80-24d3\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":9427,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 51, 8-bit/color RGB, non-interlaced","md5":"f3427cdef3e73f6a410bb3caaa15e5bf","sha1":"87aee39268e60a3f9bef90e3629213e00c4ca3b1","sha256":"9c8946d53d9bd3e9057491cc4e9ec38d1e0c06a15a8d350f9ee15738afc45b19","sha512":"fe65baf0e11f284911ffe2ef4115e53648c7e8150635a5125dcf0218f690822dba567ecfbcac482d98ef3aee17e81c6d6aa32b52484e0b8e919d0fbf5061e205","ssdeep":"192:KGMKZeO9C+EyysKTQDTplPAdby4hAPBTyunHmfhJFqIrZulv28gsz4J:1194JsKUBUbylZy0G3FpZuE0z+","tlshash":"f712bf9aee98008117c0a13478f2180629d0c1d9da6bd5337ecfd9d92e137f646d4edb","first_seen":"2023-05-01T02:34:20Z","last_seen":"2026-07-13T05:08:27.479974Z","times_seen":1000,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/headBg.651b289c.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/headBg.651b289c.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bet38d.com/css/index-399e2569.1765800272060.f992781a.css\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:43 GMT\r\netag: W/\"693ffa7f-41e\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 735\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 71, 8-bit/color RGB, non-interlaced","md5":"13883708bec58e1254852538c6810346","sha1":"def9734e406983cb308ef8d7d9d9a1ffc46f7842","sha256":"b95a9884cd835eef433ae2e391587f9c7237e4b5658acafa8d07fc482a82a945","sha512":"27832f79f72ea519d441c1465c2c7ee3a410c933cef0410b538bda0c70a490706d057175aeacc814cb30ff9f9a1b32e7c8fe16f7135f08f6d232e9eb73edcc6d","ssdeep":"","tlshash":"3f11358dee112c00d74decd210ef41238e160590c790ed25b9cbd86759616fe8c6d5e7","first_seen":"2025-07-02T09:37:46.18828Z","last_seen":"2026-07-13T05:08:27.406152Z","times_seen":65,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/65246.1765800272060.c40b56f1.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /js/65246.1765800272060.c40b56f1.js HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:05:14 GMT\r\netag: W/\"693ffa80-11f2c\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:14 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73516,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48688)","md5":"1530184094490b2a07732edfcff2f8b3","sha1":"96da9f4d5005a23393544621288a8b586808b708","sha256":"98d67e399357fec07fd03d6f97db86ef917ec56fbad6a0ab1f7f9ab86266516c","sha512":"597959f9fc104add964b0b96a6823cef67691260e77218b2992e1d23ef76a9b2b53a9fabd74440713f136798c392bbd27b3b87055d373c93a18cbf438f49ac61","ssdeep":"1536:tCS2+iDvYvNjx4Uyao0L8oDNzAuMMsTAQ0mqt2pXYzA4dANVQ:tCT+iDYvPo0L8oZzAuMMsTA7mqt9zA4t","tlshash":"9c73a501f78272384fa7e290220f2026e16e191505ac5bd8f179ffb93ef0954aa7d7b4","first_seen":"2025-11-05T20:08:30.360534Z","last_seen":"2026-04-22T10:03:14.12517Z","times_seen":43,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/ecb/8f8306425fb46e096ba9db3ab31b67b681fbb31575ff397b0117","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /ecb/8f8306425fb46e096ba9db3ab31b67b681fbb31575ff397b0117 HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://www.bet38d.com\r\nXign: bqvTiG679cZdqekR7IotvyYN+5y4Z+khj9+AqoFTRsE8SBkaEbPnWzSw34mVmjQsL676WBkT7dgK6/BYRbOWxQRAm/LttwFCixVGMMkQ08hv0QBlllxmaP1lPHNLj5bkK2r7n7tZFW58UAz+lt76HW/vhXgWQ+urelSZl4I2/Qk=\r\ntimestamp: 1773313793422\r\nsign: 5s6l3v2s292c4p4u\r\nversion: 5.6.9.4\r\nclient-type: web\r\ndevice-id: mFzNyT7xAhcS3QeTZTbjtPwsetNhAiS4\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nexpires: Thu, 12 Mar 2026 11:19:53 GMT\r\npragma: public\r\nserver: openresty\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: UPDATING\r\nx-content-type-options: nosniff\r\nx-custom-check: true, true\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2161\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2138,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"4c2738aa2f56a167e421e1676c838684","sha1":"94b8ce4af51a7dbd81a701ca0826e83932fa4081","sha256":"d1e07e686be2bbdc1a9d54beb59ab2990ddc8b93f470ef21b7413a30139135a2","sha512":"2e9cff1198cc5d63ac715811bd85bc09566d34e53a3c3a5d4137e36739f0f6b3ecac505275fea6a2ae0de22773bc484277d43a9743eae7b47130a08049c12106","ssdeep":"","tlshash":"1c615c5562608b28bb880bddc97b39e057ac6129feafdc59df94cf81580a60e604f472","first_seen":"2026-03-08T10:30:26.538002Z","last_seen":"2026-03-15T06:02:57.744021Z","times_seen":5,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x130_8ca27ab5-49c0-4b05-9a07-454e2ddbc879.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x130_8ca27ab5-49c0-4b05-9a07-454e2ddbc879.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:48:36 GMT\r\netag: \"c70ab754af6469dab65aa342462d32c9\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TUV4Mr8tMvGOSY4xF%2FsDUSVWNHqlOELqpj1Nj36MxxjwA1OjpRVRfi1I%2F077OaHYIN1%2FbpLmZRu3KYiJX%2FwwCiB8UX8%2F%2BqtK3zFmm1%2FXIYNURCNE2obd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c20075c0df85d8b-FRA\r\ncontent-length: 4056\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 11802295323863735878\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4056,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"c70ab754af6469dab65aa342462d32c9","sha1":"dcae61b5d653ecb3b357a3ebb7a7bf5f4ddd28b5","sha256":"9e32940b6f41b0393b5e2d69bf630f5cace3b5495de50cb939e3202e70a616b9","sha512":"24757e1b06750b83f502dddcc1793eb5f376d93baf17a8145536d36dd1b44c0e8e43ceaec3ed6c39c835d0cf7e08f9057812979a48191e755f7559c61ad4d490","ssdeep":"","tlshash":"a6815c23f49da53a7e19fc465a3f898fa51877ecb1255b8b1f631402c201161b8e06df","first_seen":"2026-01-19T01:13:34.618557Z","last_seen":"2026-04-22T10:03:14.029137Z","times_seen":7,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":77,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x130_f4e36c47-5a9e-46d6-ba10-c20d26e16cd5.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x130_f4e36c47-5a9e-46d6-ba10-c20d26e16cd5.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:46:44 GMT\r\netag: \"cc52561a95339341c2002a3ca0de820e\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VkwmdVvBki8AysjqIGpMHNWxxWJhM3L8tsla2%2FbKolUB8Y2iAboyTyBuVyR5Q7xTN0FcsvKqnIW6cD3N0VJhzYYtogdGffTqBLBax4Y5Y0fnQpuECe4G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c2001d12c59fe50-FRA\r\ncontent-length: 3882\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 8991918351843100268\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3882,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"cc52561a95339341c2002a3ca0de820e","sha1":"8a4caece547ef2b161fef6b0cc3ee90c8ccee1b5","sha256":"7ad12abe532f49bd7e8dffd742069827a0bcb35e8412c876fbf14cc187da63c5","sha512":"c11ed0ccef86da63c18535712d8e1130317ffdac64dc1d35272ebc7264823b0432fb9f65a5aea1e7327ce7c7195e18e1a09cf200cf81b8fa9a3b0a4bd3da56c6","ssdeep":"","tlshash":"65814dd90478007e90bb55de63f9bf9b3099f51f83543ae630a1665b800dcc26dca6a2","first_seen":"2026-01-19T01:13:34.557111Z","last_seen":"2026-04-22T10:03:13.947538Z","times_seen":7,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":76,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/rdao-r-3.3d28973d.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/rdao-r-3.3d28973d.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:44 GMT\r\netag: W/\"693ffa80-304f\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 57, 8-bit/color RGB, non-interlaced","md5":"98567b2a6024c4e690574cc2f4d8a91f","sha1":"c75986b57ba3fd98791a1cee632184a2c5a99d0b","sha256":"2eaddbbc263065a1ab9a7f46309cb8a2f39875a06aef11da4409203216c83834","sha512":"2f3e11858c5d9e2bf63fc13c5252afbb20de6c72d87678f95f0575d4a104bb0c95145ace728866afdecae2ab3f804681ead6fe2f30e2306e842cc2ea18e9f0e3","ssdeep":"384:v1f0t2zwaw/ziwfQOk4nI6/jynmn03I/Ynp:v6t2zwv/ziqT1I6rynK03IAp","tlshash":"7242cf49ed343da7d1fdcacc4ca658b092529760c6c2b2b09b8601711cb97fdb284446","first_seen":"2023-05-01T02:34:21Z","last_seen":"2026-07-13T05:08:27.52524Z","times_seen":1030,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/202410/_enc_size280x150_3a46df49-75f1-4a76-815d-8d122b35671a.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /202410/_enc_size280x150_3a46df49-75f1-4a76-815d-8d122b35671a.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 12:01:03 GMT\r\netag: \"93464fb94443e9a9e2f684f215dac090\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xMch5kHlNm6YDvEdOpZ%2FQL9Mg5ddakOfCrRDMVvWoQy09JWCOYvrNHjq8uChyjmqjtPJs4HjQIGIi%2FH%2FpJMl22x4af5l%2F7GOl%2FqFuOcqCb12nw9iziOh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d479a67abf-WAW\r\ncontent-length: 6840\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 9187628548220007960\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6840,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"93464fb94443e9a9e2f684f215dac090","sha1":"f4dc995e5c0111aab76f50cd481df18297d5d157","sha256":"90d7a27f973f83149959381465afdb337e8c08f2698a62ab7df12faeaae1ebd8","sha512":"df625896d0ecf22f4bb9dbbee49c4a648ff83114c6195c36ed4192970099da64538df7ab17e2ad6d7c931008df184382c12c2872208ebdca57329fc359394c4c","ssdeep":"192:c+et+wfs5g4L5e+RowLorHv4A8CF09zFTSRmM:L5g4L57LorHgA8Tfom","tlshash":"75e1af728dad94b6a36221e112e1398fcf79b7ba71002395c434e38d9d7541fe2b4476","first_seen":"2026-01-19T01:13:34.515065Z","last_seen":"2026-04-22T10:03:14.034559Z","times_seen":7,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":115,"dns":1,"connect":19,"send":0,"wait":77,"receive":5,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/202505/_enc_size560x272_fe611308-7a08-4173-aca5-b3a625d7e892.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /202505/_enc_size560x272_fe611308-7a08-4173-aca5-b3a625d7e892.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:46:29 GMT\r\netag: \"c59727e1506cb8a0790c617881e72c9c\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i5rMwzfw3HbUH%2Bj6vBsloDiNUPtb8NJvfzRTdUGWef%2B2C%2B3ftUYJ66%2BsGqR%2FcMDsgJ%2Bu3rb8qEujvV8oRFLg22etves%2FH1y7zeNhwb%2FPoZSnOX%2B4NK%2B1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d4afdad38e-FRA\r\ncontent-length: 10186\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 13887742585103193011\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10186,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"c59727e1506cb8a0790c617881e72c9c","sha1":"94a32d521a7e10fe39f7effcc79b0cb446959bd4","sha256":"537d94d54f1d76f1e569497275cfbc3031458406f84969087d57a11671409e5e","sha512":"8515b8dc18066ec8f9fafd2415fd027fee83682f9dd39154d1377d663c10a9f12e83f662dd32dae2ead373055a872ba322afad981189ebd5bf1f8649d97f787d","ssdeep":"192:289O6xqSEDFU+jBVcPzOwVbaSFV4sAU1MX842kkvXfi4+f1UZDZ8R:drkf3SzOwZl3W89fBi1uqR","tlshash":"9b22c1bf5101282f02d3100e767eedfca9f89724c46dd64c4e58eeb6789cabe4572108","first_seen":"2026-01-19T01:13:34.6698Z","last_seen":"2026-04-22T10:03:14.092486Z","times_seen":7,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x130_b99dd8f5-da2b-4178-a180-e25e02850723.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x130_b99dd8f5-da2b-4178-a180-e25e02850723.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:50:34 GMT\r\netag: \"278580bcff6a85bc4930db937f03f7ed\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=usYhD%2BzjYsa5pnxFOUB3dJ6e3g2mtKQlJqabYVnLhfL%2BEQts%2FYR0mG2O8%2By3XndzqTfhYvKmA%2F1nwORn9iNbhozuBH81McOj4718aTZVl%2BlMqiMoJ2UR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d509fa9f1e-FRA\r\ncontent-length: 7454\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 483305086765217117\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7454,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"278580bcff6a85bc4930db937f03f7ed","sha1":"fe88d43105a45cce09e27ad02cab8ef6eb067589","sha256":"2ec448d5dbde0b69b56856b03ec7735b80ca6801bb768fa1017d47fb0b03be5c","sha512":"cb768f350db89a856876420de1305df09f712ebfcefc1eca38fe47c263e5bbeabe8f94254bdf01eb2b74a4ec4e71bccf7fae5cba288dcff7c6eeef47a7b656b4","ssdeep":"192:QjXQBbnHjMGuotz1RQ74lDXoRNLb1L9KQ/UdC6pHPh5y9fQPML:wg5nDMakAborFwQ/UdN1P3ylH","tlshash":"7ff1bf87e2c753a861c239a282b2421670f4f51370016ea9b7add036466939bdf8c67d","first_seen":"2026-01-19T01:13:34.561025Z","last_seen":"2026-04-22T10:03:13.995421Z","times_seen":7,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":96,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/202501/_enc_size750x264_457f4394-73ab-47fa-9d93-7da9d90647fd.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:54.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /202501/_enc_size750x264_457f4394-73ab-47fa-9d93-7da9d90647fd.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 10 Oct 2025 14:48:56 GMT\r\netag: \"512af6af36378d283fa62de89bc63f76\"\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=595vfZYKCu7ANHRmA%2B%2FoYjoRcjhauz%2F35UwYMt9tOmrYQiFct80%2BZ3XM9zlZ8HImk33JT9sTuhm9MJwvJhAMxRwDV%2Bww%2B9blfZJ9VYHUApkCt2PBlS5C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d3fc48d7b7-FRA\r\ncontent-length: 309167\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:54 GMT\r\nage: 1820132\r\neo-log-uuid: 16068318169874637696\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309167,"size_decoded":0,"mime_type":"image/png","magic":"data","md5":"512af6af36378d283fa62de89bc63f76","sha1":"3a5b7740f0a5e9ebaa8a4b07f3d40f5d93993b97","sha256":"21fd5691eb44a4612574e789881718aa54ab79bc084959c1bca63e9654468348","sha512":"2d94242e4ea5cb22691f733041730439b95f8cb355f1dcfebaa0821f43c1cef721248bcc6fcf09fe763c3f749ee81851aea529975a2cacdabea5a94e12ef45f8","ssdeep":"6144:8iB4Rgk2f1feAKMtAcHvsS5VMz1qpGZHxryYZ3NHIFL:8iBCEZHtAcHk+MxlHxGY7IL","tlshash":"c06423e264afd521bccb915120b9120a5ec440116e6f6836d6d7ccb6372bfdef16b780","first_seen":"2026-01-19T01:13:34.522836Z","last_seen":"2026-04-22T10:03:14.01659Z","times_seen":7,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/css/index-399e2569.1765800272060.f992781a.css","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:51.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /css/index-399e2569.1765800272060.f992781a.css HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 12 Mar 2026 05:05:13 GMT\r\netag: W/\"693ffa80-523e\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:13 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":21054,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21054), with no line terminators","md5":"43bd08a12e00b0c231e8cba451ccdbe1","sha1":"e5fd9a39cb1ec6c99cec281ac7a604ae15e4ae38","sha256":"92f0ed69909b1ae5b581d4b88d5f47d32a2b177b3812034aa0f1f41a11b2d46a","sha512":"c1a06c6047065a1987dd6de43712513277fe93bf59a94cd38f1fb62813e6ee79b4669bea451bfd5f680931b5263a0af7e6f40ef6324dd012bbcc1f67722d46da","ssdeep":"192:dLfl5F3fPFqNu96ShU1ullsH270RHeO51IWlLBUWl1dLIrEjWm/pXIJSse7U0SNh:doXkSse7U0SNWqQM40+O61I","tlshash":"bd9293f6e1ac272b2036f6e5e981fe6e7005a902c7574629fb54331f81ca1a17773e48","first_seen":"2025-07-12T11:39:44.985379Z","last_seen":"2026-04-22T10:03:14.033232Z","times_seen":28,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/css/60992.1765800272060.0ab0fca2.css","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:52.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /css/60992.1765800272060.0ab0fca2.css HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 12 Mar 2026 05:05:14 GMT\r\netag: W/\"693ffa80-1439\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:14 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 1267\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":5177,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5177), with no line terminators","md5":"a0ef4268641ef0b005737ce8cc0c4b44","sha1":"9bb50b9000a419e7a701392b0d7d6c992cf585bb","sha256":"f64c7a7e6ecd620d1c7f8cc67e1eda83a0a115a8d86f3954efdaba3c09d62e66","sha512":"07605ebd7e16aef28f0ad5ed406f29ea9b77e8ba6b2079c810aacf8faf0b4a8d18d4f7775c62860cbf6d4379729a60076103a4daa833c860ddebeee3793ccbe2","ssdeep":"48:ZSPkOO2s2L5Pukasq+nArLkrL4QuQKhUjUkM5P6CdRDRWURcWaTHR/:iOvyP2r4rEDFP61LR/","tlshash":"d1b1412f01703349641bad6807dc67098325d8b399eb37da259d2a0dcbc3f861eb718b","first_seen":"2025-06-26T16:31:28.933081Z","last_seen":"2026-08-07T15:54:26.717762Z","times_seen":3659,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/rdao-r-2.b22a9f38.