{"report_id":"705e6985-a0ce-4305-a2b0-051b77beac12","version":6,"status":"done","tags":[],"date":"2026-05-16T13:55:39Z","url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":0,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"http","addr":"www.bet73019.com/#","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"title":"365英国上市官网","dom":{"size":239126,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"5832d0cad977b48ecf769971b370085d","sha1":"1e8f2cc401737d8b8a5c817518a4abf6606b9e92","sha256":"e9a3b5926cd86f7b6ad7d1df5ca06cf122f70af53128a17fcd5f26d24958e333","sha512":"aad33a82e7e737576c68a94be663c62957afe56121b6687263eb270de31966c64b4ceea86bf5e847f6fac83c76ad7a7827c407594f7eb60e5378aec61f33ed45","ssdeep":"6144:OGrWotX18eTzMcr8r4OgQf0JHxIYX3QJA:OGrptxTYkR40JqYXMA","tlshash":"0434ae5069fa142701b381923ab66b0b7ea5e143dd0ada0837fc47d81fcbd5ba87359c","dom_hash":"domhash10e3c88ee4cbfe5e0262e8d8b5a21a30","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":0,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-20T13:55:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"www.bet73019.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.bet73019.com","ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-04-12","domain_rank":0,"first_seen":"2026-05-16T13:55:42.192893Z","last_seen":"2026-05-16T13:55:42.192893Z","alert_count":50,"request_count":10,"received_data":443230,"sent_data":8688,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}]},{"fqdn":"3f38sfb.qdhyxt.com","ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-15","domain_rank":0,"first_seen":"2026-02-01T14:48:15.77089Z","last_seen":"2026-05-10T19:50:51.583485Z","alert_count":0,"request_count":77,"received_data":2434276,"sent_data":30334,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hm.baidu.com","ip":{"addr":"14.215.183.79","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2026-05-11T05:58:53.953432Z","alert_count":0,"request_count":2,"received_data":30885,"sent_data":1136,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7486c82efbc985969cb22a05b4c1c047","sha1":"5201da468fa1758b63ce7efb008b4b5a21ee2f75","sha256":"d85167d09fb22ca0e553071b43f79be02f1b8a53a3ded0ccd6e798d1d749caf1","sha512":"67bc2ed95e7f78692baa422be5f9ece2801af431c22893700ec8a2c62be1cac15c9b5a6ece04a91b728f8084749f2da50b8ecd3cf85f872c12de533ef42bba06","ssdeep":"","tlshash":"3d31cd58da707120504541311a93465d35507297cd253018375cd7131f9d89f77bb54d","size":1540,"data":"","first_seen":"2026-05-10T19:50:54.324865Z","last_seen":"2026-05-17T00:17:36.758588Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e004873fa0fb3ebcf1c8cb6fce9826a","sha1":"e2e582c528de0394ed7a9eba135d79c00c0368f5","sha256":"55f540f15f6ffaaa6e38a64cf612c201f56cdc55414ea54cb471ba04ead91850","sha512":"d54c357c245f340dab60a92d0a15d7abd587189944e67c27eb00e7085927d88dbda33dbf2599ddb813b395786d839af9b9d5b4311e877a3072318c586626b438","ssdeep":"","tlshash":"97218c3bc79a1386598b403a2ad68a0571a818e3ff189c107a4ed3111f8a90a217de64","size":1371,"data":"","first_seen":"2026-05-10T19:50:54.293269Z","last_seen":"2026-05-17T00:17:36.770559Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5d94017fe801ff5e7674e8a482fa192","sha1":"81413a767d6ed1575a56edec3d36a42fb8d12e0f","sha256":"6838ec34b1880342573ea71139b945e89d614c39266d12f4583a4ae17b50507b","sha512":"8e24c6dcc83a5157edb18d3a716ba681612bc76f94d25b9bab910c196312d2e8f71833f0cc43250e7e59c6f38494bcbe5a4af3cbda161dd7aad105d30863f410","ssdeep":"","tlshash":"8c11924bf7e86601707732be8abf5429173b2407ec050c40f86c0aa83ba14545cafa88","size":1054,"data":"","first_seen":"2026-05-10T19:50:54.281327Z","last_seen":"2026-05-26T08:49:02.232802Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"355b6d49db8a237820ac9967fb71eec7","sha1":"b5f3ae1d807e5670e726090c0fdbaaa185354d2c","sha256":"5bd2a99b1b1bca83c0c3debfb4dac07bb782239484f0876fae6d3014a1d986f0","sha512":"6dd38c4aa54ac06910ca6b5660ce7e768cda28ce2c9042b59f7865bcb0ddea4acf604f94085ab42af45e79dfaf6e1e6ed3b6a42852ba4272d8c32b6b40e5791b","ssdeep":"","tlshash":"59517bc5fab153a0593b14b66cbf510a6d127407fe0bf52af14c56d05f2841c31b9989","size":2544,"data":"","first_seen":"2026-05-10T19:50:54.320671Z","last_seen":"2026-05-17T00:17:36.764403Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/js/www/decrypt.js","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d1d23f897c7f9fa4b24eeb8159d7e21","sha1":"9c6ab5fed65abe81454978f1e844c4f36d61a1c7","sha256":"8da1db8adc85dc835413880c71cc811c762e48018590f9a991115e83a722c869","sha512":"4d258cf5b37b503615a1373aebf3474ec8f94351455729665223a9318067ca6b815d0bf3c265ead937660bfb3b0e75b25f450ef1b235a64b32d87df01e1b8e32","ssdeep":"","tlshash":"b9f0bec8adaffdd4add295d2627ec809a99315430209df52b688ac1c9fc80281a2b0f1","size":531,"data":"","first_seen":"2023-12-21T07:44:20Z","last_seen":"2026-07-25T02:29:56.42339Z","times_seen":4755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc73d35f5cc1806a1d4a4644579104c0","sha1":"2ba6e2a59a23ee43c16b4bd9e5cdc8e05646fb0b","sha256":"4053ddd607d4daccffea0d1a7b56e10018cc56096937fe55dc2e7a8142c210aa","sha512":"52af5976ddffb9116c526808dcd9dd73609939a5b5d0763ff406d86a2d8f02cc5563465532949aef08c1f3f1dc96f6eb477e3e68ce68566010eb692f665671d7","ssdeep":"","tlshash":"53b012ec7b539243248d13f2ec3ac9358c39317d1371379321bc204d0c154085410100","size":106,"data":"","first_seen":"2023-03-07T15:03:59Z","last_seen":"2026-05-30T10:19:54.535688Z","times_seen":3290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/celebrate/js/carousel.js?ver=1637918556","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55f280dcdbcb4a968d8f6364a2714e5","sha1":"7815466d8a2584bf137ad80138462b39cb62d236","sha256":"c2e540b8dda366b0898cc14ecda800ce2787ed2222b6ca38f67444882d8abd75","sha512":"f8404ad28595dd418ca26a6a7d1a984eb38d7a83ccee3286ed90c34c3c72f7c57cee42c59281ee9071b32c30c0c91d4d5ff5ff40c5741e75d611c1b7a8b15485","ssdeep":"","tlshash":"cc411124dd7214389533332991f7cb45ef2ea767a6418ca770fc4129afb0409569cee9","size":2266,"data":"","first_seen":"2024-12-20T12:48:50.204122Z","last_seen":"2026-07-19T11:09:23.445716Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/jquery.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9c7afd05729f10f55b689f36bb20172","sha1":"43dc554608df885a59ddeece1598c6ace434d747","sha256":"f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c","sha512":"3dcae1ff6e98c64e3586be3eb14dd486c51f7d4e9fa1b8f9a628be4fbb6a9ab562f31f9b50e16d2e0c72b942bdbe84eee8e0ef87fa730db1428b199a59d88232","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ","tlshash":"ca83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84345,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-07-26T13:58:25.771607Z","times_seen":26158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fb03fbf54eb441b258805d5f73b9a8c","sha1":"5efbfd1d676644c675beb704d07e8f72a45b666a","sha256":"79bae6aa350de5941203f48f70f7ae584721ece84ed3a98633d81c8e65a10c0e","sha512":"01782acb9faf05bf32e38fba5c873500269a5c5af43b457003255ae162b5e214195e11dca7ba996374965606aa30b3581cfe088879fe2e4149a9020eef962684","ssdeep":"","tlshash":"89c02202c33ac8232bce3230f3082f000c23b33bfa203a003f0e028c8220c880820b00","size":173,"data":"","first_seen":"2026-05-16T13:55:45.910311Z","last_seen":"2026-05-16T13:55:45.910311Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/sweetalert.