{"report_id":"6ece30e1-5e90-46b4-8e9f-fb58c6f0b7c5","version":6,"status":"done","tags":[],"date":"2026-03-31T13:55:19Z","url":{"schema":"http","addr":"bet3a60.com","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.53","port":0,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"https","addr":"bet3a60.com/#/home","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"title":"bet365","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bet3a60.com","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.53","port":0,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-05T13:55:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ipwho.is","ip":{"addr":"104.20.44.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-29","domain_rank":18239,"first_seen":"2020-06-08T11:52:47Z","last_seen":"2026-03-28T03:44:20.863322Z","alert_count":0,"request_count":1,"received_data":315,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"93145.cc","ip":{"addr":"16.163.5.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"domain_registered":"2024-06-22","domain_rank":0,"first_seen":"2021-03-01T12:16:50Z","last_seen":"2026-03-31T02:29:45.917432Z","alert_count":0,"request_count":2,"received_data":74796,"sent_data":874,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cstaticdun.126.net","ip":{"addr":"47.246.50.196","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"France","country_code":"FR"},"domain_registered":"1998-02-28","domain_rank":474446,"first_seen":"2017-06-21T07:31:41Z","last_seen":"2026-03-27T04:49:16.383385Z","alert_count":0,"request_count":1,"received_data":37113,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"ssl.captcha.qq.com","ip":{"addr":"157.255.220.168","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"domain_registered":"1995-05-04","domain_rank":744414,"first_seen":"2012-11-03T19:41:33Z","last_seen":"2026-03-27T02:20:16.647776Z","alert_count":0,"request_count":1,"received_data":99926,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"ai-bmp.cffygajeba05img.com","ip":{"addr":"47.242.232.127","port":9663,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-02-06","domain_rank":0,"first_seen":"2025-02-06T13:32:39.874838Z","last_seen":"2026-03-31T02:40:49.250251Z","alert_count":0,"request_count":13,"received_data":21497,"sent_data":5925,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bet3a60.com","ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-31T02:29:45.413818Z","last_seen":"2026-03-31T02:29:45.413818Z","alert_count":402,"request_count":67,"received_data":6605489,"sent_data":58997,"comment":"","tags":null,"fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tencent Waterproof Wall","description":"","website":"https://007.qq.com/","common_platform_enumeration":"","icon":"TencentWaterproofWall.png","categories":["Hosting panels","Security"]}]},{"fqdn":"3p104.com","ip":{"addr":"16.163.5.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"domain_registered":"2024-05-25","domain_rank":4802463,"first_seen":"2024-08-03T16:44:33Z","last_seen":"2026-03-25T03:42:25.269536Z","alert_count":0,"request_count":6,"received_data":1934678,"sent_data":2568,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bet3a60.com/","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5e9dd0bd5270c373f91fd197dacb1b2","sha1":"2fbb8b91b23f619f4f4db9b6a80e389c932ecaec","sha256":"7b9444af6862f17ba1822634cfe2c4395a9c75bd97a1106fb2aac7b11d23a520","sha512":"af3745394bddb5c451bb72306a083a5fbb4d5dafe40cd5505128085918f449c816586c59fdb12e93e7a3ebc3309741dd15f49ef080b97a5bc51ed604d9e42f2a","ssdeep":"","tlshash":"f9a002b9b110788958b6327123573b8d7a627f183085349189ac6974a952c17d53acc4","size":70,"data":"","first_seen":"2025-04-13T16:35:58.984173Z","last_seen":"2026-06-04T23:35:48.246508Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-06-06T21:18:52.055236Z","times_seen":74024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/js/vendors.2520bfbe.js","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d0acbaab4590ade202e9c74e3c62b41","sha1":"1132d4453f78375b0a3a9326175d9f9433e408c8","sha256":"2aa4d32bc3962fd2862c7e8b53aa02e59099bdf1cc54b8d6e51bd3340b599643","sha512":"abdbcb02bf009dcf478d4d32722473e2a7fa292bc23293c7276c9c7585bc50d0f49e06bb5d251bc0c18e4873fa775e35bce87a7608dec319d81f87290fe0a775","ssdeep":"24576:JC+iOUju6MPPHJ3YCmdAXi9WHYau3AaQRSHi3Rm9wR4q3YymBxd+DUaX5/BThnZH:JC+cQPOOAJGeid/1uV4a6","tlshash":"a5753cddb291b07103e650e9442f050bf33a69196409c4acf279e8e67cb9d8e617bf78","size":1578745,"data":"","first_seen":"2026-03-31T02:29:53.172457Z","last_seen":"2026-03-31T14:10:59.883298Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cstaticdun.126.net/load.min.js?t=202007291602","fqdn":"cstaticdun.126.net","domain":"126.net","tld":"net"},"ip":{"addr":"47.246.50.196","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb8efb99a8950ca6b13f38274938882c","sha1":"8ab6335d260069ded73009a539c3bc91404791de","sha256":"2f55203b6eac5a5edbefc7225557ba6bf8f4d869c67525d11d10719a8becd3d5","sha512":"0d60f0db0dc4f5ef4ea8baf1d18d44d20313d436f84d3033453828fbbe856b673a442085290ebaa5627ded58cee3d35a8a5560bd860cf7697330c769bb99275a","ssdeep":"768:9KHK1+h00zI0RAcKvErsQsLiz0I+/QtzfS5+8hfgVCMiE:9ChrsQa6tjS5D5gEE","tlshash":"2ef2d68cb690f4bb4ba76070813f920be13b5614b499c0e4b155e5e4adbd8ce5627f3c","size":36116,"data":"","first_seen":"2026-03-25T12:02:18.210304Z","last_seen":"2026-04-08T10:38:07.655442Z","times_seen":533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/js/main.5e1b8097.js","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"de3a85519de94d8b4d8306349932fec3","sha1":"bd1bbdda5819a64389c94b00781032a1efe8e993","sha256":"1d9143ae07e17fbcd3736c5130df0806d45eb04b6b050b309695367297d26682","sha512":"647e3b19ff341a90450eb99d844064598d8e9d2ac0654e53e678aab52783c7ca3a69103c3b5295a0cf9ba27b196bb68ef2b2bb8a2f4e76f499c0797345567743","ssdeep":"49152:dHTRTW+kO1L0yuLZAxWkmdryKxtFR6irdI5K6x2Ew:GU+","tlshash":"25b5c8cef656baa4b9fd44c8cc3e4d0ca26a2e14450584b8f9fc6d423605698762fff4","size":2489570,"data":"","first_seen":"2026-03-31T02:29:53.17356Z","last_seen":"2026-03-31T14:10:59.884233Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-06-06T21:18:52.055236Z","times_seen":74024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-06-06T21:18:52.055236Z","times_seen":74024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-06-06T21:18:52.055236Z","times_seen":74024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.captcha.qq.com/TCaptcha.js","fqdn":"ssl.captcha.qq.com","domain":"qq.com","tld":"com"},"ip":{"addr":"157.255.220.168","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dc4ca9f1efbcb232c925de44d25b502","sha1":"2bb440e7908c7b4db175075685bad4dc0de328e7","sha256":"d4178c894f1d24b0b69d3d66b42204be3d63e199d25e39b2a53fa416b8c89f8f","sha512":"365ae8c212d95d919b1f141b273e2a24d2c321c9e243434d5ecb3560498201eeb4fda1938fe4153eb1d3802989c4396a75f084d907b45baacdfe0c9d5760db2c","ssdeep":"1536:TZB+ZYK9BnHl7xTYeu24ozqA7R/hISgScvEPhZOWmBW/MNfH4OYsgP+3UKq+0XYy:DwxTYeu24ozqA9/hISgSGOOpBW/wYDth","tlshash":"cba318deb3f1762d05ab6194cc3b9d8e64374c50c018f1b5cfb98687b628589921bf3a","size":99680,"data":"","first_seen":"2026-03-31T07:53:15.76128Z","last_seen":"2026-04-09T01:57:55.363451Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ai-bmp.cffygajeba05img.com:9663/team_logo/24778.png","fqdn":"ai-bmp.cffygajeba05img.com","domain":"cffygajeba05img.com","tld":"com"},"ip":{"addr":"47.242.232.127","port":9663,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ai-bmp.cffygajeba05img.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 05 Mar 2026 09:44:38 GMT","end":"Sun, 04 Apr 2027 09:44:37 GMT"},"fingerprint":{"sha1":"6D:82:6C:C8:EA:DD:05:DB:D1:75:72:17:8C:12:F5:CB:2F:8A:34:DF","sha256":"11:EB:93:37:70:49:FD:7B:F1:F9:76:8C:1F:E4:82:C9:EA:8C:20:DF:4C:43:DA:15:61:51:10:A2:B4:4D:C1:3C"}}},"request":{"raw":"GET /team_logo/24778.png HTTP/1.1\r\nHost: ai-bmp.cffygajeba05img.com:9663\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 2586\r\nConnection: keep-alive\r\nx-oss-request-id: 69CBD241E9F85931306A413A\r\nAccept-Ranges: bytes\r\nETag: \"0AE2155709DFEE3841DFA7F0CE241251\"\r\nLast-Modified: Wed, 10 Jul 2024 16:11:27 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7246964935518008063\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nContent-MD5: CuIVVwnf7jhB36fwziQSUQ==\r\nx-oss-server-time: 2\r\nExpires: Tue, 07 Apr 2026 13:55:13 GMT\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=604800, no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2586,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"0ae2155709dfee3841dfa7f0ce241251","sha1":"059090fa642450a010980907cea044bde534232b","sha256":"535bea89aa7866e40bbad71abf8670618f514765f5c0ffe479909ccbed4c4e88","sha512":"9253a6c81c60074426bbcc5f10dc578393ec010faed5542b3b47a7cbada32029bceba536ed6fd460036f8608434e75b956ef22b0a51fd6ffd8d22301031bc9ec","ssdeep":"","tlshash":"27515d4ec6859f90e3e8564224e700275d2fc460ddc2d812fedacc22c6013f810256d7","first_seen":"2026-03-31T13:55:32.215297Z","last_seen":"2026-03-31T14:10:59.838232Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1467,"timings":{"blocked":1184,"dns":0,"connect":0,"send":0,"wait":282,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bmp.cffygajeba05img.com:9663/team_logo/1701.png","fqdn":"ai-bmp.cffygajeba05img.com","domain":"cffygajeba05img.com","tld":"com"},"ip":{"addr":"47.242.232.127","port":9663,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:13.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ai-bmp.cffygajeba05img.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 05 Mar 2026 09:44:38 GMT","end":"Sun, 04 Apr 2027 09:44:37 GMT"},"fingerprint":{"sha1":"6D:82:6C:C8:EA:DD:05:DB:D1:75:72:17:8C:12:F5:CB:2F:8A:34:DF","sha256":"11:EB:93:37:70:49:FD:7B:F1:F9:76:8C:1F:E4:82:C9:EA:8C:20:DF:4C:43:DA:15:61:51:10:A2:B4:4D:C1:3C"}}},"request":{"raw":"GET /team_logo/1701.png HTTP/1.1\r\nHost: ai-bmp.cffygajeba05img.com:9663\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 31 Mar 2026 13:55:14 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"67a493ca-305\"\r\nStrict-Transport-Security: max-age=604800; includeSubdomains; preload\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T21:09:45.625607Z","times_seen":16191656,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/favicon.ico","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:05.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:05 GMT\r\nContent-Type: image/x-icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69c8b0a8-7790\"\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\nX-Cache-Status: EXPIRED\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30608,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"047023df972b9460c52a5a02fd9fe3d5","sha1":"4527761791768486d2f48b84ebd9b503ba2496c8","sha256":"d6ed0cbc69becc858ff7634aa2d1d152218cee3fe5b6533724d8f4444ad41206","sha512":"41dd92fd8d947c7c7cd5f8c839054c549dbb5e8ca05566c444732cfc3ffec8dc77fea88bbd1391b1cd5b05d99e19a9ecb82d928c2bb54ddf0c4c3a44f7585545","ssdeep":"768:iRn9XaI4VpvTyJ6cRtZM7SOVXQRQZqOUoyabeo2LzAs028:iN9XUVkMcRtAhyQlpxbeocz228","tlshash":"ffd2f159cda824210fce1ec04f54983607399bab7523b21ff0c5c45a8fb416ea9961f3","first_seen":"2023-07-20T11:17:32Z","last_seen":"2026-03-31T14:10:59.846775Z","times_seen":12,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":849,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_home_icon.d43836d8.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_home_icon.d43836d8.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:07 GMT\r\nContent-Type: image/webp\r\nContent-Length: 784\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-310\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":784,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"de1f65963d1884c1ac41023e12a51d7f","sha1":"f336e07a408e4b1fc3d3c60003628d33aba6f429","sha256":"fa9bf85a4f90bebbf0823c571e2d7b3ecccaf15824b89a09349fe61009764b15","sha512":"87080eb609d9d76f77c484a77199fc03e4c0c567b1827e463e27201bd42974813829b8ae9c41689e4ea3997488ec71204ccab046e21a284a131a0a5970cabbb3","ssdeep":"","tlshash":"4101c02083b72e50d04228b8c60502a2bc2fc6cb403a883abbac2c2a203409068f9848","first_seen":"2025-12-23T17:05:07.976581Z","last_seen":"2026-03-31T14:10:59.860634Z","times_seen":5,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_video.72cf8343.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_video.72cf8343.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:10 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1474\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-5c2\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1474,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eddc4077da53867323b698082899f47b","sha1":"936d9c2cf86f989edf0e704f73602bba52687972","sha256":"9675ba84c847e7cd6db657861a10f7286b3bab250aa09f65f42ec76f36c9b7b8","sha512":"26a9f9c9cce6795e4a2ae621eea178711f5c24c32f1ad13738a77f1dfefe70307383dc66d6d843d1f404a078d16c379063105b170310660b9aca78b8e5ff3447","ssdeep":"","tlshash":"c231e921e8308122d617bbcfa164644834e9ddac8cb34bb881c70c80667cf37daa7966","first_seen":"2025-09-07T05:07:22.401387Z","last_seen":"2026-06-04T23:35:48.157484Z","times_seen":80,"resource_available":false,"data":null}},"time_used":3482,"timings":{"blocked":2932,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/sport_api/GetAllSportCount","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"POST /sport_api/GetAllSportCount HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\ndeviceInfo: {\"mobile\":\"Firefox 134.0\",\"os\":\"Windows 134.0\",\"browser\":\"Firefox\",\"iosVersion\":\"\"}\r\nContent-Length: 38\r\nOrigin: https://bet3a60.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":38,"data":"{\"IsCombo\":false,\"LanguageCode\":\"CHS\"}"}},"response":{"raw":"HTTP/1.1 200 \r\nDate: Tue, 31 Mar 2026 13:55:09 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: aliyungf_tc=8de2e693ab91e3b028f461abb0d4392f9bdadbd159a8e5058410ec3edd78d15d; Path=/; HttpOnly\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":3078,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bf6466c53b2a8bdf44fe04d9d28f8e61","sha1":"771ae6015657229263addf8a0ededbef8cd8afc5","sha256":"274e34cc43040c2cba0497005a126b183c4f1567241e96c623b2c881792ae056","sha512":"4a5cdc73f8ae005962da952a0591c85634215da5f8b4fdfa47c3f2d44037fef8c2e1fed3ff231f6da0bdc7f4b7e07ee3c17e9bf764bad4871253b68c6dde1bf6","ssdeep":"","tlshash":"e2519f11f5196c5d73874f6af6635ab324e122223f543b89ffcf1a2c41922442f92557","first_seen":"2026-03-31T13:55:32.219128Z","last_seen":"2026-03-31T13:55:32.219128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1946,"timings":{"blocked":1100,"dns":0,"connect":0,"send":0,"wait":846,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/icon_filter.01cb7ffe.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/icon_filter.01cb7ffe.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653085688540e00354883367d0362a6f89c3204b999767af4; baboConfig={%22appId%22:%22596ebeab-e665-456e-ac67-01b9e67242b6%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}; aliyungf_tc=8de2e693ab91e3b028f461abb0d4392f9bdadbd159a8e5058410ec3edd78d15d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/webp\r\nContent-Length: 214\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-d6\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"627266a5ae49398d0fbd48d9ef1293b2","sha1":"cfdf32a22369fdc40231439d9cdc8700fe6d70a3","sha256":"59820f6897895acebfb9a6d8f7b8470f20769342f7b6ca535e42b59d21b55220","sha512":"a856a810c5912434083a901573f98edab575d32dc537dbedcbaa2508f4ac1013a1cea4a58e087704ac784ad293b54272bcec79eb11de0a5fba53c38376da7820","ssdeep":"","tlshash":"60d0234d85c4939c6d075cb304528a295303d2959567f554c7857487907c47007f667f","first_seen":"2023-07-20T11:17:33Z","last_seen":"2026-05-22T20:18:53.280771Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/animation_icon_black.6cea949b.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/animation_icon_black.6cea949b.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653085688540e00354883367d0362a6f89c3204b999767af4; baboConfig={%22appId%22:%22596ebeab-e665-456e-ac67-01b9e67242b6%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}; aliyungf_tc=8de2e693ab91e3b028f461abb0d4392f9bdadbd159a8e5058410ec3edd78d15d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 194\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-c2\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":194,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a8fd27c750600fe713fe693361a0e43a","sha1":"01c4a64545d368c00f71e18c66d1341974018973","sha256":"a77711df25807970f8193ef7d4470b4f5db6305e42b2c065b3ec9d295a6b9c0c","sha512":"a8aff1bd4a274392d659ee386a8f8843f43970cdde48690a969c8c49663598692bdbc45c59405c5d778176ff86d1efc87aa84a6f2218256d19af49341b1a4fc4","ssdeep":"","tlshash":"60c022f4a548b60c80e80baa0270a9edb80e92882210607c28a0379288b8b0e12c1a08","first_seen":"2023-12-17T14:36:23Z","last_seen":"2026-03-31T14:10:59.864793Z","times_seen":26,"resource_available":false,"data":null}},"time_used":2857,"timings":{"blocked":1542,"dns":0,"connect":0,"send":0,"wait":1315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/team_default.828b97bf.