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/rdao-r-2.b22a9f38.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:44 GMT\r\netag: W/\"693ffa80-3071\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":12401,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 57, 8-bit/color RGB, non-interlaced","md5":"b5c72992b0327b36f67ba1f1ddcc9709","sha1":"4260a70304e373ad0c9dc8945459d132b5ebe38d","sha256":"90fd92cbe288eeef841ebbb0760c2b041aee0196b4b9a1ad4d47cd3cb344a760","sha512":"cc234a0e7953edd49f77a37002eb6b7dc858da304da4c18698958b70b508bdde4d7b6ace5fefec893e62639f4b1037e221f4c70feb19e928a42305f4398fa8c9","ssdeep":"192:RFINM5IVkNpieBIFSBOlDb179kPFt1b7Xfsz/WU70WaBtw/BmPM/l6CX4213Il:HqMeaqEBOxb17KhZU7HEtomPM/ECo2i","tlshash":"cb42d056fe28b213eccfdb472cf462415082ef0201b5d75cdae40633b474fb58aa896a","first_seen":"2023-05-01T02:34:20Z","last_seen":"2026-07-13T05:08:27.447281Z","times_seen":1028,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/navbar-sub-num3.c3ee8d59.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/navbar-sub-num3.c3ee8d59.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313793$j59$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:51 GMT\r\netag: W/\"693ffa80-1758\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:51 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5976,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 175 x 100, 8-bit/color RGB, non-interlaced","md5":"d77401a746fcf27ba485f7798e41c1be","sha1":"7abc745194a51bc3feec585c3ea60a64db8d9042","sha256":"bc4df39390e525dab95d86cb66d856a6a71030e1624a72a35b2a2c252215980a","sha512":"e4cea5e8ca06779417710ba773d0f55a13267842eca5e04809354108ac3904e77a7cb4c15aa3a0a09cfb212248e90e1f0cb7b81c5660286f4710d9d39a8a1193","ssdeep":"96:0Y2cTxEzZs75jmgvBHRxea1Mj+NOE+tssIo4x1vci66jFUDzCRKUgUNHjN7:0UOz675yofea1Mqf+tZR4zU6jiPmNB7","tlshash":"32c17da87d220e00e89d5fc43ef4913701912544f8a2e6167fca84648f145b6da7d3cf","first_seen":"2025-07-02T09:37:46.206637Z","last_seen":"2026-07-13T05:08:27.510573Z","times_seen":65,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x130_f494170f-e86d-494c-97a0-c11c408da431.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x130_f494170f-e86d-494c-97a0-c11c408da431.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:51:29 GMT\r\netag: \"57da563cfbbeff51829581d20f336ca7\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvoe9U5CHfogA4KO3M27xsCTd7wMo%2Bs8Tfg%2Bgf01Z9BsOuK9D4XsSoaMXi2Jh3yadvp6Dp2YfGOoIeEDXQB3NaOZSD1nzDXYkb%2F7mOPQY2Y5cLMBROAb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d4fc62d3a4-FRA\r\ncontent-length: 6812\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 13135218715170801482\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6812,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"57da563cfbbeff51829581d20f336ca7","sha1":"02ca2ab5419a74cec418fddb61faebb3178a5868","sha256":"0584921e5ea1beb3e6d607d5f0689de842966418ba0d930bd48551f193532852","sha512":"e0b3afe9f6ee5b4530335ddcc62eb43915670823043ed184fe447a95c4906ebd987327b21d2c6653d6ce3a704711ee8aca32f18107b393aac033cf5342755b81","ssdeep":"192:2Eem/Wb/r53dvBohISGK20ScL0XGl1ihQ8O:Fh/WDzBbSs02HRO","tlshash":"c1e19f6107fdf9a7a8c0092075e3a3a57b873d8e5054ca07b89f930f67f5e8d25d90a4","first_seen":"2026-01-19T01:13:34.495166Z","last_seen":"2026-04-22T10:03:14.106418Z","times_seen":7,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":97,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/kc180-1/noData/cms_game_noimg.png?1765800204612","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /kc180-1/noData/cms_game_noimg.png?1765800204612 HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313793$j59$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:51 GMT\r\netag: W/\"685d6cd0-1371\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:51 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 3576\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 590, 8-bit/color RGBA, non-interlaced","md5":"84170735ffce6fe0e70a3136a36b8ef6","sha1":"5b2dcf1d5d92d786f1e58dc65de3dab1f35d7278","sha256":"581435520cde2b0026b4e7244a85b6eef0be740cb18c43690c420d1ec326d0b4","sha512":"bb0fc1b267c99db65ff3b9414576d3f4c0c9016e5309f2806a9f4d51c8c63383e9279c3a04daa5feda5489eb231a846b60040c71e5fa2798ca141b36ae0241f6","ssdeep":"96:nKdKn+AFdoSfrmrMDpdXd8nbZDH3mC+b2A:KYn+QK+pdXd8nbZ73mC1A","tlshash":"99a14be32b5d4badfe1e9a76a5549760ea632aff482c8c0e6887c955048b2144f640d2","first_seen":"2023-05-01T02:34:20Z","last_seen":"2026-08-02T09:02:15.179219Z","times_seen":2038,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/home.1765800272060.28b13b76.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:52.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /js/home.1765800272060.28b13b76.js HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:18:42 GMT\r\netag: W/\"693ffa80-85e6\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:42 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34278,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33550), with no line terminators","md5":"8e081ae3dc47bc3e01abe6c5adfa8f40","sha1":"f9ec7414b1bd119ce7ead46fc1c4da9bec523500","sha256":"70d45b25937137fa87055672449ca78d872963346e8d64323ee0c2fe8b888830","sha512":"d516cc23f3b13c71ad494ce645070d264042b7a01ff9e327b93d2a3af7efedd615577c70f35b73f13dc749a6d7f02b6c11c87f29d7f60565c25704e0b058d0e5","ssdeep":"768:L6Lu/ffsp3aNWEsZ4IIATAJ016fkmD1DwuO2KSIMcK1jaJ7wBq+JbWk8q9G+pV/B:N3D8O1GSIMcrmbJqCPjdd","tlshash":"a1f2f884eff0e7f8229fca9b8e319170652537c1e0c8b8a461ed5f187d1a396b4745e8","first_seen":"2026-01-19T01:13:34.510295Z","last_seen":"2026-04-22T10:03:14.045894Z","times_seen":7,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/css/52388.1765800272060.5b6b396a.css","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /css/52388.1765800272060.5b6b396a.css HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: text/css\r\ndate: Thu, 12 Mar 2026 05:18:43 GMT\r\netag: \"693ffa80-24a\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 586\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":586,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (586), with no line terminators","md5":"7b83e2f346447d286fb2320bd2930788","sha1":"ecc62f615f7da7562062c7e8a39950a8cbd5fea7","sha256":"b190b852d0ef2da90ed93f922a8754d7bafecbcce1ac7a405bac24582e899f38","sha512":"420b3e410509f721f01ac5c4d3eabbdb60fa63f94a1448d554bafd63e7bc16b3fa4d7018dae21c60e998bfc4bb0f30c24841122cb7e66d10c43ec480e5191079","ssdeep":"","tlshash":"13f0ac3010e4603dc9ff97717522855c9028c08abb971e4de7243e7bf0b708488321ca","first_seen":"2025-07-01T00:29:51.894388Z","last_seen":"2026-04-25T22:16:25.231368Z","times_seen":574,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/game01.85b388dd.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/game01.85b388dd.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:43 GMT\r\netag: W/\"693ffa80-9967\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39271,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=81, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=271], baseline, precision 8, 270x81, components 3","md5":"abf180088cd18dbb8b8a87e947aa4285","sha1":"b511424b6a88d4faf129e526340ac617caaeb11a","sha256":"b136864ffef1cf1bca9a4106031e7f247fb62bb717db1a495c96c7d8b5b77da3","sha512":"846fae11172592913f58d2945a3cb9824f3de2adaabc29f22de42e58db0009ab8d080407b60c0782e52fb2869385ff5ddd4f6877b8101ec0e1b3fcd9e03029bc","ssdeep":"768:7BEaOnPFBEaOFF0f/K+aOW6ceGs6gp30NsUbGGDeex1yX6DS:dJEJoKXK+jW6cegY0NsgGGv1xDS","tlshash":"7503cf2aaf53ef67f9e58eb5a4e5c28542402e5598772b63725c14037fb07e28f3d208","first_seen":"2023-05-01T09:33:58Z","last_seen":"2026-07-13T05:08:27.629249Z","times_seen":858,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/mainBg.3b0d4da5.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/mainBg.3b0d4da5.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bet38d.com/css/home.1765800272060.7161361d.css\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:43 GMT\r\netag: W/\"693ffa80-7d5\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 1599\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 483, 8-bit/color RGB, non-interlaced","md5":"bde4515d6390dcce798f416e612f8b47","sha1":"2fa1b948927eb9b33a10d7e51b7c225ba8a85527","sha256":"b0b0a4ce240c9b223827c52070600a30b5f56cb8360f7bf94210169a5e1fbe78","sha512":"09aaedfb478a46aaf46c420e224b44c0faae7d74603f199cd993440212041aaad2a6bb4796bc91bae5c1967b7f1bf2ff12d865eaa8b51d43296772d8ac4b58a3","ssdeep":"","tlshash":"1941e86ffe1e79248b4bd88a0cc9642bf2235d4098e2e224e4c5e41a353429283288e7","first_seen":"2025-07-02T09:37:46.183128Z","last_seen":"2026-07-13T05:08:27.546172Z","times_seen":65,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_c8e67428-f1d2-4c5b-93f5-d534c7690cac.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_c8e67428-f1d2-4c5b-93f5-d534c7690cac.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:45:40 GMT\r\netag: \"1855a9baa8ed62440e363cec27ded71d\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IIo8pku%2F1VacXZc%2FhAC%2B02I6ZlefYuHeafeRSU4yNW3LWZqxitMPtH0jgVvdehqsL6hp6NN0BddMxIv9XJNDskb6J4%2By1O6R2SvS%2BJgFyw6XshafVrS7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c20075b4d139bdc-FRA\r\ncontent-length: 6532\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 11472064715223329842\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6532,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"1855a9baa8ed62440e363cec27ded71d","sha1":"0d3fedf524d797cb96f7a1f7a326e54a7ea67380","sha256":"54b918585efc2b6ed37911bc51a5deca2bd023bf51499129f6aed798f7cfebe6","sha512":"ea505bab03ba743e4e530ad4b127e92b6f1e7d37d4530342a75617db893a5bd6307516a8d42482671b9b07992a69980bec5378bb01a28a3c9d6f9509fdec5d08","ssdeep":"96:yHIsEmkKsc9weMhl4+hXWIKSwHEmWzdPhhiE6mlqGTNTZb8Efip0P6qkhq:yosvTRMhltXWIKhHEmW7PRhRTp8EJyA","tlshash":"0bd19fe164d5965cfba2a152663b20a8fc31ec9bc8663fead0b1cc4944f0a1dbc98841","first_seen":"2026-01-19T01:13:34.59509Z","last_seen":"2026-04-22T10:03:13.965878Z","times_seen":7,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":118,"dns":1,"connect":19,"send":0,"wait":90,"receive":1,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x130_1fb5a7d0-4c52-45f5-9ee7-16fbf384d812.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x130_1fb5a7d0-4c52-45f5-9ee7-16fbf384d812.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:50:25 GMT\r\netag: \"f58c795afe0b4c04527b0c3d95c696b5\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a4wMOm2HLFglZikiPjXQpImQ%2B%2FynCArM7HMTqvDrvFY5qXpqyTtgkav69R1ZfvDhuuDvnManJ1nBYxYrf%2BJbCuBsIXL4S%2BP1CfUfXKp7phR8Ypl%2Fl8b%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d51cf0d395-FRA\r\ncontent-length: 5214\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 15690785199880465134\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5214,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"f58c795afe0b4c04527b0c3d95c696b5","sha1":"e4c3edbbebb9015bea234c57754c5c90a7482677","sha256":"096215af159b86b4084828fb7ed0a47d4037eecd8ba2eec0c37dc263adfc4a09","sha512":"0cb75ebe4153381e777141e44ff5b7986f061fcabc960372a5538689b28adac1c966372e1c5fe60fb2c354b1734ae7ed7fe1140613a8cf5ef2683309dd2e74a0","ssdeep":"96:Ckp78u4tjbPgYZpOsksZVeNaf6nzAugZshBfsbKv1v8K:CigjnbO1hNY6nzTgoabe1v8K","tlshash":"7cb1af0afc8b49a38537d9353e90e18696f0ec9bd91d174106c8171bfc5b192232e3b5","first_seen":"2026-01-19T01:13:34.672387Z","last_seen":"2026-04-22T10:03:13.996902Z","times_seen":7,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/chunk-init.1765800272060.833a06d6.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:51.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /js/chunk-init.1765800272060.833a06d6.js HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:05:13 GMT\r\netag: W/\"693ffa80-42969\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:13 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":272745,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44101)","md5":"7e2d515b5a30970c9e6d5e1359d00986","sha1":"d0bbfc3db10244960c664dd3aa1524cf5b5d5f30","sha256":"71c165dcc1fb67e24c20e87ba8b0becc51434f79d661967bc5e05ea6aa66d47c","sha512":"806257558894ebd8436bdc30edc8b0c260e8194f189c91c781dbfb551ca2cafe80b8cd33e4e3fd8243f84d32c1bfff2af2b615ac795179ed607b27d563962ac6","ssdeep":"3072:stwqhOIKENB85doKa/x5wc0dB5/J+UUknCqd7ACifMur0g/C:9ENm5ox2Br+2nCoAlfMu0T","tlshash":"88441b98b3d171b847cb52e5622b1035f6ba1c933098e4f0d219ea947f3168dd52eeec","first_seen":"2025-12-06T05:02:16.12604Z","last_seen":"2026-04-22T10:03:14.00075Z","times_seen":16,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/chunk-common.1765800272060.76d281b9.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:51.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /js/chunk-common.1765800272060.76d281b9.js HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:05:13 GMT\r\netag: W/\"693ffa80-27a0e\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:13 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162318,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4b66702ee389ecb030b0b1d55bd67755","sha1":"8d85e984dd9c12ec8a75d88840530daec5efc115","sha256":"b18f4a858b242e6c822cd5b038310cc245a045ac0a38079df09fa0c8de5dbc52","sha512":"46630add12b37d6377229fec903a43faf8e351f2780e41d7912522aeb510617b93749ec2daf7ee02878d5fddf51303fc91656c478fa6f584a44aa5f048fc1b20","ssdeep":"3072:WZVBM9To6yjFetHkui7N9t/voaGAcgD3t:WZVBM9To6aRGGt","tlshash":"17f3e8c5b3a0f07e9a1ed53779331499b12f758274c87c60f1a1ade6bf1a704a436ca8","first_seen":"2026-01-19T01:13:34.585241Z","last_seen":"2026-04-22T10:03:14.043813Z","times_seen":7,"resource_available":true,"data":null}},"time_used":842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":842,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/bg-products.e4ddcae4.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/bg-products.e4ddcae4.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bet38d.com/css/home.1765800272060.7161361d.css\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:43 GMT\r\netag: W/\"693ffa80-6bcb\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27595,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 307 x 342, 8-bit/color RGBA, non-interlaced","md5":"e61aff410bd41a8256ee4de7d1e25db0","sha1":"4debbd11000bd5796036eee1550f59d98ef1d3f0","sha256":"7c3578ebab0ef95c73226e6e6089174946df4ac8cb33b01dc7a59501139bbd70","sha512":"acd8dd2c1a79eabadcfe003e52ec6b7e1bea822314f4fc50a13be639e443fb8669dac75b7a0473aa357dd071f37914d03b97a7567cedcb1848cafc6cc3c23c46","ssdeep":"768:mgFEwxfk8FrBI0w77m3oySk3QiDVElRHAH:VXxcylI0wHm3oUuLg","tlshash":"8ec2e0e75be28c2c9629802312c6f873defdb3681094f056dc9ba53556d2d13c19ee2a","first_seen":"2023-05-01T09:33:58Z","last_seen":"2026-07-13T05:08:27.5188Z","times_seen":653,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_5838420c-e57e-4b26-9519-0bcaef82747b.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_5838420c-e57e-4b26-9519-0bcaef82747b.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:49:47 GMT\r\netag: \"7af34a005dff2544dea7bc3cf4d7e249\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hz9R0S1NeFuFlfZNHoNPeHuCgDtdpPgdGdKlQ%2BMncyPMYsQaFiDoPNJQDN13aaO4IGzu7%2ByDSJhUdmXrYF5nNhL9ebk%2BImYT%2Ftl83X1gI2VkToe%2BKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9d04af38be123548-WAW\r\ncontent-length: 14154\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1738989\r\neo-log-uuid: 16985935497687444234\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14154,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"7af34a005dff2544dea7bc3cf4d7e249","sha1":"e654834d5d59311d7ef2178a4a934c361afb2381","sha256":"8083ad22e90686742fe76afa560375273453aa32bbf7297b405753f3e1fb945c","sha512":"8b88605e984d94ab2dd8276b4bb23ffa80fae940172fac9dea484635579fa937edc521f500bb5cd757cefcc91a45258dad840e61828bdfd5d68b791adbf2ee6a","ssdeep":"192:EwVc4D31OJse/J57JVHfSBIZBfYspcHnkTROrDBxQvdxBZ/GptSfiEEE2m:BVtM/b1VaBIrfdsmRORid3opz1Fm","tlshash":"7252cf2bdf0e814b7170110478dfb17b2c53ee49b265a4e8f75de23ad0963369930386","first_seen":"2026-01-19T01:13:34.558435Z","last_seen":"2026-04-22T10:03:13.975454Z","times_seen":7,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":76,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_ddf5c6f9-cf40-4473-9593-419ff7d7de4c.