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f9966a615f3f46d846807adbe42644f","sha1":"441544c084828da55ca0bafdc4c3df7dc7020820","sha256":"be4d1215ef6f2b2915b7f65cd28b9a9f7dcef17e1f0d883edd19400ca0ea795c","sha512":"e85f14552c1b5837780990e210223c5d6f532dd55f16589f682d1f2f95acc540b715aaac23ce12f871661006f80ec9043a9674dfdec1c3efc0819125d492dff6","ssdeep":"384:Rigwo5UpVZG9lOUlgkhzj7FRNE82XyySyTYayWri/SRVRXFKP9nWZcT2Rc8ex51f:RiB8lOuR5wSWrrRVR1KP9WK6Rc8ex/","tlshash":"ad72c899325438b327e361f1009f504ba4b196bde8095861376cc9e62ff8cc95ae2f77","size":16994,"data":"","first_seen":"2023-03-07T01:11:43Z","last_seen":"2026-07-26T21:49:28.375625Z","times_seen":7196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9c005128c9615eddb74db6eef5a7ad1","sha1":"90f4f554d4ef5eba2a612a54ed40d0affec221e7","sha256":"586d8501aca2a538a0c9828118ad72eb3298d45992b41b3c3cc853df206bd173","sha512":"9526991be9d7eadbbca75017c7f6342ec0ec753d9673a03a24f98d6d6ba60b5231d625f0ea95faa338227d74af45ce51d16c8bb18695c484a9be3087bfa0996b","ssdeep":"","tlshash":"fb41ede9f4e804004427ec7cac1fb19b21aea00ae04cc831b5ba60c19e212c9569be96","size":2153,"data":"","first_seen":"2026-05-10T19:50:54.284643Z","last_seen":"2026-05-17T00:17:36.743597Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c781a15c7dea767cb6f10b76297d9e5","sha1":"ebe68ff9867c7d7f836e329c98038959914d53b2","sha256":"cd12c67b58bbd3ef14da33872ad6f31ca8a4db2d6221052bf52598a326742b8a","sha512":"98fe8fc2212709de841bf1d2f4c97398f82dc390d2688d0afecf7a2e460613c518d5ad7fd0a8390842fb1623471e3a25cca4fceeec862adbb26f169626b90eaf","ssdeep":"","tlshash":"ce319a1cde1a484229e1cbb80481164226985583ddb0fa2fbb9c96806f6e02f97f26dd","size":1579,"data":"","first_seen":"2026-05-10T19:50:54.33171Z","last_seen":"2026-05-17T00:17:36.738243Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/unite/moment-countdown.min.js?ver=1663911607","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b855d61646fe5669c4dcbe0e9a9e4e3","sha1":"4673ccf3cf63a4b851618f6d298e865b01892654","sha256":"96abc335fe64b7dc248c1ebfcb5ca7f29f2a207c83f368c560426ead6f502aea","sha512":"4b4ece357cecba2d7ba1bed9cbc85180451ff64149ecf88f75dc85d41e244c9242ea0521e7069fac98787b04291d737fff0e31d7e3f0f7a64e80a94b565639d0","ssdeep":"","tlshash":"32f05cfc23f234a27dd96054369b9b8e18e7cb2188c48404e4d306fc1a7af0a1127d31","size":468,"data":"","first_seen":"2025-05-06T13:23:13.662834Z","last_seen":"2026-07-19T11:09:23.439194Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/unite/share_unite.js?ver=1749181409","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00c6288b67f7750a75b6e9abbf74c8a4","sha1":"5f464f4ce28448acc1c2fe825d4218795b023db4","sha256":"20327edf72e6632c450e8f8e443db2f728361f74b68697932491108c7f483b9e","sha512":"39dac004bb9b904ec4c4bb4d4963c3b8c4c9d98f9a80d90e53134e28c6055831652f0911e59b58f54c4b1e7156d8aba181b90ee3fe0ba6aefb67162b990787c0","ssdeep":"","tlshash":"37513127e6b82006207730a7deee346b556a8426b3417f06b7bc01a54fc58ac7f9270c","size":2667,"data":"","first_seen":"2025-06-07T06:32:46.623015Z","last_seen":"2026-07-25T02:29:56.404775Z","times_seen":4086,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4d6e24029f5f56b8c530335aadeaf94","sha1":"a47654302c8476f455730631e0ca5d3b55fadd62","sha256":"8a938c02e22bb0f9e0c646bd6e7cab89b2f0e9cc105a71a879cea861fbb10cf5","sha512":"959e659708b05db1b5ebfb894abc3683523c396192d7d39c09ee8c11ff462f1d02493a33c07dc7a91ab2920544e0ac6adb5b89ad47d7412463dacb6bc55e9714","ssdeep":"","tlshash":"288127a2dd1402b24196633236a30b522a51609bde513024b7cd95b44fce69ffeff6bc","size":3953,"data":"","first_seen":"2025-10-08T00:41:41.642606Z","last_seen":"2026-05-17T00:17:36.721784Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0dc21385e47f1170852d5822fe86ff2","sha1":"031162889c5a2b90469a4d70ac59d31fa6e3c7be","sha256":"2ca43dc4a991c162e4067652e9fd17bca8913fa69de2b200470e742a257fd032","sha512":"2c08850ae1948a71ec5dab22d31caa0bd048fb0031acfbaad4860f5ed6c06cfc8754b752a3b888be8c0a01d3f619129f491d34066bfb05c07c33f9b13e469ca4","ssdeep":"","tlshash":"af513839e7b23250d8b7b23b2baf935829918043c50dc9123f4e76b40f1041f3d446d8","size":2978,"data":"","first_seen":"2026-05-10T19:50:54.322388Z","last_seen":"2026-05-17T00:17:36.767586Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/custom/moment.js?ver=1580697220","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e70edb526ff09f426618efade93a4782","sha1":"840b05449d3851118fc835592bd98af885bdbf1f","sha256":"ab513aa4626ba224ac61b747674e6aead965f6e2cf87a2e60c7d4645b519817f","sha512":"943192c03e09b13bbdee324fda4c81d019b4cb5178596b5c548a1e6776022aded289a6076d32d5f55f99316b57b6f7db13c6429edb3a1e6927e7bcea89774cd9","ssdeep":"1536:/cZlnfxbjbJzvdvpeG2iMuz/M6z4QZFSNwmJaxxKZ5dFR79LNOf0uK:/cZlntbEG2i8umYx620uK","tlshash":"cfc3508a69476123467267398f9f4509ff6985330a0e8605bc9d92d83f71c6c43bafec","size":127757,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.419416Z","times_seen":5116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/#","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-07-26T03:19:07.170008Z","times_seen":121748,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"967bbffe8549cafca294bd5e2f3b8870","sha1":"c7948b16e59a0d405ec31e75c75501b15fc7cd5e","sha256":"d9ce1ae361e1278d2d38b62db1c367f4436691da542c06e022c04764abc7fcf8","sha512":"63e3754a4504ff7b19dc608be6826d7fa92eaf0981bd4222cdb3cfd4d425351f2b3e9ca7fd7f912d61d124e975bfce7f29dde8e94e9875dc9ec689354bb6660b","ssdeep":"","tlshash":"a9311297d16c5c5d45cb9670342518a5330ebcb3fa028ae2e23fc76832b3d49c553d6a","size":1678,"data":"","first_seen":"2026-05-10T19:50:54.329415Z","last_seen":"2026-05-26T08:49:02.226454Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"522ea4d432c33785703469328f04743f","sha1":"1d743e6bf6e7196686e805465c0eb05e6d2a2971","sha256":"ec4078652fffcbcd45e39c4db2b7171e9e92d4d82a463dd2092c0649a7e6f642","sha512":"5ced91b7bf335f2b9784a7471e00b0731d3134ec233382b61c9cbc5eb5c95d3ad995e4340b9baef53055b59fd9466bb69996626b71d011e46897b15783369601","ssdeep":"","tlshash":"4d51fd6bfc6304381eb761361bbf838c3071150be905e908382e96d4af36d56656f6f9","size":2880,"data":"","first_seen":"2026-05-10T19:50:54.333236Z","last_seen":"2026-06-08T00:40:31.482421Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/plus/plugin/js/bootstrap.min.js?ver=1598106537","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37045,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-26T20:33:05.437148Z","times_seen":96514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/custom/login.js?ver=1597629260","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24bc8669caf172f2c17a06fcd73ae539","sha1":"3bad8f340bca43d8fb98c3ca39def12f816769a8","sha256":"29df48677fd1c2b2a602c35faeadd3693f083b78550b2c0f3108f356c34b74bd","sha512":"0b4b2dc35f8b97238079334be832751d1e33dfbbddda4961c38127afadcb088101bad71b0442bd810930df2658dfd9f42da0b08d44bb1e1f1dd0a5dde33423a3","ssdeep":"","tlshash":"f3c02240b13f377c587372a0803a0506df73701c1c0056e0b0b842a02c187040813c78","size":191,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