{"report_id":"5cde7f5d-94d8-4974-a90f-a91ae995507f","version":6,"status":"done","tags":[],"date":"2026-05-17T01:58:35Z","url":{"schema":"http","addr":"www.bet365vip9.net/","fqdn":"www.bet365vip9.net","domain":"bet365vip9.net","tld":"net"},"ip":{"addr":"207.148.40.198","port":0,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"www.bet365vip9.net/","fqdn":"www.bet365vip9.net","domain":"bet365vip9.net","tld":"net"},"title":"首页导航","dom":{"size":4484,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"8295270b18e3f77e92f05119235ae2c8","sha1":"a0b654e7165e7a2f52bd1177fbe7a82d49d04f73","sha256":"289bb0ac666e41220c923769df1803eddc2469e6480658af2fd3104a42052c72","sha512":"eccffd312c43e0bcd65260eaeb8bc5c52d1b75d3ac2608c1b306daaf23727a9f202485aac8cf51919263878ffcf82010bcb4fc86ccf12b6a240fd6ce649592b4","ssdeep":"48:DEfP+CLK35qlBHhrgfk913qeId4mVITFjUIVafj9Qp/WpoC0diZGMUQimGD/QLTy:An+C04hrgfkXrU+RUSW9Qtg/C3oldMIk","tlshash":"da91943be2cd7136721395b05eb12ba8922e406bcd137a46d1fa568fd184df2c413a8c","dom_hash":"domhash13c319094d3283c9d8d5ad7323bca2f9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.bet365vip9.net/","fqdn":"www.bet365vip9.net","domain":"bet365vip9.net","tld":"net"},"ip":{"addr":"207.148.40.198","port":0,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-21T01:58:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.bet365vip9.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.bet365vip9.net","ip":{"addr":"207.148.40.198","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-04-26","domain_rank":0,"first_seen":"2026-05-17T01:58:35.100526Z","last_seen":"2026-05-17T01:58:35.100526Z","alert_count":7,"request_count":7,"received_data":84797,"sent_data":3177,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.bet365vip9.net/images/by_07.png","fqdn":"www.bet365vip9.net","domain":"bet365vip9.net","tld":"net"},"ip":{"addr":"207.148.40.198","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet365vip9.net/","date":"2026-05-17T01:58:12.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365vip9.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 11:29:52 GMT","end":"Fri, 14 Aug 2026 11:29:51 GMT"},"fingerprint":{"sha1":"EE:77:3F:CC:6C:82:23:41:4D:D7:48:62:2E:33:79:CA:B1:13:66:87","sha256":"8F:97:65:90:AE:6B:D5:BF:3E:01:C6:90:47:C1:B0:9F:17:A7:2B:26:15:7F:A6:81:7C:A0:55:BE:4F:F2:C0:0C"}}},"request":{"raw":"GET /images/by_07.png HTTP/1.1\r\nHost: www.bet365vip9.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bet365vip9.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 01:57:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 08 Feb 2026 01:39:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6987e946-15fd\"\r\nexpires: Tue, 16 Jun 2026 01:57:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5629,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 44, 8-bit/color RGBA, non-interlaced","md5":"c11b8d59ad19de7de8749ad21e005e07","sha1":"5d77eb1dfb80a013fa7aa2eef9a94ddf8d543956","sha256":"69a1173252ba1114f7932fb67043a6fb04d2614c1792a75c14412d8554eb92bf","sha512":"f181f802693a16dbceb5ca9ccb424452e9037ebf7fd7843598c51a7739bd0df44e04dc1c592001572fcc638076dfe1178f3096d4c3ad105d0d5dd1be954064f9","ssdeep":"96:c/knmWq2i8pl2YUNfYoYoPTMjIk0jL7XBZlNqWRZznHL3e/S7/4IVtXeiK23ruKR:c/knXpkYUWF05Dt3+/RbUZSK","tlshash":"e7c1450eea76de20dc35a7405fb4219265ffcfa12695a46cadd6ba2f0fe5061cb44c03","first_seen":"2025-07-18T07:14:55.25434Z","last_seen":"2026-07-03T09:56:30.103609Z","times_seen":12,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.bet365vip9.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet365vip9.net/images/phone.png","fqdn":"www.bet365vip9.net","domain":"bet365vip9.net","tld":"net"},"ip":{"addr":"207.148.40.198","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet365vip9.net/","date":"2026-05-17T01:58:12.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365vip9.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 11:29:52 GMT","end":"Fri, 14 Aug 2026 11:29:51 GMT"},"fingerprint":{"sha1":"EE:77:3F:CC:6C:82:23:41:4D:D7:48:62:2E:33:79:CA:B1:13:66:87","sha256":"8F:97:65:90:AE:6B:D5:BF:3E:01:C6:90:47:C1:B0:9F:17:A7:2B:26:15:7F:A6:81:7C:A0:55:BE:4F:F2:C0:0C"}}},"request":{"raw":"GET /images/phone.png HTTP/1.1\r\nHost: www.bet365vip9.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bet365vip9.