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_ddf5c6f9-cf40-4473-9593-419ff7d7de4c.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:50:10 GMT\r\netag: \"f35b303a3cda6dd760139990f630a6ba\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ICX1SvOsFyTpcGH%2F8sZPKluUH%2FOXmtGvnyPL6Y3yNrxNbiT6FBoZM6mQSs%2FHyJVyKqtatOFvq%2FWWyt5mmkNUmFd79pUv4XZFWrH8%2BBF%2BbYv3wAOKCzvR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c20075bed1e0368-FRA\r\ncontent-length: 8582\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 16553392389004280809\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8582,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"f35b303a3cda6dd760139990f630a6ba","sha1":"47be7f7ad4f7ffbde42a16c50cd7831b51b5bd2d","sha256":"351195df4ae29509e28ea007bf12f21735699281b19fad8fa01b8f30c85f757f","sha512":"2fccc8dcf7a7362d5b5f9de5fa3f041b23bbbddee070040ddd9b1ecdade162f7fca9d9c2bf80b07fc648ad370e50e2282101dc7c0fab53f42c63c920bfbca7f3","ssdeep":"192:N7OoMMGSeg0Cy9CFlVhh3yU+6toUwe6+M87F2b6W06T9a3/K:N7Oo4uQc/hnubwf7S","tlshash":"7802bf39506cb16b60656a7ee352be4b8c88a877391113810e4742ff11ae2ddbf7b61c","first_seen":"2026-01-19T01:13:34.664457Z","last_seen":"2026-04-22T10:03:14.077658Z","times_seen":7,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":96,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/202508/_enc_size280x150_abac0779-1028-4a4a-81d8-38a55748aa1f.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /202508/_enc_size280x150_abac0779-1028-4a4a-81d8-38a55748aa1f.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:58:54 GMT\r\netag: \"a1c9c018f0f4e488d2612f10711a6452\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LQj7GKY%2BAoF0lhxlyJV9CKofLWtx1TCU3Yt7L7uHSdxKq4iXkP6Xmebxz7uz08DyEPJW034J7EdLOM64OA1mzfayY79ye6XZSvpxWiARrLQ2Xrx%2FENQx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c2001ceea383a6a-FRA\r\ncontent-length: 11928\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 17673125677206909591\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11928,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"a1c9c018f0f4e488d2612f10711a6452","sha1":"17b52d168039553f44af4f2562641fee237a80b2","sha256":"6b6661532cdb37b1acdd99c42c29c699052c8e8ee32a7f7723a4ec526257496e","sha512":"fd08ef1f217f25bf7d3be1d1931a519e7e49ede3164a986b432f577f32bef26647bcd2e77a3e4ea0a2c13d107033a8a2a7a2d70b9aef3766ff72bd51a3cdaeec","ssdeep":"192:jhmRxXbfZ/5WYZkzxpJwwsAEYU/D+xwxUAuK9ztkSHiIAqMTEAyMXBcoxf5+U7Z0:l+xF/5WF9T9E9cRAzvAq+EAJqoxR1V3k","tlshash":"5b32af9d366261514ecf6627bce4120d3e10ce343c5b12f24d9a68eed534376f58867b","first_seen":"2026-01-19T01:13:34.57427Z","last_seen":"2026-04-22T10:03:14.113786Z","times_seen":7,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":93,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rcf-img-hk.fdhs31slkoihkkcn.com/gp180/c8c033bb-2199-4c32-9c88-4bbcbc9fcd96.gif","fqdn":"rcf-img-hk.fdhs31slkoihkkcn.com","domain":"fdhs31slkoihkkcn.com","tld":"com"},"ip":{"addr":"172.67.189.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:54.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89b958b1.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 15:30:13 GMT","end":"Wed, 06 May 2026 16:30:05 GMT"},"fingerprint":{"sha1":"28:4A:33:87:9D:34:0B:1A:66:44:F4:04:76:A9:2F:1D:E0:B9:5B:3C","sha256":"70:E2:B5:FE:A3:CE:30:F9:F3:75:12:99:3F:D3:F0:9F:13:18:28:B0:A2:CE:8F:3E:F5:77:CB:A3:B3:75:4C:98"}}},"request":{"raw":"GET /gp180/c8c033bb-2199-4c32-9c88-4bbcbc9fcd96.gif HTTP/1.1\r\nHost: rcf-img-hk.fdhs31slkoihkkcn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 11:09:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 88077\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D3x9fJGjKmMLoQcEzhJzAgHfLCpFAWj%2FjWBfiP8G8DWpSHptGcktzzGH4ID20WofMdaRIUqtnN6EeFn1bRBp1KDeMwxS%2BB7BlZtFB1%2Fb1lRBeGvs6KMbREDgIU9eIIk%3D\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"c2779bd16fdaf0596783964aff7999c8\"\r\nlast-modified: Mon, 08 Jul 2024 18:01:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nage: 45186\r\ncache-control: public, max-age=2592000, immutable\r\ncf-ray: 9db2596fde7a0d38-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88077,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"c2779bd16fdaf0596783964aff7999c8","sha1":"c36ae9ec6fac85eb3c860cc7f809767c600ef642","sha256":"5453befd8c4ff91b2556e3e2751d5ef628c6fb305cdfb23d8dd8e06f04aca2d2","sha512":"d7abd67831a95dbabc5ec8c6157dca22fe456847a711a9a53a74c745f89e41d90c51386d1fdcc8c0a96465e1b0b75bb663b85b8caf7fcbe882a62478e1fd771e","ssdeep":"1536:v5mw44bWc8FWR6ApoJeXIaVvhK0KJxIfsdYRVU7LCvWH7cE8DjeMrhBOFAsoVbnd:fNsWR/GQHlhux8jU72vWH7cE8D1hBO4d","tlshash":"dd8302b9d5f02c644d5f38b83c8b83201633c9b85c89b427d025fe1fb72ab7490696b6","first_seen":"2023-04-26T20:18:12Z","last_seen":"2026-07-13T05:08:27.581507Z","times_seen":193,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":82,"dns":1,"connect":13,"send":0,"wait":18,"receive":10,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/rdao-r-4.5d6173a4.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/rdao-r-4.5d6173a4.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:44 GMT\r\netag: W/\"693ffa80-3922\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14626,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 53, 8-bit/color RGB, non-interlaced","md5":"113d3f2af50abaadad7df566c6c82d22","sha1":"9ac7ddf5cd311e88709d29b3a69bf209c5ca1e51","sha256":"a1a9bff1875165cafe5c41941486db0a6b12028b63e6738d1f79980cb2408caf","sha512":"a9f8174ee1300bbbe90a2d5358758e7d83932b64191374fae2960d48c6860c30268de649e1108e6b1e5402b1c17b84abb1267b3d2d1e0e3915ba29d45392cdae","ssdeep":"384:OEesk78FGrdSgJTFYaLxOJGltTrtYrqdcdr3l5sqiu:ORskkgAglNtOJitV2JXV","tlshash":"7762c05dae5330039e8eaba5cf3fe0710d5a1729e055c4eb1117e8b754980e4c34a5be","first_seen":"2023-05-01T02:34:20Z","last_seen":"2026-07-13T05:08:27.464253Z","times_seen":1030,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/ecb/8f8306425cb6740e78b2802ff5047afa96a8ae096bee393c421cac4924db741c4a080b3f3ed2f2822673f3118bd3bae081df46a59bfce8","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /ecb/8f8306425cb6740e78b2802ff5047afa96a8ae096bee393c421cac4924db741c4a080b3f3ed2f2822673f3118bd3bae081df46a59bfce8 HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://www.bet38d.com\r\nXign: NooQ/zNb24xjDZdCDD6emQdZfmDEOjM7Wmj4xAszDoCXUbnt7g6CGI1PqYzV2tGez+wi4X1FmaZ8pyvtF5foBuCZcbo5f2aSkXBJbfYOCNAkWv5SDWipxDD4ekVbezzBCeAmCfr/P5ONBQHJGRWoQpjgduKgJlwYgr3IB5CUMns=\r\ntimestamp: 1773313793422\r\nsign: 5s44155k70371t76\r\nversion: 5.6.9.4\r\nclient-type: web\r\ndevice-id: WftSYdripid5zKj5TEYKGX724XpCZxfz\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=180, s-maxage=180, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nexpires: Thu, 12 Mar 2026 11:12:53 GMT\r\npragma: public\r\nserver: openresty\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: UPDATING\r\nx-content-type-options: nosniff\r\nx-custom-check: true, true\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 83\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"aa1fe36cc499baa3fbdc7ab9bda7432f","sha1":"201b0fc1c4c699f3538c8e3992ec08ecd2f3acb3","sha256":"d509d9e26b3c3a371856286d14bcdd4f17125a10d8ee40e119fdecaf964fb478","sha512":"2dff3b34740cc9d3690f596673675516493472f5ad4bbd3536b5b1b18922543771be73e01051874bc7039aef9461cedb841f0cbe4945118bdea5773a4b3f7a55","ssdeep":"","tlshash":"03b012a2d5a309ed9644713104305c414be022ccc9bcf858c7bc4d2b45650210494105","first_seen":"2025-08-09T20:01:46.169117Z","last_seen":"2026-08-02T09:02:15.066072Z","times_seen":1564,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_d7806098-dd03-4485-8f26-9f1e8dc0ff34.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_d7806098-dd03-4485-8f26-9f1e8dc0ff34.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 12:00:17 GMT\r\netag: \"eed7fcce000ecdfda565661d9da98869\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wSvMeoZT2Qj1W%2FFIDewIWY38DuExePo7CoDO2WXv7k%2FQsqryywOP2e6UZnUMUl%2FVETSJbuuZ4jsrPZZVE8ah7xFL9wZiNnzG5XlaXVcqKmbIDZp5RT5L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cd91c1f8d965280-WAW\r\ncontent-length: 6964\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 13429023735883725335\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6964,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"eed7fcce000ecdfda565661d9da98869","sha1":"fb418ee87e3a8fe6cc2298aca4bcc8e36fa9a923","sha256":"103f3c44b62fe8d4d7c3a951cf741b60e65151e184d9cbff89ea6813b929edc8","sha512":"b2968fa7d1e020414187e64161b39e0e48dd4945969c11ef54c9f0337135008e0bb2957b0f0856d3f44fc76a318dfe024127ef841b0e4ba88d40fa6dc4c1f8a8","ssdeep":"192:TB4oiywxqDCYTaNZ2mNygrl4d94wHT+TVuSR2Hc:2oiywYDrTR6l45z+ZuyT","tlshash":"ffe19e8f163176efbfd965f53e82c569cac771007470d6a2e62face2c0530022a7499b","first_seen":"2026-01-19T01:13:34.555803Z","last_seen":"2026-04-22T10:03:14.089501Z","times_seen":7,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":114,"dns":1,"connect":20,"send":0,"wait":82,"receive":4,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x130_c3a9900e-04f2-4263-b6e5-82392d906614.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x130_c3a9900e-04f2-4263-b6e5-82392d906614.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:48:09 GMT\r\netag: \"072c150fe3ff52066c78cbda207262c1\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ELPhmXCMBKQ0jnY1u1XOUngv7alHMwj%2F5C8SP0ESYoz6%2Fp%2B0bDP%2Bu0npY0NrVsNpbyi9FaQYM5OoGFm0GNV%2FjeFCb11xQBHVS8C37f4AhHmnqadSKLUr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c2001cecb2bdbbf-FRA\r\ncontent-length: 4402\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 18396337484966351363\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4402,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"072c150fe3ff52066c78cbda207262c1","sha1":"5ede74253e88aea732c4b1810992f898e7b81427","sha256":"13f7b14265b51dd26fe0820068893415420be937df25141097c9363b8154cf64","sha512":"0d625f59e1ebfe5e9c1cafb2b6541481774ef4a57028c500d6675622284c0e4ca895901b3deea298860c54a05991f28155593f07ad6912a5d4698d12df5cb9cf","ssdeep":"96:d/vSKA9YSGeRduEl1rxeXKljgQjrL4qThq06uYR+CcVh8tXwYKyO:d/vdAOXLEl10XKlJTE06u4Y","tlshash":"f4917d6f3131436d2b617939a280643f9d038ba56a002b42ef44fc6f80105d317bc8b8","first_seen":"2026-01-19T01:13:34.503619Z","last_seen":"2026-04-22T10:03:14.096166Z","times_seen":7,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_553cdff1-95ee-46bb-8237-54da1e6a3abd.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_553cdff1-95ee-46bb-8237-54da1e6a3abd.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:49:18 GMT\r\netag: \"8063f91675c649c1dbb3bc2976b97f2f\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F0XJN3X1ycxMkZyd9ocO31pumkqQuNSkpP4aOjsqYLbGB1YKbCs3ZMX1rt%2Fk1oX6gHQXuxOmguNNVMWXYK3qzV8Y7SdwyL5Xm8eURJYv5WZ6dVP94Nye\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c20075beed2dcae-FRA\r\ncontent-length: 10224\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 1125262764491565237\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10224,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"8063f91675c649c1dbb3bc2976b97f2f","sha1":"d600e9960bab12f8e489dc3f948e33751898eac9","sha256":"463501ca38ebe06df6b9a8405bbda1e0a90ea1747e064498cd1553fe558ac826","sha512":"5a19aec688ef948f3f41548ae0aa9333be9a3faa0de7422b7eb141ffe00ae304ebd5351fc93a0416c04e953e155cc692cd71b54fb2a5ee60883799c16f50cd07","ssdeep":"192:Ya0lmQQkKPeyxc03KJtTiCHIxych8UwFCJ3WG3xma3olsk5PX9zR/pv1Vss:YaXpFC03yEYDUBEJFv9jB","tlshash":"5422cf5a6672d424efcc74b130051c6efb1b799c79e9266cbf0be25a8a8f140c0a44a9","first_seen":"2026-01-19T01:13:34.559732Z","last_seen":"2026-04-22T10:03:14.103571Z","times_seen":7,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":96,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gp180/_enc_size936x214_119e7061-da4f-4271-84cc-6386c342e54b.jpg","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:54.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gp180/_enc_size936x214_119e7061-da4f-4271-84cc-6386c342e54b.jpg HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 10 Oct 2025 14:48:53 GMT\r\netag: \"480663f28eaf319f060be1c0b9cac065\"\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVBgG5Fzokq3ghRz65uOZO7tUMUcAbxeoP6o6Pp%2BqD1OVBHk2%2B0mYOuHLECRzxvi7uKjEUd7%2BrhwmHT0xq0QYkfoO9RAEblwUD1FSB2yRxweBHHA8%2F34\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c20075b4a49d269-FRA\r\ncontent-length: 174578\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:54 GMT\r\nage: 1820132\r\neo-log-uuid: 9647314536139019082\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174578,"size_decoded":0,"mime_type":"image/jpeg","magic":"data","md5":"480663f28eaf319f060be1c0b9cac065","sha1":"6ad426f56f8e97a8ef3d7616340c1237478827b0","sha256":"e0c5b141052d928c17b891ab05a7886cd4dc5013a62e6f2644d88fdc2d7f9d7a","sha512":"86f61b608ce2786a6bf084ac37dbc9cbb812c5eb1c5b111be8e4b0192485718bd0ebd294b86e900e1bcf014492e15da78c232fe0d5895033a8902f70f4313005","ssdeep":"3072:+aqCaxTCakUNkmNrW9/EnHK+2XWEKE8Eegv8C3m2N5/Pe2zXiRsOpQJDohdi:Wz9ZbHto1eQxX/m2GGOiJDp","tlshash":"e6041267f9969f22f4aa553876e2d3ef20137b2ed3d380a9708e6645b3610c1ed0d189","first_seen":"2026-01-19T01:13:34.581046Z","last_seen":"2026-04-22T10:03:14.059666Z","times_seen":7,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gp180/_enc_size936x214_53ad32bf-5935-44ab-8f82-21fff6da4b7b.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:54.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gp180/_enc_size936x214_53ad32bf-5935-44ab-8f82-21fff6da4b7b.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 10 Oct 2025 14:48:59 GMT\r\netag: \"012031f26de57cd71815377d7734004d\"\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rE%2BtecuGFIGEwPApn%2FadVV0xt1byGEiwIKugSrwixjqiJx4fOgvjTDpUZfV8y1MhTxvk0HubwLUS%2FSWQq%2BxOdElPjeaMqJJfAIqUCoHXYKjAP1MkZsgW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d41ae2dbf3-FRA\r\ncontent-length: 243594\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:54 GMT\r\nage: 1820132\r\neo-log-uuid: 16431110630849330730\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243594,"size_decoded":0,"mime_type":"image/png","magic":"data","md5":"012031f26de57cd71815377d7734004d","sha1":"2b02eafea7487139fe43f092b5ec0441050c1bcc","sha256":"862c9fa559b6632791c198bfb5315de66a9be30536f059ef321033f95bfc95dc","sha512":"90ed8db44eac971cbab4bde77a0f5f29c9fbfb5860889808bb0019605b96f305819d7d98c99dd3c4d819ce22e97cef7c694262a3d253cbf0ccef3dabeb99d0e1","ssdeep":"6144:WBIWWtK/DGBYDVUylEULqTPjDU7cAcY4ThuwB2Me:ah/D5DGKEoqTXU7cAL4duwI","tlshash":"d53423d6d52708650a67a7774ceeae9244321803fbc09da6bf9c8380d5300b5f9dd4eb","first_seen":"2026-01-19T01:13:34.500438Z","last_seen":"2026-03-15T06:02:57.651217Z","times_seen":6,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/api/tenant/domain/list","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:54.