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/team_default.828b97bf.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653085688540e00354883367d0362a6f89c3204b999767af4; baboConfig={%22appId%22:%22596ebeab-e665-456e-ac67-01b9e67242b6%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}; aliyungf_tc=8de2e693ab91e3b028f461abb0d4392f9bdadbd159a8e5058410ec3edd78d15d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/webp\r\nContent-Length: 4624\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-1210\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4624,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0575642ad45e331c710b6111acf91c3f","sha1":"460e178699fc151206591e74e61879ed47ff2a71","sha256":"524bfa9b35963b7b03f131e85bbc498446233378b1b85ef9a25ccff49cc77545","sha512":"b237a893ffb4c1e839448004d4c160b6bf0ee93f4bde7b8c3130a260cce370fafc41b0cb7d38de1d7be7cca03e2790b703ee7e9692cbcfca37c602f24d2879ce","ssdeep":"96:9PG3rswFZF8wT3kPY+BMKLpxN7ZNNX6nm2OtqlPemQn8Nwfb:9PG3rNFpQX7/0mhtOm9VT","tlshash":"9c919e76c16674d2aa534f683d04d50db107cc8559ef89ef09ef0adf3a57854e1204da","first_seen":"2023-07-20T11:17:33Z","last_seen":"2026-06-04T23:35:48.137102Z","times_seen":119,"resource_available":false,"data":null}},"time_used":1347,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1346,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bmp.cffygajeba05img.com:9663/team_logo/18213.png","fqdn":"ai-bmp.cffygajeba05img.com","domain":"cffygajeba05img.com","tld":"com"},"ip":{"addr":"47.242.232.127","port":9663,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ai-bmp.cffygajeba05img.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 05 Mar 2026 09:44:38 GMT","end":"Sun, 04 Apr 2027 09:44:37 GMT"},"fingerprint":{"sha1":"6D:82:6C:C8:EA:DD:05:DB:D1:75:72:17:8C:12:F5:CB:2F:8A:34:DF","sha256":"11:EB:93:37:70:49:FD:7B:F1:F9:76:8C:1F:E4:82:C9:EA:8C:20:DF:4C:43:DA:15:61:51:10:A2:B4:4D:C1:3C"}}},"request":{"raw":"GET /team_logo/18213.png HTTP/1.1\r\nHost: ai-bmp.cffygajeba05img.com:9663\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 1602\r\nConnection: keep-alive\r\nx-oss-request-id: 69CBD2410E88983935FEA00E\r\nAccept-Ranges: bytes\r\nETag: \"DA12D0395669CA83A8398211EC2DE796\"\r\nLast-Modified: Wed, 10 Jul 2024 13:58:18 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9902009916751330241\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nContent-MD5: 2hLQOVZpyoOoOYIR7C3nlg==\r\nx-oss-server-time: 2\r\nExpires: Tue, 07 Apr 2026 13:55:13 GMT\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=604800, no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"da12d0395669ca83a8398211ec2de796","sha1":"0e37c8aedfd7287162f81875fa5e9e1a38c29dc7","sha256":"bb2561024cc0843052999093771ce7c3d9823ed987008077378c8645f9fb3efb","sha512":"9a4a7922008bc2932ddd005db4b03d32fd0626bc95796c3be2515ffa150e81f6500a359b03ce2f69160526db0ea1d37b0210f31083feeb689d91ce524f5569c5","ssdeep":"","tlshash":"5631e8cb1af0f22d8d5e0b09322b908a967f09b348050e344967820d215962f915db87","first_seen":"2026-03-31T13:55:32.22192Z","last_seen":"2026-03-31T14:10:59.867987Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2102,"timings":{"blocked":906,"dns":62,"connect":269,"send":0,"wait":282,"receive":0,"ssl":576},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/bet_recored_icon.2c725d3a.png","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:03.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/bet_recored_icon.2c725d3a.png HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:03 GMT\r\nContent-Type: image/png\r\nContent-Length: 1566\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-61e\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1566,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 68, 8-bit gray+alpha, non-interlaced","md5":"19f381b5fca630a298d1b3af6f4db413","sha1":"52bfbdecbd1b69c1605f9a86c184a66237f0e519","sha256":"b08e72820e2135e6f62f29f7e8ebdcf70e7244cf4a3e9c1d6ea90d37311e2fef","sha512":"3d43e751e82edb7de4698c7baf60c702b965b11e187961707d67bb144385599c2f7aca862ea88b6de7dc572f98bde694e51f1dc291eb4f776f4d8e09adba8794","ssdeep":"","tlshash":"8c310ae2ad854115ca2fa574e74b10d13eb5d32b1b1f4c3291a480d0cef5fd07d63186","first_seen":"2023-07-14T04:48:34Z","last_seen":"2026-06-04T23:35:48.178273Z","times_seen":154,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":756,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/member/api/resources/logo?classificationId=2","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:03.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /member/api/resources/logo?classificationId=2 HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndeviceInfo: {\"mobile\":\"Firefox 134.0\",\"os\":\"Windows 134.0\",\"browser\":\"Firefox\",\"iosVersion\":\"\"}\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Tue, 31 Mar 2026 13:55:06 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: acw_tc=ac11000117749653062948510e003531d3e9acd3c86d8cb696b5861c18af72;path=/;HttpOnly;Max-Age=1800\r\nVary: Accept-Encoding\r\nX-Application-Context: application:redisson-cluster:8888\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]}],"data":{"size":215088,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"82e31f5437f146ab26498283e95918c2","sha1":"3f6099e06046cc78faa5f0761bf5eef9022b102a","sha256":"4cae772fb1b7440d7fd9a5e7e132126ad2a03fff0f851301574d4e9ab4517a2e","sha512":"6f8a90184ed4b2230614dc3d9b78b0e55e1c8a24f46fa55fd0291dfa89165a634d3eee76b99d31631e7ebe98550c8caa853030ef5c1e0e3e22c1d8d1f50777f0","ssdeep":"6144:dF7v6MFthw3j981p+l4RdMmv9e7iNfqKoBp6M3m:rpzhgEusMu9e7ilqtb3m","tlshash":"ce2423972d553f6943b10d8ff42a8d29cad14c626c18ca9c4f3ab8e1d3d4d05393b2b8","first_seen":"2026-03-14T11:24:18.06154Z","last_seen":"2026-04-13T02:04:14.098122Z","times_seen":93,"resource_available":false,"data":null}},"time_used":6252,"timings":{"blocked":2083,"dns":1,"connect":254,"send":0,"wait":1548,"receive":521,"ssl":1841},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/member/webconfig/findByRecWebConfig?classificationId=2","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:03.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /member/webconfig/findByRecWebConfig?classificationId=2 HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndeviceInfo: {\"mobile\":\"Firefox 134.0\",\"os\":\"Windows 134.0\",\"browser\":\"Firefox\",\"iosVersion\":\"\"}\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Tue, 31 Mar 2026 13:55:07 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: acw_tc=ac11000117749653074733252e003892e9a03a53bfb436fe97ed639637441e;path=/;HttpOnly;Max-Age=1800\r\nVary: Accept-Encoding\r\nX-Application-Context: application:redisson-cluster:8888\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":1973,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"00eb11b164ce73f7a56edc93b2538e06","sha1":"926f06ed07c6094a468d3b0bdebdd09c93e8ce38","sha256":"5a590c51c50f0b264854a0d592e5b1f2bcc3111c7627530a1a77ff176ec7e660","sha512":"cdf5e424cd8eaeee39a68733222173f1870a210f88c6d0ac7383ca5d46e01297e51526dba8033bc51774c447623891b38db16b93bbe0174f238ded5f800afdda","ssdeep":"","tlshash":"5141bedf07cc463f876f9bed189fa938952d429394c29ccfc0521f6640ad6a1132cb12","first_seen":"2026-03-31T02:29:53.128886Z","last_seen":"2026-03-31T14:10:59.852155Z","times_seen":4,"resource_available":false,"data":null}},"time_used":4453,"timings":{"blocked":3797,"dns":0,"connect":0,"send":0,"wait":649,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3p104.com/3Ptc/T2.gif","fqdn":"3p104.com","domain":"3p104.com","tld":"com"},"ip":{"addr":"16.163.5.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:06.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"3p104.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:11:42 GMT","end":"Thu, 21 May 2026 10:11:41 GMT"},"fingerprint":{"sha1":"A6:E1:A0:B7:AC:38:33:BA:D3:F2:23:CD:E7:B0:66:03:68:EA:30:00","sha256":"DC:47:9B:AF:87:E6:BC:15:FB:09:AE:D5:73:CF:BD:87:5D:2F:87:EA:54:C9:49:94:A8:6A:0E:51:14:67:FD:06"}}},"request":{"raw":"GET /3Ptc/T2.gif HTTP/1.1\r\nHost: 3p104.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:07 GMT\r\nContent-Type: image/gif\r\nContent-Length: 567146\r\nConnection: keep-alive\r\nLast-Modified: Sun, 23 Feb 2025 09:59:41 GMT\r\nVary: Accept-Encoding\r\nETag: \"67baf18d-8a76a\"\r\nExpires: Thu, 30 Apr 2026 13:55:07 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nServer: cdn\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":567146,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 540 x 598","md5":"924e8f034d0b4a30442098d7ef867abd","sha1":"e7b26100604645f6bfe6afe19d88a611e540fc3b","sha256":"c925d76e15088a687490bf4f95eaa7ed6422d641110eec3952639611bb2779e7","sha512":"b7e294bf786c1a00c49b9a18034eb2e4b540d6b4db4c32766c841a3e5bcaf42d1a4cf6dbf305ff0a3815affd0d79c93fd1f1915280c479bc7d5446cb05ecd4d7","ssdeep":"12288:lHaxRmUwEvsigE/vYURQ3sixAd+Rgqrz92dSS0gg/Cjih6N:0e28l2sgqrztXPhc","tlshash":"15c42391d7d31f321093654904b3bf5bf106da3ca1ee8f52c32654ef646aea652c8c87","first_seen":"2026-03-31T02:29:53.139062Z","last_seen":"2026-03-31T14:10:59.852685Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3837,"timings":{"blocked":995,"dns":77,"connect":302,"send":0,"wait":613,"receive":1228,"ssl":617},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/cloes1.b81ae9e3.png","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/cloes1.b81ae9e3.png HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 931\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-3a3\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":931,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 31 x 31, 8-bit colormap, non-interlaced","md5":"86cf7ccb35a75e02e38b4ecde86614b5","sha1":"af3ef5d7868c9ccd98896b44d659648451b5575e","sha256":"310398ced7c583f24c80208f862c252332252d4bd40aa67b40bedb0ee40a9db5","sha512":"75dc8cb5e1b796827c6ed54db866c4ffe68b3515de67710643f055692fde90429a502d29f1c96cf925f95ab32b9f8a2bab1b7bbf04645c67172f9bb9e8e51bb6","ssdeep":"","tlshash":"e11183fabf1d70e3c53717067d63f043ae2780622a420b4b0341a1aa0828a038333306","first_seen":"2023-07-14T04:48:34Z","last_seen":"2026-06-04T23:35:48.185858Z","times_seen":123,"resource_available":false,"data":null}},"time_used":4168,"timings":{"blocked":3609,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_video_active.32dce18f.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_video_active.32dce18f.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:10 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2876\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-b3c\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2876,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e5fd08d4fe0a9a052514fa67d116c5eb","sha1":"77b975b607ac07d39414272b08b70ad14778fde0","sha256":"c71d08e78535248cc0e17a85fb8e7c656df9a5f6ea474f859d09952d5b3c466a","sha512":"f04b996f89e81c7c6e6fe9e2d91466659acde7b9d0fb396e1bd64e7f4231aa1ab51ef1ce4f02af08eb8b1ae5b8de99aa3355408f747a5170a0a741a0feb21706","ssdeep":"","tlshash":"75512a4f85fa19b3cc40514f8798288f5e2863ad735e8387ca525fee05bc75624e4f1a","first_seen":"2025-12-23T17:05:07.971553Z","last_seen":"2026-03-31T14:10:59.863098Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3558,"timings":{"blocked":2994,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/ball_white_bg.9c82a364.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/ball_white_bg.9c82a364.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653085688540e00354883367d0362a6f89c3204b999767af4; baboConfig={%22appId%22:%22596ebeab-e665-456e-ac67-01b9e67242b6%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}; aliyungf_tc=8de2e693ab91e3b028f461abb0d4392f9bdadbd159a8e5058410ec3edd78d15d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/webp\r\nContent-Length: 356\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-164\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"139014cde91919739a015629dfdaec84","sha1":"052437993e2f9ffcd216aa4029afe88c543bacd2","sha256":"6af8922711b580a65f81761c591e3b7d973a533505bad1acc5c1f6de6f261a69","sha512":"ec47b560b56a79310a164e3cccccaa4a9a5a8d3e0551da4ba776a46abc212fd1ccf6e14c1a5f91f881d1d980c76fa284bb58a83b261e3c60dc393f324306b3f6","ssdeep":"","tlshash":"6be0c0fa3cb901be4884ad1b462a97e5cb58e223c748ff580a99ddf045a636b8151560","first_seen":"2023-07-20T11:17:32Z","last_seen":"2026-05-22T20:18:53.246565Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1567,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/member/api/resources/icon?classificationId=2","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:03.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /member/api/resources/icon?classificationId=2 HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndeviceInfo: {\"mobile\":\"Firefox 134.0\",\"os\":\"Windows 134.0\",\"browser\":\"Firefox\",\"iosVersion\":\"\"}\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Tue, 31 Mar 2026 13:55:06 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: acw_tc=ac11000117749653064172776e0032a1a30b9dc6ac59504b38fd3bc4e2535f;path=/;HttpOnly;Max-Age=1800\r\nVary: Accept-Encoding\r\nX-Application-Context: application:redisson-cluster:8888\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":237667,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d163f6073b0848dc73c627ae7523ff12","sha1":"aae8ba2d16f6246e046fa3ab4ac094e8164215a7","sha256":"02428aeba99bb2514bd2ba7264844196e354f2c893254de8176f13764c9b56f2","sha512":"f7033878f07fcec72f0ba0d3edbf4cdab1eabdead9c6bc5de12ca24feb0434229154e54581befc8b315d288e794f73b2b5a871a45ff1b4f7ed021d4c85584446","ssdeep":"6144:KKHVPiGbVE1uPFEUmzW+ukgadZpmpbxOMR:VNhxE1XtzXu2dzgNOMR","tlshash":"b33422f3974aac199878111c37e532397926bbf4982c10f085d3d912b8ba77dfea0d61","first_seen":"2026-03-14T11:24:18.090543Z","last_seen":"2026-04-13T02:04:14.100643Z","times_seen":89,"resource_available":false,"data":null}},"time_used":6531,"timings":{"blocked":2173,"dns":1,"connect":265,"send":0,"wait":1620,"receive":540,"ssl":1928},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3p104.com/3Ptc/365T4.gif","fqdn":"3p104.com","domain":"3p104.com","tld":"com"},"ip":{"addr":"16.163.5.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:06.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"3p104.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:11:42 GMT","end":"Thu, 21 May 2026 10:11:41 GMT"},"fingerprint":{"sha1":"A6:E1:A0:B7:AC:38:33:BA:D3:F2:23:CD:E7:B0:66:03:68:EA:30:00","sha256":"DC:47:9B:AF:87:E6:BC:15:FB:09:AE:D5:73:CF:BD:87:5D:2F:87:EA:54:C9:49:94:A8:6A:0E:51:14:67:FD:06"}}},"request":{"raw":"GET /3Ptc/365T4.gif HTTP/1.1\r\nHost: 3p104.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:07 GMT\r\nContent-Type: image/gif\r\nContent-Length: 349914\r\nConnection: keep-alive\r\nLast-Modified: Sun, 23 Feb 2025 12:48:03 GMT\r\nVary: Accept-Encoding\r\nETag: \"67bb1903-556da\"\r\nExpires: Thu, 30 Apr 2026 13:55:07 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nServer: cdn\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":349914,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 540 x 598","md5":"b26e12094c5e14fb33cc506895c9862b","sha1":"0121f9872ef19bc375df68765de417f6c829a5fc","sha256":"75410d63a3bfcc755753e952bbb18c3c545029e6cbc59219d4e80ad7aba7de9a","sha512":"936c17847419a97c559a6e023f40e0edf86dec643fb368ad2c5fc0c50be734002bcd38eec30a2ffef0dc4bef05ecb0eaef3942ded57f208bf80cc8d0424f6c9e","ssdeep":"6144:v5ZxngzqWNoa0RISAWix1NzXnujq/JnqnHNJ3+H44Dunq/C28FKlD:xTWNojISAWYRqHj3+HruqBx","tlshash":"2b7423bc70b5a690178d3d9abcf9d21a70424f9f5628cb34be2fd446a434ee7f924411","first_seen":"2026-03-31T02:29:53.117929Z","last_seen":"2026-03-31T14:10:59.853475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3686,"timings":{"blocked":1041,"dns":73,"connect":317,"send":0,"wait":638,"receive":956,"ssl":658},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3p104.com/ccc/365t-01.gif","fqdn":"3p104.com","domain":"3p104.com","tld":"com"},"ip":{"addr":"16.163.5.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:06.