.416995Z","times_seen":5059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e87ff8c2f00f9a0af4f4cf7695c33fb","sha1":"f26bf3b10ac9d0c0e0e50584a7f36aaaea438936","sha256":"e8030556f71845d60b46833122dbe96ddd2da17773b87b59eb95db660033b921","sha512":"1ccd0864e93eb4c49966fc89763e593b68c469d543740fdb609446e28a235123f53051a16b6580dcd1a2cccaba8c3531e190fc3e7643c3f503fb81e1070a57ee","ssdeep":"","tlshash":"b031260bcd0a22a3556284701a193268319004e3cf0034453f6e82181f4f20f21f25cf","size":1777,"data":"","first_seen":"2025-10-08T00:41:41.621053Z","last_seen":"2026-05-17T00:17:36.775091Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a1d75eb87b3c339678d5b26be073ee1","sha1":"a6d0fe3038918bb0873cd16277872f96806d8f52","sha256":"fbaf4ced8a3763f4678c2e37ea5415d427df899c7fabbdbf9720af69d01be00e","sha512":"f9fd37db863f8aa2e15d25d6ab54e37cdba37f285d88ac8c779c28fcf0a01dc6daf86e8f2eaca2e5c7f0ead5120b00f860cdbdd93d4c8952f1a0483ec0266c87","ssdeep":"","tlshash":"9c21120ace21217545eba234a6b321a7391150d3cf06b47a3bcdd3026f0d81f20b62ae","size":1362,"data":"","first_seen":"2026-05-10T19:50:54.308038Z","last_seen":"2026-05-17T00:17:36.722567Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/unite/countdown.min.js?ver=1663911607","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9ef714974f58eede8526db005f26b92","sha1":"6fd64709325b5b71c79429b2e5f1cc900108e5a5","sha256":"ef1fd94cfe9cd440eccc5e91db340db22ccdb298a1d4a7a0f1302a36ee8a53d4","sha512":"8af9c072b9b67f0afb4ce40ec4abdc34be452f221f3ba256be122ed34d806d6cda8b32516cd969fe6a071ace8e4e8b60d04e91c3961658a4f2f590c3f3f7246f","ssdeep":"192:7ZMj+vKn7G1N12QKdErjigRQ078bxKl9zru:iK4MN12CfigRnkKltru","tlshash":"73e163cf262215362f32529ea4af11073170ca3064045d1c97ecfa44a9f8ce765beb39","size":7363,"data":"","first_seen":"2025-03-03T20:52:38.658434Z","last_seen":"2026-07-24T14:00:15.294522Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c355612900a81a6b371dcedd1f7f5026","sha1":"01811ab48bb295f28b56d9ccdcc3101e5a46ce8f","sha256":"75e90347612b3792b0191b67bf177bbebf978c351e4a83e86cd044804372d09a","sha512":"30cfdad94fbda4da6a066be16dae2c86a2fb21d8f841375ef3825165b222299d3bce4d8bd7b69e66331c9d724306730a73875c64820b2bace31015916a97ee16","ssdeep":"","tlshash":"9131ab99f39cba26d07e00b44c7f65c5d51e2871e60b1ea5fcfc529211ca356315b190","size":1636,"data":"","first_seen":"2026-05-10T19:50:54.274869Z","last_seen":"2026-05-26T08:49:02.227004Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ece8f17cc97784f5cc6b777e6e8b1526","sha1":"861b11e5d1f41f2acd1ba797492eab4c7958ce27","sha256":"8344cf85067c6fe351a6849e1494520cc58ffa89ec1b23faac8db01edc13b797","sha512":"f6f333b0de5eec15d3f8e6c573658f6f5ccaea8b4e385706bc37718036f6c3c31393343dc1a0b03ea5e4b64a16acf8e8db376fbe09cd3b35a1d6e1cfd21475e1","ssdeep":"","tlshash":"c541ab88fc427a0764fa4075f37ee8df094b00b2c446774bd1c7b888ac39882b2b1188","size":2100,"data":"","first_seen":"2026-05-16T13:55:45.956904Z","last_seen":"2026-05-16T13:55:45.956904Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b54194a543b2804349d760c30bf225","sha1":"3bc5d8926d84444ce327ae7cf1ae0ac7c6327d3d","sha256":"e9793739a197dae41830dad5c3eb1aa412fe1722107aef926fbc60e977f511b4","sha512":"cfeb4f63111886ec37fb6e5c21c38894f0d0e1feb2697209a57bf4c1cff5bf944325e579944482a9a261c21ffb0150f8aeb1a7d4864a6d2e021382069fa52d6a","ssdeep":"","tlshash":"11517bc5fab153a0593b14b66cbf510a6d127407fe0bf52af14c56d05f2841c31b9989","size":2586,"data":"","first_seen":"2026-05-10T19:50:54.286882Z","last_seen":"2026-05-17T00:17:36.753695Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/plus/js/unite/crypto-js.min.js","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf3402d7483b127ded4069d651ea4a22","sha1":"bde186152457cacf9c35477b5bdda5bcb56b1f45","sha256":"eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc","sha512":"9ce42ebc3f672a2aefc4376f43d38ca9ed9d81aa5b3c1eef60032bcc98a1c399be68d71fd1d5f9de6e98c4ce0b800f6ef1ef5e83d417fbffa63eef2408da55d8","ssdeep":"768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe","tlshash":"9c231bc1a19c219152a774d0093f7107b463353a460ed5acf668e9eeecbcaea903dd7c","size":47992,"data":"","first_seen":"2023-03-07T12:04:24Z","last_seen":"2026-07-26T20:56:08.54372Z","times_seen":76986,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/jquery-ui.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","size":253669,"data":"","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-07-26T20:30:11.15268Z","times_seen":22840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/custom/checkinput.js?ver=1598008226","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1701a1c0e116f99b046f95c9f2f4ef5a","sha1":"c0ea303e6c96847ed6bb4c72afd3a84332ab5b3a","sha256":"5a053d48644953a4dbc5f0cb73d4723dd958c9b5574be9cdaac4bccf21d9f38b","sha512":"131b0b96f085bbabf04eac826013f7a62402bfe7e8aa4f6830ac9bdd4d629e4062a687b03a14d6c02d8ea741aea17fe4646da4c054c1954454025fa22f0fd307","ssdeep":"96:ZRORCQC5WCPCD9CQCwCGCkCmCQC+MiCwCdCuuCkCbmCd9P/ddPojcHoujp1SPZaQ:ZRRRvJdlANu91diXdT59j6IQNHYerS","tlshash":"9d62204de0983ea6857333750e7f5200f57906278525eb08be9c59b42fbe80a4b63f5a","size":15360,"data":"","first_seen":"2023-04-15T09:13:23Z","last_seen":"2026-07-25T02:29:56.410916Z","times_seen":5057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/unite/moment-timezone.min.js?ver=1663911607","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88fb4a278aa21a9116c7c91d4091c2dc","sha1":"938a777b5afb85170ecba565280327523844ccff","sha256":"b04505388f10657744e0fb1b3d5bab6232d1f1a3144c11b3693f36447dc27a6b","sha512":"3ebf18fd3c351de2da9b6dde2b269563b9d9ec0eeefcb86a0c42aa1cb4736788c47ccc861f182846411d394fc09cd6bc68771804b9bc8391cc65ddc035541527","ssdeep":"768:9CFCFS8nv9KkkBTShRDCDnievxeIdj2k+I9:TFroMRDCDlJXjTv9","tlshash":"29331d47466e395251a28017fc0eb7c9606ed1114cd95ccb6fbc22a3ca68ef5bb33a17","size":55119,"data":"","first_seen":"2026-05-10T19:50:54.180969Z","last_seen":"2026-07-19T11:09:23.451125Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"25ab23e747358bda78641295b4f7f74c","sha1":"8ddde4bdd9e0918616924c654cc042ae244a2c75","sha256":"9b46ed7fa05b0b814e025edf5f3e531166bb7647af97ae0407956431c0bbfe42","sha512":"5c87e901410811d0ad706aaf0bbc02d193e89c4428aa3f5ff0db7948217e704beda8159c229077c9299f96332a6090819d71ba70d061c7d9e792291d594bc0d9","ssdeep":"192:6NeTmZW8XQcTtEtjKRzfQhFxhBizH4A1ltpKS8:0rWMGj0TQhLhBGplt0S8","tlshash":"dc12ff05ea1a49924492937938d71d27229cc187ce41301e7fec4ab92f9f42fb8f765e","size":9222,"data":"","first_seen":"2026-05-10T19:50:54.318365Z","last_seen":"2026-05-17T00:17:36.762529Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8c497ee1c085fb3126ecef1966f49f8","sha1":"140d9d612f0c38891e85c557d894e5c2ec40a573","sha256":"0cb293ba8d4052fe2d3be2a2f0d884015342c0b296f52eaa22896db37600079b","sha512":"b6447d970d1057d8c4c5234be80a541c374e0009db08a60e6eca86e724283a8a4d39a6bbfa6e6a79fd3ab3568ca2ee44cfc068997eb2f4eb738ee8743a8b56b3","ssdeep":"","tlshash":"00415ecec1ba2876068fb4361ddf2814995361f7ca8829253f4c81212fd521d8dc776a","size":2035,"data":"","first_seen":"2026-05-10T19:50:54.279795Z","last_seen":"2026-05-17T00:17:36.736114Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/assets/js/caller.js?ver=1675418258","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e7441dc033395b76a96b25b6efef0f0","sha1":"c833e33f4a95efa559a847dfff036cb904260b48","sha256":"80caabbe50f5f83254e2545d01bacf299c7f417a103e912bd41d6c330a6e4f86","sha512":"e96041ac2b7106fe9aceddc1faa3e996ffaa97945d56cff7b3ca0697492cf6ff53f6fc3826319a85eb360e684a166c0c8c075118a37655312dfbf231ff9aa167","ssdeep":"96:veR5suijTWxKhgCBTSCkAjnhefPMm03OMu9eqeeV0vMu9eqeeVqgYi:veR5su+TWsU1eO70v76i","tlshash":"dc914212de042051f76332b85a55661f6131684f7f8a888dbcbc747f9b70acb857d189","size":4386,"data":"","first_seen":"2023-03-13T18:11:33Z","last_seen":"2026-07-25T02:29:56.41883Z","times_seen":5054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a1adbe00fd9abec116a8f673318c53b","sha1":"eb65da0bd7321568afd73e92b2800057255e8c02","sha256":"89b2c6d94d92f2ab51ae31f1f434d2ea8ccfcbe293010f94813c7e06396b4b1c","sha512":"b1c3c82bb39153077c20f489c4349aa23c63761ea12c6876bf32d64e7e9288c490e593feee915282a9da6de32907a96ecdb8ca47d7843b95dadd7dce5762cc53","ssdeep":"","tlshash":"84419246d3e56137a52aad384caee1169a318003dc3f3c74b9c09a54df5e62c90feae1","size":2201,"data":"","first_seen":"2026-05-10T19:50:54.267747Z","last_seen":"2026-05-17T00:17:36.745502Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae7d374b1e271b4c385e49806aa0d983","sha1":"c67ec1002e5199bf1e654bab74f56e015da15700","sha256":"8d3ca0fa890bab01f080a3491ac0b07b2669a2edfc575e0847584e3c41e53072","sha512":"10d06b21806278496368c3d12bcd2a62106effb6aa5d8272e951d52eda7af620a0c389e4a86c072747a0e09795f4b7ef11e522c5e39517e18c8a9d143dc0f009","ssdeep":"","tlshash":"ab31c21bec5b54a03757043913fbc44cb1a2994fe069c405b48de8514f54e860d2eb9c","size":1473,"data":"","first_seen":"2026-05-10T19:50:54.30043Z","last_seen":"2026-05-26T08:49:02.239384Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ad6abec04bc6dbd1ce53f164e311de2","sha1":"3ad7ba18194c80950a04409c26a45d7cb7423689","sha256":"6c7ea960a44a991bf87dfddfc2f2b3f89ef7d6b9d85df85beafea4aeca26b0cc","sha512":"60772a298619a4e073f7a68347597e39c22046da4d987066e59e49dab8104604ae1784208bb2e15bb9fa511f933c941dad6d6440c4980c3882f1283be63f826f","ssdeep":"","tlshash":"af31c2a8ea707120508641361ad3895e391072b7ce213218378cab2b5f5a86f73bb58d","size":1508,"data":"","first_seen":"2026-05-10T19:50:54.289951Z","last_seen":"2026-05-17T00:17:36.769493Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"14cac33790c351d73e11c90b17eff0b8","sha1":"f6c85183f6ba41bdb4d112a06fb808a4aa779dee","sha256":"6010eda02263769b9ab8c3305dd027f37e5dd543214962e94a25e1669575327b","sha512":"960b2639d7a2c3c0313ede862d45066f55d6dac7c307d7cd1da78a9dc4234d8bc96fcb5077f2b80de0963138afb325c5c4ebebf15b5f840fab299e080807023c","ssdeep":"","tlshash":"b021123ae042104406a7e0bd888a285120800c03cf482a08b3cc92958fad3cf32f3ace","size":1393,"data":"","first_seen":"2026-05-10T19:50:54.282866Z","last_seen":"2026-05-17T00:17:36.76132Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a1253e3602e99df903628889bdca9ab","sha1":"77ef1abe3041749c0fdca244f4dc06efe8ee6b88","sha256":"9369f7bd2d19bd2f4400608610061fd735f70405a5ce49924c9c473fe3e13268","sha512":"2d1cf06763ed8c20935448479cd83374fdecb330ff17302e5795c0b0197079baca080e63d3fdb3dd18e52d77b3f153a712efc0cd80376121f00e33d0891fd346","ssdeep":"","tlshash":"b6412846e20740914cc267f828760747292004a7cf46f41ebbad16a87f4f86fa4b5a7e","size":2364,"data":"","first_seen":"2026-05-10T19:50:54.269195Z","last_seen":"2026-05-17T00:17:36.765838Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/unite/encforms.js?ver=1761119296","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2d77387c0dedc78ae85a7ab52aad886","sha1":"0d8ee19645e8246409f76adee4412ecef3466b76","sha256":"2af6b51b39ceab86129d473a1fb9a4a827539efc7452de2103a84ebd09d75790","sha512":"d922ced4a418ef9049cebadaf49f897432449ad051ece1361014ca9c64514f9eb53f6d77d6e83551ed2939d0eab9d518f0c048e12aef3e167ef3d1d517dbe3ca","ssdeep":"192:gxlzcp1ISvp1S/yakFAn1hQu66H1Ka1t4l/O3a6Nr:zb6cu6IQM","tlshash":"9f32209871bb1870993338344bbf8512793ac11f4c5cd954bdac2aa07f58a5ec6e1bb4","size":11858,"data":"","first_seen":"2025-10-22T08:39:12.013749Z","last_seen":"2026-07-25T02:29:56.445614Z","times_seen":1506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b649cd5a027c23e136c614688b4ef77d","sha1":"a4d9c0f24915acc1d59f81e764c2d004eb9f233d","sha256":"cc44b5363889f217f58c23a02dfd42f43749e1377fc9028710623952112ec665","sha512":"dc0851cf8cc4aec9fe3b13261febb14d6f0c63e9a62194098446f39739ec5bc4f40a92c504599c567530dbe005e3853e181f933a47e4a267dc1046d666a45f2a","ssdeep":"","tlshash":"5a41cd15d6b646042937707054ff56d43f16e423eb018915315cd5c05f68e35d93d55d","size":2073,"data":"","first_seen":"2026-05-10T19:50:54.273549Z","last_seen":"2026-05-17T00:17:36.76859Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/custom/moment-timezone.js?ver=1580697220","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc45c47c99fe4d26b2b24e46cec399ad","sha1":"221067a4147ece74b03934528ad61bcd4026e477","sha256":"4a65c2af68e89944c3da128c9b329596d930ce09dc9b8ba726b640d812e1fd88","sha512":"1658e474170022d40e698a422f024b4872bff33c78af1dbe98df3a6a99a0f1cd1eb36725ac9fca7bc1264ea491d0a19a2ee0a3a952adba4aba3242c06f830f93","ssdeep":"3072:olpkvlaDD/DCD/DCD2iqWCPrMBq1rGPuAZDDD1DDWoST+piMhrlon5Blu4hK:CkbW0sNpiMx","tlshash":"f714b0292617bb44e459c08bfa3779c0caade18a940614d25f7d57b31fa37e2de68c03","size":196335,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.393971Z","times_seen":5062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/#","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"91b598dc0f511717825ee43e6be5fc91","sha1":"68380e4d2f650fb8d49c453a983a618e2e9def20","sha256":"fffede79fc6f24514fe176039e97ca6e5f9e3bd67a80c8b678b9599c3c756f3b","sha512":"7d007e2247d9d00cada5971e0070209cf44dd2781f377680d9578dcb99e6d280978294de249e661bc368cdf69620159bb99ce4920c9e2b970dfdc5831554ed5f","ssdeep":"","tlshash":"cfe07dcd67d186c935c32c941162a54cb1b81e6234d04c39e800140318e7ea71fc25df","size":327,"data":"","first_seen":"2026-05-16T13:55:45.988262Z","last_seen":"2026-05-16T13:55:45.988262Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/unite/jsencrypt.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64507221feddff84c80b99c98827d76c","sha1":"5c7000638c6bae1a1c448367822a8682d59d371f","sha256":"5a0be406a1bdf94a25a9d142d4124e3dccbdeb5593cd78fb0bd234df89dd7389","sha512":"cc3beba9e9c0d1e149642c41b2bcb351972f8a1bcd9445dbb5e32feb6c91c5d851e2cecad5a6b3f8b8ec4727e4e8cf9824bc80244baeaae20023c23c1a02c2f0","ssdeep":"1536:cJxLSEwwmr2yZPp8yQPj6OR1fdfqovoRonm7f6T:cPErPp8yQPOOR1fdfqg2l7f6T","tlshash":"cb43e9853ae6b075039a50f0051f084ab13ab92e192f44ecf699d8e17cb584d637ffb9","size":56142,"data":"","first_seen":"2023-03-07T13:16:24Z","last_seen":"2026-07-26T21:15:50.821988Z","times_seen":20198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffaff64e9e596644f5290483120a0d13","sha1":"f3b4b56d68e7be07310c876c070e1aca0bae7144","sha256":"c03c06630220cb820ef1b916a6661688329f55d5b63e877982144e9336de50f2","sha512":"c81bc5a30226fa9d22bb06f8773fec13bba64795ab2830a6de9b04640ddf060ca8816f67690e5907857eef22b8e90b898ed7603299776f8001c4af51aab71327","ssdeep":"","tlshash":"a531c2a8ea717120508641721ad3495eb914b2a7ce2130183b8cab272f5d86f77bb18e","size":1484,"data":"","first_seen":"2026-05-10T19:50:54.278306Z","last_seen":"2026-05-17T00:17:36.728369Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/celebrate/js/empile.js?ver=1637918556","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a627d30c6bc0b10626ab5b2519dcc805","sha1":"4bb4096e0dd58fe05ba82f669b79d1e077f05f59","sha256":"a898bdd55d53b67bc241422495a7ea5b582be655409622c80dc992e7207e8f2d","sha512":"5264cd1c9a2e8526c666d1eafd03560e434522a35405daa6f3d05c098a10e43582cd1591453977cf33abc152be7821820b596c8e6095802da6f24b217a4c18f7","ssdeep":"768:gwl5p4zyOuB6fYoR34RXOlaKW//Qqsxlz:Ll5pXOuB6D1/","tlshash":"cdc2435d65a230a189b373f98f6e840aeb75522b4105c2643dfcc5982f74c1853eaefd","size":26674,"data":"","first_seen":"2024-12-20T12:48:50.32179Z","last_seen":"2026-07-19T11:09:23.465499Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/jquery-migrate.