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /api/tenant/domain/list HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nx-request-source: https://www.bet38d.com\r\nXign: I+ExBw6e+qBMo5MOubBnUKKvgFc1mo13k8+YpmDWozsSLzzbB1q0CZC0vwg3mVmBVhklbsERQ+7IF+poRE1m4Fu7pARNmMrr0PnqviPgfNsLpBudrrGnmqz/SrcADJtejOuC9GPU3gMis9Vu6eoaU/dOrLsEK/D/B/3W5Z46/gQ=\r\ntimestamp: 1773313793996\r\nsign: 155p1h2s6u7m644l\r\nversion: 5.6.9.4\r\nclient-type: web\r\ndevice-id: QiYPKrMQk76WRi6rZtkGABY2X4Dfpsei\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g1$t1773313793$j59$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Thu, 12 Mar 2026 11:09:54 GMT\r\nexpires: Thu, 12 Mar 2026 11:19:54 GMT\r\npragma: public\r\nserver: openresty\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: UPDATING\r\nx-content-type-options: nosniff\r\nx-custom-check: true\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1280\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1596,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"351a7d04f9cc89846ed392cc689bddfb","sha1":"bc1d1875e8d67ca4a6c7205277049c46b2e865d6","sha256":"024e850359f353bdb31020f1f0705fb29aa52c746c8684afe6656cfc5de46504","sha512":"5780a50371e4723ca3c0d022182cdc5625e6656d25d699fc5044638dec819ca293ff9c759fc9db44e5d11d857f636a66078eba67a96723515e284b9299056476","ssdeep":"","tlshash":"2d31c8640f607f99efa1734a7055a26f968b628a5b6862107c9d454fd7879d800e02b1","first_seen":"2025-10-02T21:55:10.473048Z","last_seen":"2026-07-13T05:08:27.622159Z","times_seen":34,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/45540.1765800272060.0de97c05.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:51.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /js/45540.1765800272060.0de97c05.js HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:05:13 GMT\r\netag: W/\"693ffa80-37ffc\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:13 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":229372,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"68dd30b847b20eb9bc29bf868f8fac50","sha1":"873e370781734561c37f84da9e827c5ef80386d8","sha256":"a5e0b2ac5d67cde62e046977f3ff2f6c572afeecd5cdc1da6652c76ef98118ff","sha512":"79a30452eef58c94b5ab58bb4f691c7a454e60a0f08a60d7b761e958c8da0a1410fdc16dd1819f2641f17424cd31a0c02e0955ce0786ad1c20d06a9bc8cac4fc","ssdeep":"6144:lYD4wFsYiSGfKnIKPP6Xm9Gm3MCrn1OSgpozfEe5a:lYD4wFsYiSAKLJ3T25","tlshash":"3a24e894f294f1be075fc1f1d23b501af35b5e6120cc9ca0d296e6942e20b49da77eac","first_seen":"2025-12-06T01:35:16.083123Z","last_seen":"2026-04-22T10:03:14.082408Z","times_seen":22,"resource_available":true,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":678,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/rdao-l-3.5d2e2162.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/rdao-l-3.5d2e2162.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:43 GMT\r\netag: W/\"693ffa80-3120\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12576,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 57, 8-bit/color RGB, non-interlaced","md5":"2d59ff3b03c35665687729fb98ed5478","sha1":"c4c4b17fbfb5849c5c95f063b87b6bf322a1b5ea","sha256":"32f2a358d3f2a798ddf394ac652c3998349c366dd467df5234071c0548398770","sha512":"9671895b14f189107793741e2336585cc66f70275f2d406de2a442f2918f911ae79fce57a74b1b8645b2831053f7f5782ba1f1cdd7e891961ffcc738b257d84d","ssdeep":"384:usnRa8PIA5FpuffMcx26k9VI4rl6+IXQw4QDfunlK:uIRa8gkFpuHMohsVIUkklMIo","tlshash":"5242cfb806b9fb2b33840d8475b0780b46622edcd5d4d8f4d6dc157ab2ae0794924cdf","first_seen":"2023-05-01T02:34:21Z","last_seen":"2026-07-13T05:08:27.539121Z","times_seen":1014,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/kc180-1/noData/cms_noimg.png?1765800204612","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /kc180-1/noData/cms_noimg.png?1765800204612 HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313793$j59$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:45 GMT\r\netag: W/\"685d6cd0-269a\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:45 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 3910\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9882,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 700, 8-bit/color RGBA, non-interlaced","md5":"85e60fd8767b18839ffb552a5d543f8a","sha1":"341cfd68a5b39cb246af6ade1e3171c857d2df5a","sha256":"4b7ad68306ffac25830d1016ba86154890deef8bd77a03257b767b37de1c8338","sha512":"785f028aab80d3f96794431f84025483f490d7d642022404a7b14ccb4785aa52fe4a21048d44acda3bd160eedeaccfb4959a677986dfe47ef038d80724f2acb2","ssdeep":"96:74iGykVWI7TGvGJUgTFSebsBzYofEC16+TqBK7R7LWKaR8a8D7uZNgAMXFL73:74iyHunEFSebsvP1nTP7IF2uAAMX5","tlshash":"141259118573d43cd82ce57926df6fb93b709f996890476e8328e7342f2a2f78d60848","first_seen":"2023-05-01T09:33:58Z","last_seen":"2026-08-07T15:54:26.724411Z","times_seen":3126,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_e4736ea9-86b5-409d-a4fd-037cac3df39c.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_e4736ea9-86b5-409d-a4fd-037cac3df39c.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 12:00:07 GMT\r\netag: \"5e4d6cb79ccd08379c4fc12797adac42\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6hISdOMozwDLG2KCLlc%2BID5XxrgaJxE5oTDW1rrDaQNQPtcQ6ZXjPOQT9MzrXUS14L65KrUzSCPBFTkZRWeUh8FRyfIKdQMcpU%2B8S7BZfYAxaC3op3Nz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c20075bc80337ce-FRA\r\ncontent-length: 6814\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 3607288219978287433\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6814,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"5e4d6cb79ccd08379c4fc12797adac42","sha1":"d9d6560cad90f1ec87b1234832c25037d74758ed","sha256":"91e3cf87d894529aa19a8f413ba5423bc9c8fced27214f997f037f8240a83a9a","sha512":"f446f86f4d1d1e97bbd992382f0bcb9ae9750340887d30714d6bec3145d24e5004382cdfd5de086f9df6c0d854f7d8bd280bd97e7758432ddc0d2fce6b9aa72f","ssdeep":"96:Mrm5MoaPTm0rOFBf7X83rP0j+NFBksMgRXUmFYrEQf4A99SJnfZbsLxcjBL9ZN+3:Mruarm0kBf2P0MVErbgI8RflsL4LLU3","tlshash":"dae19fcb0b828395e9694ca2d90df88d6a413cf75f7a83d139e54df2f9651c0934a14a","first_seen":"2026-01-19T01:13:34.598248Z","last_seen":"2026-04-22T10:03:13.962354Z","times_seen":7,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":124,"dns":1,"connect":19,"send":0,"wait":77,"receive":5,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_e9c90a00-d7a7-4b12-9cb9-84b7fc583d68.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_e9c90a00-d7a7-4b12-9cb9-84b7fc583d68.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:49:27 GMT\r\netag: \"75a7cca3d3f9bc3242e5a86869d49546\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p1o79fle6FMMvRaDuTGoYqLg%2Fc0%2BNKPXjYDZDrLfe%2FotiNpTHmwAFSn6jS67LQ2lvVDRzGRCaHwjcbIeVPsQaeHnGM3rmNqZ%2FTeU4hbobPYulWmtU99Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d4d96fdcba-FRA\r\ncontent-length: 12434\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 2002149995411256102\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12434,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"75a7cca3d3f9bc3242e5a86869d49546","sha1":"306c8a5228c3a99d29cc23b183517629d41a4446","sha256":"a641d2bec9f4d201e85396614c81e0efd10c80cb928f32cb471d428d0eec30fc","sha512":"37044f5e804c9134baa412dd98178a544ca47c6b25b000ec9d45b71af516a82ba8e2eb29bbc0053078b83d294599a5d90d4f18bc004555cdd374e6ceca478344","ssdeep":"384:XviNnOMs5F29ogYNNwp37L1ZWtP/30qQvaM:6ROZF29ogYgpLLf6P/0q4","tlshash":"6f42b0644a1c22e3d39e5c4c16d90ae0df29b289b3a3a477f21e7d473389c70ca42759","first_seen":"2026-01-19T01:13:34.534193Z","last_seen":"2026-04-22T10:03:14.139637Z","times_seen":7,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":96,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-12T11:09:50.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, s-maxage=600, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: text/html\r\ndate: Thu, 12 Mar 2026 11:09:51 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: UPDATING\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24215,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5777)","md5":"5bb456418522377eab0abd1ed74b018d","sha1":"8bbf2eb133a8cabc306eb1045f60012d89b7bf2e","sha256":"f57d0512cc3bee5a0070d9def5512cebdc8eb0bfe0eccf536e61fc330205e48c","sha512":"1f9845ef6b3ae4e4cbeac8da4ca786e62f1d17d33b423578c889086444dd254d5db1b03755d16154ea065a9a926cdd5b3ee49f70a424590babcd938340b4c9e7","ssdeep":"384:aRrxqNB3u2VwiYwJvSoVXsp+pa/iZcVk97g6nMusplIiz:aRVq7uiNYiKop/E6wkpcu2llz","tlshash":"3fb2181a9df346766523303a2bbfb20879b1c0134209ed403e4de7584f959aa46e3be6","first_seen":"2026-01-19T01:13:34.596669Z","last_seen":"2026-04-22T10:03:14.062851Z","times_seen":7,"resource_available":true,"data":null}},"time_used":962,"timings":{"blocked":388,"dns":25,"connect":175,"send":0,"wait":185,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/config/initGeetest4.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:51.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /config/initGeetest4.js HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:05:13 GMT\r\netag: W/\"693ffa80-3a06\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:13 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":14854,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4b773fe272ef2f3dc7c7e443cd8a0e98","sha1":"8f81f38f03c362533ba34d119215bf83b7574ed1","sha256":"9bb8b869af3ceacb9261dc2cb9165d2716b150bc35ba9da63dd23674fe0773b0","sha512":"e0539af0bc1ad92c1799b6f5c0c759a68537b8063730bd0577aec9f7cf620d34cd166bd5a15c25d89cad49d80f51938b6072c4aa27d07f010e6aaa83ce6e3c5d","ssdeep":"192:hN3ar8HuCDoNu5dq+ExNiqc4K25MB5VsaiQxta4SScQVy8QRHIqaawzjTki59r8Q:fJe61XHlii5aI2PG4lyUIVKQTwwPlB","tlshash":"2562200d68f750a35553b43c8b9f6014b5388a93041cde41be9ce394af9843d9bbabdc","first_seen":"2023-12-16T04:09:07Z","last_seen":"2026-07-06T04:48:18.66713Z","times_seen":2858,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/css/home.1765800272060.7161361d.css","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:52.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /css/home.1765800272060.7161361d.css HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 12 Mar 2026 05:18:42 GMT\r\netag: W/\"693ffa80-3cb5\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:42 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 3459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15541,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15541), with no line terminators","md5":"d62c98c1dc9e392083d5b3d9584f2e0e","sha1":"a09c0cc9d353f2c20c560cdf63d7cc505c7c5eee","sha256":"53f0c527a8c756ae8916b58aed2043ddaa73d1c7fdb988a322d1fd466fa0ed14","sha512":"eeec307807791c6b377455d6e827eeacdcbedfa6396b3a7b217e7529e7b6103489d5f2331bf1e203d0cdba048c85ed6ebce1722c9b8c8733a28895ead9333410","ssdeep":"192:BWwQ64cTdZ7gFV12OkZfhfDsedOJ9YE/V9Vu3/JU7MN3a:I9md692Owfhftl4V9VINq","tlshash":"6562555893402417a6278e376ab06bf5f074d882c3a3ca7e65c0bd55c2b74eb177b368","first_seen":"2026-01-19T01:13:34.589052Z","last_seen":"2026-04-22T10:03:14.013038Z","times_seen":7,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/game02.4289a415.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/game02.4289a415.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:43 GMT\r\netag: W/\"693ffa80-7d87\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":32135,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=81, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=271], progressive, precision 8, 270x81, components 3","md5":"3952e090ab928f5bc36747b275645f3c","sha1":"37d155d25da1ece2eaa2adc5de9bccb2a524985b","sha256":"dbddab3a290b16fc7b43e0a1093ffdec6a2ff91c104f9eff21df181a5336118c","sha512":"c7c2c6347376a82289f7ee2d43ad1b18a9284ec4c13ae744ca8be9c07fa67ee545941440fb21ae75f58040e05700bee1ecd1bff02667ffc4a3ad3c3f57cea921","ssdeep":"384:5KYfVPiNKYf6nbhhmNDoOeUk8eGoTmTYxnA0MZdfPDNcSg7TgcV1vYNji3CLexS1:oYPlvbiNVeUHQAcA0WbcSg7Uc8N23w7","tlshash":"c6e2c0311bd3cd2af6e139746a86da5b27046fe4aae316953b0c7441bff23d25d2ca01","first_seen":"2023-05-01T09:33:58Z","last_seen":"2026-07-13T05:08:27.662238Z","times_seen":851,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/game03.212a12ef.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/game03.212a12ef.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:43 GMT\r\netag: W/\"693ffa80-2e92\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":11922,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 270x81, components 3","md5":"ed93aae29ca896964a86103b00f80f99","sha1":"1880c553dc77b4effbb5d28ad72f93de1e550ec5","sha256":"496f6b90ab41e0578054f60089032a0483247165dce969a83d70f4842496608a","sha512":"56022639c38cbbc845532acac2823030a6cce2a695bd71e02a5837606f17d57ae8d46115685ee58d6bbc3bf6a43f135ae070ff5a52a2f987841e71cf51a9bca8","ssdeep":"192:T7Ndn0K94kf1t4CtyzwAShdHq7+dLbibguo/iD3pbKNRdpM2+MnGXVOClqll6alI:Tr1Nt4+yEA2Hqu8oKVbKNRd5Gltr","tlshash":"9a32b0f9ee434950f986d1f243789257a1fd648d86d7cc8b2502119bcce9b73ac1eb28","first_seen":"2023-05-01T09:33:58Z","last_seen":"2026-07-13T05:08:27.562481Z","times_seen":863,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/float_right_contact.d1892e60.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/float_right_contact.d1892e60.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:43 GMT\r\netag: W/\"693ffa80-2eb9\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11961,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 247, 8-bit/color RGBA, non-interlaced","md5":"d19d26603d7bc87f4ba30563933485fa","sha1":"0c7b22b5556d0c46b38beca88746d56328c130a3","sha256":"cb9ffb5ca1354d23da49d7a184c1ad12cce4013edb703bbf7e7c719484e0d82d","sha512":"bc7ac0329ca6b9a9176d9c6eed115de425d6699bb47f1feaf9a9f2560242de728e5b8fec9909b95dec71e7278dde70ae8850ee1d8f8cdb67e693d76a8aed7025","ssdeep":"192:w7Sykkn+HgBtE2HgzFjPOpYHgs6ezXu8g2Vlx+D4H7DUMq7vImLhRr3bgAQkY8eP:ten+4E2HaFjVA9ea8DllH7QNQmtRr3bw","tlshash":"f932bf41fe506a8c5139b5a3fdfc82271e13dc6a0563d0ff9cd9788258b81a0dac99d9","first_seen":"2023-05-01T02:34:20Z","last_seen":"2026-07-13T05:08:27.540348Z","times_seen":1016,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/ecb/8f83064249b06e0660afdb30b60772fdcdfbb3036fb467600d10b16d76dc640e","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /ecb/8f83064249b06e0660afdb30b60772fdcdfbb3036fb467600d10b16d76dc640e HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://www.bet38d.com\r\nXign: OwKEMNbzoc5kRDEKr4668wNa2fr9ls2deGUPMMdfpBy0NOwuf2aYt2PmXuuc8F+3at1PD162ONXZCfwC5exPPBoewZ/WXTVaxfWoKMjPOq47DmZqBgVdy1XvJJ1Zs/QtpmEcwdlHr4iHacDATQ/pEd41xIOonGe1RbtnknmBPT0=\r\ntimestamp: 1773313793422\r\nsign: 53o1p1h4u36m7u6t\r\nversion: 5.6.9.4\r\nclient-type: web\r\ndevice-id: S7CaQXbYFcPSEzzRcZtJKFFW3AE3shWB\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nexpires: Thu, 12 Mar 2026 11:19:53 GMT\r\npragma: public\r\nserver: openresty\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: UPDATING\r\nx-content-type-options: nosniff\r\nx-custom-check: true, true\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1672\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1649,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"20d98306e6fa3e78c89880fca4e1e050","sha1":"047fbb8f8dbedb4441a9126df7447621de51ad0d","sha256":"cca36b44c37a6bd373d94ab2b8a06c60ecb2549b2509d944b0b8ef55b5ab9411","sha512":"94d5b3e35a983e1db7383568c67b452a932a287b73f6b4c64a90eeedd1e293038a3ed811af36231bcbb71fcaece722fa9a7d2a2cc8a6c73568885783cef4cd46","ssdeep":"","tlshash":"9751fa04c521ff709482e0946c13108f95536b4cb8d5ed15f7eaa1575dabd8530ae593","first_seen":"2026-01-19T01:13:34.629922Z","last_seen":"2026-04-22T10:03:13.984932Z","times_seen":7,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /ecb/8f83064248a6651521ab9b26970d60fa83f0bf5f79fe68600101b67707c272184849423924c3e9832923a30acedcbfec8ac50fef89fb HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://www.bet38d.com\r\nXign: XKCcCF9hKEL93fOS/SPlDm4A4eyK+V+fycubADDXHPCBIq2p+EIpgcV7XwsJBJqszzcKA/+iWOrjiiT1Z4+uxv3mHBKmG7W4eJ/Huhbdl5BN1/obq9by8G4Ib+19MN1Pq8E1KFBD7/JyuMRLcEzaPC3zEeeQ0rZDzsYo1wHSqPg=\r\ntimestamp: 1773313793422\r\nsign: 3a4u5d1o2r7p4l2g\r\nversion: 5.6.9.4\r\nclient-type: web\r\ndevice-id: QiYPKrMQk76WRi6rZtkGABY2X4Dfpsei\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\netag: \"1773313793\"\r\nexpires: Thu, 12 Mar 2026 11:19:53 GMT\r\nlast-modified: Thu, 12 Mar 2026 11:09:53 GMT\r\npragma: public\r\nserver: openresty\r\nvary: Access-Control-Request-Headers\r\nx-cache: HIT, policy, memory\r\nx-content-type-options: nosniff\r\nx-custom-check: true\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2601\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2578,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"802e11ef2234527584a4c7b2a7afa64f","sha1":"49d27818c96601d3dac499e9c6b5a1c83b7bb7e0","sha256":"8eede11014228960102333ae4f55c44ee76d0ee374a2677de9c2b9b976ab0901","sha512":"8dac16275d145f01c6ffd3c04232665c33fb82a19a8f69cc281ef68c61890b0b044847f9cc8822549e9872ef225cbe1471c697ac6066d67fcb5281a8a0810708","ssdeep":"","tlshash":"53817e80f641eb209a76f5e81c3701ec635805eef29460e1ec7d44a4ef5578576bc8b2","first_seen":"2026-03-08T10:33:27.77834Z","last_seen":"2026-03-15T06:02:57.678589Z","times_seen":4,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/21954.1765800272060.57c97863.