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"3p104.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:11:42 GMT","end":"Thu, 21 May 2026 10:11:41 GMT"},"fingerprint":{"sha1":"A6:E1:A0:B7:AC:38:33:BA:D3:F2:23:CD:E7:B0:66:03:68:EA:30:00","sha256":"DC:47:9B:AF:87:E6:BC:15:FB:09:AE:D5:73:CF:BD:87:5D:2F:87:EA:54:C9:49:94:A8:6A:0E:51:14:67:FD:06"}}},"request":{"raw":"GET /ccc/365t-01.gif HTTP/1.1\r\nHost: 3p104.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:07 GMT\r\nContent-Type: image/gif\r\nContent-Length: 188588\r\nConnection: keep-alive\r\nLast-Modified: Mon, 03 Mar 2025 06:27:54 GMT\r\nVary: Accept-Encoding\r\nETag: \"67c54bea-2e0ac\"\r\nExpires: Thu, 30 Apr 2026 13:55:07 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nServer: cdn\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":188588,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 540 x 598","md5":"5dbde58a8e3c9793a23cd05d0eb1c081","sha1":"cb56df05f19914cef5c0e0226c76168ae31afebe","sha256":"269627643c1804bd4edafae80e46a8cf99ad6251435a6647338ccb90dcdd1efd","sha512":"d0af42bd9290ba34d0b9b1b40f43d0b629fe625e5581aba92501797dd06c038bf47fdc3cc9554526346f1e2b7b96afb895826f0aa5277180de04dca445f42b76","ssdeep":"3072:aWnAQ6N3Lw9Rese0wfiLQj8Oj07YLaQ2gICC5F6kcmlu8uVSmygOFj8OVfkY11WN:aWALbjshwaLKuSYpCCD6pP8uVTjM8+Y","tlshash":"db04233c327faa67b1cc15970de17f278a49172d07c68fa11b92fcb86178a1904b3e55","first_seen":"2026-03-31T02:29:53.1575Z","last_seen":"2026-03-31T14:10:59.873481Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3819,"timings":{"blocked":1068,"dns":64,"connect":336,"send":0,"wait":674,"receive":1001,"ssl":670},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_electronic.0cab7c89.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_electronic.0cab7c89.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:09 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1142\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-476\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1142,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a239c4acbb851fa497ede876b2391ee4","sha1":"890cd63fe75875d902349dd447e245f29dbfe477","sha256":"4e30628a96d55577a72c70618d1d817497ac26cd06a459df2ee0ad8a52e2d2f1","sha512":"b6b3abda871a5c43dbb413d94a1c5939ff63fa395e743c482db6ed795c73d37a9671647bcce3fff723989281c647a44337053150e39fe88de3b4cdf61f9bec0d","ssdeep":"","tlshash":"ef21b9df93c9e3c2e4fe3ea936651b9871a18f1d47e88e4ad446e9142e8c0d16c75e20","first_seen":"2025-09-07T05:07:22.368345Z","last_seen":"2026-06-04T23:35:48.240499Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2955,"timings":{"blocked":2405,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_chess_active.18c795b8.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_chess_active.18c795b8.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:11 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2254\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-8ce\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2254,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b79da0d7532d7fcfdc22afaaf30d635","sha1":"78e433eba60ca075163638e6a83a38512122315a","sha256":"781bbdaad1ce15b551e7906d4a1182893b4ec8381828c0dfa9d4b82b62206337","sha512":"0a188ac7864f1fd4f00e1428086fa639782ee7401fca4b304bb3e9524a6ccc5b06e0d497f120ef9637b7cefb4b8c756f64d554ad17326f41c46ed6aa9065a137","ssdeep":"","tlshash":"17415c42b5df2188eae96cf4a532c1c825db4b01a1c611442e4bdf1373d00033e8f5a6","first_seen":"2025-12-23T17:05:07.963325Z","last_seen":"2026-03-31T14:10:59.855733Z","times_seen":5,"resource_available":false,"data":null}},"time_used":4674,"timings":{"blocked":4113,"dns":0,"connect":0,"send":0,"wait":560,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/icon_putaway.af76abfa.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/icon_putaway.af76abfa.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653085688540e00354883367d0362a6f89c3204b999767af4; baboConfig={%22appId%22:%22596ebeab-e665-456e-ac67-01b9e67242b6%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}; aliyungf_tc=8de2e693ab91e3b028f461abb0d4392f9bdadbd159a8e5058410ec3edd78d15d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/webp\r\nContent-Length: 306\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-132\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":306,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c5ccd1ee53cd0ebecb2b3dd3b4670ce","sha1":"cb94cb134ec5fd7698d2fc83f8579782f06756bc","sha256":"4844226d1d99d8edffd1c2760b1d8faf4123c4272b0efcac13ce578efd246171","sha512":"6bde1c23c09abac5cefb30e4bdd69638571aac8e72453d4882a7682ed639b6926e3d9441ac3dd9dbd271691d314a4262b172482a91cfc50d47295d13b3dea4d8","ssdeep":"","tlshash":"64e07d58805380de1c9d79c04b51798748d2bda4777d4235e8c2ce9b2df80c8541084b","first_seen":"2023-07-20T11:17:33Z","last_seen":"2026-05-22T20:18:53.320764Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bmp.cffygajeba05img.com:9663/team_logo/36580.png","fqdn":"ai-bmp.cffygajeba05img.com","domain":"cffygajeba05img.com","tld":"com"},"ip":{"addr":"47.242.232.127","port":9663,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:14.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ai-bmp.cffygajeba05img.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 05 Mar 2026 09:44:38 GMT","end":"Sun, 04 Apr 2027 09:44:37 GMT"},"fingerprint":{"sha1":"6D:82:6C:C8:EA:DD:05:DB:D1:75:72:17:8C:12:F5:CB:2F:8A:34:DF","sha256":"11:EB:93:37:70:49:FD:7B:F1:F9:76:8C:1F:E4:82:C9:EA:8C:20:DF:4C:43:DA:15:61:51:10:A2:B4:4D:C1:3C"}}},"request":{"raw":"GET /team_logo/36580.png HTTP/1.1\r\nHost: ai-bmp.cffygajeba05img.com:9663\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 31 Mar 2026 13:55:14 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"67a493ca-305\"\r\nStrict-Transport-Security: max-age=604800; includeSubdomains; preload\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T21:09:45.625607Z","times_seen":16191656,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/mine_icon.94fe028d.png","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:03.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/mine_icon.94fe028d.png HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:08 GMT\r\nContent-Type: image/png\r\nContent-Length: 1972\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-7b4\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1972,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 43 x 68, 8-bit gray+alpha, non-interlaced","md5":"de88736a4c56cbadee3047ff768ebad0","sha1":"dbca375089657fada4d83226654251322da3b47b","sha256":"9dceb15ad43adcdd6712d3ad304d0cef423f3e49439247ace9f71cc44ec3e9f6","sha512":"e88465e14aeb84f53341414218ed5b4d091fef7a692f705655f254128b857a68b63e9b8f1c7ac14f0ee41c70c827f7614745b2507e61c8714af0c4647a143b77","ssdeep":"","tlshash":"31412c39d55df0a6edd85d372a2bce41d63c58c667c804ba3402f95c5c41f78818c108","first_seen":"2023-07-14T04:48:34Z","last_seen":"2026-06-04T23:35:48.205242Z","times_seen":154,"resource_available":false,"data":null}},"time_used":5621,"timings":{"blocked":5110,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/member/gamingPlatfrom/findGamingPlatfromListSort?classificationId=2","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:03.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /member/gamingPlatfrom/findGamingPlatfromListSort?classificationId=2 HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndeviceInfo: {\"mobile\":\"Firefox 134.0\",\"os\":\"Windows 134.0\",\"browser\":\"Firefox\",\"iosVersion\":\"\"}\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Tue, 31 Mar 2026 13:55:07 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: acw_tc=ac11000117749653071785875e003c7c65e84145a010836fa3fee2962a1f84;path=/;HttpOnly;Max-Age=1800\r\nVary: Accept-Encoding\r\nX-Application-Context: application:redisson-cluster:8888\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":397520,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (64468), with no line terminators","md5":"6047a9d62ab020e5a87055b781fa9cbb","sha1":"5003addddac0cd4d79cb9f42d2678e3dec6472f8","sha256":"490ae65f7785c87afa424e69953db519ae08e759ae5a8976ed0c4898ed2b170d","sha512":"d35cdd0cb765f3b42461c862d7aae723edc22f08bf64e92b5fba6a4a5c581a10e7684e40789756e936f1404e8c02b9495fed4b6df51f54cda93ba4edae09c05c","ssdeep":"1536:Z1uHjKT5ytn4gB566QurxAMO47d4esaUokqWSNdQv8p3wga:HAjKT5K4gBZHxAc7rdQvU3wga","tlshash":"0f84379301de4f04272f06e908dafcd9da9f860bb8d2bcbd94158fa065f97b1032575a","first_seen":"2026-03-31T13:55:32.233376Z","last_seen":"2026-03-31T13:55:32.233376Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4620,"timings":{"blocked":3257,"dns":0,"connect":0,"send":0,"wait":1350,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bmp.cffygajeba05img.com:9663/team_logo/83739.png","fqdn":"ai-bmp.cffygajeba05img.com","domain":"cffygajeba05img.com","tld":"com"},"ip":{"addr":"47.242.232.127","port":9663,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ai-bmp.cffygajeba05img.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 05 Mar 2026 09:44:38 GMT","end":"Sun, 04 Apr 2027 09:44:37 GMT"},"fingerprint":{"sha1":"6D:82:6C:C8:EA:DD:05:DB:D1:75:72:17:8C:12:F5:CB:2F:8A:34:DF","sha256":"11:EB:93:37:70:49:FD:7B:F1:F9:76:8C:1F:E4:82:C9:EA:8C:20:DF:4C:43:DA:15:61:51:10:A2:B4:4D:C1:3C"}}},"request":{"raw":"GET /team_logo/83739.png HTTP/1.1\r\nHost: ai-bmp.cffygajeba05img.com:9663\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 1581\r\nConnection: keep-alive\r\nx-oss-request-id: 69CBD241CC3E283036058EF6\r\nAccept-Ranges: bytes\r\nETag: \"B8275292A42A497FB92B60A356EE8C08\"\r\nLast-Modified: Thu, 11 Jul 2024 08:57:29 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7687529276065113984\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nContent-MD5: uCdSkqQqSX+5K2CjVu6MCA==\r\nx-oss-server-time: 3\r\nExpires: Tue, 07 Apr 2026 13:55:13 GMT\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=604800, no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1581,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"b8275292a42a497fb92b60a356ee8c08","sha1":"01059625b00d6638ba7088ea7a53967330553448","sha256":"e8e2a4beb5de67522bf98efb8e4cc2f8f60731b690580cf2fbee7b4a15fe4a1c","sha512":"449078b4418276cf122922162cf05307e8c595ddb0a588c3d9abad3887a7b11747dd922af03aafc0ab840d49f06163c1d9cf380d33c02fd89608a3c8f6b529dd","ssdeep":"","tlshash":"4731c89f9f6724a8c4ad1d9e0f8763b185b2a927293328c7101ebdacd44056d89cb354","first_seen":"2026-03-31T13:55:32.234255Z","last_seen":"2026-03-31T14:10:59.859988Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1490,"timings":{"blocked":1199,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_sport_active.62c765a7.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_sport_active.62c765a7.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:09 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2676\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-a74\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2676,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"385757022b2e1b99e46573e006b869e0","sha1":"0586a3bea694336ddeec274d510e4ba639a7dc60","sha256":"42e0bea3d3d48ad50a446d54a1ccd3283555e55426147afa4cadb4b31c51e1a0","sha512":"10d8b8437ac6256e98a49bbdf3da82081f61718a1df43f53ab58a80e2fc53178f48abfe53fc93703e6ff065637e2637a9f56d6b5da3fc0875e5b21ff2eddbb7b","ssdeep":"","tlshash":"db514bb2a8147649f68e2e7cfc5b88ce1189d383f0975e014ef9f8e44c2472ea11724c","first_seen":"2026-03-31T02:29:53.160578Z","last_seen":"2026-03-31T14:10:59.861844Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2553,"timings":{"blocked":2034,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_chess.7dc84694.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_chess.7dc84694.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:11 GMT\r\nContent-Type: image/webp\r\nContent-Length: 860\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-35c\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":860,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"39727897aa68b0aa317138d58d717d27","sha1":"9e55c67ce882553fdeabd72e0e4eee50fff0e5b9","sha256":"4445f4cd9e5a73251a9b85cd14d3494a50e366095391487260806981c937196c","sha512":"ae3080f6b8e0b558719bd8f8260d6248f1db33f4663f8d2c6b74b9a344efa89295ba49aac8d08634b7e5904e201f598afcfd8357553d717c43ebe106a6fe943f","ssdeep":"","tlshash":"58115616543cf8828f943817143777c33105652df3647e28a6495d91d957fe37673ca8","first_seen":"2025-09-07T05:07:22.388508Z","last_seen":"2026-06-04T23:35:48.239666Z","times_seen":48,"resource_available":false,"data":null}},"time_used":4584,"timings":{"blocked":4033,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/ball_icon_im_sprites.9c5fd639.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/ball_icon_im_sprites.9c5fd639.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653085688540e00354883367d0362a6f89c3204b999767af4; baboConfig={%22appId%22:%22596ebeab-e665-456e-ac67-01b9e67242b6%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}; aliyungf_tc=8de2e693ab91e3b028f461abb0d4392f9bdadbd159a8e5058410ec3edd78d15d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/webp\r\nContent-Length: 39566\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-9a8e\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39566,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"91227233206d3de6ed2e75622476151f","sha1":"423cf3a02ba3e068e70b2736bc966f2a2964d82d","sha256":"9fc2c69efc65b81736d89f7aa68bed0c25a036c70ecf419e70fd83b4143e52f3","sha512":"51bc98f7aab37922e397a753f70ccca45a7acb426a66746e23570e36db02b2fc365c4f4496ce397de040ec97434d5642d6bb5438434c3b33c00ef973eb9aa7d5","ssdeep":"768:iclVyaXw9A+dERPtDoAv3YegJV3zqKRMxIqJJQFZ2zVSgaXIbb/GX:h/2AIoPOAv6V9RMWqJJBV1aizGX","tlshash":"6c03e1e3fa0dbc83ac1bc7017574118ddfe2c18669c97072e9823d6da1a92449ef211f","first_seen":"2023-07-20T11:17:32Z","last_seen":"2026-03-31T14:10:59.842641Z","times_seen":35,"resource_available":false,"data":null}},"time_used":1615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1612,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/sbapi/refreshToken","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:13.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"POST /sbapi/refreshToken HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 57\r\nOrigin: https://bet3a60.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653085688540e00354883367d0362a6f89c3204b999767af4; baboConfig={%22appId%22:%22596ebeab-e665-456e-ac67-01b9e67242b6%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}; aliyungf_tc=8de2e693ab91e3b028f461abb0d4392f9bdadbd159a8e5058410ec3edd78d15d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":57,"data":"{\"vendor_id\":\"4v2rkfxam0\",\"vendor_member_id\":\"anonymous\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:15 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Last-Event-ID,X-Forwarded-For,X-Device-Type\r\naccess-control-max-age: 1728000\r\nalt-svc: h3=\":443\"; ma=86400, h3-29=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":330,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9a104deabf8375caa4d3a38b8b39ac1d","sha1":"1fbdca18fa50a4f016e39addb1b21848f2e44c36","sha256":"609141058685df314399d58096f06105506edd0552eebe06c450d841a72fe54c","sha512":"0b94fb3d9e3d3d7674a4f33351c080df1543434a63675815f2183255abefb4ae6d105abe9a1c9583d51de034c5b21e490c1dbb65238209fc9cd44a8d3dacb7b6","ssdeep":"","tlshash":"68e0c08b317a7dcd28d0559166404a48041401908ee80072d8e280b87b3305094c26ae","first_seen":"2026-03-31T13:55:32.238145Z","last_seen":"2026-03-31T13:55:32.238145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2189,"timings":{"blocked":720,"dns":0,"connect":0,"send":0,"wait":1469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipwho.is/","fqdn":"ipwho.is","domain":"ipwho.is","tld":"is"},"ip":{"addr":"104.20.44.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:03.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipwho.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 02:54:08 GMT","end":"Sat, 09 May 2026 03:54:02 GMT"},"fingerprint":{"sha1":"8D:92:FC:3A:95:FA:D5:B9:07:80:8D:11:7D:02:D9:48:6E:31:E9:BD","sha256":"5E:6C:D7:C3:E3:38:C8:D3:F1:BC:74:0B:00:E0:3F:84:F6:19:53:45:CD:82:18:8C:91:90:73:53:8C:57:40:D6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ipwho.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bet3a60.com/\r\nOrigin: https://bet3a60.