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","size":7199,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-07-26T21:08:48.404922Z","times_seen":24744,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/swiper.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8be4ec964b15c656c05a17f822762b3","sha1":"1afabbf1eeecc4d7ddfbb4c824696ce1aadc8d0f","sha256":"e32b2b578b1345c05be32292da9016f7ff564bb3f4aeda3c1b6b76869648fcbd","sha512":"0abfe93e1dab3db289b0efe0f92e42f6ff14cc4e550b5bca8d4a84fe736245fb70b39e5b86bd9aea620e6fd73a76ce8aaed9d3a561c6208dc9108778dba141b9","ssdeep":"3072:2hUcC5HqffYIdcMZOGHgZsUOUIBdID8CX:y45HqXYIdcMZOGHAsUOUIBdID8I","tlshash":"7ab3094eb35071a551e36257525e8241a3b72409780ad0ac35b6d8ebacbde4c13bfefc","size":114405,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.434546Z","times_seen":5157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e88cb66a6114ffd9372efa76d34e3d2","sha1":"4f15be75a86ee993a705be10525dce9c2c25f876","sha256":"6fe8aca11d4c0537a43fc231fde0bbddd4e30176fb6c835c2c9ac6f229a5588e","sha512":"0347799132ae0066e940caada5f978bb701af696b689fc3e66fa6a71ee4ecc020145c83684360d74912e32e1016e5e44b886a52aed03c53e5d06589a3f9ef9bd","ssdeep":"","tlshash":"4b51821af4db86280473367b97bb62461d36154fda8ece08be6c0fe08f2a2565192708","size":2686,"data":"","first_seen":"2026-05-10T19:50:54.270658Z","last_seen":"2026-05-17T00:17:36.7526Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/#","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-07-26T03:19:07.170008Z","times_seen":121748,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/custom/main.js?ver=1598008226","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a579f2e4d3b31b3ea017e7b03a475dd","sha1":"8d9a6430face051ae1365d421f15c60cff36613c","sha256":"ca0d1288490dab47eb98606d7e519b4be96e1d5f354b8cf4a6ef39dd1846c41c","sha512":"e5c65863509fb786d1a2ac8a1c0e0ec1446158037079a067eb6976040a0d912e326c2254e7968a7e22ae794d3adad6b9bfccbd2a4eb35dad622676d3a989d742","ssdeep":"","tlshash":"1941cc1df9f665c208b730164f3f451c2163a81f6a09ce40395c65c09fa267ed2dbeba","size":1933,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.408998Z","times_seen":5056,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6d43c5fe1d1bee0a45566e7bea3be05","sha1":"f8c90dab56928b7a8e140d52fad83fe1761525cb","sha256":"d48383148a70c4f979c8675602c2130819c1f207e6f90b085e1f36f47d9b7548","sha512":"fa4b01c67c3af95ea8e8de9e6a0ebbc003602322e1d4e6ad650534fca03378c12c5e5edf466d57b01b38068e871195cd4dc271bf7b70462b8f5adf4eddd88d06","ssdeep":"","tlshash":"b131ed8cc526001420091339b88938022a455e8bde98342e339e1e7e2feb80e4ae369e","size":1849,"data":"","first_seen":"2025-10-08T00:41:41.710586Z","last_seen":"2026-05-17T00:17:36.771247Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"91b08ac281e5bee4f14b10abfc250734","sha1":"34542be34c83990d5925947065ecd410c937a9e6","sha256":"9c2118377fac4fb69d4897e420b11ca0db549399857e91db68777899a603e760","sha512":"5cbe0e107d064ce996f4246792c9f378da0de14bc4c2e4587b04fb5b41fa8d19a9ade86f9d33e92c86fd4232a0a05e97aa22f819da168d9dc73de18997f34562","ssdeep":"3072:kqBoWOow3yp3NLzTfZLh4CkeTzlecRtAfPChW4O8smQfd:kGrWotX18eTzMcr8r4OgQfd","tlshash":"a9d31244f2cdf81d93544207726d281ae8f2c4547c4c8ab937b9b7e75916e30eea6ce8","size":135723,"data":"","first_seen":"2026-05-16T13:55:45.992685Z","last_seen":"2026-05-16T13:55:45.992685Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/jquery-ui.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","size":253669,"data":"","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-07-26T20:30:11.15268Z","times_seen":22840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"949f97263f3c35a1ed4e539a4687bfae","sha1":"520b48ed63cd6112cdd11183e69984e9759a9d9b","sha256":"ebe4fa41fb7b7c43f9e6750e8721278b92a4e0298ac4dfbc141eb67c5a30c89b","sha512":"fcda00045e8588e1479f6da778aeabe8c984bd43c2dfd593860cb81be81a6bdb79a522634ded97f9029414d21e265c28b781e069bdd25559a0dc18c200553dd0","ssdeep":"","tlshash":"b841e59ff0f9022106f774324e7b5104392650abe447ab0036cc56406f68a2f8ae9e9a","size":2075,"data":"","first_seen":"2026-05-10T19:50:54.298126Z","last_seen":"2026-05-17T00:17:36.771776Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b78776271549ad47be83360338a7581","sha1":"45193be73e067e2b69d279ef27fac6367d3e55b8","sha256":"51e25ff2a0936e48ff2a65d395a13807409fef995ca225f6d3b3f7e98e5998c4","sha512":"80636cb20e08edbf00fc57d80fc213dc89f8e58033f48bc6760ac603e51805c88997761f958b971b344756b87a99efa44e5dc6f7b0b7cfd451569a08cd6409db","ssdeep":"48:888hfqDG9Mmk2xp+phzOgOOfDPU2olo9M1CSl525R2yfuB2yfBb:886dxuwL69WCMMUyf3yZ","tlshash":"8ea1bd29e9a76554812370768fef5008b138a503cc28ad687f4c92532fea46d92fdb6c","size":5027,"data":"","first_seen":"2026-05-10T19:50:54.272021Z","last_seen":"2026-05-17T00:17:36.759488Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?13d000e86c487ab21ddde56b764037d6","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.183.79","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbb7bcb469e06fb14e6458b041555b5e","sha1":"149bde8f010c1c8eef4eec3f73f255d3ec0ebf76","sha256":"a5748e173110e330b88d26861ec977b2f81050327fae6ec80e0a080e973f75ec","sha512":"5596598508ff2a59b50f9a9e15caa04b5025d9bdc272cc13dd39f165b225fc7f499a78003e5db7f3a4fe86e4278f5d31484a4a2f7b6e2c846d4c295804da458f","ssdeep":"384:1bJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:1b4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"4ad2c9a9b282713293a324a5153f324af07b5a54bd4968a4f11894c07d38fbb027bfdd","size":29903,"data":"","first_seen":"2026-05-16T13:55:45.8201Z","last_seen":"2026-05-16T13:55:45.8201Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/unite/moment.