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:52.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /js/21954.1765800272060.57c97863.js HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:05:14 GMT\r\netag: W/\"693ffa80-a3da\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:14 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41946,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41946), with no line terminators","md5":"9ba77e30ee8b74007281a4f81fd8d9f7","sha1":"bde6029b8414bbd2695cabd096e7957d853daa74","sha256":"ecdbef0608b0bf7946a0ad74d1aa1a8aeddf43be3b9188dc0c68234468f9f924","sha512":"5a23a199e2427576a570b26a2ad11da06ab19599db8402d96c08830cf0a53be3e20220b4db2c4b985c44a335f93c2e130e6420f6c4d410b243f2e7387a51fe0a","ssdeep":"768:QlPaSfmzKrMdvf0eMQ/96loumY1PI1yBK9LudEz+yUy51y9y0yk6Dio+ILqpTeY:X81R6Ipyk6o","tlshash":"fd132088fac2b06dd3eb7330857f505ae66a1dc0668c5438e260d6917e7198dc1fb9f8","first_seen":"2026-01-19T01:13:34.508525Z","last_seen":"2026-04-22T10:03:14.064388Z","times_seen":8,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/assets/logo/favicon.ico","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:52.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /assets/logo/favicon.ico HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: image/x-icon\r\ndate: Thu, 12 Mar 2026 05:05:15 GMT\r\netag: \"685d6cd0-5c30\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:15 GMT\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 23600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23600,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"915b77b545b2f06d111b1668dec5b9ec","sha1":"5b64c1aa42b2a5c05a2b2a8e70bb2ea8f7938d9a","sha256":"b8ae08911816fb9ab6348d3ee9b27a7f772ec47e5b6c61440fba815b85779f94","sha512":"2bceabcac70d4394d91c893c872b01fb28136549fc7835d4c6410d63e8f1c97c40531890e67a1f0c0b1a10de7c7310cc6d826fb4cdc164c1649cc406a13d9082","ssdeep":"384:HMjmMW3zlq8Zgh6zLUNI4aqBfQ5EGzUQhkQp8YT6zzwfBGTWg66ekbqHlLSH:h3hq8dHUNxaqRCEFckQjigQj66MlLSH","tlshash":"a0b2e0ba02e92d41de3ebc4ad59c5811f7b15016a46f074e8d8cd94dcd23bac1160fbe","first_seen":"2024-01-06T03:51:32Z","last_seen":"2026-07-13T05:08:27.531496Z","times_seen":425,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/35142.1765800272060.5fa2ea52.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:52.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /js/35142.1765800272060.5fa2ea52.js HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:05:14 GMT\r\netag: W/\"693ffa80-52583\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:14 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":337283,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64884), with no line terminators","md5":"4e159b23d16e0cd3fef757384d7c5aa4","sha1":"76b3df7600a2aedb4e12888da1c6cd099fc3d7ac","sha256":"964fa385dd24920fae27faaaa86b2dca87940e5bc4176e6516fd348d017b5844","sha512":"3f8f20286581e757e9207ed73d15c9ece5cc64e2432057414a9a310f28c1f18b0d6cabafc428d920f6172b33dca56a9b183c72e9ea46380cf23a2a8993bf06d3","ssdeep":"6144:irhhkpltrniyveBHlBfb04De7Ancbt84ijafIL8oSlthWe/futUDhrRtZsD5jMDg:irhhkplRniyv0HlBfb04DaAncbt84ijJ","tlshash":"bf743c84b690b17883af86fb721a9194d24e0e9460ccace4f37d6e40bf15746b8775ec","first_seen":"2026-01-19T01:13:34.540093Z","last_seen":"2026-04-22T10:03:14.004355Z","times_seen":7,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/rdao-l-4.d79bc746.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/rdao-l-4.d79bc746.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:43 GMT\r\netag: W/\"693ffa80-374d\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14157,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 70, 8-bit/color RGB, non-interlaced","md5":"408a47dbec9333221ee9937cf6513a0c","sha1":"b87f2425f70c7d0f8af2c41a0d3db5b4ef96a146","sha256":"a359740e674cfee1c6697c6cf4b6e1cc86de89d856d5601652aa5ce7c4b48203","sha512":"b1101ee62131000f76d0ea1fae026acff61c70d937ae7bdc887077dfdf6bca68bae1e495a3e587d5d433150e7932ebd1a2f111b5163a85c503386e56a837ca3b","ssdeep":"384:oXTlCu/v1oAmkBA0qLcScR8vmGzk1O/mex2t:UsEtogBA0qoHmk1O/jkt","tlshash":"2652bf0a5d284c3fc8f56e0258a300a3ec602d986951d86ff15f99ced63e6dec55a0d1","first_seen":"2023-05-01T02:34:20Z","last_seen":"2026-07-13T05:08:27.409723Z","times_seen":1019,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/31098.1765800272060.4108b3dd.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /js/31098.1765800272060.4108b3dd.js HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:18:44 GMT\r\netag: W/\"693ffa80-561f6\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:44 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":352758,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65338), with no line terminators","md5":"b168af2752a6975dd65ef440690c4a5f","sha1":"cb9a6f7ba5c3787d1c55048d573ab72007fcb055","sha256":"290f3e1d0d5682798c1a4bc95f08c84e885d2c5997f2774d24c1a9a96a0a588f","sha512":"2b2622b3e62858033a1a0b5055d524b9166bbbc6e9d9737bc664a008bdd7964de41eb51e60af40e83307fb5432e9957f07674ff1cc7c8318e5852fa816db6536","ssdeep":"1536:X+0YvC9jlTKAUSseG1SY46DCdlBBo3AgXOG9AsqCfCXsvCfCXsLCfCXsyCfCXsfX:6KK5sY4brG7O3SnLJNpL","tlshash":"c474b6f4c248c6fdea04ce0a7e7d6f2d50723783f2ec96c446aaf8865e91857245c4da","first_seen":"2026-01-19T01:13:34.545115Z","last_seen":"2026-04-22T10:03:14.087965Z","times_seen":7,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/enable.9ef47d58.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/enable.9ef47d58.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313793$j59$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:51 GMT\r\netag: W/\"693ffa80-792\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:51 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 1961\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1938,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"b1d702ead4d924bae52a64441d6e36cf","sha1":"ba96b2b9b8925e6d3ced19ab50d41ec0b3def2a9","sha256":"9bf083510f61bd1b3fb1bd661842c2d5061c32bbab6054ac4d869871546bab4c","sha512":"b3c279be02b8da61ce59e1ca86695f3d4d45870d8ed3aa3d3deb76063a14ec481d7a1517ded054fbb105ee9d5802463bdf1a9ab18d39b4f48bbd154117277bc2","ssdeep":"","tlshash":"c44119c362d49d39911bd54497977a42aaab5c4ba23bf63478e30c7e67444d0dc00ece","first_seen":"2025-07-04T09:17:37.860529Z","last_seen":"2026-07-13T05:08:27.56315Z","times_seen":88,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x130_08163b48-4f04-4584-bc28-a719e521107c.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x130_08163b48-4f04-4584-bc28-a719e521107c.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:47:14 GMT\r\netag: \"30ebf4417b76850297451c89b6e68fd0\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A4CKiyT%2BRg7JyeMkuMMGYzZyOx263ekMs4aMmKY4BE7ztciBSVIIoPg9X6Uyq%2BhDs4vfHDcK8%2FQF3fxo1QAuRkEH1fW%2BebF%2F2iwgQPfKoKC%2FrPZF%2B9mM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c2001cebd8cdcb1-FRA\r\ncontent-length: 4750\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 7374113292476569169\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4750,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"30ebf4417b76850297451c89b6e68fd0","sha1":"627b7d162ccaa50fda86a63c875f0687dd32a482","sha256":"d036db24a3b56541bab8b5b27792b539cec10a44de719a830a771004e7c98e5d","sha512":"e139551a89ed8586787305435992b28ac922eaeaf52aa61cb537a5ed142b8111bfc95667ca103ba2a9890423b0d570c1a7fd8ebde8b87650a63a67aff3f4f43c","ssdeep":"96:Wf3FbIOYQtKW0B+Htm+dnbPHTtvXPEV98mqpFKfwdG+4:Wf3FH5nsWZDHT9/6MkS4","tlshash":"59a18ea83d96b2a406e529bc1cc3bb2698cf7791340f308966b063adfa71f10ec53460","first_seen":"2026-01-19T01:13:34.602975Z","last_seen":"2026-04-22T10:03:14.027589Z","times_seen":7,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":34,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x130_861c22f3-cf0f-4132-b681-f14d58c4a0f2.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x130_861c22f3-cf0f-4132-b681-f14d58c4a0f2.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:47:43 GMT\r\netag: \"7541893af60aa5714ec3454d90e3ebdb\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iN5B0MgHEmCvY40XGTcyrGHAmEXODTNm0T8h0RUcVGb1ImrvsNks5qw1VHFtre9Zhge722IBB%2Fi5x8U5YlYXYXekLROZwH5Za3z6yuSQz0R6bEHuF8ij\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9d04af388c509bf7-FRA\r\ncontent-length: 4832\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1778851\r\neo-log-uuid: 13268166011823987546\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4832,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"7541893af60aa5714ec3454d90e3ebdb","sha1":"a83b779f09f4110ec0e9cd69b4b58e4bfa9ad6a2","sha256":"092ae5fe01af1fe7b0e243693a46b9a9c44825063b7727514472b7b85f84eefe","sha512":"af5653bd3efdc1c8bddadf2f0740521d087c4eb8a7250cc0ae76081cb580e13d8f9b600c3d0b948f7fdcf45f191b8f899a5ce978d4647e93fd725ad83ddc9b04","ssdeep":"96:/TRrbyBnpxppoNW6ELZzCcx7rvHIFFbW/M:/lrbMnpxnkWTF5BvHIFBwM","tlshash":"18a18ef65b2d09c41a8eca8d5e1c57e6b2499a6c458fdc4e114ddfd26009ce633473c0","first_seen":"2026-01-19T01:13:34.662638Z","last_seen":"2026-04-22T10:03:14.151201Z","times_seen":7,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":76,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/chunk-svg.1765800272060.1e4dfc16.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:51.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /js/chunk-svg.1765800272060.1e4dfc16.js HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:05:13 GMT\r\netag: W/\"693ffa80-714b4\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:13 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":464052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"7f83e8cb4ca3c7c0b2b494207acb7f80","sha1":"5a61da9e752c5d029239a16a9a4fc3e62a9a3446","sha256":"5f5493bc3ec2df742f870e52ceed89d29a0c1a90f673f0d82f74325243ec9f32","sha512":"4e62e1c631f1c74e4af896559828c3d8c440eed620d18afd897dff96b5230791a3d8569cbca136e94ead823845c672f304b0b4e1c8f42aab2756cc7901eb3b0e","ssdeep":"3072:z8nz2uaLZSZvx6Q/sIPrekK+m36Ua94sRZI7gbpF/:z8nz2uasNxpXPrekK+m36UHsE4pF/","tlshash":"30a4fcb4c190f4edf704ce196e7c9e1c50321688e0a9e9e52da9fe0d9e85d6b241cdec","first_seen":"2025-12-06T05:02:16.145976Z","last_seen":"2026-04-22T10:03:14.118891Z","times_seen":16,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/index-399e2569.1765800272060.688d63c5.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:51.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /js/index-399e2569.1765800272060.688d63c5.js HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:05:13 GMT\r\netag: W/\"693ffa80-5ca7\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:13 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23719,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23719), with no line terminators","md5":"f1b6efb30512fb837f9069984b25bfc2","sha1":"71387f5532129dd59ed73fa1294b069f498b5af8","sha256":"50879383c8d1b963d4d24791756209312dd9f844e59b7b0c2d7dd89263aaa19a","sha512":"0cee0d5177a63c181bf7179e2ba2d99235f2886064fedb8bf96f49698b8044a17b800a1a721e0d180c49aad8329ef90858e4ca03b660957945731ff65db84859","ssdeep":"384:pZTANHLDaSD7PTlTa3yDJo0hrItBh9geEZKkLZAr+TXN4r5F3oWf0Af/nptU8V:zYDaS/PTdxDJXhruhyVKsZk5FYxAfP3Z","tlshash":"2cb2c6e63392bda4c24f9276f23a68ecc43f9141c34fc4f8d264bdd47da8645a692784","first_seen":"2026-01-19T01:13:34.653769Z","last_seen":"2026-04-22T10:03:14.148215Z","times_seen":7,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KVN8M54JBZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"192.178.203.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:52.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"GET /gtag/js?id=G-KVN8M54JBZ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 12 Mar 2026 11:09:52 GMT\r\nexpires: Thu, 12 Mar 2026 11:09:52 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154630\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":476273,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9559)","md5":"4730a858007684d9acdaf0b4f351ddd1","sha1":"9476862a0b4cdd72e73cc939df6651db35a1f0f2","sha256":"78258d0657e11db204fd501ce9ee769a7843098477fcfd8ac2d01960e064abc6","sha512":"3654680fbc405d40d398e0ff8d0bbbbfae7ac2548ae3721c08c1c4fd28645685686cadcc212ac24e28872c673e526b1ee0259a05c1ce942e3365613fa9f91952","ssdeep":"6144:ob8J5tq8191Gzb0mD8+t3Rnp/XAphEn22cf0NTPBA:prq81XJmD86n2Is","tlshash":"86a4f8ceb3d674229396e478503f01cba57b29a2b45cc89af189cce42d7469a4137f7c","first_seen":"2026-03-12T11:10:09.7764Z","last_seen":"2026-03-12T11:10:30.650129Z","times_seen":2,"resource_available":true,"data":null}},"time_used":718,"timings":{"blocked":260,"dns":0,"connect":44,"send":0,"wait":69,"receive":128,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/float_left_contact.5e628ff1.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/float_left_contact.5e628ff1.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:43 GMT\r\netag: W/\"693ffa80-36c1\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14017,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 247, 8-bit/color RGBA, non-interlaced","md5":"a9bc5bbecc55ef7980fc3cfd6c338657","sha1":"7bddde2e742e74809dd2462c9e12f5748f4f22e6","sha256":"968753c19b6dcbfd000fdfc85ab7a54aea63164a51f993583683e7eb6ec7a82b","sha512":"5324d145a2752472d573a19c8cd782c7d244960d9518487529d4dcdeff529c116119b16a157619068db7dc58161ef1b241eaf807a86096ff90ac4b21b5c27b0d","ssdeep":"384:PyWmtgcnRztiuKECOBRA6P+0dY4D0YS6eNE06PX0nIvq:PyNgcn7K1iRrdHveNMEIi","tlshash":"d252e18defc1f54ac2e8ceaf5ef330114181309562f6b66098e2114bc098acb46ed5cb","first_seen":"2023-05-01T02:34:21Z","last_seen":"2026-07-13T05:08:27.520697Z","times_seen":1027,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_345449e0-879b-400c-80b1-d69e8404edbb.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_345449e0-879b-400c-80b1-d69e8404edbb.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:59:58 GMT\r\netag: \"14b8db62fc6e3b98131dcc633d2ee103\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FJCYoDi8SpH62w9nO8Dt7eEFDlu8Qwphc3ZpOO4VqjWe9pkIx%2F68eb66lXwwT3%2BSObwCLimCWfNSl%2FI06zJ8AJwVcF%2BTt1pzsBc6gCfMAyehpAJ8YnR4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d41dbfd2cf-FRA\r\ncontent-length: 5696\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 908903267451107139\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5696,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"14b8db62fc6e3b98131dcc633d2ee103","sha1":"d504849da495b94267b5fa4b729bcaae27b7637e","sha256":"11f8c3e9cf1a4e3958098729938f18cbcdbe67fcbcd0d4cda5139852f96da0b3","sha512":"f4dbae7e5ca616878848bff7849f2eeae1beab81d9d55007ed93c07e179e7e96b95ed362665d0b41bcc0a44b79eebc2bf93520b59ed5d5d201915f0c537fbab6","ssdeep":"96:qk1IcjHAqzsy9xTis6G6OT7iPIi+mNm8ZywYsho3jbEgmEfzTd:qkFzxx6JC7iPION7Z9YbbCEfl","tlshash":"3dc18e95a41b237bb1cf02a1b5c96289c4acd70cc5728f1595bfec81710e898a2e47a6","first_seen":"2026-01-19T01:13:34.517289Z","last_seen":"2026-04-22T10:03:13.968619Z","times_seen":7,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":87,"dns":0,"connect":21,"send":0,"wait":29,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x130_0d6516f9-6fad-421d-b651-24d11f25eabd.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x130_0d6516f9-6fad-421d-b651-24d11f25eabd.