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Tue, 31 Mar 2026 13:55:03 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e4fd979099f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c803446e75fb294408787c6c64ee800","sha1":"0962274e1fa925799e2d324dcaa1b173a2bbed98","sha256":"ae8d49b8344fca5c61af3aff17d9b1d3f272d198edf935f94b322463b15b57e2","sha512":"fcc0c8057e91b44bda5b3a4e976b202ee97a7127074e4a30026b291cbb5ebe9c0c8d1a626453b2fccccfa46eb67be4bd37dcd855671bdb064e1eeaf262a18276","ssdeep":"","tlshash":"0da0220f2300383a02022e8330080a8002e302f0e0c0230aa00c030e3200cc020e3008","first_seen":"2026-02-12T02:06:55.383473Z","last_seen":"2026-06-06T21:42:56.034837Z","times_seen":1190,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":21,"dns":3,"connect":2,"send":0,"wait":4,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/member/webconfig/queryCustomerServiceFloater?classificationId=2","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:03.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /member/webconfig/queryCustomerServiceFloater?classificationId=2 HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndeviceInfo: {\"mobile\":\"Firefox 134.0\",\"os\":\"Windows 134.0\",\"browser\":\"Firefox\",\"iosVersion\":\"\"}\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Tue, 31 Mar 2026 13:55:08 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: acw_tc=ac11000117749653081336699e00358276b6e7dabb1bc4296f0deb531cbee1;path=/;HttpOnly;Max-Age=1800\r\nVary: Accept-Encoding\r\nX-Application-Context: application:redisson-cluster:8888\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":428,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"22b81fac5fe5b2ca77383f1bc5c949f3","sha1":"ebe485a155f54da20195a4eeffa6aa2d3a5212fa","sha256":"35c44ff23c7ff8beb52a84794a5689ee9bfde16bb371c5565126be6cd8facf96","sha512":"090872d3545ed68603068ab132f14a01d1c10cabde8adda2afec612854fb839de96167660bd911efcddc09017adee6cd9b494c9c0c11158d944fa7589a54ae96","ssdeep":"","tlshash":"b9e0a33207547435491855d65e5aba17dc6ae7832c88b679c00ccf50d0b7af2601d694","first_seen":"2026-03-31T02:29:53.120959Z","last_seen":"2026-03-31T14:10:59.881294Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5091,"timings":{"blocked":4450,"dns":0,"connect":0,"send":0,"wait":641,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3p104.com/zhaoshang1/365t2.gif","fqdn":"3p104.com","domain":"3p104.com","tld":"com"},"ip":{"addr":"16.163.5.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:06.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"3p104.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:11:42 GMT","end":"Thu, 21 May 2026 10:11:41 GMT"},"fingerprint":{"sha1":"A6:E1:A0:B7:AC:38:33:BA:D3:F2:23:CD:E7:B0:66:03:68:EA:30:00","sha256":"DC:47:9B:AF:87:E6:BC:15:FB:09:AE:D5:73:CF:BD:87:5D:2F:87:EA:54:C9:49:94:A8:6A:0E:51:14:67:FD:06"}}},"request":{"raw":"GET /zhaoshang1/365t2.gif HTTP/1.1\r\nHost: 3p104.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:07 GMT\r\nContent-Type: image/gif\r\nContent-Length: 138553\r\nConnection: keep-alive\r\nLast-Modified: Sun, 19 Jan 2025 13:45:42 GMT\r\nVary: Accept-Encoding\r\nETag: \"678d0206-21d39\"\r\nExpires: Thu, 30 Apr 2026 13:55:07 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nServer: cdn\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":138553,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 540 x 598","md5":"d1c3af5e4747c1953e1a7a60e8d4b1b9","sha1":"8b25f235a700ceba2b92e5466ce7d9202e7d121c","sha256":"0866745aeae6509a522ea40ef85ece5d53522ca6aeb8515fcc3c836bdabc4896","sha512":"92828cd262dc75d7fe7f28b3e714da5c3c9bdcc70a9e0816dcf509af04466ba86a9cea9c8b45766cd480cd5c0e4ea6c3f07e1c38fefa06d83e1216aba30c388e","ssdeep":"3072:ZNwRwqX0xzYg4st+ao5oJiTZevC2tlCmqpDv39VzwxJZifLVk:ZORXEYFU+ao5oJ0ZnuUfF3H8x3ia","tlshash":"abd313cc11e9eff1a0476594a3ae52cc1bd3c0d52da1cbf8890e98a17067de9c2f45d5","first_seen":"2026-03-31T02:29:53.14563Z","last_seen":"2026-03-31T14:10:59.840143Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3389,"timings":{"blocked":1043,"dns":68,"connect":322,"send":0,"wait":650,"receive":646,"ssl":655},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_fish_active.c4cc59b8.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_fish_active.c4cc59b8.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:10 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2588\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-a1c\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2588,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"08c56b6f40a5e8658ec177f0f5937ed0","sha1":"b5b574bab859fcc4b5f49f9774f0692bdf05281f","sha256":"055ff42bc4dea938c391e7c62807c3a55ef6781a8a190457d248955abaf8333f","sha512":"e94f2470f349c3ad7468defa65a9c00baac5dd4af18209e4217c5aaa417c2ca5fa4e63b286d1912ecd56ce41f5850cd9c2366a279c9d5bffe43b1210188f8271","ssdeep":"","tlshash":"c2514c0720c60ff9e6012629c5e417c65abfd54eb17366d28c9f60781b154bbd63c080","first_seen":"2025-12-23T17:05:07.974099Z","last_seen":"2026-03-31T14:10:59.848565Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3642,"timings":{"blocked":3083,"dns":0,"connect":0,"send":0,"wait":558,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_square.c2a89c28.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_square.c2a89c28.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:12 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1060\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-424\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1060,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"05777fc57b6114c0404fd49797e36dff","sha1":"e52ab97040fc9359e817b6661443e77bcb8f37d0","sha256":"5641f35bf9ad3f69b66dace2365956e89a9631a48931d48b8a60601a99465343","sha512":"b2600050d7ed75ee1028b4b82393b692e96bf20c03f34d46a4cbf3818f243d435c179e0ef39d63abe00d893e448c10626efe988bcdb95c07b6c186c99bc9760e","ssdeep":"","tlshash":"cb11b52412f1ca95ed32bd0b4dae14918cde68ccd4524819b8c386ac37f44f2bee9822","first_seen":"2026-03-31T02:29:53.090519Z","last_seen":"2026-05-31T04:07:05.704753Z","times_seen":8,"resource_available":false,"data":null}},"time_used":5129,"timings":{"blocked":4578,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bmp.cffygajeba05img.com:9663/team_logo/24761.png","fqdn":"ai-bmp.cffygajeba05img.com","domain":"cffygajeba05img.com","tld":"com"},"ip":{"addr":"47.242.232.127","port":9663,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ai-bmp.cffygajeba05img.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 05 Mar 2026 09:44:38 GMT","end":"Sun, 04 Apr 2027 09:44:37 GMT"},"fingerprint":{"sha1":"6D:82:6C:C8:EA:DD:05:DB:D1:75:72:17:8C:12:F5:CB:2F:8A:34:DF","sha256":"11:EB:93:37:70:49:FD:7B:F1:F9:76:8C:1F:E4:82:C9:EA:8C:20:DF:4C:43:DA:15:61:51:10:A2:B4:4D:C1:3C"}}},"request":{"raw":"GET /team_logo/24761.png HTTP/1.1\r\nHost: ai-bmp.cffygajeba05img.com:9663\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 2202\r\nConnection: keep-alive\r\nx-oss-request-id: 69CBD2413EC8F2323605626B\r\nAccept-Ranges: bytes\r\nETag: \"F9A73150C705E2D1969E86F00EC7C0B2\"\r\nLast-Modified: Wed, 10 Jul 2024 16:10:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2572569787147655309\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nContent-MD5: +acxUMcF4tGWnobwDsfAsg==\r\nx-oss-server-time: 2\r\nExpires: Tue, 07 Apr 2026 13:55:13 GMT\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=604800, no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"f9a73150c705e2d1969e86f00ec7c0b2","sha1":"fc709b92c5338648c56977653eb9b162fb41b71d","sha256":"3ed8c1ff9843640f7bcaccec66efd3318bece5f861a6e0d739b5ca897b2b086a","sha512":"229e62f17100e2e0752a1eeaf28d62b2614fc2b0e8bcedb91924cd82927aab70c83c64705e9e0b4474dd759e3bb33d70485e264473e136873d91b83ed5f273f7","ssdeep":"","tlshash":"ee41e74ef5493a4066b5ee2118d3002bdc17c8d0fbd8ea16fadac45359116f90a5f9c7","first_seen":"2026-03-31T13:55:32.242958Z","last_seen":"2026-03-31T14:10:59.85124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1198,"timings":{"blocked":-1,"dns":58,"connect":276,"send":0,"wait":283,"receive":1,"ssl":579},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/sport_api/GetAllCompetitionCount","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:09.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"POST /sport_api/GetAllCompetitionCount HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\ndeviceInfo: {\"mobile\":\"Firefox 134.0\",\"os\":\"Windows 134.0\",\"browser\":\"Firefox\",\"iosVersion\":\"\"}\r\nContent-Length: 86\r\nOrigin: https://bet3a60.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653085688540e00354883367d0362a6f89c3204b999767af4; baboConfig={%22appId%22:%22596ebeab-e665-456e-ac67-01b9e67242b6%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}; aliyungf_tc=8de2e693ab91e3b028f461abb0d4392f9bdadbd159a8e5058410ec3edd78d15d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":86,"data":"{\"SportId\":1,\"IsCombo\":true,\"Market\":3,\"IncludeCloseEvent\":false,\"LanguageCode\":\"CHS\"}"}},"response":{"raw":"HTTP/1.1 200 \r\nDate: Tue, 31 Mar 2026 13:55:11 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2986,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"da694dc6c345253b14bcd596609ec639","sha1":"a14d6482052b8e7f30e8472c3fe405af0258d76e","sha256":"80149613dcf793d36e6b854c514db69347f0d9c05df4cdb2bbf0020c0612393d","sha512":"3a619ffb2ea2c178caa7ddd6068bc7c5a3678f0bf9333c829f04d4801f681733de0824f11965475356be9a5313d75c6b4abda7cfc71c49ba9e02464bbb330fb4","ssdeep":"","tlshash":"f55123087e5209ded32e5cba83b2585665f5641c8fd16e08e0db0b3c1277e643bbae18","first_seen":"2026-03-31T13:55:32.243763Z","last_seen":"2026-03-31T13:55:32.243763Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2362,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bmp.cffygajeba05img.com:9663/team_logo/18212.png","fqdn":"ai-bmp.cffygajeba05img.com","domain":"cffygajeba05img.com","tld":"com"},"ip":{"addr":"47.242.232.127","port":9663,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ai-bmp.cffygajeba05img.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 05 Mar 2026 09:44:38 GMT","end":"Sun, 04 Apr 2027 09:44:37 GMT"},"fingerprint":{"sha1":"6D:82:6C:C8:EA:DD:05:DB:D1:75:72:17:8C:12:F5:CB:2F:8A:34:DF","sha256":"11:EB:93:37:70:49:FD:7B:F1:F9:76:8C:1F:E4:82:C9:EA:8C:20:DF:4C:43:DA:15:61:51:10:A2:B4:4D:C1:3C"}}},"request":{"raw":"GET /team_logo/18212.png HTTP/1.1\r\nHost: ai-bmp.cffygajeba05img.com:9663\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 473\r\nConnection: keep-alive\r\nx-oss-request-id: 69CBD2415245673538F22683\r\nAccept-Ranges: bytes\r\nETag: \"0F0C6D77FE766F084135E7ACCFF5B4FD\"\r\nLast-Modified: Wed, 10 Jul 2024 13:58:17 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9555080952698362879\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nContent-MD5: Dwxtd/52bwhBNeesz/W0/Q==\r\nx-oss-server-time: 2\r\nExpires: Tue, 07 Apr 2026 13:55:13 GMT\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=604800, no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":473,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"0f0c6d77fe766f084135e7accff5b4fd","sha1":"1d144aa28b63efa5a236737c3618a57ffae49357","sha256":"1edae21b8c9e1952f7ecb926168e30bb0cbfdcf6445d8626588c584a161f3032","sha512":"3e998b11da267629fb2e75bf1f524c236fc3edccca1a7b22ce877839769c53220a98d238c41ab3811c5f72c966601481a971d16948b23f4dde4f4b9db3e1edfa","ssdeep":"","tlshash":"8cf0bb9402d49572dbc231c64575ac439f2538704c70da3d822a7e6d84f33ec15f4343","first_seen":"2026-03-31T13:55:32.24461Z","last_seen":"2026-03-31T14:10:59.834438Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2139,"timings":{"blocked":912,"dns":70,"connect":282,"send":0,"wait":289,"receive":6,"ssl":577},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/js/vendors.2520bfbe.js","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:54:58.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/js/vendors.2520bfbe.js HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:54:59 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69c8b0a8-1816f9\"\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1578745,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65462)","md5":"138ff913198cb2772cec33344644d649","sha1":"4d525dea22afbe350d88b357791f11fc7a535ba5","sha256":"24a5d0efb2186056f071f7e810307a84d490dd0b4065baf3725ed98051c4d5e1","sha512":"e1439253df3a3b6fdfaea934f5275a427ae6a123fa9b4ece9c4947c8b1163bea886aa21227727a6149d7e6bc6c54ec83bb32ba813c6ccae2c61b4f90ffb08d3c","ssdeep":"24576:JC+iOUju6MPPHJ3YCmdAXi9WHYau3AaQRSHi3Rm9wR4q3YymBxd+DUaX5/BThnZ/:JC+cQPOOAJGeiB","tlshash":"ed252bddb3a1707102e650d9442f150bf23629592419c4acf279e8eb7cb9e4e61bbf38","first_seen":"2026-03-31T02:29:53.154371Z","last_seen":"2026-03-31T14:10:59.834941Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1902,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":850,"receive":1052,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3p104.com/2g/7.png","fqdn":"3p104.com","domain":"3p104.com","tld":"com"},"ip":{"addr":"16.163.5.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:06.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"3p104.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:11:42 GMT","end":"Thu, 21 May 2026 10:11:41 GMT"},"fingerprint":{"sha1":"A6:E1:A0:B7:AC:38:33:BA:D3:F2:23:CD:E7:B0:66:03:68:EA:30:00","sha256":"DC:47:9B:AF:87:E6:BC:15:FB:09:AE:D5:73:CF:BD:87:5D:2F:87:EA:54:C9:49:94:A8:6A:0E:51:14:67:FD:06"}}},"request":{"raw":"GET /2g/7.png HTTP/1.1\r\nHost: 3p104.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 324177\r\nConnection: keep-alive\r\nLast-Modified: Mon, 08 Sep 2025 10:43:05 GMT\r\nVary: Accept-Encoding\r\nETag: \"68beb339-4f251\"\r\nExpires: Sat, 18 Apr 2026 00:35:30 GMT\r\nCache-Control: max-age=2592000\r\nServer: cdn\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":324177,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 540 x 598, 8-bit/color RGB, non-interlaced","md5":"3755c14394e20975053a543eae99bab3","sha1":"1a61605e82f7d6bf913f16af6a7778aac581e08d","sha256":"ce9f9272e7a6bf10246be9ff1187ef853191225bfe6850b7987ba9f5317fed70","sha512":"ab5cf9b6fb42051a86758c5985975aa7759b9c03467023207995874997d09de37d1492899956efc0cbc37f74cfecb87199bc176818474e6d3b30cfcd8dfa93d7","ssdeep":"6144:LGQ0MUOw+myQ8c2L6cwpJlBK2afrhk2yVMOCs3NmjF2Lad5d1eaiV4QE3hpJ:LGff1B2LkfbCe2cMu9SIo5aa3QEZ","tlshash":"326423bfe05625404771273b6b5bd0a3c53a41f231b37ba1aa47b4e984d992b6e20cc3","first_seen":"2026-03-31T02:29:53.126365Z","last_seen":"2026-03-31T14:10:59.847297Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3628,"timings":{"blocked":1021,"dns":75,"connect":313,"send":0,"wait":630,"receive":949,"ssl":636},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_electronic_active.1da3853f.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_electronic_active.1da3853f.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:10 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2638\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-a4e\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2638,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80c41dce64c2905b427c2a1d450cf151","sha1":"a0d4b8ac9566d494ab777e3c230ed98e3b06e7da","sha256":"6adb426cc5a283ce4dffff95b3fd6a049d9b00c90687753d098aaa725cbb852b","sha512":"c989d7dc3c4d096bb9a592dd5172a106aab4a98c0c923037f75228bf6d06476ce683ce2ee65641ec659113f78b2de8f2f77eda77eed40d4aafc4a164b1a784d2","ssdeep":"","tlshash":"92513bcc606e5a647e7891610d4b0c9a1199b3f11590cb229c0f786f7ed83ed70a31f8","first_seen":"2025-12-23T17:05:07.917866Z","last_seen":"2026-03-31T14:10:59.855239Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3017,"timings":{"blocked":2453,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_fish.fca10678.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_fish.fca10678.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:10 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1268\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-4f4\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1268,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"db2e3dddbbbdb8510c5d47b95b1087f1","sha1":"600a877a95b25c20243d82d469fbcd70ea32602a","sha256":"6087cf8a12a7b8f9be2b541e08c36e457de66103bddb82c0211c5fa4eceec4cb","sha512":"f612373fcd05ad45f69e08c40800e5949d6836369a750f1c3e9400791424f8f986e0a5cf84634ecccfef62cdc5052a7d6b1fa075575a28f052b43886a29ec93f","ssdeep":"","tlshash":"8921c8594bd134cdb5f468142a30b898a29947ed43925daa6641406b83a3a80eef6098","first_seen":"2025-09-07T05:07:22.437574Z","last_seen":"2026-06-04T23:35:48.164518Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3557,"timings":{"blocked":2997,"dns":0,"connect":0,"send":0,"wait":559,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/league_nav_bg.9c278668.