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"928f93d12cf250ca4e0139c38fdf7f33","sha1":"e4b6c150b229c0f12b355fc2fb10460010e4ece5","sha256":"fa1d88b3f7e313ca24d861dbbf0b0c7b4c8e2bfef04f3443ae98bb7aa426e0d5","sha512":"4f2f423a0f9522515d3bbb719cbbea6263e4a7ecbbbab5f47b71a2f71d73acdf80667fa63fe1ce516e5d8844ea03e9ea604d4311a240fbcccadf4bfed30da890","ssdeep":"1536:IOpSD1Cb6yVBXfW1vCUUdQQTj06HPU3qQFSNF1T7GbF/nlzUIKnCIioTYnv2BcY:IOpSDJucXUdQQSu1T7GbF/nlz3ga2Bp","tlshash":"00e31b4a69e760224623b2794fef5405aa38c517150ede097c8da3d4af81c7847fafec","size":150962,"data":"","first_seen":"2023-03-29T23:01:19Z","last_seen":"2026-07-26T14:48:45.50749Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"a725280fdc645d5c310da149d20f7f0c","sha1":"d90a9fa5a7f9869554c695136b52c99089260389","sha256":"db8fdcaa704755c0fa93c33e4d8394d539a74c45090e7211286795ea5a1ea8bd","sha512":"8e01b425e52e47af6b3cd9cffd58edb6604dc73155131c0625759751bb7b06cad0d5b5ce08c5f0d65d52b7829ef43f714f367c0dbb01878bd7b2a87707205af7","ssdeep":"384:hiANOUYPJ3N2+Nh6ItMNBP3XMwtrPDs+XjadFluhx2jSEWJqFs6:hiANOUYPJ3N2+NhKvDsuijSEWJgn","tlshash":"6e23639058fb14674573e0e22bb52b1bae95f553e50acb0436fc5fc88fd7d86a4230a8","size":45605,"data":"","first_seen":"2026-05-16T13:55:45.998242Z","last_seen":"2026-05-16T13:55:45.998242Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"http","addr":"www.bet73019.com/member/call-request?check=1","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:26.813Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /member/call-request?check=1 HTTP/1.1\r\nHost: www.bet73019.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkgrYTF6Nk1Hd29VZHNLNUd2U25xNlE9PSIsInZhbHVlIjoiMGYzSXlEUnh5WXcrYnB0bW5Wb3ZkaFFNUFlZOFZDS0ZPbjJ6a29HaE13aWNBQlRZeDBKTVdXRyttRFljYnBNWmVNU2hjN3ZCc1pEV3NsMGR3NEJLZFE9PSIsIm1hYyI6IjdhNGM0MDE3N2MwMGRlMzYwMWYyZTgwMDI2ZjE0NzdmMTc3NTlkMzNhNjk0YzlkZDMwN2VmOGI1ZmRhYmNkMjUifQ%3D%3D; vanguard_session=eyJpdiI6IjZQUUtYbHNRTXZoQ2kxbnc5WWFJWFE9PSIsInZhbHVlIjoiZ2lYT0NCWVUzXC9YYzhXeG0yeDlONG40NU5oZnZPcmtOY3U0eDdicTBoV2RZZ3hoVkg1UUE1cVNiSEViNElMeWM4NThYVjJYNWY2dlFrWVhmNG15OUV3PT0iLCJtYWMiOiI4MGMwOTY2M2Q3OGJiYjIzNjgyZGFiNWI2Mzk0ZWE1ZDI5NDIxNWYwNmE1MTFhYjk3ODNhZWQwNDk0NmZkYTA4In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:27 GMT\r\nContent-Type: application/json\r\nContent-Length: 40\r\nConnection: keep-alive\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nCache-Control: no-cache, private\r\nSet-Cookie: vanguard_session=eyJpdiI6InNHMlplYlFjOG9QT2lwaVJmblZaVEE9PSIsInZhbHVlIjoiT09xVlwvUUJrMDBKbVp1bklXbjlLUENYbDVvUklJdkFFNGVsSDNiQnBYV1NMTDFETUVlS1llZVZBRDFLVWVJWnVLM3R1WVVpaXg4U2FvOEMwYlVpUWxRPT0iLCJtYWMiOiI4ZWFiMDI3YjY4ZDg2NDAwYTNjZTA2MTEyMzhkZDE3NzEzYTQ0MWJjNTkxMDg5YzU0YTFkN2MzYjYzYmUwNWY4In0%3D; expires=Sat, 16-May-2026 15:55:27 GMT; Max-Age=7200; path=/; httponly\r\nX-Cache: BYPASS\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"27a5688b27ae3688ca0183ce926be3c8","sha1":"fa4dec3b6af6674afd7b14710cac41b15ae75b29","sha256":"4359a477fc8cc8212517f5a190d4aa0a7cd1c85509d56d2a6a8efef408420ad7","sha512":"d73bb567a0b0280d42dda28c8e97725e96529072bd78d0844786e008d9ce3f89c7c3399eea85342be65d7b440d6023094b9f2f5d624e7dde0a46fbfb1484bc85","ssdeep":"","tlshash":"e19004cc7747575c040c40c54d44004453744d005c500c04445c11c534401570750401","first_seen":"2023-04-15T09:13:24Z","last_seen":"2026-07-25T02:29:56.41029Z","times_seen":4894,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"www.bet73019.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/celebrate/js/empile.js?ver=1637918556","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.009Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/celebrate/js/empile.js?ver=1637918556 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:23 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LolEOy1RD6dLKKno%2FjenMIphjWsoGRRg%2BuLtsRg1PvWWacwd%2FmCXETQ9gbytKno46eLrXSVtNMmdr1wcQn6P2MwPyN550wO%2B8Y%2BDlbyIal7b0H6mYG9N51xtjux7FCRL5VNpQkY%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Fri, 26 Nov 2021 09:22:36 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"61a0a75c-684a\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae137aae256a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26698,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a627d30c6bc0b10626ab5b2519dcc805","sha1":"4bb4096e0dd58fe05ba82f669b79d1e077f05f59","sha256":"a898bdd55d53b67bc241422495a7ea5b582be655409622c80dc992e7207e8f2d","sha512":"5264cd1c9a2e8526c666d1eafd03560e434522a35405daa6f3d05c098a10e43582cd1591453977cf33abc152be7821820b596c8e6095802da6f24b217a4c18f7","ssdeep":"768:gwl5p4zyOuB6fYoR34RXOlaKW//Qqsxlz:Ll5pXOuB6D1/","tlshash":"cdc2435d65a230a189b373f98f6e840aeb75522b4105c2643dfcc5982f74c1853eaefd","first_seen":"2024-12-20T12:48:50.32179Z","last_seen":"2026-07-19T11:09:23.465499Z","times_seen":97,"resource_available":true,"data":null}},"time_used":2136,"timings":{"blocked":1455,"dns":0,"connect":0,"send":0,"wait":454,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/unite/moment-countdown.min.js?ver=1663911607","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.013Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/js/unite/moment-countdown.min.js?ver=1663911607 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:24 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWcDHJU%2FLTLk8CWNisCS7wmm5PiOT6u6rXLT0Y3%2Bi0uw%2FX%2FU9f4DuGxEp6Ng1Tc2xjHTXcQf57HdWcxH7epDQDvgw71o4H8lGccQ3HuKxqiSzhgwttKsfiaBBhTRjAEIM4tx0uI%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Fri, 23 Sep 2022 05:40:07 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"632d46b7-1d4\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae13a5d9d56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (468), with no line terminators","md5":"0b855d61646fe5669c4dcbe0e9a9e4e3","sha1":"4673ccf3cf63a4b851618f6d298e865b01892654","sha256":"96abc335fe64b7dc248c1ebfcb5ca7f29f2a207c83f368c560426ead6f502aea","sha512":"4b4ece357cecba2d7ba1bed9cbc85180451ff64149ecf88f75dc85d41e244c9242ea0521e7069fac98787b04291d737fff0e31d7e3f0f7a64e80a94b565639d0","ssdeep":"","tlshash":"32f05cfc23f234a27dd96054369b9b8e18e7cb2188c48404e4d306fc1a7af0a1127d31","first_seen":"2025-05-06T13:23:13.662834Z","last_seen":"2026-07-19T11:09:23.439194Z","times_seen":29,"resource_available":true,"data":null}},"time_used":2336,"timings":{"blocked":1884,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/swiper.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.029Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/plugin/js/swiper.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:24 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BrIVSfOrv3lEd1Hj2jCxgC57iO4E9NwXeurtqMRBetBQU4ejMJRvwzFaEt%2FVcozDs6Z91eVyeQ12aOEIAL6I0W4R5MSZs2TnT3QUMDFBO3HsFdfJWdWrF%2FezhKzpVrNWlU9wzY8%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"5f412ba9-1bee5\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae13d386c56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114405,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65271)","md5":"b8be4ec964b15c656c05a17f822762b3","sha1":"1afabbf1eeecc4d7ddfbb4c824696ce1aadc8d0f","sha256":"e32b2b578b1345c05be32292da9016f7ff564bb3f4aeda3c1b6b76869648fcbd","sha512":"0abfe93e1dab3db289b0efe0f92e42f6ff14cc4e550b5bca8d4a84fe736245fb70b39e5b86bd9aea620e6fd73a76ce8aaed9d3a561c6208dc9108778dba141b9","ssdeep":"3072:2hUcC5HqffYIdcMZOGHgZsUOUIBdID8CX:y45HqXYIdcMZOGHAsUOUIBdID8I","tlshash":"7ab3094eb35071a551e36257525e8241a3b72409780ad0ac35b6d8ebacbde4c13bfefc","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.434546Z","times_seen":5157,"resource_available":true,"data":null}},"time_used":3483,"timings":{"blocked":2320,"dns":0,"connect":0,"send":0,"wait":487,"receive":676,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/css/unite/login_modal_unite.css?ver=1738950076?v=1778939720","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.969Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/css/unite/login_modal_unite.css?ver=1738950076?v=1778939720 