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:47:55 GMT\r\netag: \"cd6527935ce2eef36b9fb9814374af61\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lHYSw3t9dKSK0qEmZnZGfLCirDSrk5IiLi6kHBan0fy7zqgpa8qqLslwN7NRxjUQK7XQ5U2ClEK6ghPmAmxIE29Holk98jgUNL5DQXzepAy4y7a0Cruo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d4ed5491f6-FRA\r\ncontent-length: 4258\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 9189739795435827875\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4258,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"cd6527935ce2eef36b9fb9814374af61","sha1":"66b822436de57434296170ae323cc2e0f1cba05b","sha256":"65a7fb65bc5f3c1275adb48c817f24976df48e8be712aeb1f64fd196748d9b96","sha512":"b0354041c9bdeea6f6571f756044f71eca26747f47c3208c79c9e0e1f2aa75b7e57c4b9ff1d55afdde21e1da08d39773a57815ccf5dc16773f2473709f901e94","ssdeep":"96:llvJfofcP2CE6YpzqtDNk2zqRVlxxLBaZ8fOSGnL9vstQB1YkFa:ll9IYJYQtmxq8Va9vVXFa","tlshash":"45916f00b98493bef9cfcd0cf875e650e5a03b99b30a41fdd314bc288746a750532e59","first_seen":"2026-01-19T01:13:34.634321Z","last_seen":"2026-04-22T10:03:14.137641Z","times_seen":7,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":75,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_456e995d-4bd1-4391-a03b-9f19800bf019.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_456e995d-4bd1-4391-a03b-9f19800bf019.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:49:09 GMT\r\netag: \"d28dec78f6ddf42c20a663cd0a24fb33\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=37Bi496VOB5vZ0vFrCvrfCY5AaRh%2BPZUqYZLcZiDqRDc96mi0dqYurb%2FhyXpKhTUE4WsIbjtywWgRbFHNCusSxCA7LQSVQMTmmTO4%2FV2tOB%2BvZLS%2FUQA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d55bc77b43-WAW\r\ncontent-length: 6640\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 12897503961174341694\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6640,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"d28dec78f6ddf42c20a663cd0a24fb33","sha1":"5656356074091ff2ba0f73e32dc501dc27403bfe","sha256":"d63f968bbc7be5e72fbcd7e0c217903bb2fe401709ac636055defef8ce76b820","sha512":"a0dc3ea3d9ea54b4ac75230fea4f7568d79c85b77836ac0097ebb7ff9c9faf84f9edb7e5825b07a558ed986b1ccf41ee2320503f5ebf27bd34c3d23e28bc6347","ssdeep":"192:RV23rVntDm4kc3yJSuqbJTeQHmR6JkxEV:8HD3kc3ysRTeYm0JkOV","tlshash":"e5d1aec797429affea6a70bca64663c6ebcc558b0d1b1c74d617091bc50b94c428a09d","first_seen":"2026-01-19T01:13:34.492912Z","last_seen":"2026-04-22T10:03:14.141371Z","times_seen":7,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":98,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_c4ee6b83-6ee2-47b7-824b-8e7dff12f459.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_c4ee6b83-6ee2-47b7-824b-8e7dff12f459.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:48:51 GMT\r\netag: \"4b50685e0a9835e65669ea943893556b\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xv0ojm8g3%2BLL4qadmcHBF99ZaEoAY1yzRzeruwx4qtIkU%2BEHDFuRBYpqNl6epSwXl4WfQHadiDn1tRZKrumCPC9zySliwScyNSwDLq1yc01S90ea7nYJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c20075c1fe33a8b-FRA\r\ncontent-length: 10888\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 6968456306791983651\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10888,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"4b50685e0a9835e65669ea943893556b","sha1":"d6468b7e7e4fac8655463cf06709aa8436a07db4","sha256":"714c8ebe16d2f89e4b2bd51b92f5886095c511ccceda9d9cac1a514caf580e91","sha512":"fe1e258114fd035271414af5584c646b45d66c6e1e81b2c638221dabd9d70f23dac173ae8d93991a56abc3cdd95d3f75d5ecf70f615782b6f222108357a685fd","ssdeep":"192:TO15Ds/C+y8FyRohZCf9BVG81kG56rHrvtOPPfjbUhcR980+28tmr6oGZPTVeEV:Ts5DA/y8URCIfZZ35+HJgnjQ0m2WOGx3","tlshash":"c222c0a034eba05042f4a457c62bd5dd3f0f43199a1df8fec5f4f811d50c99aaf59608","first_seen":"2026-01-19T01:13:34.548699Z","last_seen":"2026-04-22T10:03:14.126657Z","times_seen":7,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":96,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/52388.1765800272060.60a7d897.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /js/52388.1765800272060.60a7d897.js HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:18:43 GMT\r\netag: W/\"693ffa80-4b56\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19286,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19056), with no line terminators","md5":"09d9a5186a308ae70fda961f2489fa5b","sha1":"6954aa705b8845d14c8c70349bf19e7d757b958b","sha256":"c998668f8feb43336f0395ec2780b01793cdf14b0941faaab93e505d4c5bfbfc","sha512":"40f42724482f280e12937fff35af78b49220b8593d6e378af6821895700d1a22e10a27f9b1cd890eb8026e275f312d18ed8284f3d4b88b3a956ccc4cb0fe39cc","ssdeep":"384:z9Z4Y8ufnffgBpZZrWUE6zP8sICXZOIu9pCXjBiJpG19EfkK8zyD1hfPfIghoL8Y:zEY8u/ffsp3aNWEsZ4IIATAJ016fkmDi","tlshash":"9a82b4809ab4faf0227fd5ea863681b0642a37d5f0c87ca0a6dd5f483d557aa74704fc","first_seen":"2026-01-19T01:13:34.51213Z","last_seen":"2026-04-22T10:03:14.047552Z","times_seen":8,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/kc180-1/logo/logo.png.png?1765800204612","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /kc180-1/logo/logo.png.png?1765800204612 HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:43 GMT\r\netag: W/\"685d6cd0-47d2\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 318 x 144, 8-bit/color RGBA, non-interlaced","md5":"e7cb5ee9f30672a53b2f7495d4e42630","sha1":"a8203b11ccc37efcf91857b79be90ef8cbba66ba","sha256":"288f049894425abb4adcf32e8a08fce507ce91f76a41ed8a80ea118712814bc3","sha512":"5b79cb59e359271a411c7bd20f520b6ac44e2b4392abb28aa9019e7834ae0f8952c4058f62ae96927b24deec47a91c728fc14e37e2b251e4a1be38229bc67131","ssdeep":"384:RrAR6oyuxEJxqQow3Q9ouRZH6RPLSSoP3QrNAqe8ULWVJYkSI8:JE6W2JxJPFJAmJYkq","tlshash":"0082d016f62c56f73ca83045a9952c7225fac3dd9247c8d74d93854862fea94f78fe00","first_seen":"2023-06-14T01:45:00Z","last_seen":"2026-07-13T05:08:27.51362Z","times_seen":609,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_73572716-0d7e-471d-bb14-6b2fee4b7fe8.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_73572716-0d7e-471d-bb14-6b2fee4b7fe8.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:45:47 GMT\r\netag: \"bfee90ef408bfdfa7c9499c36d90f3d9\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nr04JLb3pO%2Fyh59orkkklvb9qZeYvO1ywWD3nrvEyuxxJ0t2TTGqWBGsvdd4%2FHX5%2FgA6%2BmkXoOhu3zD9hgSL9E7qvSbvH83Fh5zahFNTlQjQRODX7x6%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d51ed8467c-WAW\r\ncontent-length: 7024\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 12340239036987922315\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7024,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"bfee90ef408bfdfa7c9499c36d90f3d9","sha1":"9cfbefa9a7a17e108341568069ad42000bd19736","sha256":"0bf8ad8242fcb963f62dbf9adf9f39cf1513467ae1ae411fcaf48181ee2bda2c","sha512":"a37e61719678edfb1a64a0ab7be488e93097ba59bb7ba911e139ce9b49bdffad83435ae95bbe82f89ecc25da496809cd547602040c36ed0a4202b5670fae4470","ssdeep":"192:de/YZtJOsppiHwb/1oTx4Q9M5kmjRH14xIS:deqtJsQj1SxZMJZJS","tlshash":"71e1bf70718482a9a5c81c7ebd93eff61975441e3fc0fd9c622216b50f115bfb4ad1a2","first_seen":"2026-01-19T01:13:34.631766Z","last_seen":"2026-04-22T10:03:14.067202Z","times_seen":7,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/navbar-sub-num4.23a5de74.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/navbar-sub-num4.23a5de74.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313793$j59$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:51 GMT\r\netag: W/\"693ffa80-184b\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:51 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":6219,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 177 x 100, 8-bit/color RGB, non-interlaced","md5":"fc52c55f35d3ddcc27b5fd0d62f284e3","sha1":"a9fcaf17a158239367549ded1f01130f3af89de6","sha256":"d8cfe2df2fc27f8fc440f6437b0855638da8d4140464fd543eef7f93ea91f483","sha512":"c2f3384c1a9e13ae70d1e5dd099f06985f3b726b770c982808806429e116eb047cbadeb5134b167c2f544d5d82e3a153649c5c42fb2fb66c594f97cffe30808a","ssdeep":"192:SE7xylIMjtf4N0+YaiZGjBS1/dntr/JQLduerR:SE1gIkf4N09mjI1/5+uerR","tlshash":"dbd18d8bcf4496cc96db20d604f9873716e38d05b6c863253e29cc1f19721797a8d3ca","first_seen":"2025-07-02T09:37:46.20068Z","last_seen":"2026-07-13T05:08:27.471798Z","times_seen":65,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_535e7d31-da35-4566-859f-92703c01eda7.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_535e7d31-da35-4566-859f-92703c01eda7.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:49:00 GMT\r\netag: \"5924863fd49177c4e1115cd4c2923e5d\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3wkaHC1t7FGG3ICO2vx5S9sKZoyZ79b6Tzx3znumZvWpLtipCvBeWuBWsg6xo%2FGx%2FduS3M47qAOG6refZKnk06ms1KiuXd7rZDzAFUzDRkB3LGRAEjWo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c61400fab727dc4-WAW\r\ncontent-length: 9716\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 876307384201385562\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9716,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"5924863fd49177c4e1115cd4c2923e5d","sha1":"f33455a579af321a22a7f8b8eb57d4f597480ef9","sha256":"2d02493ec165055b4b74b127796db26832092d367240a0eaecedefdc2c21905f","sha512":"3f8c9dfa3ada1153c6c89ef4df33bfb22a0dd7c02599cdeab097483364be47b1a4e1ca095ba9b83d15e0d065ef8455836fabac725d0a8bede8681726c66fdb39","ssdeep":"192:XOfUMvptjymlXpkAY8WY/4FEKF5iKB6iz/02gik47B+Go1rH9s:XOMIpZymppgYAWkMKIiDWiNvZ","tlshash":"cc12bffcbc1c74e941d998c95a0079543fa9f9a722caa843c347eb9a28255231dc36de","first_seen":"2026-01-19T01:13:34.671191Z","last_seen":"2026-04-22T10:03:13.951099Z","times_seen":7,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":77,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_489423c0-c5c6-4dce-acce-63c91cc14eff.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_489423c0-c5c6-4dce-acce-63c91cc14eff.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:59:05 GMT\r\netag: \"4ad37b670e8dbf278fa93a7ffae27d13\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ATgxJMZ81UpT2Iq47arbLUSLw7CZ1K49wnzzcb%2FGV9JG2zn82EeK0u7giRtVknv4dn%2BGDBq9A9TbNlNzwgAc9dn%2F%2BU8MAk9Gf0YqzkFkNfD05rBmcpE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d52a790659-WAW\r\ncontent-length: 11552\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 13992892636480997726\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11552,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"4ad37b670e8dbf278fa93a7ffae27d13","sha1":"b324b0e46c30c4ac3ad66f06d8618d0745497fe0","sha256":"ace6d66903b451e0443db7a8c5c4bf3d1af4739ecc39e4abe76a1eaa38242b23","sha512":"d51ea42fb66e82c2eb93d8e8ec306d288c7512b7a5b87408d6b21312d5debed6773d3b892f955d4be7907dfb8cbf42b840f7053f309e69f730bb5a593a052487","ssdeep":"192:IP5K6oxyGKOwv0emIJjoBVIupuIA0+vf4O/CE4Hk50Suxwi69yNoBy/KbXLaEg0R:8xRJUBVxpl+J/CEkkiJwi1EyCU0NPh2e","tlshash":"4e32cf3acfac59ce8b9b4c99b55cd0dc66f815134e429cf06441f833ba562c268971dd","first_seen":"2026-01-19T01:13:34.674757Z","last_seen":"2026-04-22T10:03:14.010268Z","times_seen":7,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":96,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gp180/_enc_size936x214_b208fdd4-7d5f-4bb8-83b6-32535b5bcbb1.jpg","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:54.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gp180/_enc_size936x214_b208fdd4-7d5f-4bb8-83b6-32535b5bcbb1.jpg HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 10 Oct 2025 14:48:39 GMT\r\netag: \"2daca9f1151a8128c9b663f3c1f99a46\"\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k9C%2Bj7UzSfx5ie5wakmnZhA0HAX%2BYGLSgrn8oH%2BkNyOqDSaaXs0dvdB14YCC6iZw%2Fo1ox22KRRRS1lvRdNte0HcV%2BswH67KXOq6KgIeEC5gtTHOXM8aY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c222529ce829bf2-FRA\r\ncontent-length: 171267\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:54 GMT\r\nage: 1820132\r\neo-log-uuid: 664780724483241005\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171267,"size_decoded":0,"mime_type":"image/jpeg","magic":"data","md5":"2daca9f1151a8128c9b663f3c1f99a46","sha1":"849867942daa101fe049c5663db6bd056ef5c6d5","sha256":"c3e8e141e52091f7b95e37f0382a6866177b1e6338c0e2bf2d737dd262708181","sha512":"77575c2cc0baf07632ea8c40eeafe85d487629bfba73ac7f3d3da132a3e6849917ae36cc696a70919f78774cd62fe3b7f0d9d5589c23caf42b019d32f9d5afd4","ssdeep":"3072:w4uF/VqvAxG1R0fBmBlet8Fepm9U5SCeTTZFgKhI409MpD6D0xCs7ZJvQq:w4uxx+SgXeuKm3CSTQKhI409MN+Sh","tlshash":"15f323186839f687c1f4f02ade395aa51e66ce5b83af280d774c4c93bb6d18fd084308","first_seen":"2026-01-19T01:13:34.6493Z","last_seen":"2026-04-22T10:03:14.130732Z","times_seen":7,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/api/tenant/domain/list","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:54.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /api/tenant/domain/list HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nx-request-source: https://www.bet38d.com\r\nXign: OHI5eTKDbLsEohshp0yklk/6WYXtJywhIIFZ2koy1Cx1oIcwEL0XXU4L6qT0OdjR6MdXDgxloGv0r0bz3UOgHGM61qUGlrZ7hIJ8wOWMluTxyS2xE8yOqbFPwO41i1iZPbC5ZgsGJ+IHsCEBO3fqdarctzdnw/6sMzcJz+8ersc=\r\ntimestamp: 1773313794104\r\nsign: 443p7g1147c2d13f\r\nversion: 5.6.9.4\r\nclient-type: web\r\ndevice-id: QiYPKrMQk76WRi6rZtkGABY2X4Dfpsei\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g1$t1773313793$j59$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Thu, 12 Mar 2026 11:09:54 GMT\r\netag: \"1773313794\"\r\nexpires: Thu, 12 Mar 2026 11:19:54 GMT\r\nlast-modified: Thu, 12 Mar 2026 11:09:54 GMT\r\npragma: public\r\nserver: openresty\r\nvary: Access-Control-Request-Headers\r\nx-cache: HIT, policy, memory\r\nx-content-type-options: nosniff\r\nx-custom-check: true\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1280\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1596,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"351a7d04f9cc89846ed392cc689bddfb","sha1":"bc1d1875e8d67ca4a6c7205277049c46b2e865d6","sha256":"024e850359f353bdb31020f1f0705fb29aa52c746c8684afe6656cfc5de46504","sha512":"5780a50371e4723ca3c0d022182cdc5625e6656d25d699fc5044638dec819ca293ff9c759fc9db44e5d11d857f636a66078eba67a96723515e284b9299056476","ssdeep":"","tlshash":"2d31c8640f607f99efa1734a7055a26f968b628a5b6862107c9d454fd7879d800e02b1","first_seen":"2025-10-02T21:55:10.473048Z","last_seen":"2026-07-13T05:08:27.622159Z","times_seen":34,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/41269.1765800272060.4bfda6ff.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:51.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /js/41269.1765800272060.4bfda6ff.js HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:05:13 GMT\r\netag: W/\"693ffa80-1d311\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:13 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119569,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a5fba4a5ee11ebf507f4559755e0af1e","sha1":"62753be2f0df9f9656c34ba9eb01850b6427bcf4","sha256":"92c461a37a9b33e2b1b6ed8efc20af9529a3dc3059ea2767cf0444aaf9394321","sha512":"d74fbcc178021a98cab0b1bb787a35f2bb94b2fcd6b81006caea58e2273218974f521c9c1eda70c14151b773867b8b918a1d14c67e68aa5d4acb00372806fa13","ssdeep":"3072:HR+7tB4Vgj5tNlxyUTYE6fDxCiuUlL5XE4roBlmomj24sp7pmwu:HR+7tBwgttXxyUsEMDxCiuwL5XE4roBQ","tlshash":"83c33ad4f29071f5479b46f2b23744a5727b0c82324898b0f15ae9557f3268cc6ebaec","first_seen":"2026-01-19T01:13:34.538224Z","last_seen":"2026-04-22T10:03:14.121192Z","times_seen":7,"resource_available":true,"data":null}},"time_used":828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/assets/logo/favicon.ico","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:52.