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/league_nav_bg.9c278668.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653085688540e00354883367d0362a6f89c3204b999767af4; baboConfig={%22appId%22:%22596ebeab-e665-456e-ac67-01b9e67242b6%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}; aliyungf_tc=8de2e693ab91e3b028f461abb0d4392f9bdadbd159a8e5058410ec3edd78d15d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/webp\r\nContent-Length: 492\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-1ec\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":492,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"60bf5854775d05a0cfc7ece42842dda4","sha1":"790e2801367157df65eb56c5090fc0574e75dbbb","sha256":"58c72f213a2e140b9d01f608e4f74d0f0168d5981880dc6be831c4ce7ab681eb","sha512":"a464c3716a423fed1fbd45a359bf9a4a2e49cd07ae7e1fbb7a969405476a79b11ba2aa73056be487c2bb3c2a19ae2c96f6a1e4b114f58daa24ac4094f2e5cb36","ssdeep":"","tlshash":"69f0544045087438b5120f50af6f539d8d257e6432027f1633c83729424fb035f1bb86","first_seen":"2023-07-20T11:17:33Z","last_seen":"2026-05-22T20:18:53.412581Z","times_seen":48,"resource_available":false,"data":null}},"time_used":1573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bmp.cffygajeba05img.com:9663/team_logo/1701.png","fqdn":"ai-bmp.cffygajeba05img.com","domain":"cffygajeba05img.com","tld":"com"},"ip":{"addr":"47.242.232.127","port":9663,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ai-bmp.cffygajeba05img.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 05 Mar 2026 09:44:38 GMT","end":"Sun, 04 Apr 2027 09:44:37 GMT"},"fingerprint":{"sha1":"6D:82:6C:C8:EA:DD:05:DB:D1:75:72:17:8C:12:F5:CB:2F:8A:34:DF","sha256":"11:EB:93:37:70:49:FD:7B:F1:F9:76:8C:1F:E4:82:C9:EA:8C:20:DF:4C:43:DA:15:61:51:10:A2:B4:4D:C1:3C"}}},"request":{"raw":"GET /team_logo/1701.png HTTP/1.1\r\nHost: ai-bmp.cffygajeba05img.com:9663\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"67a493ca-305\"\r\nStrict-Transport-Security: max-age=604800; includeSubdomains; preload\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T21:09:45.625607Z","times_seen":16191656,"resource_available":true,"data":null}},"time_used":2137,"timings":{"blocked":917,"dns":60,"connect":284,"send":0,"wait":291,"receive":1,"ssl":581},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/member/api/resources/banner?classificationId=2","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:03.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /member/api/resources/banner?classificationId=2 HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndeviceInfo: {\"mobile\":\"Firefox 134.0\",\"os\":\"Windows 134.0\",\"browser\":\"Firefox\",\"iosVersion\":\"\"}\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Tue, 31 Mar 2026 13:55:06 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: acw_tc=ac11000117749653064075306e00392898c8277bfa8f3962954bb9cf971751;path=/;HttpOnly;Max-Age=1800\r\nVary: Accept-Encoding\r\nX-Application-Context: application:redisson-cluster:8888\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":383881,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8ab31455509f69fe9d81b82398604a6e","sha1":"c1b55946c9cc657fcfe3e9f3b695c11d2691673a","sha256":"118630cd55f59c3422ff529cae8e02457d2d2e7505def771a3a396992e63102c","sha512":"ac9f438c08537382942b2d29557dae7b7695b4632e2896390b77b4863e4270cae003fab44282256ab89f8196710923bf6f1b8b39426f547348e66333d62c77c8","ssdeep":"6144:K04JCHQqyGbKPJmTlKeQ5vZR4sIW+2NSIQ+oLzXZI0xJ/J6q:KXCwWbKx4uuIQ+Il/J6q","tlshash":"218412b00a6bad6bd3eddbd4013f3f0ac776478985e4ead70dc1b98d4b49b910c42a64","first_seen":"2026-03-14T11:24:18.121894Z","last_seen":"2026-04-13T02:04:14.107502Z","times_seen":94,"resource_available":false,"data":null}},"time_used":6763,"timings":{"blocked":2172,"dns":1,"connect":260,"send":0,"wait":1595,"receive":801,"ssl":1930},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_sport.85fba656.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_sport.85fba656.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:09 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1228\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-4cc\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1228,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8a885b6727543746cb9e16d53d0a87f7","sha1":"771b1b2f91e614ebf53ec7a707b775ca4fe5de66","sha256":"dbc31abb95aaa9a66d17b5484a310a03cb1f1cc339e5dd63dfc2ca849519fdc4","sha512":"639bdcbabadfe67056c8718dfd4324469077c45cf6f9312fe266eff0f4e6a356505b08b98a9bfaf8aad06371fc1efeb7f87b651559facf63021218d7a988af4f","ssdeep":"","tlshash":"9e21b7f16d3ea41b52938cf2885eafbbc840059c82202fab82dad03511f981845dbd5a","first_seen":"2026-01-03T12:51:07.699084Z","last_seen":"2026-05-31T04:07:05.678017Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2318,"timings":{"blocked":1757,"dns":0,"connect":0,"send":0,"wait":560,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bmp.cffygajeba05img.com:9663/team_logo/22459.png","fqdn":"ai-bmp.cffygajeba05img.com","domain":"cffygajeba05img.com","tld":"com"},"ip":{"addr":"47.242.232.127","port":9663,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ai-bmp.cffygajeba05img.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 05 Mar 2026 09:44:38 GMT","end":"Sun, 04 Apr 2027 09:44:37 GMT"},"fingerprint":{"sha1":"6D:82:6C:C8:EA:DD:05:DB:D1:75:72:17:8C:12:F5:CB:2F:8A:34:DF","sha256":"11:EB:93:37:70:49:FD:7B:F1:F9:76:8C:1F:E4:82:C9:EA:8C:20:DF:4C:43:DA:15:61:51:10:A2:B4:4D:C1:3C"}}},"request":{"raw":"GET /team_logo/22459.png HTTP/1.1\r\nHost: ai-bmp.cffygajeba05img.com:9663\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 1500\r\nConnection: keep-alive\r\nx-oss-request-id: 69CBD24155CF3D38303A0F49\r\nAccept-Ranges: bytes\r\nETag: \"673DEB4C59A32DFCC499F05159B38DA4\"\r\nLast-Modified: Wed, 10 Jul 2024 15:23:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18190055303686910511\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nContent-MD5: Zz3rTFmjLfzEmfBRWbONpA==\r\nx-oss-server-time: 5\r\nExpires: Tue, 07 Apr 2026 13:55:13 GMT\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=604800, no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1500,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"673deb4c59a32dfcc499f05159b38da4","sha1":"fa115ca742786c6bbc1a5de5a36bd09e58915838","sha256":"90cb794e21966cef6fc625b95b5cdd63f3ab330671388c6f6dd8dfe4c7618afe","sha512":"23f2171c100d2192a4fd65ba0fceaed105b867067a5c4190a09bb5c2a3fc2ba2eea927954aac001c723c5ae4925f80424907196e7edd9743fb21453a9ad7fa26","ssdeep":"","tlshash":"4a31855df540ee12999cee2128e550279d2b4050eed5ec7abc8edc9211a22fc807a58f","first_seen":"2026-03-31T13:55:32.250299Z","last_seen":"2026-03-31T14:10:59.830062Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1460,"timings":{"blocked":1182,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bmp.cffygajeba05img.com:9663/team_logo/22815.png","fqdn":"ai-bmp.cffygajeba05img.com","domain":"cffygajeba05img.com","tld":"com"},"ip":{"addr":"47.242.232.127","port":9663,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ai-bmp.cffygajeba05img.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 05 Mar 2026 09:44:38 GMT","end":"Sun, 04 Apr 2027 09:44:37 GMT"},"fingerprint":{"sha1":"6D:82:6C:C8:EA:DD:05:DB:D1:75:72:17:8C:12:F5:CB:2F:8A:34:DF","sha256":"11:EB:93:37:70:49:FD:7B:F1:F9:76:8C:1F:E4:82:C9:EA:8C:20:DF:4C:43:DA:15:61:51:10:A2:B4:4D:C1:3C"}}},"request":{"raw":"GET /team_logo/22815.png HTTP/1.1\r\nHost: ai-bmp.cffygajeba05img.com:9663\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 683\r\nConnection: keep-alive\r\nx-oss-request-id: 69CBD241CC3E283530948DF6\r\nAccept-Ranges: bytes\r\nETag: \"6053A1E9321845EBB72D4105CE42959C\"\r\nLast-Modified: Wed, 10 Jul 2024 15:26:49 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6495175556538225528\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nContent-MD5: YFOh6TIYReu3LUEFzkKVnA==\r\nx-oss-server-time: 1\r\nExpires: Tue, 07 Apr 2026 13:55:13 GMT\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=604800, no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":683,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"6053a1e9321845ebb72d4105ce42959c","sha1":"fdc2ff5a3de3150d4a1657d2c58b35bd1109d89f","sha256":"81795d75a8a3e478e5ea80379f6999f932083509431f16c08111a562aa64d047","sha512":"a3a68aef8b3f211d810b61921051b4bff0c9a908b4f484a860c287c09c9f3c839f0ce3aefc6d7817866cc0cb853019c648f64f87ac76da2703aa87ce99a2e490","ssdeep":"","tlshash":"45014e8bb761d958f6a987204a246af2f676523a0a96148bb21f72600e407898f606cd","first_seen":"2026-03-31T13:55:32.251315Z","last_seen":"2026-03-31T14:10:59.856926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1457,"timings":{"blocked":1181,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/css/main.2154e7d9.css","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:54:58.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/css/main.2154e7d9.css HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:01 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69c8b0a8-b6e98\"\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\nX-Cache-Status: EXPIRED\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":749208,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3ab0f758fba7e3d086330c3e31b189c5","sha1":"ab50915cd918257a73d7689b3ec4219d769ad355","sha256":"429d0e2cf710e29ebb8b79a9c0dd35a3dfc798ae3ea28bd9a30f1545ef15931e","sha512":"47e39279bdffedd426189b1962c09711587193a7194a7961fbf08aabc39defc447a3c4543d08294ef61e732a8bde62c6c42165db97c688dfcef2ed005250aea1","ssdeep":"12288:o3oP7ork2onotot3SeLAcWMVP6I1vTcrqVUp4yogfXUPKku/HcmUf8:woP7ork2onotot3S0PBcrqVUSyogfXUE","tlshash":"9ff4d6265e40f638f83bc4e12d705fdc411adc5091261fa8e9236e7bd98bab71b36784","first_seen":"2025-11-15T21:12:45.155398Z","last_seen":"2026-05-17T21:13:24.786868Z","times_seen":39,"resource_available":false,"data":null}},"time_used":5750,"timings":{"blocked":2031,"dns":1,"connect":251,"send":0,"wait":1165,"receive":514,"ssl":1785},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/member/webconfig/findBaboAPPConfig?classificationId=2","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:03.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /member/webconfig/findBaboAPPConfig?classificationId=2 HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndeviceInfo: {\"mobile\":\"Firefox 134.0\",\"os\":\"Windows 134.0\",\"browser\":\"Firefox\",\"iosVersion\":\"\"}\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Tue, 31 Mar 2026 13:55:06 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: acw_tc=ac11000117749653068007491e00351a7ad9f87b9afc615bf1dd68a21e31d3;path=/;HttpOnly;Max-Age=1800\r\nVary: Accept-Encoding\r\nX-Application-Context: application:redisson-cluster:8888\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]}],"data":{"size":2419,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1e2181d272fb31fb2d528b0bbbc1d1dd","sha1":"bad12b8da34e18cd90d702be1142a37e89e3f11f","sha256":"baded708ea96653e586132711fba3cb134425ef6a9060c20b5ab181b4998209c","sha512":"4a79198b80a3c48f3a6d9ec70a0b149840f3e923604782366ca1177d66536261706f08f20b56db3bc61b9327b5b10cd41fe37c537f2992c9c5b3bba6b1258c41","ssdeep":"","tlshash":"1141fff792294c1013cbc3de0a1eb9aab2af255b8d8d9c4ecc376f3d24a75f11629044","first_seen":"2026-03-31T02:29:53.138057Z","last_seen":"2026-03-31T14:10:59.869776Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3774,"timings":{"blocked":2830,"dns":0,"connect":0,"send":0,"wait":943,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/member/bb/api/getBaboConfig?t=1774965303204\u0026classificationId=2","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:03.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /member/bb/api/getBaboConfig?t=1774965303204\u0026classificationId=2 HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndeviceInfo: {\"mobile\":\"Firefox 134.0\",\"os\":\"Windows 134.0\",\"browser\":\"Firefox\",\"iosVersion\":\"\"}\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Tue, 31 Mar 2026 13:55:08 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: acw_tc=ac11000117749653085688540e00354883367d0362a6f89c3204b999767af4;path=/;HttpOnly;Max-Age=1800\r\nVary: Accept-Encoding\r\nX-Application-Context: application:redisson-cluster:8888\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]}],"data":{"size":965,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c8c95bd9e7f81f99abedc0ed648771a3","sha1":"60dd3040d08aaae26b84df0a7fc090acd9d23269","sha256":"8c56b01a75777cf2e3f5783b8292a6af57d5e844ea35a88c0c5a9f48885c9527","sha512":"d3dc30b9d797bc81e30e354cc87d9dde3a447653a2a27e93788937416e8a6cd7a7225c7ce6f5d1aaefae7c9d46e868e6aa9c9ffbd46ba82e84db588b77df9208","ssdeep":"","tlshash":"40117b9707dc4d212f49b3ee275ce548ce87066b8e9ef185e8a0590c1062ae5128e11c","first_seen":"2026-03-31T13:55:32.253627Z","last_seen":"2026-03-31T13:55:32.253627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5533,"timings":{"blocked":4622,"dns":0,"connect":0,"send":0,"wait":910,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/favicon.ico","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:05.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:05 GMT\r\nContent-Type: image/x-icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69c8b0a8-7790\"\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\nX-Cache-Status: EXPIRED\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30608,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"047023df972b9460c52a5a02fd9fe3d5","sha1":"4527761791768486d2f48b84ebd9b503ba2496c8","sha256":"d6ed0cbc69becc858ff7634aa2d1d152218cee3fe5b6533724d8f4444ad41206","sha512":"41dd92fd8d947c7c7cd5f8c839054c549dbb5e8ca05566c444732cfc3ffec8dc77fea88bbd1391b1cd5b05d99e19a9ecb82d928c2bb54ddf0c4c3a44f7585545","ssdeep":"768:iRn9XaI4VpvTyJ6cRtZM7SOVXQRQZqOUoyabeo2LzAs028:iN9XUVkMcRtAhyQlpxbeocz228","tlshash":"ffd2f159cda824210fce1ec04f54983607399bab7523b21ff0c5c45a8fb416ea9961f3","first_seen":"2023-07-20T11:17:32Z","last_seen":"2026-03-31T14:10:59.846775Z","times_seen":12,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":862,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/member/common/loginCheck?classificationId=2","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:06.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /member/common/loginCheck?classificationId=2 HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndeviceInfo: {\"mobile\":\"Firefox 134.0\",\"os\":\"Windows 134.0\",\"browser\":\"Firefox\",\"iosVersion\":\"\"}\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653062843845e003def321b8e97c3a6698e99b4cb171d7698\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Tue, 31 Mar 2026 13:55:07 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nX-Application-Context: application:redisson-cluster:8888\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":44,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b6c178a501ceb685e2757fa9db54fb69","sha1":"0a33ea88a3874ac81ec3c73b3f51fffbbde1d772","sha256":"b070f7000dd0a05307b583aa31eec95e21922c2fe317aceae7ff0a348038d4fe","sha512":"b3a42bd2626e5aa7b0738261d7f4044f89c5c79ae5199ee705de7b7b50020d44a1a964e17eceb7b5ea63cab79c3eb355fba6fa211c8cd0c756b44293bb16f67b","ssdeep":"","tlshash":"829004015c4d40c31c404d5c01c30134175537470415075000dcd73153550f1d055c1d","first_seen":"2023-04-08T20:40:15Z","last_seen":"2026-06-06T20:31:41.836314Z","times_seen":1579,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":934,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93145.cc/ggggggg/365shouyeLOGO.png","fqdn":"93145.cc","domain":"93145.cc","tld":"cc"},"ip":{"addr":"16.163.5.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"93160.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 05:54:06 GMT","end":"Tue, 19 May 2026 05:54:05 GMT"},"fingerprint":{"sha1":"24:32:DE:01:11:CB:EF:40:D6:61:43:ED:E0:C2:83:D1:D8:7A:C6:44","sha256":"11:A7:5E:E8:3E:A8:A7:36:33:89:9E:17:00:DC:CB:A4:5C:5B:3D:42:C0:64:E9:73:EF:9D:EF:5D:AC:5F:3B:FC"}}},"request":{"raw":"GET /ggggggg/365shouyeLOGO.png HTTP/1.1\r\nHost: 93145.