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 01:57:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 08 Feb 2026 01:39:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6987e947-64e2\"\r\nexpires: Tue, 16 Jun 2026 01:57:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25826,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 139 x 167, 8-bit/color RGBA, non-interlaced","md5":"79b5dd476795cf290938adb99ec00635","sha1":"529db32331058fa114bb69ba9d3b62362d0b9d54","sha256":"b4f8e1b5b16cc9508368ad8ad78fec3337d9b2a9d53f3769e2bd8723c9388901","sha512":"04e64e90f95fbc45c6d2ca2b1ec0dbd2b4f91486c3e3f43d2ad229e32bf27f96e225e5a0cf3d4288b2fb1921b0ae62d844f7b7aa7e6fa972541b7596a33dae8f","ssdeep":"384:x36oAKnqpWCBNfVZl5eJ7JNWu4PSr7iL5Z:l6Rizg1rl5exbeo7A5Z","tlshash":"acc29e20adf23c7e904a9d761dd1e0080c7b4997edc55c0436de92366fa0bae1d5f197","first_seen":"2025-07-18T07:14:55.257455Z","last_seen":"2026-07-03T09:56:30.106669Z","times_seen":4,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":664,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.bet365vip9.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet365vip9.net/images/by_09.png","fqdn":"www.bet365vip9.net","domain":"bet365vip9.net","tld":"net"},"ip":{"addr":"207.148.40.198","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet365vip9.net/","date":"2026-05-17T01:58:12.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365vip9.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 11:29:52 GMT","end":"Fri, 14 Aug 2026 11:29:51 GMT"},"fingerprint":{"sha1":"EE:77:3F:CC:6C:82:23:41:4D:D7:48:62:2E:33:79:CA:B1:13:66:87","sha256":"8F:97:65:90:AE:6B:D5:BF:3E:01:C6:90:47:C1:B0:9F:17:A7:2B:26:15:7F:A6:81:7C:A0:55:BE:4F:F2:C0:0C"}}},"request":{"raw":"GET /images/by_09.png HTTP/1.1\r\nHost: www.bet365vip9.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bet365vip9.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 01:57:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 08 Feb 2026 01:39:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6987e946-1283\"\r\nexpires: Tue, 16 Jun 2026 01:57:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4739,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 46, 8-bit/color RGBA, non-interlaced","md5":"d4192b4f6ee2cd2a74d9c6ea666c86f6","sha1":"3fb74f8ce84ef2057667ea880e559ffa5c32c3e4","sha256":"07188a05cd6a1e7b0877c04d8aa075d74a43bd86452510c3f7cdfca186a97823","sha512":"200286894364e81b0ba9a76ece44e2ca22880174dea1acd0599bbaac853926fe0975db668ae07467587b32bbfdb3fb5fa5169e91114df24abf1c9879e0e645fc","ssdeep":"96:c/knmWq2i8plsMUNfYoYoPTMjIk0jL7XBZlNqWRZznHL3e/S7/4IVtXeiK23ruKh:c/knXpSMUWF05Drr+YNX","tlshash":"b5a1110dab76de20dc25b7105ff0719265bfcf911684a12cade9f91f0fa60a1cb04c42","first_seen":"2025-07-18T07:14:55.25527Z","last_seen":"2026-07-03T09:56:30.10534Z","times_seen":12,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.bet365vip9.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet365vip9.net/images/favicon.ico","fqdn":"www.bet365vip9.net","domain":"bet365vip9.net","tld":"net"},"ip":{"addr":"207.148.40.198","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet365vip9.net/","date":"2026-05-17T01:58:13.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365vip9.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 11:29:52 GMT","end":"Fri, 14 Aug 2026 11:29:51 GMT"},"fingerprint":{"sha1":"EE:77:3F:CC:6C:82:23:41:4D:D7:48:62:2E:33:79:CA:B1:13:66:87","sha256":"8F:97:65:90:AE:6B:D5:BF:3E:01:C6:90:47:C1:B0:9F:17:A7:2B:26:15:7F:A6:81:7C:A0:55:BE:4F:F2:C0:0C"}}},"request":{"raw":"GET /images/favicon.ico HTTP/1.1\r\nHost: www.bet365vip9.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bet365vip9.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 17 May 2026 01:57:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"6a08618c-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-07-26T10:20:54.422429Z","times_seen":316196,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.bet365vip9.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet365vip9.net/","fqdn":"www.bet365vip9.net","domain":"bet365vip9.net","tld":"net"},"ip":{"addr":"207.148.40.198","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-17T01:58:11.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365vip9.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 11:29:52 GMT","end":"Fri, 14 Aug 2026 11:29:51 GMT"},"fingerprint":{"sha1":"EE:77:3F:CC:6C:82:23:41:4D:D7:48:62:2E:33:79:CA:B1:13:66:87","sha256":"8F:97:65:90:AE:6B:D5:BF:3E:01:C6:90:47:C1:B0:9F:17:A7:2B:26:15:7F:A6:81:7C:A0:55:BE:4F:F2:C0:0C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bet365vip9.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 01:57:46 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 16 May 2026 12:28:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0862f5-1196\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4502,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1f6e88087e3029e6d323f982734b6529","sha1":"32e4a67ec4dcf4fee9c6de3c5b6e30490b9dbaf0","sha256":"9ba41c3de9a4e56f85746a5e6f55f1d692ca9efe2acc61e9b84e83fc9f82bf89","sha512":"f88964ff0856cd0c5cd755f4580b42daa941eb6e9d9fafd077e32813955f49193b7e348c1d701461c4fd8912572fd4b1ff92ba12d1fc98ceb8bcd3801fb6e8d4","ssdeep":"96:yn+C04hrgfkXrU+RUSRE9QSg/C36ldMI/:yn+4hrg3+RUS2Y5lH/","tlshash":"ae91943bd2cd7136721399f05eb12ba8922e406bcd537a06d2fa569fd184df2c413a9c","first_seen":"2026-05-17T01:58:38.670165Z","last_seen":"2026-05-17T01:58:38.670165Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1156,"timings":{"blocked":466,"dns":13,"connect":222,"send":0,"wait":223,"receive":0,"ssl":228},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.bet365vip9.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet365vip9.net/images/by_03.png","fqdn":"www.bet365vip9.net","domain":"bet365vip9.net","tld":"net"},"ip":{"addr":"207.148.40.198","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet365vip9.net/","date":"2026-05-17T01:58:12.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365vip9.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 11:29:52 GMT","end":"Fri, 14 Aug 2026 11:29:51 GMT"},"fingerprint":{"sha1":"EE:77:3F:CC:6C:82:23:41:4D:D7:48:62:2E:33:79:CA:B1:13:66:87","sha256":"8F:97:65:90:AE:6B:D5:BF:3E:01:C6:90:47:C1:B0:9F:17:A7:2B:26:15:7F:A6:81:7C:A0:55:BE:4F:F2:C0:0C"}}},"request":{"raw":"GET /images/by_03.png HTTP/1.1\r\nHost: www.bet365vip9.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bet365vip9.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 01:57:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 08 Feb 2026 01:39:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6987e946-7e1f\"\r\nexpires: Tue, 16 Jun 2026 01:57:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32287,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 356 x 98, 8-bit/color RGBA, non-interlaced","md5":"966ab72170ecab50f9f5377790a65dd1","sha1":"a685063212bd47c820e6934bb4d46db06cd57ef2","sha256":"724e40a4d1af21adfa6c42ff1d2bbec1ea08f5c40b62465839ad9a29eb26d799","sha512":"b9e2db9280911d55b636d8f34ddf8160434162c1e3a13928e2a5069450ee06533a83e72ad408579a29b8f0e65a9887c49715b85148994ba2458d9eeaad9f390c","ssdeep":"768:uU1YFFz0PtnlfFYqvJ3wU92txJ5QDCIfd:uXjz07BSpQWIfd","tlshash":"0be2f27b1a32d9366f64f4bf16fc03164a698c8777751869f456f28f80c032d7488613","first_seen":"2025-07-18T07:14:55.252549Z","last_seen":"2026-07-03T09:56:30.100635Z","times_seen":16,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.bet365vip9.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bet365vip9.net/images/by_12.png","fqdn":"www.bet365vip9.net","domain":"bet365vip9.net","tld":"net"},"ip":{"addr":"207.148.40.198","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bet365vip9.net/","date":"2026-05-17T01:58:12.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet365vip9.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 11:29:52 GMT","end":"Fri, 14 Aug 2026 11:29:51 GMT"},"fingerprint":{"sha1":"EE:77:3F:CC:6C:82:23:41:4D:D7:48:62:2E:33:79:CA:B1:13:66:87","sha256":"8F:97:65:90:AE:6B:D5:BF:3E:01:C6:90:47:C1:B0:9F:17:A7:2B:26:15:7F:A6:81:7C:A0:55:BE:4F:F2:C0:0C"}}},"request":{"raw":"GET /images/by_12.png HTTP/1.1\r\nHost: www.bet365vip9.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bet365vip9.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 01:57:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 08 Feb 2026 01:39:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6987e947-2123\"\r\nexpires: Tue, 16 Jun 2026 01:57:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8483,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 58 x 42, 8-bit/color RGBA, non-interlaced","md5":"33635e0ed242c92599f436697e653801","sha1":"96bb68bf34851a0086b3b4a3cef5340ef44be582","sha256":"25e08baf0042a107af5c5727d1bbbc40f00f6dd69bb24cd79821a78ac093cbe8","sha512":"7d273528dc2ceb84c72c62136629bacf3eaa9cca9042fffe80362159a2586e298fc9187d93b6d2209e991f039f1967f025099e1044fdc4929f3809a99f3f9e8d","ssdeep":"192:D/knXpUQUWF05DFPDNA3/4k6KQPjmXT5cBcskLER1jHbMipw:Dsn2QUWF0JpDm4DKQP0okLU9Hwew","tlshash":"d402e80daf6e9e20ec6597005fb4219764bfcf905680b46ced96f61f4fa5065cb84843","first_seen":"2025-07-18T07:14:55.253522Z","last_seen":"2026-07-03T09:56:30.102038Z","times_seen":12,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.bet365vip9.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}