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /assets/logo/favicon.ico HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: image/x-icon\r\ndate: Thu, 12 Mar 2026 05:05:15 GMT\r\netag: \"685d6cd0-5c30\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:15 GMT\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 23600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23600,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"915b77b545b2f06d111b1668dec5b9ec","sha1":"5b64c1aa42b2a5c05a2b2a8e70bb2ea8f7938d9a","sha256":"b8ae08911816fb9ab6348d3ee9b27a7f772ec47e5b6c61440fba815b85779f94","sha512":"2bceabcac70d4394d91c893c872b01fb28136549fc7835d4c6410d63e8f1c97c40531890e67a1f0c0b1a10de7c7310cc6d826fb4cdc164c1649cc406a13d9082","ssdeep":"384:HMjmMW3zlq8Zgh6zLUNI4aqBfQ5EGzUQhkQp8YT6zzwfBGTWg66ekbqHlLSH:h3hq8dHUNxaqRCEFckQjigQj66MlLSH","tlshash":"a0b2e0ba02e92d41de3ebc4ad59c5811f7b15016a46f074e8d8cd94dcd23bac1160fbe","first_seen":"2024-01-06T03:51:32Z","last_seen":"2026-07-13T05:08:27.531496Z","times_seen":425,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/ecb/8f8306425eba6e0167bcdb25a31b67ec8f","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /ecb/8f8306425eba6e0167bcdb25a31b67ec8f HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://www.bet38d.com\r\nXign: q+NuBwORzIuncbqeMSigE2soJAO/IqDOB6j+tc5F+RNK33RI/ggG7yQDiK006Vy9xw+4p8TUPTnnU3w/jTCa2Tcsj7GZ5jshL88HacnP8anB54MkNyfy/KfqEMmi+OvnFdgtGTmwnQfdccEo3PYU3aw6IUOBk/vv55xt6fAKXTs=\r\ntimestamp: 1773313793421\r\nsign: 5a157i745e6i5k2h\r\nversion: 5.6.9.4\r\nclient-type: web\r\ndevice-id: f4trJ8QpNN6GZ6GinxEt62p43J3tP4dG\r\nlang: zh-CN\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=180, s-maxage=180, must-revalidate, stale-while-revalidate=30\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nexpires: Thu, 12 Mar 2026 11:12:53 GMT\r\npragma: public\r\nserver: openresty\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache: UPDATING\r\nx-content-type-options: nosniff\r\nx-custom-check: true, true\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 3156\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":3133,"size_decoded":0,"mime_type":"application/json","magic":"data","md5":"550c90a5036c82002e21488152039cc5","sha1":"24b4cf0fd53d60dcb71d8b13bc560a6200b4f492","sha256":"1f082ca47c0b1b3cfc3c6d5ac2287a3b7d6bdeab19a99e5375431c129f6beb55","sha512":"95376b3d446765b95019c9bcd9eca64a221d127aa73b8bf89a61362cd6e2da4c80bff64d05546d87220acdd5e70bcc28a49b6655e6a3d074869394d04a23a227","ssdeep":"96:eOGS7hqEAbA7BAP+UXbAtVRJnL1rHNMmkk1FNgAOI+1FAe9vMzVir1Gfb:VP75+A7BT9zr1rHB/hpY0zVipi","tlshash":"74a15c01742acf34371781e99c6dc7d29ce90b207ad6ad12d9741a6378b250d76ac529","first_seen":"2026-03-12T11:10:09.787966Z","last_seen":"2026-03-12T11:10:30.66025Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x130_f43e9d5f-d14a-4ca7-9192-2afd23fb5f75.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x130_f43e9d5f-d14a-4ca7-9192-2afd23fb5f75.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:46:58 GMT\r\netag: \"a101a52ef6ab1f83337195385e2da677\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wapw7Ufikohqwz1KHt4Yeh00Ar%2B5ijZLGCmLHVTilLqT3sKgpMDuqZsAQM84osfmP35kgyIioa2Bn%2FFsFXtGkURcUeAA6vu9o0pts2mXguj7O8sAFXgG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c2001ce883ad2ca-FRA\r\ncontent-length: 4720\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 17224600476574809482\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4720,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"a101a52ef6ab1f83337195385e2da677","sha1":"52fc54f66e5bf56299acb9159e19609f72125fd6","sha256":"550248175bdb1bf57c4c25fa2502488eedfc6324acfeed54b895d4bf68a7f4cd","sha512":"e175cd0378ce679153bc01668d0546feb64be631a479d9f79763866e2807f7d44bd682a54dcf2d5bdf9e8419aee4ad0d65d0da138b5669b0fe6e1816b28c4f17","ssdeep":"96:tiEGVoQvRbJDruVdGbmjqfJZzg7fsRB0Yr9DoXmESN0qg2rOuDL:wPZbpSVd2mh7fsRBLrWX2rhL","tlshash":"c6a18e46136f48a6cac149190df5acc92ce9149b7b8c99343c797140382d594f405fee","first_seen":"2026-01-19T01:13:34.639912Z","last_seen":"2026-04-22T10:03:14.094456Z","times_seen":7,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_b405c689-4c6e-444d-a07d-f0112bb59346.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_b405c689-4c6e-444d-a07d-f0112bb59346.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:49:37 GMT\r\netag: \"a72b5e952d9d58921c6ca4620cfff8f2\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=42g9Xo4I39Iq%2FiIgsWDw9BJzog%2F6vKv4Fde434qo08nO5dZi0D%2BmSO0xgAds%2BoKL1j8gHTNbmgW0YspUlgzKbRNZMHNC5%2FvaEQpVrXVK2mChHrmJ6FzH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cd808a0b927c3fe-WAW\r\ncontent-length: 13396\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 14545123009885238357\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13396,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"a72b5e952d9d58921c6ca4620cfff8f2","sha1":"7e99aee26947f98f96c36f1376ff8bcc6015f959","sha256":"bcbe14815f42f80703ec178ce9c5d995816480bd4c16f666a651b1d2db81ac2c","sha512":"72494d9428b1dbd55ab6d7dd01142c6d31de8de5462c498a50f3764a6a63fa65d796d5b5de2345c095a49330fad5e2ce6f7c40b57d0e6c7d4fe5a3e39c37ec4d","ssdeep":"192:RhwTrNkuHEJ4fc3ly8QvnBEH6YEOuLC/MG29+8CtfyK7hHKa42LNsugCySaBxSIt:RuTriSUNQPBEH6diunEGeNsrRePr+","tlshash":"0152c1d2bb6945310b38427ce1d8a0b5d8ced6fb440d8bca98a3d731749d8984e5985d","first_seen":"2026-01-19T01:13:34.641777Z","last_seen":"2026-04-22T10:03:13.986585Z","times_seen":7,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":96,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/navbar-sub-num1.1cc834ac.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/navbar-sub-num1.1cc834ac.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313793$j59$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:51 GMT\r\netag: W/\"693ffa80-1293\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:51 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":4755,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 175 x 97, 8-bit/color RGB, non-interlaced","md5":"2c0f14ba2132098bd3592be1a94e85c7","sha1":"0dfadad8c9406dc68b40721ca0676ab21124dcbf","sha256":"1449f858cc06199eecbb41d78724e91a290f5ad2572fa063699eada6a32bd5f4","sha512":"b09507d30b0644a140bd4e6bc91bde19a24cb93196222bbf275093d8cec50d668790c16d82394624c1ead731961a7b499d5457845b8342fa0fbac4997aaa3609","ssdeep":"96:yY2d6IoQqjIPfh/jIE8t6wIST6Tv7cP6yzk9/0+x6cMAWrK:yFHfh/jvwxmz7cP6yW57","tlshash":"c0a16e9ec8c4fc815ddd8531fbd24211d616841b1518aa89e99f93328eb42f3d57c4cf","first_seen":"2025-07-02T09:37:46.19394Z","last_seen":"2026-07-13T05:08:27.530645Z","times_seen":65,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x130_dd57d4ae-6987-4633-8cc8-1ea901171541.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x130_dd57d4ae-6987-4633-8cc8-1ea901171541.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:51:03 GMT\r\netag: \"2ea315750a5d906e1ccaf12653cf1b58\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SS096AODB21kmWJNtLa6gmlHA74fhhobaglC2MX1acwP67PJeoEen08uc0RYgNm5bLghxTElaB7efKs8UN1ANB2t9VtGjtQ3BHZ7Q3MdFAXy3w880wHj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d52d10e75e-WAW\r\ncontent-length: 6914\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 15760556142070555894\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6914,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"2ea315750a5d906e1ccaf12653cf1b58","sha1":"0df9b62fc6430b0eca3aeda151af0f1f00c264de","sha256":"b45c06d62b06f512c93618def25554034bb5e3bbfaaae9d42103f4738413c396","sha512":"28eba93ffb0914fccdc9fc9c090eb8bd25dc3dc2d020061d42f6a438bd16c86d0e25675b84f0c821773dcb453b504155f34eb3ae21aecd1c65f36347057feddf","ssdeep":"192:3U7Km4KINmTXZk8vtwDp+2Jk2irQF3IwTW:kGNKmmBMptIQVW","tlshash":"67e18e1f764fb81cdf59b27ce3a321f94a317ca96b01e15c902d1a01d52f4e168eb2c4","first_seen":"2026-01-19T01:13:34.673609Z","last_seen":"2026-04-22T10:03:14.10866Z","times_seen":7,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":96,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gp180/_enc_size1920x700_fe5960b2-c6f8-4333-a9c7-362c953f873c.jpg","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:54.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gp180/_enc_size1920x700_fe5960b2-c6f8-4333-a9c7-362c953f873c.jpg HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 10 Oct 2025 14:48:50 GMT\r\netag: \"9963d509ce92d5b381ef3f716aabedb5\"\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X9rgLMkm1oGt6h9FOqjpl2uKZVMLTKnK3l466o1Yigt4nE9CZPodx4Ck8NjvhcGrAor0bGNEVQ%2BIV42fdFZDnPtW1ERRlAT0QVywa1ns4UraA3YrqKaJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c2001cefa09dbf7-FRA\r\ncontent-length: 876341\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:54 GMT\r\nage: 1820132\r\neo-log-uuid: 10961386948724233635\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":876341,"size_decoded":0,"mime_type":"image/jpeg","magic":"data","md5":"9963d509ce92d5b381ef3f716aabedb5","sha1":"a1e568ae14c85506875f505569401a6347bb21ce","sha256":"2f83782d4152c2f69c8e6b73deaaf762c1ac738ef8c17fe0b798c6c1c42f6b14","sha512":"671b2900538b23a170ca25f3d43b37bccfd4ba08f408cff71929c846985c26032937b81da8d43aa0afdd37dfe53704d6dde6d18c17eba26160ebcffd3aa0faea","ssdeep":"24576:qk82HYIchCMOLY0LpBcOcCLFEg2thQVbA+:qWY1CY0VbcCLFHtA+","tlshash":"f1152372ce302903f9984d704ba2afec91186e3f73e85a0db44dd54377529dbb48e64a","first_seen":"2026-01-19T01:13:34.620497Z","last_seen":"2026-04-22T10:03:14.025605Z","times_seen":7,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/css/93445.1765800272060.4f034e44.css","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:51.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /css/93445.1765800272060.4f034e44.css HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: text/css\r\ndate: Thu, 12 Mar 2026 05:05:13 GMT\r\netag: \"693ffa80-0\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:13 GMT\r\nserver: openresty\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T22:24:30.70154Z","times_seen":17768422,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/css/61540.1765800272060.fc1ea375.css","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:51.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /css/61540.1765800272060.fc1ea375.css HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 12 Mar 2026 05:05:13 GMT\r\netag: W/\"693ffa80-5a54b\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:13 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":369995,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"23e0ee26384c402f2f32ff426597f7ac","sha1":"1430e931bda72ce1f0679dc5af30f91feb9ccf5a","sha256":"05be737479ff97392e428f064ce84e5d0f3bbc4978ad0df92a459ced27060d47","sha512":"e1c120be8298474aa8dd9a73a6313bb0b3e9880c100139cf13d45ba9cbc0767db9b3a3bcb73e5786041757830d5ca1cdd9ecae01d8d9b96e66c6ee2bb3835340","ssdeep":"6144:z4+4r0H8Tu4+4r5cRlGuEQUQ929scKGnpTPIloF:z4+4ZTu4+4FKLloF","tlshash":"1a74fa6caf10307e15a7cb27b6a0f5589c36a443f9bfde9af3a53d580789a510623c13","first_seen":"2025-12-18T11:27:36.232676Z","last_seen":"2026-04-25T22:16:25.216041Z","times_seen":21,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/rdao-r-1.c2e7696b.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/rdao-r-1.c2e7696b.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:44 GMT\r\netag: W/\"693ffa80-3002\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12290,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 57, 8-bit/color RGB, non-interlaced","md5":"e2385d2a0d7c043e90ec1e1e3bf6a1e4","sha1":"1be4ba4215520c1e884c27991984e185e2848283","sha256":"c578480a5ddbede9c417bd3e3a85d752b13d61e4e8127e4d1868b708807b562e","sha512":"cf7a514c39d2512fc3c0f7d84c4af956d1d6927f8411dd37766b7ddceca56beb50fc17b0341d78b442e7eebf12c4137942b08c5265211f865581245f09b39575","ssdeep":"384:l1LjlQQIY0/qcuBkNdOq40XqCLAM8xeYfRk2a26:l1Lj2QM9IkNlXHA1LfG2ad","tlshash":"7442c089a84025e5a20ce2d360e98673dfd6c8c557d1f9be2def04b96b10c7115f41ce","first_seen":"2023-05-01T02:34:20Z","last_seen":"2026-07-13T05:08:27.63206Z","times_seen":1034,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_85f2c16e-1b03-4950-9c3e-e5543e558c4f.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_85f2c16e-1b03-4950-9c3e-e5543e558c4f.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:46:06 GMT\r\netag: \"1d3084038975ead3ec50552e621f5719\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KTlHO%2Bv7vgGfGhCUEHPezFZ1unU%2FGM%2FIy5A5kIBKeUQlEJ8edjqx3vwe4HnuVD5NdiDk2BxrSj8dKLL7Bylq5pW2rA8urLvac4X6VWwNnW1fFT8cj0Ao\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d4893da0f7-FRA\r\ncontent-length: 7196\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 5265529479249616947\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7196,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"1d3084038975ead3ec50552e621f5719","sha1":"1b51d687c040bfb14d8b040093b9dc8485c7bfbe","sha256":"2a11cd40babc376c665da07617270395cb4b17629fee9b886be17b8e6fda39ef","sha512":"88f93abca5241b4305d1bcf2dc5623e05bc3d1ba4c31ae6432db353f772ba3aaa01a7df7dc9876a21ffe24f9825b8d24ee72577f0844eb801cd0b9af32d07d75","ssdeep":"192:5lXhNCski5bxsOpYlgkbkpGBo+Ta64b/a:3XLyCqEYmewgoivea","tlshash":"21e18d030479311fc1d2639862ed0e34b175cb86cb56ec12858db5c7447cae2eaaa57c","first_seen":"2026-01-19T01:13:34.660488Z","last_seen":"2026-04-22T10:03:14.090962Z","times_seen":7,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_4ff28f55-d465-4f6e-8312-39fd059d5918.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_4ff28f55-d465-4f6e-8312-39fd059d5918.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:45:32 GMT\r\netag: \"67052eb27cb44caed43f1a5eae60e053\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2FsvmeaVhLOJFSFQ7EUJ4U7lTZL7wpzED%2Bcb98iFRUL86DBSyBnSCVPJy0RQoERmNg3yFwsUZx7RAVe0OSmOZYUCLm6obN8uVgGeYv9uC5FJQoAesw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c20075bfc5a5c44-FRA\r\ncontent-length: 6182\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 7910082589016952078\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6182,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"67052eb27cb44caed43f1a5eae60e053","sha1":"8f648f09775e25324427e41fa269172db8ac2d7e","sha256":"9ff361f67a3ddd488fe3f80ebc9a69258e6e5c70574addfc200f7a93a9316594","sha512":"d88dceb04205a56430b9a41e5e7d632acef9dd68f3666ce0d67cba5e666fd7aabe98b303ff5d1904fba6ac61752374ce2be7872bd512b0d3a4a0e9bf9e8764d6","ssdeep":"192:jlsjF+9rjJIbbSvTazcSvWMolbnv5C1aOD:jSjF+9nuH5nVEbnv5CAM","tlshash":"45d1ae5b81f137d84ed473fab8986f288b880b905cea90bf5853f5b15535e1d04b19ac","first_seen":"2026-01-19T01:13:34.601169Z","last_seen":"2026-04-22T10:03:13.990395Z","times_seen":7,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/202603/_enc_size280x150_31615f55-6fc0-44a2-92d3-1472585e0834.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /202603/_enc_size280x150_31615f55-6fc0-44a2-92d3-1472585e0834.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 06 Mar 2026 08:55:19 GMT\r\netag: \"8ceac3efc25c8aa1a1241b8b7c95bec9\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ypJeXMVj%2B6NYJoUJgE3K23%2BmSSc7gcuPf0%2Bo83WCdOCMW%2FUFgkqV3BP0JhIGkn8hj%2FkB9pCuh9Zi%2BFpkNwQG3Tr%2FXhmu1%2Fkh%2B7ZqpOkHtPWFH3OZhwS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9d81aec73a44d385-FRA\r\ncontent-length: 10020\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 510305\r\neo-log-uuid: 3204809660770486930\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10020,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"8ceac3efc25c8aa1a1241b8b7c95bec9","sha1":"fc0cc823ee58868804b5b857b1a2587891d946fa","sha256":"6e94e619559a6091e0b4d23141cc21fc4f1d85f63444643ad8a3b1f40a9fa5c3","sha512":"a3eb008d056d6c7643124a96ade056cb378292f49021a536473217f8f907849e74a240b830e0d4dbae8ced66b97cc3586bfc3698ba8e9bc1914fd8490c927ac4","ssdeep":"192:XeBsJ+akq18L8/pU5YKIYI0CPPf6WvawYiOREieTQK0nmNQqli/hrtWFquAjfOPW:X+6KLgM1ia9iO+iekjUPEgcfOP/e","tlshash":"c922af1a5f21c8897bb69a9c94eb6864cfb8afe697c36c775c33021572682bd04007c9","first_seen":"2026-03-08T10:30:26.501505Z","last_seen":"2026-04-22T10:03:13.994116Z","times_seen":6,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":97,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/configPage.js?v=12/15/2025,%2020:09:35","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:51.