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:08 GMT\r\nContent-Type: image/png\r\nContent-Length: 6544\r\nConnection: keep-alive\r\nLast-Modified: Mon, 18 Nov 2024 18:06:11 GMT\r\nVary: Accept-Encoding\r\nETag: \"673b8213-1990\"\r\nExpires: Thu, 30 Apr 2026 13:55:08 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nServer: cdn\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 72, 8-bit/color RGBA, non-interlaced","md5":"2531acd1ce2e06bf0c1a9247e7a59e20","sha1":"d63f79fe2a3b12c68f64ce0b86f66ea0eb6e947f","sha256":"5356531239b9e643c4b76e4e8ff1fea55f54a54d8100ca46dfc6aa779cc40c86","sha512":"07e38a121cdbde67e8141eab325e9f0f1abe8d467b843f895a41746c72ab2603841775178f9b14a60310a8c63f4e4fe93f8374a0e13d0e1dc93f9a27475042be","ssdeep":"192:fA7L8kpGXAuoa17Au1lwDbCeOR4hOrMfjf:fggkwXAXadAuQnC7RCAMfD","tlshash":"b0d19f7af300ac86925b471234d2e09edd2d4e45ca75d80f6e49ce0c8dcb178296239d","first_seen":"2023-07-20T11:17:32Z","last_seen":"2026-03-31T14:10:59.863615Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1626,"timings":{"blocked":97,"dns":1,"connect":568,"send":0,"wait":316,"receive":3,"ssl":640},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_home_top_bg.f256b5fe.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_home_top_bg.f256b5fe.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:07 GMT\r\nContent-Type: image/webp\r\nContent-Length: 796\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-31c\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":796,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x326, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"342d031c9dab00c9d271263bfc34d46b","sha1":"4749ab8d0171e10e6bd044d9c8e33aa79f63c76b","sha256":"b1dbd6bc6eb518295ca7d7c1884fa09151baf726a093b7119fea7bcdd48042c5","sha512":"c0987dc1597813e3308f043bb093cacf9fa92c1ca496d42441fe3aac00fbe4ad6501945c30efd9744e7bc1b5fe931ca949dc9809925d9008bac97d137fa86c74","ssdeep":"","tlshash":"b601ab5c01e5647cae6d2c20ded3990db2d902e408f2c66cf6623ea3d72e0d4a23a81c","first_seen":"2025-12-23T17:05:07.90545Z","last_seen":"2026-03-31T14:10:59.82687Z","times_seen":5,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_im_sport.14723dee.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_im_sport.14723dee.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:09 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1010\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-3f2\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1010,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0cc8bcc3b3c7ac899ff832e6f73ede0a","sha1":"cdcc16f9d6309833ef88e8359e1d696649e4b988","sha256":"95a8ec4fff2ea873be14c0cfec8db44d379675a053241ed5194297273619390a","sha512":"38890e1a717a655360f5ec85604b2776368cf7d9c96460090964bf0f629f8e4d89f213ce0b48bba35ce14f59425f068e3de0287f99241b9be7aececd662ce80a","ssdeep":"","tlshash":"5911c8179f410dfac58080bf5f359dc715c080e9a2ec76e1843664d00da88e427ad343","first_seen":"2025-10-26T04:28:01.110313Z","last_seen":"2026-06-04T23:35:48.180369Z","times_seen":25,"resource_available":false,"data":null}},"time_used":2179,"timings":{"blocked":1674,"dns":0,"connect":0,"send":0,"wait":502,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_square_active.3c377ff3.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_square_active.3c377ff3.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:12 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2472\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-9a8\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"32257f185eda4c42d9f0b9a27271d141","sha1":"06262a642933999b0ccdceff59b392e2ec0c3d8e","sha256":"377d01c5dde87a38103adf4909ba44695153902dd6683d038c99d1e2d718ce03","sha512":"1d4e691e467bd279e867c3b9caa4ecbfc10ae278201041dfeaf834f3c95e15df2cd948554a30335bde952c903c910f842bf26d714cf7d7722c57d1acc894c467","ssdeep":"","tlshash":"47514af97e445728b40090a304fba1c678590918dbee6222bf9480b054fab6509fb972","first_seen":"2026-03-31T02:29:53.137081Z","last_seen":"2026-03-31T14:10:59.874539Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5227,"timings":{"blocked":4667,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-31T13:54:55.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:54:58 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69c8b0a8-59d\"\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tencent Waterproof Wall","description":"","website":"https://007.qq.com/","common_platform_enumeration":"","icon":"TencentWaterproofWall.png","categories":["Hosting panels","Security"]}],"data":{"size":1437,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1437), with no line terminators","md5":"9776c79f33715ed9eab174b633623c70","sha1":"6d7ff8f834cd6ba364ffdc068b41a434f9e22d7f","sha256":"1d8740fe323a873bbdefc77324d01ff7008d72b7f34726d0655927ff61a473f1","sha512":"697ae958bdd66a8d6631b4ba30ec18dff15e6429c8f432aadb71a02442b0b20f66377e94d66d094f3d809f77924dff32d7cdf0f034504a4a4dc7b5afe5da4a02","ssdeep":"","tlshash":"bc21eda3cc11c84c2a204a7af9b6f12c8559e818ed60ec95b4fd20ee4fc0fe64857e71","first_seen":"2026-03-31T02:29:53.125416Z","last_seen":"2026-03-31T14:10:59.876964Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5301,"timings":{"blocked":2111,"dns":15,"connect":260,"send":0,"wait":1079,"receive":0,"ssl":1833},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cstaticdun.126.net/load.min.js?t=202007291602","fqdn":"cstaticdun.126.net","domain":"126.net","tld":"net"},"ip":{"addr":"47.246.50.196","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:54:58.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.126.net","organization":"NetEase (Hangzhou) Network Co., Ltd"},"issuer":{"commonName":"GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 24 Nov 2025 00:00:00 GMT","end":"Wed, 23 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5A:DA:FF:25:CA:C1:B3:2A:07:EC:89:18:8B:11:75:86:A2:1C:76:1B","sha256":"90:30:8B:08:91:13:6D:6B:5C:CF:09:D3:67:EB:12:8E:34:F1:0D:37:08:1E:95:E3:D2:CE:B7:41:B4:A1:DA:E1"}}},"request":{"raw":"GET /load.min.js?t=202007291602 HTTP/1.1\r\nHost: cstaticdun.126.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Tengine\r\nContent-Type: application/javascript\r\nContent-Length: 14400\r\nConnection: keep-alive\r\nDate: Tue, 31 Mar 2026 10:51:34 GMT\r\nTiming-Allow-Origin: *\r\nCache-Control: max-age=43200\r\nExpires: Fri, 27 Mar 2026 22:56:34 GMT\r\nVia: ens-cache22.l2nu20-20[0,0,304-0,H], ens-cache65.l2nu20-20[1,0], ens-cache6.l2hk11[0,0,304-0,H], ens-cache11.l2hk11[1,0], ens-cache24.l2de4[0,0,304-0,H], ens-cache39.l2de4[1,0], ens-cache6.fr4[0,0,200-0,H], ens-cache14.fr4[1,0]\r\nVary: Accept-Encoding\r\nLast-Modified: Wed, 25 Mar 2026 01:57:18 GMT\r\nContent-Encoding: gzip\r\nAge: 11008\r\nAli-Swift-Global-Savetime: 1774954294\r\nX-Cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nX-Swift-SaveTime: Tue, 31 Mar 2026 10:51:34 GMT\r\nX-Swift-CacheTime: 43200\r\ncdn-user-ip: 91.90.42.154\r\nAccess-Control-Expose-Headers: *\r\nAccess-Control-Allow-Methods: GET,POST,OPTIONS,HEAD\r\nAccess-Control-Allow-Origin: *\r\ncdn-source: ali\r\nAccess-Control-Allow-Headers: *\r\ncdn-ip: 47.246.50.196\r\nEagleId: 2ff632a217749653022425983e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":36116,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32007)","md5":"cb8efb99a8950ca6b13f38274938882c","sha1":"8ab6335d260069ded73009a539c3bc91404791de","sha256":"2f55203b6eac5a5edbefc7225557ba6bf8f4d869c67525d11d10719a8becd3d5","sha512":"0d60f0db0dc4f5ef4ea8baf1d18d44d20313d436f84d3033453828fbbe856b673a442085290ebaa5627ded58cee3d35a8a5560bd860cf7697330c769bb99275a","ssdeep":"768:9KHK1+h00zI0RAcKvErsQsLiz0I+/QtzfS5+8hfgVCMiE:9ChrsQa6tjS5D5gEE","tlshash":"2ef2d68cb690f4bb4ba76070813f920be13b5614b499c0e4b155e5e4adbd8ce5627f3c","first_seen":"2026-03-25T12:02:18.210304Z","last_seen":"2026-04-08T10:38:07.655442Z","times_seen":533,"resource_available":true,"data":null}},"time_used":6601,"timings":{"blocked":3282,"dns":2577,"connect":26,"send":0,"wait":27,"receive":3,"ssl":682},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_notice_bg.4c026690.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_notice_bg.4c026690.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:11 GMT\r\nContent-Type: image/webp\r\nContent-Length: 5044\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-13b4\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5044,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e9ee31c633622ae27227afa0a5527841","sha1":"f720b29757dccc506622e19ebc09079572d8df6e","sha256":"d366c2fc44221752d149a752504037d910e152f8a84e2f2a7ba8393a4870a398","sha512":"32803147a09d306321e1450963ffc00072ab08f3477178d79a227f8d34549882a171c8e70f1054a3c9822f705b50cc9f3a2d01b218d021a9146f8d59e967c166","ssdeep":"96:rRZaiobj3peWOwAVq94bIQlT2RtHG4BG4Sz2VubPbYeEOv4Pbw0XzyLnmENO5:rRZaic9lmqeb12RtDFQ2VuwNOv4ZQmEG","tlshash":"1ea16ce67e83fe7fa324deec9855c24479277842da59cc1980b03a47a9bb7022079a05","first_seen":"2025-12-23T17:05:07.927571Z","last_seen":"2026-03-31T14:10:59.827581Z","times_seen":5,"resource_available":false,"data":null}},"time_used":4092,"timings":{"blocked":3540,"dns":0,"connect":0,"send":0,"wait":551,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_lottery_active.151dd0a4.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_lottery_active.151dd0a4.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:11 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2780\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-adc\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2780,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"497a060bae731412ef26a049f43844fe","sha1":"22de573a1f9a23d3273daa8387bd8625dfcfd588","sha256":"1b86213e983f8f31add70fdad4ff4b2052a56f2dceae2f93f667501f2542a584","sha512":"887371b5474f33e63f5aa0e5cebe719199bcdd8d2a18ed11a0e54a06a5ce827f6e4f43101536d2a35d7f0db08a60d0050b6c361a60da9949b83add603e2d290d","ssdeep":"","tlshash":"24515c134f6633d6f1880e472ecdf8e47686638ef81b79a0b4a121042a70391fc72e27","first_seen":"2025-12-23T17:05:07.960336Z","last_seen":"2026-03-31T14:10:59.83217Z","times_seen":5,"resource_available":false,"data":null}},"time_used":4951,"timings":{"blocked":4402,"dns":0,"connect":0,"send":0,"wait":548,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/close_icon.fb4de5d3.png","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/close_icon.fb4de5d3.png HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653074733252e003892e9a03a53bfb436fe97ed639637441e; baboConfig={%22appId%22:%22b131cddf-2523-473a-abd4-d6d32a963397%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:09 GMT\r\nContent-Type: image/png\r\nContent-Length: 773\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-305\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":773,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"2528d92bef868a132d8aeeac251c5689","sha1":"7237b38c5a34067f01d28a0d1f041396607be502","sha256":"e9c77c38c82ed97a045378eb17a157ab90c24586b91148f2ede19e667dbd0bab","sha512":"7b4d9a3d0a772e7dc7603278ec68aea3aa8e0cac538532f0b5881a4ab97e34417571fad64c182c470514613552ef8770fc312ce953a7f37cda683b3874c17a32","ssdeep":"","tlshash":"5f0146d7ea80ba52b4b40d9369255eb4a42f14d461476530e499f31c32013c974d35c2","first_seen":"2023-07-14T04:48:34Z","last_seen":"2026-06-04T23:35:48.238459Z","times_seen":153,"resource_available":false,"data":null}},"time_used":1833,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/sport_api/getSports","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:09.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"POST /sport_api/getSports HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\ndeviceInfo: {\"mobile\":\"Firefox 134.0\",\"os\":\"Windows 134.0\",\"browser\":\"Firefox\",\"iosVersion\":\"\"}\r\nContent-Length: 126\r\nOrigin: https://bet3a60.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653085688540e00354883367d0362a6f89c3204b999767af4; baboConfig={%22appId%22:%22596ebeab-e665-456e-ac67-01b9e67242b6%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}; aliyungf_tc=8de2e693ab91e3b028f461abb0d4392f9bdadbd159a8e5058410ec3edd78d15d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":126,"data":"{\"SportId\":1,\"Market\":3,\"LanguageCode\":\"CHS\",\"CompetitionIds\":null,\"StartTime\":null,\"PageNumber\":1,\"PageSize\":20,\"SortType\":1}"}},"response":{"raw":"HTTP/1.1 200 \r\nDate: Tue, 31 Mar 2026 13:55:11 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":171000,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (64668), with no line terminators","md5":"cfd7462f056dcb7e5c885894dda70096","sha1":"20f735f1fa67736d61fbf620818f7fb770542268","sha256":"e8673fea533e12fb0cf11f8b613a8b720434d86e728935227c743a115d39edb5","sha512":"a927bb99486be6f585c676428b4f79f9f362e4418fb4d9dd89d9a3c1c3cf2f9292187139c6e1131fc140fc5678b422a7b991b3f171ec4f327bd5fa36e6ed61aa","ssdeep":"1536:X9BuiX3gzQ4EV4HL9gEPdIQlnGftdB60xVNzWkxE81vXMtPLqufSvschCy13hb2l:3+fB","tlshash":"07f31f0267929afd92b71c194be76413682d50895fc88740bf9bec1d90994cf236fb3b","first_seen":"2026-03-31T13:55:32.261594Z","last_seen":"2026-03-31T13:55:32.261594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2663,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bmp.cffygajeba05img.com:9663/team_logo/1093.png","fqdn":"ai-bmp.cffygajeba05img.com","domain":"cffygajeba05img.com","tld":"com"},"ip":{"addr":"47.242.232.127","port":9663,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ai-bmp.cffygajeba05img.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 05 Mar 2026 09:44:38 GMT","end":"Sun, 04 Apr 2027 09:44:37 GMT"},"fingerprint":{"sha1":"6D:82:6C:C8:EA:DD:05:DB:D1:75:72:17:8C:12:F5:CB:2F:8A:34:DF","sha256":"11:EB:93:37:70:49:FD:7B:F1:F9:76:8C:1F:E4:82:C9:EA:8C:20:DF:4C:43:DA:15:61:51:10:A2:B4:4D:C1:3C"}}},"request":{"raw":"GET /team_logo/1093.png HTTP/1.1\r\nHost: ai-bmp.cffygajeba05img.com:9663\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 2915\r\nConnection: keep-alive\r\nx-oss-request-id: 69CBD241D29D693039D15204\r\nAccept-Ranges: bytes\r\nETag: \"16DA2EA7F2D238AD3243E8F04D872A61\"\r\nLast-Modified: Wed, 10 Jul 2024 10:55:46 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16270872308525624287\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nContent-MD5: Ftoup/LSOK0yQ+jwTYcqYQ==\r\nx-oss-server-time: 1\r\nExpires: Tue, 07 Apr 2026 13:55:13 GMT\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=604800, no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2915,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"16da2ea7f2d238ad3243e8f04d872a61","sha1":"e4ab719dad288fcc0b055cc65f08393ad14167bd","sha256":"f71ced0d2abd530e08a8952e9da2204981321d43489509c588a87308bb9ef1da","sha512":"713b1c528932c02cb63cd2097e9c58c37cfd612e926d193047912d5181fd7fd72b0841aab5dda9b86476598852583cc07c391bf14992394caa58cb75a3859cb1","ssdeep":"","tlshash":"21514bb9d0a52c602aaeb13f2e3cd914d0a703122af3787829afd4038a5de0109e54b5","first_seen":"2026-03-31T13:55:32.263294Z","last_seen":"2026-03-31T14:10:59.880662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2110,"timings":{"blocked":907,"dns":72,"connect":269,"send":0,"wait":277,"receive":1,"ssl":580},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3p104.com/2g/365.gif","fqdn":"3p104.com","domain":"3p104.com","tld":"com"},"ip":{"addr":"16.163.5.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:06.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"3p104.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 10:11:42 GMT","end":"Thu, 21 May 2026 10:11:41 GMT"},"fingerprint":{"sha1":"A6:E1:A0:B7:AC:38:33:BA:D3:F2:23:CD:E7:B0:66:03:68:EA:30:00","sha256":"DC:47:9B:AF:87:E6:BC:15:FB:09:AE:D5:73:CF:BD:87:5D:2F:87:EA:54:C9:49:94:A8:6A:0E:51:14:67:FD:06"}}},"request":{"raw":"GET /2g/365.gif HTTP/1.1\r\nHost: 3p104.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:07 GMT\r\nContent-Type: image/gif\r\nContent-Length: 364195\r\nConnection: keep-alive\r\nLast-Modified: Sat, 02 Aug 2025 13:33:10 GMT\r\nVary: Accept-Encoding\r\nETag: \"688e1396-58ea3\"\r\nExpires: Thu, 30 Apr 2026 13:55:07 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nServer: cdn\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":364195,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 540 x 598","md5":"794276f81b7bb7349dfc7cfa63c72fb9","sha1":"ffdada36a41b4f0fd9b394fb5109b6db817fe3a5","sha256":"8e1c94f52743db8edeefaec4ebf6d2efa23248c40bcab82e24d8c342ecdba27a","sha512":"219a4d080afca8134af0bfc8b30172edb6f145a539dfa044377a0c1a682a5fcd8e0fe043a930393414eb1611d7e7050f7418c0a16dfa60c926f30d023eb73cfc","ssdeep":"6144:36ExAo0nkkAv9AyiFAexp4567j8/VXBTIGmVYh/5twCon35v47t479Kw:39xAowWv9dexpqCjQF+VYTtYn3hktQ","tlshash":"f274234719cff28d4e09d5be35690c0e03ec193989e1fce904d68ace9a17663ea4d74b","first_seen":"2026-03-31T02:29:53.114257Z","last_seen":"2026-03-31T14:10:59.831377Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3510,"timings":{"blocked":988,"dns":61,"connect":307,"send":0,"wait":610,"receive":918,"ssl":620},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_im_sport_active.89ae23af.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_im_sport_active.89ae23af.