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:23 GMT\r\nContent-Type: text/css\r\nContent-Length: 2001\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nCteonnt-Length: 6984\r\nEtag: \"67a645bc-1b48\"\r\nLast-Modified: Fri, 07 Feb 2025 17:41:16 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5P%2Fahc8hrxOTnYW6ZQEkbb0z0oZncAcQOKlUrrdi39e5KjMaaXJr%2Fxz64M%2Fwain4DWNfJst79f%2BbGoid8BwdsT%2FdQqkffNnzdCbWdky36iEkeYNPFFpPS8h9e1cPgiRhuQg5gUI%3D\"}]}\r\nCF-RAY: 9fcae1347f1156a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6984,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"252c2fa58e6d682ca2b18b0888ebf910","sha1":"511ef6db164e0c745e67941cdb2043aef965dd0e","sha256":"5bca12ef0f6bfba5c12cbdd0eaeeb1d48e05c91149df7743b76b80480317306a","sha512":"1aa311c2f06a767d9eeec9c384f806d2b19977bda91af36a6aff9443896e677a3e488974b64c0e7c3e6a07cf77c834e6d115a8388b5938f065c5cbeff224c7d7","ssdeep":"192:4ybbQhWJZ4JWpC/+FtCmSCgIUaTgIaxl+F5Dm9qE:tFYd4F5Dm9qE","tlshash":"9de11e0576bf0a63a06e860935ea9b80630f9217c615ef7f7df132448fcd6689139f64","first_seen":"2025-04-11T10:47:55.703801Z","last_seen":"2026-07-25T02:29:56.411523Z","times_seen":4310,"resource_available":false,"data":null}},"time_used":1455,"timings":{"blocked":984,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/CAN.png?v3","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.004Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/CAN.png?v3 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 159789\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69e19c78-2702d\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:10 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xQXS1g9g35sj%2F2xiZ23glLmi7xlJOPte33ST0u7ktrJleUIFIqGZL0cjFTIBeoTqLqsEI3pV1LE0Zn1XDId0o0B%2Fe9PmE0GVVJ3cnm1ve5Ts4Rn75fhoZFOfZzLPP%2F6EubyC7l8%3D\"}]}\r\nCF-RAY: 9fcae14f28410883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159789,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 341 x 447, 8-bit/color RGBA, non-interlaced","md5":"10c30a7f30bb8e86cfef942dcdfdd7a2","sha1":"a379c2fd0138360c8b69ff5bc73a5f6e26079d1b","sha256":"cab02fd5033ff75bad4ceee7f02480f082f32f45229489e0a546a84cfda3d208","sha512":"098a7d2c5bd333147f05b9de61dbf25bb0e926e580c326857bec572d7492ab2271ad71726585564cba0d801e3970dc1b52a4fd215e6419b40a8fe3dae1880b15","ssdeep":"3072:ez6Om0cB7+Q+KMoPpGU6RWoCslJwZDgV3LKKwelhjC5F6kaNj:y6OdcQ5oPpGUeWoCs8DQvlhjK8jNj","tlshash":"6df31247f748e8f7843afc6225c312d097a3bbc849b8d8257724b86d64b60b5eca153d","first_seen":"2026-05-10T19:50:54.198368Z","last_seen":"2026-07-19T11:09:23.495249Z","times_seen":22,"resource_available":false,"data":null}},"time_used":6200,"timings":{"blocked":5221,"dns":0,"connect":0,"send":0,"wait":249,"receive":730,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/promotion/images/uploads/47.webp?ver=1774419897","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.008Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /promotion/images/uploads/47.webp?ver=1774419897 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:27 GMT\r\nContent-Type: image/webp\r\nContent-Length: 21706\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69c37fb9-54ca\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Wed, 25 Mar 2026 06:24:57 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dPVltuKayx3wGms0K2Et%2BOh3h1V6XXyUGIzSEfFpAxLaTcWIe5moDbuNJ4k%2Bk40IqOB%2BLgBrJXtjaCZ1%2FDxCHG%2FTgKobom0WGubapshya6bRm8arK%2FIW3m1m1sPX7eNy3pcSwkA%3D\"}]}\r\nCF-RAY: 9fcae14f89530883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21706,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1003x133, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a8035caf84648bec43b50e6a3998be5f","sha1":"8d1463e88e5b18a5baacf8e785f1f98e12b0ca67","sha256":"f20f03b392b085ce671caf7600e193a57c7009363de8f81c3d707984a1869003","sha512":"bab240a206f90dcc63b54757831d5ac55eb0e563bb7ff0ab70a3105ec3a586d2cff5aa16daa54e00d163da43983f7f454ccad72ea25c594c355f25322b4d0e67","ssdeep":"384:M/fcSiDijG9+36E34CeoEeDx/oJvMArseyb/tijs4+1a5YeV9y2pToc:M3Kj+36EoC6I/eRsxy+iYey2pTf","tlshash":"d5a2d0fc4b985a421f7d3f63fecd0085ccc42aeb75c9b2bda51446552a7b1a10139b2a","first_seen":"2026-05-10T19:50:54.172783Z","last_seen":"2026-06-23T18:27:49.695782Z","times_seen":16,"resource_available":false,"data":null}},"time_used":5967,"timings":{"blocked":5275,"dns":0,"connect":0,"send":0,"wait":476,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/custom/checkinput.js?ver=1598008226","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.028Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/js/custom/checkinput.js?ver=1598008226 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:24 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oz%2BeHajHFbQ4TXRN5Ch%2BCwdaGWp0t4bAlz2MJ%2BBE59eRr10ob1QW1nKNffpMJXF%2BkTcSEs5exQ2bgXroAZE07U6q5i098Vmf5Lq2fKjAHysbwlex9UvPa9An3QRmtkhYSiWYB9I%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Fri, 21 Aug 2020 11:10:26 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"5f3faba2-3c14\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae13bff4956a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15380,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"1701a1c0e116f99b046f95c9f2f4ef5a","sha1":"c0ea303e6c96847ed6bb4c72afd3a84332ab5b3a","sha256":"5a053d48644953a4dbc5f0cb73d4723dd958c9b5574be9cdaac4bccf21d9f38b","sha512":"131b0b96f085bbabf04eac826013f7a62402bfe7e8aa4f6830ac9bdd4d629e4062a687b03a14d6c02d8ea741aea17fe4646da4c054c1954454025fa22f0fd307","ssdeep":"96:ZRORCQC5WCPCD9CQCwCGCkCmCQC+MiCwCdCuuCkCbmCd9P/ddPojcHoujp1SPZaQ:ZRRRvJdlANu91diXdT59j6IQNHYerS","tlshash":"9d62204de0983ea6857333750e7f5200f57906278525eb08be9c59b42fbe80a4b63f5a","first_seen":"2023-04-15T09:13:23Z","last_seen":"2026-07-25T02:29:56.410916Z","times_seen":5057,"resource_available":true,"data":null}},"time_used":2587,"timings":{"blocked":2130,"dns":0,"connect":0,"send":0,"wait":241,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/custom/login_custom.js?ver=1598008226","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.037Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/js/custom/login_custom.js?ver=1598008226 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:26 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nEtag: \"5f3faba2-0\"\r\nLast-Modified: Fri, 21 Aug 2020 11:10:26 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61C6Jfn8B2Q%2FjlhUlHi%2B1kYhbiq6LVXXdhDm6RbVcS4DRBOOZ8pvq13U6wtDfZrUmU%2FTVDz7fM8gzcJkVIYTleC0pn2C3ZJDFkr6yFx5vP1czcFZXwN59zn9oPoisM2kcfc9Rmk%3D\"}]}\r\nCF-RAY: 9fcae1447fcf56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":3990,"timings":{"blocked":3476,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/csrf","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:26.789Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /csrf HTTP/1.1\r\nHost: www.bet73019.