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /configPage.js?v=12/15/2025,%2020:09:35 HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:05:13 GMT\r\netag: W/\"693ffa88-606\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:13 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 853\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1542,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1514), with no line terminators","md5":"a9a1da2795b6ac069691e02b6934b110","sha1":"3b31f29574988e3f8253cac52a29500e246be6e1","sha256":"288bd90db96659b95b35830382e465d3b48ab13b5aee95b36fbc3a004bc91d95","sha512":"d760cddf6e74524c7ae79dfb7748ad3841aa07fa97ff0c7683123f29f2dc0e5be8d4cd8e611e54271dcd2facf8da72963dec0c28bf16e610fe4e53a164803f9e","ssdeep":"","tlshash":"ad31428e22594cfb874b7f95736b060c68a631419445ad91bcddcf1c530994111249bc","first_seen":"2025-06-09T14:55:55.160162Z","last_seen":"2026-07-13T05:08:27.653737Z","times_seen":46,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/theme.config.3f776045.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:51.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /theme.config.3f776045.js HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:05:13 GMT\r\netag: W/\"693ffa7f-19870\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:13 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104560,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38260)","md5":"cfc3fb58ca6ae3303636f071ce1d6a63","sha1":"8b4e58255c25cc467eb9b0cb6c76ed0b8e3e0c64","sha256":"a0f6cc42097ebbb46f18db3c607454d15477b6788057611f25b93ca46e7641ac","sha512":"4fabd6e18022fc01d6ffd02fd793d67c3b2e06fe29b4c45f4fa81a7a1e49c2f3a7526c82d081a8049a36c0ca70330e516c28e75d5c81b361291f378e9d03bca0","ssdeep":"1536:D2JREobymtlIRM4Sb2mc42mnzyJog9Cc0hM:qftlGu1pnz45HX","tlshash":"c7a3cc7ae24c963a6177b8bfb46de101d12e9c0c9b1d5fdef03e10a25b10669c831de9","first_seen":"2026-01-19T01:13:34.666271Z","last_seen":"2026-04-22T10:03:14.146566Z","times_seen":7,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/75351.1765800272060.6e695611.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:51.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /js/75351.1765800272060.6e695611.js HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:05:13 GMT\r\netag: W/\"693ffa80-2fad8\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:13 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":195288,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"f46685ca63ff62ead38548bf1c598e88","sha1":"28793c7a74ac57e2d56cad4090c4de03c87e086d","sha256":"f71c7bb50ec4b47e4f47c57e75bf78ec80913245c2616c2abac0b8f9b1225c63","sha512":"10dca9a26cb3b8bd5a6925360e5cf50a6a34e1dfb04ec8c4f32cb0743d8f02e33484816c3dbcbba7121bd6c4d2f53278b84d7b0172077b2d8c5f0393f9accff6","ssdeep":"1536:J17BBHFeKRKp+3ELSPtj6x2DgJoG7PIDmj9VA+s69JAFdE6WIzl+Ik1+eXMa7a4z:fjHoKRKphCnDgJoec+IDWIzls+xXr0X7","tlshash":"ca141a84764170b8c396a165322f601ae22f789650dd9c24f3789ba47f7470df26fabc","first_seen":"2025-12-06T01:35:16.113538Z","last_seen":"2026-04-22T10:03:14.053829Z","times_seen":26,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":677,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/rdao-l-2.f6c6cbaf.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/rdao-l-2.f6c6cbaf.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:43 GMT\r\netag: W/\"693ffa80-3323\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 57, 8-bit/color RGB, non-interlaced","md5":"75441b34f2b090890fb8271d36703609","sha1":"9e2ecd7b86efc2ec2dd1a899344d7bb2e0a733f3","sha256":"04fe7cf05d017591f89db653cd7b0326f1c4d81d578529c50791343d460169f1","sha512":"bde07a7d20804ec63358e8d74b22f67b960717a2ca6e2546101a8e4a9079fda080a91be789a8e6b4ffd272acaee87d26e855a2a26fc7cd2f29c4ba2231e948eb","ssdeep":"384:K2anaz0xZ5nPoI0lIQPP1kad9mLZlAmmZ:K2UpngIeD9mz6","tlshash":"3242d047c9d02a873bd89c88d7e7c016ad8208281dfc72105c8ed47f9d121fa9466fe7","first_seen":"2023-05-01T02:34:21Z","last_seen":"2026-07-13T05:08:27.519994Z","times_seen":1009,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x130_bacc592f-11e6-4dc1-8714-580c51ca734d.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x130_bacc592f-11e6-4dc1-8714-580c51ca734d.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:48:23 GMT\r\netag: \"90584ff5441d27c419f3f34cedd452e2\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o9vPvFCGnw7SnkNpqSCtfPPUeN6r1X%2Fumfvv%2Fh%2FkzhViOl9UTUV3UCeXv%2B1BsyPjyQWw5mc3IGi0KVvjU74KWgZcoueg3bpM6CDwl5zOVHKYNRdUF96j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d4de34467c-WAW\r\ncontent-length: 4530\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 10809533767222070633\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4530,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"90584ff5441d27c419f3f34cedd452e2","sha1":"a32c54eae94edfc74b01dd2ed4513657299ec1c9","sha256":"04ce443021da7e3a2917ed7923547c8b3d03c4d794901d9f3d78c178418daa02","sha512":"68870a974be09c349fd5348594d79a3a471917d2c32c2dd74438b22672178630bc4b66935f3461ae638cd35ec6e53da3dd2ee7085c36aafe5d61ad56366401ad","ssdeep":"96:zPq2KcG1kjmlB2c6Pz4a6Sp4ZqTWwe4DZx4Y2SX2tsLCUw5q7X:Wcqkjml0c6ERoRe4DZeSX2Qo58","tlshash":"48915cc6e2e8e2b650db39741b991003769cf68c3d51a61ac215ab0ecc4f86b54ac1ca","first_seen":"2026-01-19T01:13:34.604247Z","last_seen":"2026-04-22T10:03:14.134008Z","times_seen":7,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":96,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_2a07d033-da63-40a7-abfa-bf0b1a1f094d.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_2a07d033-da63-40a7-abfa-bf0b1a1f094d.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:48:44 GMT\r\netag: \"90bec0999a4b011af8ea7c9b44922549\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A1xflRswtpPX80bsFUaYIYDmcKE%2FlB4OucocN0uNibfst4qSYh0ll2nz3GU8nlFpbnySKQmzdxMQoaCW%2BopgzSNQLBc16tJgnigloNubQWq1SCYTq9im\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d4beed8e9a-FRA\r\ncontent-length: 7126\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 7609531176704720495\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7126,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"90bec0999a4b011af8ea7c9b44922549","sha1":"8e474b85828a05e79105acb7322a12974f45c8eb","sha256":"f69dae9f1da8ac8e4b2860fdb4166eafa77578d957d790d6b498d305abe03d30","sha512":"12c1bfdf8f38b2ce9441b82a75834c5a805b3313f8152b9a46ee8d8890c8cbddec993fe758e4751fb472a58f826957bfc37b46b298f975a90721522c9bcfa09f","ssdeep":"192:RUPQwFeYkJfRsS19LlW6sC8Ku0mAmZ0EG3ROS7B:RutEqclPszLKEZC","tlshash":"2ae19ee9bf18f221540ef78f30a92999c7e74898600c37406f8913a6be90f6545807d7","first_seen":"2026-01-19T01:13:34.490456Z","last_seen":"2026-04-22T10:03:14.007839Z","times_seen":7,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":76,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_c0e159d1-07cb-4b9f-b45a-2335469ac56a.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_c0e159d1-07cb-4b9f-b45a-2335469ac56a.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:50:05 GMT\r\netag: \"cc8a1a53ff3f298b2f97718a14ed7fd3\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kWxy%2BVmkNaDtqKAjbc8NM9NKjwHvzR6a9RWAkSZqmp1q3p32CTeZ8m62jtnGbqNDL8cfV9y9lPgXNbMsWH%2BLQADN5C0iLstbOlF74bjruA1hLd7p2Arb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c20075bef34dc8c-FRA\r\ncontent-length: 10260\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 6151936327507333100\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10260,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"cc8a1a53ff3f298b2f97718a14ed7fd3","sha1":"ad69a8c9d856a2036650a2897dde3211fdaff4f8","sha256":"fa1fee01b391d0e86618f2ed1e6bc1c0d572a03086b32f519b7d29647322e70c","sha512":"04524ec5f54b8bd86687acbafc33a20bd9ad03da8a5c60be0b625c0c8975c7084f5e1c7a56f6bce6e6106c1a91f38d38814c09425c5f1122b95d0f7ce506e462","ssdeep":"192:2lbufL2Ugj853ul1eIozD4GVpm50oJPRWX19g6WTaKekuyTl7CDiZvjfjtyej3Cg:2QjKYwxEkG7mOoNRWXJHktYDiZrrph","tlshash":"9222afc3a7277a4f3b903f6c14e642603f2806afda6b6b418d4d5fcd9088d125595c77","first_seen":"2026-01-19T01:13:34.546777Z","last_seen":"2026-04-22T10:03:14.097995Z","times_seen":7,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":98,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtt2-img-cn.hb-zpod.com/gpmaster/_enc_size280x150_bf3720f5-c0e2-4a93-9934-48f531410de4.png","fqdn":"rtt2-img-cn.hb-zpod.com","domain":"hb-zpod.com","tld":"com"},"ip":{"addr":"43.169.13.143","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtt2-img-cn.hb-zpod.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:2F:76:DC:CC:B7:AA:D9:FD:DD:6B:C6:C1:75:9D:70:66:51:EB:64","sha256":"0F:4C:C1:2D:4A:AA:B5:C0:B5:37:E3:33:91:1D:76:E2:DF:5A:0F:B6:98:62:3B:02:8A:60:E5:21:3F:B7:E9:F8"}}},"request":{"raw":"GET /gpmaster/_enc_size280x150_bf3720f5-c0e2-4a93-9934-48f531410de4.png HTTP/1.1\r\nHost: rtt2-img-cn.hb-zpod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/*,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nOrigin: https://www.bet38d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 10 Dec 2025 11:49:55 GMT\r\netag: \"b82e3c94727d42d4ed104468f783c4c6\"\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2a%2BE9m9WhdRd0Y3mEZZz7U9z2jsloJ1L%2F6wy933XYou2cBDW0FqOSNKfBN82II5LK0wn7Zl6TrbtIwt1TFHBT5p3ImV2GyXKaZFq28%2BplqP1WcPnKlwl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9c1ff0d4f933026e-WAW\r\ncontent-length: 8722\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ndate: Thu, 12 Mar 2026 11:09:53 GMT\r\nage: 1820131\r\neo-log-uuid: 16824962714233180232\r\neo-cache-status: HIT\r\ncache-control: public, max-age=2592000, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8722,"size_decoded":0,"mime_type":"image/webp","magic":"data","md5":"b82e3c94727d42d4ed104468f783c4c6","sha1":"6848a23c4111665f1e2e0d9bf3f27662998324f1","sha256":"de8185d8c9c001064a857b1d0ab0383242148b6f95cd82daf8fd2b3fdedfa8aa","sha512":"831d1361db9becb77175a9902d65c501aa42a81bbf81ebde5276b5f12becf27b8500f4cfd775644c2d29f9f3552bea4b5c00e10a41573ab382fc4ad4da97fc29","ssdeep":"192:OBPerua/F5AZgJ3I+G+UTxkPU0eoXBg+JiypjQSPYf+br:2err52+UTFqBjiypjQgG+br","tlshash":"5102cf57e60ab5c0c1d63347b593521d24f7f707e6302892264a8de9e44cf8952eb8c3","first_seen":"2026-01-19T01:13:34.566382Z","last_seen":"2026-04-22T10:03:14.030767Z","times_seen":7,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":97,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/css/chunk-common.1765800272060.32035650.css","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:51.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /css/chunk-common.1765800272060.32035650.css HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Thu, 12 Mar 2026 05:05:13 GMT\r\netag: W/\"693ffa80-357a\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:13 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\ncontent-length: 4056\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13690,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13690), with no line terminators","md5":"76ea3c562bba176d7367dddf61f9978a","sha1":"10ee88a0a43925ff076a43bcff4d62dc7988ce1b","sha256":"d6881417b21d428dc17061d7aa75afa6579fb15adf26b21f1c36526ad9cc703d","sha512":"23d80fdb1c9a45f943fab8690723af4c9ea158e630e113a026c68b80e37a696c2683b976f7cc83d44c1de274fcb30e0707171b96743ec4fb655bb8f636dc38c7","ssdeep":"192:4dQK/X4cBY4mZGX1lsUTLA7gY3C/i//L/R4FHSQZA2VxM2XwujvXMY:M8oTG3C/i//L/+FHBrxb8Y","tlshash":"4352b631d635b53ce53be126f9d0aadc6024e417d6730baeea653b3ac5ca4d215332c8","first_seen":"2026-01-19T01:13:34.643527Z","last_seen":"2026-04-22T10:03:14.144525Z","times_seen":7,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/30519.1765800272060.0b0c86ee.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:51.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /js/30519.1765800272060.0b0c86ee.js HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:05:13 GMT\r\netag: W/\"693ffa80-417a2\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:13 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":268194,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"880a4c09efc1b4b51d7bf895124bb720","sha1":"b4bea506511b60dfabab776edc3615b3b2f40f6c","sha256":"e9e521844396e0654137af4979477bb18c069fb127fdaf5c974466f7c8b946ab","sha512":"80a2ed1cd59b434624dd6c575c8f74a8b3e2883299cf683c3804dd3453d5b1887ea989f4f1de6c6c826d959204abf83d7a62ca767e93c6d13024cdb9bcbf54a7","ssdeep":"6144:2/zKTUAavC0Jjytg7DiQPkcsz1WHSou0HrqML:GWcjytgPJPc0HrxL","tlshash":"cc441c84b291f0b4879b42f7a22b4055b17e49a030ccacb4e265ed90be7555c927fbfc","first_seen":"2026-01-19T01:13:34.587465Z","last_seen":"2026-04-22T10:03:13.98009Z","times_seen":7,"resource_available":true,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/js/index-a3dad144.1765800272060.779c08a6.js","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:51.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /js/index-a3dad144.1765800272060.779c08a6.js HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bet38d.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Thu, 12 Mar 2026 05:05:13 GMT\r\netag: W/\"693ffa80-590bb\"\r\nlast-modified: Thu, 12 Mar 2026 05:05:13 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":364731,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64498), with no line terminators","md5":"3409c6370f38d3c5dd316e02e4d74f66","sha1":"5be2f819f43de0af39a55241dda7a6c98a37f4d5","sha256":"96a08518543174ed6808519274942e22a8f385ab7048c67e9d4c1779c6c5b96f","sha512":"03d48599dae33f613b2a5312483584d383dd064a4ee45b115baa84ab6c28d1fbd1f2692be2244f3b2547688db37e6e651bae30ef99cd403910da20da4eb77774","ssdeep":"6144:Yy1d7B0bhFOuCKXXiBpryMzm4UPQdVNXGdOg9MQ4InwTl0s3:Yz0eXiBpryMzm46QdVN2Og9X4IA3","tlshash":"dd742c94f76ce3bd475e55fe792290a4d02c1b81b0c89d58c39e2944bb6b385fab04bc","first_seen":"2026-03-12T11:10:30.691732Z","last_seen":"2026-03-12T11:10:30.691732Z","times_seen":1,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":826,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet38d.com/img/rdaobg.93df9aaf.png","fqdn":"www.bet38d.com","domain":"bet38d.com","tld":"com"},"ip":{"addr":"182.16.3.83","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet38d.com/","date":"2026-03-12T11:09:53.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet38d.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 15:12:07 GMT","end":"Sat, 30 May 2026 15:12:06 GMT"},"fingerprint":{"sha1":"A4:98:7A:C0:80:AE:3D:E0:E0:B5:60:0E:E8:48:A3:B0:56:8A:D2:77","sha256":"AE:C7:53:E9:87:A8:7B:8D:E7:2A:5B:FC:56:FB:57:3B:44:26:02:E7:8A:E5:84:18:B1:92:F1:81:D4:18:51:67"}}},"request":{"raw":"GET /img/rdaobg.93df9aaf.png HTTP/1.1\r\nHost: www.bet38d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bet38d.com/css/index-399e2569.1765800272060.f992781a.css\r\nCookie: _ga_KVN8M54JBZ=GS2.1.s1773313792$o1$g0$t1773313792$j60$l0$h0; _ga=GA1.1.1133078530.1773313793\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 12 Mar 2026 05:18:43 GMT\r\netag: W/\"693ffa80-5a0c\"\r\nlast-modified: Thu, 12 Mar 2026 05:18:43 GMT\r\nserver: openresty\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\nx-custom-check: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":23052,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 175 x 369, 8-bit/color RGBA, interlaced","md5":"f27cb3aa610d5d073308ee4066a3a726","sha1":"62504a85e14b7ec505899645378a9abf9f3f6954","sha256":"0e2e11002eb67d3b6eec134eecfec90b787ed55a128b7e5adc159da22b2a252f","sha512":"4ccb5a2f86f6a3781cac1e95ce28ec81329252fa68bbce582f5e7271734105e661f8c7fc0907559dcac15d10b9e6f7be413f0df1592407b18db554513a790c4c","ssdeep":"384:SensccjIl2Dy3KgEX2JAMQA9hKF3DhJjdW3qtTHzumv//4wVuyx2/M8o8jhuJpp:viIl2DyagECAAhwTjjnVjvI22k89Ypp","tlshash":"e7a2d01ce8432a5e6c5b63291fbd04230e678161f829eb4769dfb0566cab8fe443d087","first_seen":"2023-05-01T02:34:20Z","last_seen":"2026-07-13T05:08:27.407899Z","times_seen":1015,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-12","alert":"Phishing Block","trigger":"www.bet38d.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"www.bet38d.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}