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:09 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2504\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-9c8\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2504,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80cd18fcb01a123b30295faa62d5165c","sha1":"57f58c4ff0be56417f513940144f29beb26a563f","sha256":"ed26711ab2910b13ef16ac3aec71ef519ec0a15036248072dc803b34763c71d0","sha512":"0d9af827098e8dcc417963b8ce1a5115d2838ed40d1cd32274f12e964eab2eb2d1fdc588e26e29b12eeee1061439f40087d0b4e9c8427210bf6d4205191f9c8b","ssdeep":"","tlshash":"f2515de76f4851dbdfed09094f65002d207c42208348c70f8d09a25e38d1997fa77f91","first_seen":"2025-12-23T17:05:07.982612Z","last_seen":"2026-03-31T14:10:59.861156Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2474,"timings":{"blocked":1692,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/loading.963621cc.gif","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/loading.963621cc.gif HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:11 GMT\r\nContent-Type: image/gif\r\nContent-Length: 178493\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-2b93d\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":178493,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 240 x 240","md5":"eb2379fa13f46c4088af0c59e5f1bfb8","sha1":"0511addf5fe4cf09ddcd48503631e22ef389059d","sha256":"39f94197781b32da1e228a3f2910bccebf1ee548b3ed8415f7b33eb7b9f8635d","sha512":"df1187436a7761bb799cf3a95a1138a08927f1444e01c81d40ba55bfc8252df62b3df2aced5090836a0fba3bb046977e224509d6683046db4f8f23b8d33ba791","ssdeep":"3072:d4I42jVK9/HXB+tA+HXvg8RmzTFKikVQ/IRiQQ6Ak039iYBFsc7:dzA9Z+hvRWkiYOwi3k039iE","tlshash":"6f04127d451d9c2162ffe974b16bfb9a44d540c3c420fee048b0b69772b2d28aa4937e","first_seen":"2023-07-20T11:17:33Z","last_seen":"2026-05-22T20:18:53.409913Z","times_seen":57,"resource_available":false,"data":null}},"time_used":4944,"timings":{"blocked":3591,"dns":0,"connect":0,"send":0,"wait":818,"receive":535,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/member/publishPlanningRecommend/getSportPlatformsRecommend?classificationId=2","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /member/publishPlanningRecommend/getSportPlatformsRecommend?classificationId=2 HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndeviceInfo: {\"mobile\":\"Firefox 134.0\",\"os\":\"Windows 134.0\",\"browser\":\"Firefox\",\"iosVersion\":\"\"}\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Tue, 31 Mar 2026 13:55:08 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Application-Context: application:redisson-cluster:8888\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2f0d9c0109249d8c34ea1937c24ba0eb","sha1":"d03a3e6a4e4007e84e7fcb616d8495b31e09ba75","sha256":"129848bd00738cc9b244965067b793a3bde6d8e51246e6d7e69f30f2a2104f2a","sha512":"7e3c120303f96d7a9b126e300568a0c4e63ea43d684c4f8df72ba5fabdd015b3db475a52d1a6a11a5aa6d72288e1ac61e49aa8a4a92dc39ddae6e0697fb1228f","ssdeep":"","tlshash":"16900450341740134c45444c140447111d3557540d0513d445cdd11170c4dd0d007410","first_seen":"2023-07-20T11:17:32Z","last_seen":"2026-05-22T20:18:53.188519Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1568,"timings":{"blocked":688,"dns":0,"connect":0,"send":0,"wait":880,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/right_corners.85503a15.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/right_corners.85503a15.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653085688540e00354883367d0362a6f89c3204b999767af4; baboConfig={%22appId%22:%22596ebeab-e665-456e-ac67-01b9e67242b6%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}; aliyungf_tc=8de2e693ab91e3b028f461abb0d4392f9bdadbd159a8e5058410ec3edd78d15d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 238\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-ee\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":238,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4deba181754938d392ea90d41fa0d5df","sha1":"06fb39a7575709e1e226298153e46e1041473fec","sha256":"95bee0e86d078a61cee7a0066b3ad9faab56dc0557a4f263567802f5b84de1d7","sha512":"7958c2e11e100d031d2551d5c3768042d45980b7bbf514120d6e8862dcee492e10cf2f34683607e78a4bbf3592c9ff6c9ede4c735809174ad9cf43096b798972","ssdeep":"","tlshash":"13d0a7e58abb94b8a9d42d4a19b5f6d0a598756c40a807da5c3b0eb0a8236905c74352","first_seen":"2023-07-20T11:17:33Z","last_seen":"2026-05-22T20:18:53.414774Z","times_seen":47,"resource_available":false,"data":null}},"time_used":2591,"timings":{"blocked":1512,"dns":0,"connect":0,"send":0,"wait":1079,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/corner_icon.fe01d8b2.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/corner_icon.fe01d8b2.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653085688540e00354883367d0362a6f89c3204b999767af4; baboConfig={%22appId%22:%22596ebeab-e665-456e-ac67-01b9e67242b6%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}; aliyungf_tc=8de2e693ab91e3b028f461abb0d4392f9bdadbd159a8e5058410ec3edd78d15d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 504\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-1f8\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":504,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da94b2936ab3d69c93ab11dbd790d527","sha1":"ee3aaf5f921efa422ec1b098bb825c779808ea08","sha256":"7c11e1483a8fe0e837da24c61807d1a5e2c82c076d1c3c5d1b4b5f6e422caaf6","sha512":"0b9ef063cb1efa336c657df39eeb0436b442d60e5938a077918fb982b98fe638e0c303b0ec9df907a7a63b9457d51fe9db4ac553c9ed1c43ba9f07c49bd6f073","ssdeep":"","tlshash":"c1f07520f6545850503621dce7320a1c548c020b11d5ceecfa135471cd930d9f7805c7","first_seen":"2023-12-08T05:43:09Z","last_seen":"2026-03-31T14:10:59.856308Z","times_seen":27,"resource_available":false,"data":null}},"time_used":2917,"timings":{"blocked":1568,"dns":0,"connect":0,"send":0,"wait":1349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bmp.cffygajeba05img.com:9663/team_logo/22463.png","fqdn":"ai-bmp.cffygajeba05img.com","domain":"cffygajeba05img.com","tld":"com"},"ip":{"addr":"47.242.232.127","port":9663,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ai-bmp.cffygajeba05img.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 05 Mar 2026 09:44:38 GMT","end":"Sun, 04 Apr 2027 09:44:37 GMT"},"fingerprint":{"sha1":"6D:82:6C:C8:EA:DD:05:DB:D1:75:72:17:8C:12:F5:CB:2F:8A:34:DF","sha256":"11:EB:93:37:70:49:FD:7B:F1:F9:76:8C:1F:E4:82:C9:EA:8C:20:DF:4C:43:DA:15:61:51:10:A2:B4:4D:C1:3C"}}},"request":{"raw":"GET /team_logo/22463.png HTTP/1.1\r\nHost: ai-bmp.cffygajeba05img.com:9663\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 1226\r\nConnection: keep-alive\r\nx-oss-request-id: 69CBD24119A6433237DD3445\r\nAccept-Ranges: bytes\r\nETag: \"9043C697E6997DA2D14AE01504CA1BC8\"\r\nLast-Modified: Wed, 10 Jul 2024 15:23:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4076323954672403585\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\nContent-MD5: kEPGl+aZfaLRSuAVBMobyA==\r\nx-oss-server-time: 4\r\nExpires: Tue, 07 Apr 2026 13:55:13 GMT\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=604800, no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1226,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"9043c697e6997da2d14ae01504ca1bc8","sha1":"468aeb5b7dc36f17b4057b25101d8bec01d58300","sha256":"115f30d32960432beb12907ccd3770dc69321ef2fd5f8391963868fc2ae69440","sha512":"c0dcf0d7213cec9c70c934ba5c5e95bf7e64140c338f6c84d673016db52c3c190549e97149be30aa1fd383571e36d1d94589e74e3c7a324ad87431bd44f47f89","ssdeep":"","tlshash":"9021240df6906e4165699f4224e754139d2788c0efd0e551b9cecc0709706fc486e5cb","first_seen":"2026-03-31T13:55:32.269965Z","last_seen":"2026-03-31T14:10:59.850669Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2161,"timings":{"blocked":926,"dns":60,"connect":287,"send":0,"wait":298,"receive":0,"ssl":586},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_lottery.1f724307.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_lottery.1f724307.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:11 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1314\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-522\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1314,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"03df61334fb8ec30bb062245683c0fd4","sha1":"7604a55d1aa484c3d97e1c4599f7ba5ff0818b89","sha256":"1d3ecc80601943e60658547a1a64e23e2df6c32369ce1f75b2e889d5913db887","sha512":"bec1b1245c8645f6871781e4b9539c5a3f573fb4e83ba617b628e3fd44cfacc1b6f244133bf8bf81c6afe293fbb9b6ffd99b19a8a813b5eeece349eafdf29472","ssdeep":"","tlshash":"3a21f8981ee083cee892066cf78634e84863b97053f7da1bd5dd21bd1b3ab7e1341400","first_seen":"2025-09-07T05:07:22.375155Z","last_seen":"2026-06-04T23:35:48.244428Z","times_seen":80,"resource_available":false,"data":null}},"time_used":4680,"timings":{"blocked":4117,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/checked.370005cb.png","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/checked.370005cb.png HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 309\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-135\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":309,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 9, 8-bit gray+alpha, non-interlaced","md5":"a75c423c3ba22b3b5384c3dc15af7d35","sha1":"80e7e0239812143c0c62ae79e6e1274ada360b06","sha256":"63a1bea308960ccfe0002f97967b6922ca8daf38189cbac737b4a1b0f8b6fab7","sha512":"e7f034077540f0599e30b15ee6a692f238c27ff27ca88bad33fb3485ecdbca5c0a1d709c8a961828eef105deb8f93c2750204e2e96b51964ad166cf5a157628e","ssdeep":"","tlshash":"c9e07dc69714ae6ec60342ae81558456fe7a14821b6e6c3d700de40c1a20fc00ae5900","first_seen":"2023-07-20T11:17:32Z","last_seen":"2026-06-04T23:35:48.181115Z","times_seen":78,"resource_available":false,"data":null}},"time_used":4085,"timings":{"blocked":3522,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/dl_green.64e09cf9.png","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/dl_green.64e09cf9.png HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653074733252e003892e9a03a53bfb436fe97ed639637441e; baboConfig={%22appId%22:%22b131cddf-2523-473a-abd4-d6d32a963397%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:09 GMT\r\nContent-Type: image/png\r\nContent-Length: 3364\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-d24\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 143 x 53, 8-bit colormap, non-interlaced","md5":"69fc0fb73c2da03e22cfacc830d59a21","sha1":"3146007924cee25bfef5c1b8a3d67ff8e275b664","sha256":"2a9b99985963663811ef7a65e5ea59ff7dc31a3a6db670452eecef11fbf7dddf","sha512":"00e86acf944aa95f641a95327a2dd6d6a4c935efda84a880488677062a171867d9cd5a5952fe1877fdc438a52b74b1d3139cee61ebb29d5375d668cba7c1d929","ssdeep":"","tlshash":"01613a536c117490fc8ea57052ba02ca46bd1d42ee1d6ce4297e7c86e83543f1de3929","first_seen":"2023-07-20T11:17:32Z","last_seen":"2026-03-31T14:10:59.864179Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1781,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/bottom_arrow.5747cf74.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/bottom_arrow.5747cf74.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653085688540e00354883367d0362a6f89c3204b999767af4; baboConfig={%22appId%22:%22596ebeab-e665-456e-ac67-01b9e67242b6%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}; aliyungf_tc=8de2e693ab91e3b028f461abb0d4392f9bdadbd159a8e5058410ec3edd78d15d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/webp\r\nContent-Length: 194\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-c2\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":194,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec1bdb1086c3eaa942646c44fb498a44","sha1":"becac0c5d3d16176c8ff6dea41403010ab401ab9","sha256":"654aa09c8008042fe21add34fe5c4e97f6ac0fea02c3dbc3ac275270980b646b","sha512":"263a08bfff259bb5f78f06cb9e81363fb62d9d8ac2ba9110c8747c50d768782f6d5333fd52eb214c9f2a887b0de723922079c601115dc239a5df49fe0f4764a2","ssdeep":"","tlshash":"6dc0225fc96d808687001ab858e2686c9c86a63e0927a1c380fa8890c29643484a026a","first_seen":"2023-07-20T11:17:33Z","last_seen":"2026-05-22T20:18:53.178345Z","times_seen":48,"resource_available":false,"data":null}},"time_used":1768,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1768,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bmp.cffygajeba05img.com:9663/team_logo/36580.png","fqdn":"ai-bmp.cffygajeba05img.com","domain":"cffygajeba05img.com","tld":"com"},"ip":{"addr":"47.242.232.127","port":9663,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ai-bmp.cffygajeba05img.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 05 Mar 2026 09:44:38 GMT","end":"Sun, 04 Apr 2027 09:44:37 GMT"},"fingerprint":{"sha1":"6D:82:6C:C8:EA:DD:05:DB:D1:75:72:17:8C:12:F5:CB:2F:8A:34:DF","sha256":"11:EB:93:37:70:49:FD:7B:F1:F9:76:8C:1F:E4:82:C9:EA:8C:20:DF:4C:43:DA:15:61:51:10:A2:B4:4D:C1:3C"}}},"request":{"raw":"GET /team_logo/36580.png HTTP/1.1\r\nHost: ai-bmp.cffygajeba05img.com:9663\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"67a493ca-305\"\r\nStrict-Transport-Security: max-age=604800; includeSubdomains; preload\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T21:09:45.625607Z","times_seen":16191656,"resource_available":true,"data":null}},"time_used":1492,"timings":{"blocked":1202,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/member/webconfig/findByRecWebConfig?classificationId=2","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:03.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /member/webconfig/findByRecWebConfig?classificationId=2 HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndeviceInfo: {\"mobile\":\"Firefox 134.0\",\"os\":\"Windows 134.0\",\"browser\":\"Firefox\",\"iosVersion\":\"\"}\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Tue, 31 Mar 2026 13:55:08 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: acw_tc=ac11000117749653080586087e003cf856e2379f60e76a6c676b035465db8f;path=/;HttpOnly;Max-Age=1800\r\nVary: Accept-Encoding\r\nX-Application-Context: application:redisson-cluster:8888\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":1973,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"00eb11b164ce73f7a56edc93b2538e06","sha1":"926f06ed07c6094a468d3b0bdebdd09c93e8ce38","sha256":"5a590c51c50f0b264854a0d592e5b1f2bcc3111c7627530a1a77ff176ec7e660","sha512":"cdf5e424cd8eaeee39a68733222173f1870a210f88c6d0ac7383ca5d46e01297e51526dba8033bc51774c447623891b38db16b93bbe0174f238ded5f800afdda","ssdeep":"","tlshash":"5141bedf07cc463f876f9bed189fa938952d429394c29ccfc0521f6640ad6a1132cb12","first_seen":"2026-03-31T02:29:53.128886Z","last_seen":"2026-03-31T14:10:59.852155Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5039,"timings":{"blocked":4330,"dns":0,"connect":0,"send":0,"wait":709,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_entertainment.372def5a.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_entertainment.372def5a.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:10 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1060\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-424\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1060,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"999d4b96757c25e067c991d0eafc94ac","sha1":"f83a35d10c2acae0743338cc6cbe8648e70cfa0a","sha256":"9e841606720f90b9d1fb3234c4beb4f66a41837959a16b532881a074afb4f648","sha512":"2e74f6d266319586317e9a7b73819d443b11a79bb480aec3fdb3e2de8a68f5ec229d070c7b79e02c9ddc0e7c886484aa60e46afb6a36b97a94414d0605255b60","ssdeep":"","tlshash":"6011b5cd01364432fb29ae3e583293e2e9d1437131974550fd1f262b8d79d8010570ab","first_seen":"2025-10-26T04:28:01.144668Z","last_seen":"2026-06-04T23:35:48.172225Z","times_seen":27,"resource_available":false,"data":null}},"time_used":3018,"timings":{"blocked":2458,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/green_entertainment_active.893d69ad.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/green_entertainment_active.893d69ad.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:10 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2506\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-9ca\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2506,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"414a06e70312d023340862d876bef084","sha1":"067d4be2e7142b9ab5c76b1652554ba5d7f4cde6","sha256":"be8fbd007ea020aa7cf166aceb86822152536bffa19203e5e11dfbd073077dd6","sha512":"7b93a419d97b00f116c5b79d40589ea9671a470cc18ed56b8f0e8b6455477edd7df9696c808ca34fc971e2fb581fd205eaa0d09c0fdb169b00e3af7e062c9f3c","ssdeep":"","tlshash":"c8514cd35458049bafd8c02337a84a041a50b7e22bc872e71a0f5e424fa7727a9b68f1","first_seen":"2025-12-23T17:05:07.98106Z","last_seen":"2026-03-31T14:10:59.862489Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3088,"timings":{"blocked":2529,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93145.cc/ggggggg/icotubiao.ico","fqdn":"93145.cc","domain":"93145.cc","tld":"cc"},"ip":{"addr":"16.163.5.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"93160.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 05:54:06 GMT","end":"Tue, 19 May 2026 05:54:05 GMT"},"fingerprint":{"sha1":"24:32:DE:01:11:CB:EF:40:D6:61:43:ED:E0:C2:83:D1:D8:7A:C6:44","sha256":"11:A7:5E:E8:3E:A8:A7:36:33:89:9E:17:00:DC:CB:A4:5C:5B:3D:42:C0:64:E9:73:EF:9D:EF:5D:AC:5F:3B:FC"}}},"request":{"raw":"GET /ggggggg/icotubiao.ico HTTP/1.1\r\nHost: 93145.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:08 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 67646\r\nConnection: keep-alive\r\nLast-Modified: Mon, 18 Nov 2024 18:06:11 GMT\r\nETag: \"673b8213-1083e\"\r\nAccept-Ranges: bytes\r\nServer: cdn\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67646,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel","md5":"bff00084ca3333b4d7d356df3fdc05e1","sha1":"83294d81074ede667acc7e9fd75bb159a0b2675a","sha256":"ff0ef745a39ccb99e3bfaf85662c0c8b29a30d61b70f1a7b76bd1fd873efc545","sha512":"86ccf51757b1a98146ca29606ebf753533076ca45fed3309c7b0d45672fdbf03c2cbc679be07588de116eb1f2472b6a2c1941c9ba89c892a519ff12d087cf0a0","ssdeep":"768:lf6Puqjr4DgpDgneYLaN6iRh3JT6l8b2dqOD6sf:9Yrjp0L6dEVD6U","tlshash":"a0634b8b2e26c60fc1454f71f69e10f828992e04f6cd2c53c472fe5078f269874e7aa5","first_seen":"2023-07-20T11:17:32Z","last_seen":"2026-03-31T14:10:59.849264Z","times_seen":13,"resource_available":false,"data":null}},"time_used":3030,"timings":{"blocked":1011,"dns":5,"connect":333,"send":0,"wait":672,"receive":335,"ssl":671},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/js/main.5e1b8097.js","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:54:58.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/js/main.5e1b8097.js HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:54:59 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69c8b0a8-25fce2\"\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2489570,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fa6b8d4efd60c1e1c64e9d719ae6b3ad","sha1":"0c929d0ca9772f7fd74a633369603ef433560aad","sha256":"518d84a90ac56c589066ce47f36d1255a4a8f1dcdcd4f753ffb341e7680a9518","sha512":"470b4156ac0bf639c0b8d72517c1c96269c99a1e216992a4ae5cad026d8586f0254d49d3aeb21007648fc3b02ecdf1fb9fc7bb6e1add4c246231bbc8dd3eafb1","ssdeep":"24576:dHTRTW+kO1L0yu37ZAxWL9OhoXdryKxY+4z:dHTRTW+kO1L0yuLZAxWkmdryKxY","tlshash":"42253b84f597beace5f944c9983e050c732e1a4c980804bcbdfcbc922a455c5766ffa9","first_seen":"2026-03-31T02:29:53.100242Z","last_seen":"2026-03-31T14:10:59.877525Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1884,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":1052,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/activity_icon.287b7959.png","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:03.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/activity_icon.287b7959.png HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:03 GMT\r\nContent-Type: image/png\r\nContent-Length: 1896\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-768\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1896,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 68, 8-bit gray+alpha, non-interlaced","md5":"759b541f8ae60efb2527427fd727df9c","sha1":"e2eceb2a6a751486552e28dd632cce5d4a13fc5b","sha256":"6d3340f5474d93d652b96b6b2e19a77b30555d734574b9b003d2f121d540eee3","sha512":"43fd3eb0956996fad19c55daf16c0ca8c76cf7de98656ab40e1ef68032f032ab87216c3277fc6437fb50447b77b1b9cb10192723e2e436cb1241773620a3abc2","ssdeep":"","tlshash":"fe412bd0752018eec183de8b42d57384f5f6917d47272ce1971ad46f8e46ca08dce340","first_seen":"2023-07-14T04:48:34Z","last_seen":"2026-06-04T23:35:48.218322Z","times_seen":153,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/capital_icon.c4e5bc05.png","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:03.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/capital_icon.c4e5bc05.png HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:03 GMT\r\nContent-Type: image/png\r\nContent-Length: 2045\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-7fd\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2045,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 68, 8-bit gray+alpha, non-interlaced","md5":"a1726ac02c0f5d92eed8f99a75dca9e9","sha1":"cf6ed9802a6c05ce0d2b6c7e5c4173b6249e9ec8","sha256":"01289018dfa50e51de8cf8f104525ca2ba3bc772f0da2f2db109890c9f7e20a7","sha512":"4144ec0a8b4ae4176d4334196b4c26d8b9c5d2e4daa0994d204f5413538cca80defec81fc3a36d239ff5104856f2c648d20ac89df3da4871ec4b9a3609e1c339","ssdeep":"","tlshash":"b2412ceadadcc877a17d136a193ca990e73690f404cb2932480e070da418538de80221","first_seen":"2023-07-14T04:48:34Z","last_seen":"2026-06-04T23:35:48.204699Z","times_seen":154,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/member/bb/api/getBaboConfig?t=1774965303176\u0026classificationId=2","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:03.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /member/bb/api/getBaboConfig?t=1774965303176\u0026classificationId=2 HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndeviceInfo: {\"mobile\":\"Firefox 134.0\",\"os\":\"Windows 134.0\",\"browser\":\"Firefox\",\"iosVersion\":\"\"}\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Tue, 31 Mar 2026 13:55:06 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85;path=/;HttpOnly;Max-Age=1800\r\nVary: Accept-Encoding\r\nX-Application-Context: application:redisson-cluster:8888\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":965,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6de69322ec1da07d7fb45c033d4e5559","sha1":"fe4cf093eea98ab6b9510acd6510091c3f3161bb","sha256":"1555872013729abeb3ab9417efc0b63f081f0895ded454e4be71cab05dd9d61b","sha512":"a8da12fb50a6d99de7cd6960ab8f58e980fd4d7891ff0a74909f7db89c6f8855649bb9d866044a30c51da4b3bdb83da8b2b29fd1bab5d0646039279b2e736cc4","ssdeep":"","tlshash":"53119ea7079c4c216f4db3fe276ce548ce87066b8e8ff185f4a5990c1032be5124e12c","first_seen":"2026-03-31T13:55:32.279519Z","last_seen":"2026-03-31T13:55:32.279519Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3799,"timings":{"blocked":2842,"dns":0,"connect":0,"send":0,"wait":956,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/sidebar.2c7ba177.png","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:07.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/sidebar.2c7ba177.png HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653068245793e003c0db3d5af907293352e903c37f4723d85\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 364\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-16c\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 39, 8-bit gray+alpha, non-interlaced","md5":"28719c11d3f59db5e879876880c1420b","sha1":"7c3214a54fdb3fb7d1c7a06f99edfd0ea6585d6f","sha256":"110795b2e3fd886702eab44f9ad4085e79b0ed53cc3ae3003d5750035409d978","sha512":"e2e0bec52f1e6c4700151485f85985b65489bf6e41a67af7637d317511df77445ca8fef291fe857fadaff1d70f48dee922a05197c4efefcc4224e284b13c3731","ssdeep":"","tlshash":"68e0c0faeab7fa6dc48a13f9155602daaf720c87136a9684a0cedc0d69187584c4f541","first_seen":"2023-07-14T04:48:34Z","last_seen":"2026-06-04T23:35:48.205809Z","times_seen":120,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/select_play_green.19c0f41e.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/select_play_green.19c0f41e.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653085688540e00354883367d0362a6f89c3204b999767af4; baboConfig={%22appId%22:%22596ebeab-e665-456e-ac67-01b9e67242b6%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}; aliyungf_tc=8de2e693ab91e3b028f461abb0d4392f9bdadbd159a8e5058410ec3edd78d15d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1700\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-6a4\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1700,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"97e91cb4577684cfd4b80b7493b24c34","sha1":"79ba5f4f3e4a7f966fde4f475c7007c987e997dd","sha256":"d0cc264e5c41ef6de76e22fb073e0731b1d0b05626777c467faf9f6735f90493","sha512":"5fdb0073eab2861b6b487c91b6d06c593a5394e955d2f0ce818401496bf84b8cacf82867450ff1f37949431578ff22dc60505b8ef9bbb68b0399b8160186037d","ssdeep":"","tlshash":"bc311a093727173c309b25c6dc5645d51eefc3d1ea8ec962e643131c85b9a123f082c0","first_seen":"2023-07-20T11:17:32Z","last_seen":"2026-03-31T14:10:59.829068Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/ball_bg_green.75adf8e0.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.145","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/ball_bg_green.75adf8e0.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653085688540e00354883367d0362a6f89c3204b999767af4; baboConfig={%22appId%22:%22596ebeab-e665-456e-ac67-01b9e67242b6%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}; aliyungf_tc=8de2e693ab91e3b028f461abb0d4392f9bdadbd159a8e5058410ec3edd78d15d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:13 GMT\r\nContent-Type: image/webp\r\nContent-Length: 768\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-300\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":768,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"90f69da57316270f346a24c4caf2d43d","sha1":"6ad09a6832ff9fe6ee14281d6707987a5229b9a6","sha256":"d057c7ecf46333f090adaa97bfc519eb7cceb3a062220c766eee6936e044b2a3","sha512":"a3e35862167d4a8a03d99d8aec545002eef317cf4978f2e53dfeaeb64cd054d8d47436d4c96faf238225ee323c266009da5351d6182e4949346fa75b25335a0e","ssdeep":"","tlshash":"cf01753d63f7e40dd01e754c270d26cb94eb2b61603b8bcd1b53270a0865269b518223","first_seen":"2023-07-20T11:17:32Z","last_seen":"2026-03-31T14:10:59.833179Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1342,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/static/media/midfield_icon.5a9d1b46.webp","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:12.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /static/media/midfield_icon.5a9d1b46.webp HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/static/css/main.2154e7d9.css\r\nCookie: acw_tc=ac11000117749653085688540e00354883367d0362a6f89c3204b999767af4; baboConfig={%22appId%22:%22596ebeab-e665-456e-ac67-01b9e67242b6%22%2C%22appKey%22:%22NABOAEsAawA9AF4AeQByACQAfgA6AC0AcQAsAC8AQgBqADQANQBRAHsAfgAtACUA%22%2C%22videoListUrl%22:%22https://dfty.sporthtcieta.com:8663/#/matchResult%22%2C%22hdDetailUrl%22:%22https://api.E5cLm.com/zWKfVrc/0Toy%22%2C%22dhVideoList%22:%22https://api.k5fEXH.com/RZV0/AE4Dy%22%2C%22isEnable%22:%22Y%22%2C%22courseUrl%22:%22https://dfty.sporthtcieta.com:8663/#/dishTutorial%22%2C%22eachwayUrl%22:%22https://dfty.sporthtcieta.com:8663/#/notice%22%2C%22menuUrl%22:%22https://dfty.sporthtcieta.com:8663/#/sportRules%22%2C%22teamLogoUrl%22:%22https://ai-bmp.cffygajeba05img.com:9663/team_logo%22%2C%22baseUrl%22:%22https://imsportnxtyop.com:8663/sport_api%22%2C%22animationPlayURL%22:%22https://G9LLlAFDG3Og.oss-BXJaZ9ZlaX.aliyuncs.com/G9LLlAFDG3Og.json%22%2C%22upayQuota%22:%2250%22%2C%22upayHost%22:%22qm.wpqmqx5yqs.com%22%2C%22upayPort%22:%228553%22%2C%22upayUser%22:%22wpmq%22%2C%22upayPwd%22:%22EDR0H2LI1YOJLrkPYAGvIefG%22%2C%22ipayCustomerUrl%22:%22https://lz3oKx5.sjPnwr.xyz%22%2C%22isIpayMergeChannel%22:%22300%22%2C%22bosuQuota%22:%220%22%2C%22bosuBankQuota%22:%22100%22}; aliyungf_tc=8de2e693ab91e3b028f461abb0d4392f9bdadbd159a8e5058410ec3edd78d15d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 272\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Mar 2026 04:55:04 GMT\r\nETag: \"69c8b0a8-110\"\r\nServer: cdnbl\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":272,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10627eb95556dff5edf7f8bac11254b6","sha1":"800f45bf6e748aad83a4403f8e8b765f9d4745fb","sha256":"432d3a07a0b7bc1e4f366ef4c8c8a3bbc9993c446bd849ccdcfc19e81f55d06b","sha512":"007f23718d3868037bf11561951e61befb1e7b2c25ce1f755da415dc2ca28a915e17960d4bfcde6a819ceedd6915cbf12189ced8376e98ba1d4765aaf3e3ae40","ssdeep":"","tlshash":"30d0270703ede4ecd3537d795874770b712d540856087ea2c0570e91c7e11537f5d159","first_seen":"2024-05-01T18:55:13Z","last_seen":"2026-05-22T20:18:53.437595Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2875,"timings":{"blocked":1530,"dns":0,"connect":0,"send":0,"wait":1345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.captcha.qq.com/TCaptcha.js","fqdn":"ssl.captcha.qq.com","domain":"qq.com","tld":"com"},"ip":{"addr":"157.255.220.168","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:54:58.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.captcha.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Fri, 09 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"62:F5:EA:26:0F:C2:28:21:1C:74:6C:B2:E3:19:6D:7C:66:D5:E0:70","sha256":"35:62:9E:32:B6:A9:94:F6:C5:7C:C5:62:00:F1:5C:C3:F5:D4:69:07:BA:0B:E7:72:F9:6C:6C:CE:26:BA:6D:68"}}},"request":{"raw":"GET /TCaptcha.js HTTP/1.1\r\nHost: ssl.captcha.qq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 31 Mar 2026 13:55:00 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 99680\r\nConnection: keep-alive\r\nP3P: CP=CAO PSA OUR\r\nServer: Trpc httpd, tencent http server\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":99680,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6dc4ca9f1efbcb232c925de44d25b502","sha1":"2bb440e7908c7b4db175075685bad4dc0de328e7","sha256":"d4178c894f1d24b0b69d3d66b42204be3d63e199d25e39b2a53fa416b8c89f8f","sha512":"365ae8c212d95d919b1f141b273e2a24d2c321c9e243434d5ecb3560498201eeb4fda1938fe4153eb1d3802989c4396a75f084d907b45baacdfe0c9d5760db2c","ssdeep":"1536:TZB+ZYK9BnHl7xTYeu24ozqA7R/hISgScvEPhZOWmBW/MNfH4OYsgP+3UKq+0XYy:DwxTYeu24ozqA9/hISgSGOOpBW/wYDth","tlshash":"cba318deb3f1762d05ab6194cc3b9d8e64374c50c018f1b5cfb98687b628589921bf3a","first_seen":"2026-03-31T07:53:15.76128Z","last_seen":"2026-04-09T01:57:55.363451Z","times_seen":57,"resource_available":true,"data":null}},"time_used":4510,"timings":{"blocked":1686,"dns":115,"connect":283,"send":0,"wait":284,"receive":847,"ssl":1292},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet3a60.com/member/gameNotice/findgameNotice?deviceType=4\u0026classificationId=2","fqdn":"bet3a60.com","domain":"bet3a60.com","tld":"com"},"ip":{"addr":"154.86.17.135","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet3a60.com/","date":"2026-03-31T13:55:03.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet3a60.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 10:22:34 GMT","end":"Thu, 04 Jun 2026 10:22:33 GMT"},"fingerprint":{"sha1":"55:9E:A1:9B:FD:13:36:B2:E1:0A:B6:D3:26:B3:78:C9:8D:D4:C0:AA","sha256":"C6:79:98:0C:29:4B:05:64:48:BC:6B:60:4C:60:55:9D:ED:F2:F0:84:E5:D7:DA:32:F1:79:45:A8:13:76:44:37"}}},"request":{"raw":"GET /member/gameNotice/findgameNotice?deviceType=4\u0026classificationId=2 HTTP/1.1\r\nHost: bet3a60.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ndeviceInfo: {\"mobile\":\"Firefox 134.0\",\"os\":\"Windows 134.0\",\"browser\":\"Firefox\",\"iosVersion\":\"\"}\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet3a60.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Tue, 31 Mar 2026 13:55:06 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: acw_tc=ac11000117749653062843845e003def321b8e97c3a6698e99b4cb171d7698;path=/;HttpOnly;Max-Age=1800\r\nVary: Accept-Encoding\r\nX-Application-Context: application:redisson-cluster:8888\r\nContent-Encoding: gzip\r\nServer: cdnbl\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":4063,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2c425fbff0119b183d348383a02c8213","sha1":"2de9b427066e045565292255369f245ab274a7c0","sha256":"483268781e1d2ec20a819647e1d568e4f63de5b6a696d9a76fc10e4cea577b87","sha512":"0b71b5da24defdad2438c0bd5c84e7139f1d24006c5cb978ba1c44d878d551a00253d4d970d5a98e78295247e1a02e765db6e91d339a245afdce016091b8d6d2","ssdeep":"","tlshash":"8481c15747448f36435a91db408e7843729d821f6d2d96bd9e2bdecfed763b0212a310","first_seen":"2026-03-31T02:29:53.102924Z","last_seen":"2026-03-31T14:10:59.83543Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3260,"timings":{"blocked":2321,"dns":0,"connect":0,"send":0,"wait":939,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-31","alert":"Phishing Block","trigger":"bet3a60.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"bet3a60.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}