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkgrYTF6Nk1Hd29VZHNLNUd2U25xNlE9PSIsInZhbHVlIjoiMGYzSXlEUnh5WXcrYnB0bW5Wb3ZkaFFNUFlZOFZDS0ZPbjJ6a29HaE13aWNBQlRZeDBKTVdXRyttRFljYnBNWmVNU2hjN3ZCc1pEV3NsMGR3NEJLZFE9PSIsIm1hYyI6IjdhNGM0MDE3N2MwMGRlMzYwMWYyZTgwMDI2ZjE0NzdmMTc3NTlkMzNhNjk0YzlkZDMwN2VmOGI1ZmRhYmNkMjUifQ%3D%3D; vanguard_session=eyJpdiI6IjZQUUtYbHNRTXZoQ2kxbnc5WWFJWFE9PSIsInZhbHVlIjoiZ2lYT0NCWVUzXC9YYzhXeG0yeDlONG40NU5oZnZPcmtOY3U0eDdicTBoV2RZZ3hoVkg1UUE1cVNiSEViNElMeWM4NThYVjJYNWY2dlFrWVhmNG15OUV3PT0iLCJtYWMiOiI4MGMwOTY2M2Q3OGJiYjIzNjgyZGFiNWI2Mzk0ZWE1ZDI5NDIxNWYwNmE1MTFhYjk3ODNhZWQwNDk0NmZkYTA4In0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:27 GMT\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 60\r\nConnection: keep-alive\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nCache-Control: no-cache, private\r\nContent-Encoding: gzip\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6ImdPNnk0RnlMaTBjYnlRUTdKUUNnUFE9PSIsInZhbHVlIjoiaU9mU2hzZFNuWmJMbjUyRkxreHd0YlZDNERMbDVDWm9sdStLOWhcL2psTnRtTTBzXC8wVENDWWw4TjlNR3laeDN2bng5WE84WE9uUkQwNEROU3lDbERIdz09IiwibWFjIjoiNGNhMmY3NWJmYWU3MTY1OTMzNGU2YzA4NWZmMTk3NTA4MmViZjU0OTY1NDkzNzlhYWVmNzZhZGMwYTYwYTZmMiJ9; expires=Sat, 16-May-2026 15:55:27 GMT; Max-Age=7200; path=/\nvanguard_session=eyJpdiI6ImllNTc3XC94RUprUGV3WDc4Ymg3SjNBPT0iLCJ2YWx1ZSI6ImNMdmhiMjh5XC9sNHhHMWZESk44cUtwbVJRSmloVjJLZGJDcWlUeTRPU2lCRmxDbzZKQm5JNklLeThEbFwvOTAyZ0J4Y1dKOWpYc1VpUk9OU3Zkanl2cEE9PSIsIm1hYyI6ImI4Y2E2ZTI1YjEyN2FmMzAyNDA3MzFlMWMyYzA0ZDg4MzkwMmQ2ZGZlODE5NmQwMDQ0YmNiYWNlMDEyYzRkZWQifQ%3D%3D; expires=Sat, 16-May-2026 15:55:27 GMT; Max-Age=7200; path=/; httponly\r\nX-Bos: b83\r\nX-Cache: BYPASS\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"2355711cda65e466da56ac6bf6149224","sha1":"ad922855bb2b4cb48628a436ea16cf8d16ab2106","sha256":"90696fe2a2bedb8752d5f27a9d77637b6996369a1b9a781d92b956bc2dc8869d","sha512":"66c7c83fdaf596b9ef9275790738bdb08878c04cf5bc4a56647bf4ca993b37a87419600269446122544986ccd9c2a8560f17a94868d88ad280111706c94a7139","ssdeep":"","tlshash":"2f9004dc75101543d70343540c7c00d74054031113d3d544c154407f01c11f54c33000","first_seen":"2026-05-16T13:55:45.779692Z","last_seen":"2026-05-16T13:55:45.779692Z","times_seen":1,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"www.bet73019.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/css/images/ui-icons_777777_256x240.png","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:29.625Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/plugin/css/images/ui-icons_777777_256x240.png HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://3f38sfb.qdhyxt.com/plus/plugin/css/jquery-ui.min.css?ver=1598106537\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:30 GMT\r\nContent-Type: image/png\r\nContent-Length: 7013\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"685ba9af-1b65\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Wed, 25 Jun 2025 07:47:59 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VQ32%2FdCKBPE1oZ2TU1ZnYPb7ozwI9lLF775bjBmx%2FRE5CS6Y8XE0A2MqALGGIAmGvhilyERYw4X%2BLH18ssXknByeu1cuUYCAM7AcdCHt%2BsZKxG%2B75V9YO%2FP99kXkZ1dd4GSGu3I%3D\"}]}\r\nCF-RAY: 9fcae15e2ea00883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7013,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"40bf25799e4fec8079c7775083de09df","sha1":"4fc6b1449c73f5d10489c104225ebe326a4016ba","sha256":"e75b27211e16fcf94715168001bb7055ca376d46f928110ba3d0825232452e5a","sha512":"51c9e46224098e9270bf51bec93e0528b5e726a632a1de57863fba531d914a9db1d3fb07d22cef756f6fc9e999bf08043e73bca6225a9ab7efffe2904105c388","ssdeep":"192:92XiIsTugcTnouLuIXdj7Z7rgmlWRI1ie+BVtNzDby:AmOTnwCnZftW61ie+BV3Xby","tlshash":"5de19fc1e5f8c4e0dd58e668ee886209c7a658b9064742dbcf0485694b48d3186fab8f","first_seen":"2023-07-20T10:40:17Z","last_seen":"2026-07-25T02:29:56.397384Z","times_seen":1482,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/css/unite/login_unite.css?ver=1614680239","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.972Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/css/unite/login_unite.css?ver=1614680239 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:23 GMT\r\nContent-Type: text/css\r\nContent-Length: 155\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nCteonnt-Length: 170\r\nEtag: \"603e10af-aa\"\r\nLast-Modified: Tue, 02 Mar 2021 10:17:19 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jo4NS6EfpJxHg4xq6oNXL1rYIDyambgkrSpfGFIQOUcjyWZLg62Rk11vwNf9mebGDjPTHLTDdQ35LQkAGD23i6QmeIXBNmg6lkfurI%2FTGrbdkqtmSYN49jB76lvKE75rZUx30P4%3D\"}]}\r\nCF-RAY: 9fcae134aaaa0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"5aa3dbf621e04d73e3a023b18dd141bd","sha1":"f35345fc401964592d37688e641b86f9eb3931be","sha256":"dcde9ab25bde6d1827a49457a7ef72e7e177ef141a188e074e23a9136ca2ef66","sha512":"1bdbd3e8c6e1dcd6e4381ac29ad636f9218a8ec0a972ee77c1ed1a4805d7d4bad8d776de93ca554d7f116e9a1f01873d6f1c048ed348873b78b5d3d285e5273f","ssdeep":"","tlshash":"d3c080530c954f57d50786957c9e87029b7e60209e548f1f1c341878da85f2461fd575","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T02:29:56.424448Z","times_seen":5045,"resource_available":false,"data":null}},"time_used":1507,"timings":{"blocked":1008,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/26fifa_logo.webp?ver=1776393336","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.000Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/26fifa_logo.webp?ver=1776393336 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:27 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2114\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69e19c78-842\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:08 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2FFS1sGmJOhD1RVULGgD%2FxOJvsxZ7ebF3%2FO51o5y0Rz4qChAN20Gkg7kQaJxOK83hwVL5ajyJ4An%2ByT5gJhq4HHw%2FzhOCUA2awsBq1w9CvtPuTVNDyQdJhcorr8wkLLlzm4ea%2BU%3D\"}]}\r\nCF-RAY: 9fcae14efa6d56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2114,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a08bfd51ca8a86b59e0c98048f2f9368","sha1":"df447b2230d7b2ad6c292aa97e7a1095c13fb892","sha256":"03f8465a48fb1369eb2170fa96e8b530feba529f97107daefc650d7036369615","sha512":"09460734222e53f6806177440162a27acd4f87a545ae442b14795eefc95b28164410ea8ef8ab11fa68bf12eac2b886736dc742d501dba2fed28304e7f1d5b85c","ssdeep":"","tlshash":"e4411962aeaed2098cc618dceb28b340222f32bdc434475555e307c612346db3f0aea5","first_seen":"2026-05-10T19:50:54.179265Z","last_seen":"2026-07-19T11:09:23.487456Z","times_seen":22,"resource_available":false,"data":null}},"time_used":5681,"timings":{"blocked":5187,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/index/en/NCDBC_210x204.webp?ver=1774419758","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.019Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/index/en/NCDBC_210x204.webp?ver=1774419758 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:27 GMT\r\nContent-Type: image/webp\r\nContent-Length: 7056\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69c37f2e-1b90\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:11 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yoJ7plrTtin%2B3o4NEQk1fkoMRZtuZGSJ553OjhA%2FeARuekCCfRO0dAl37rHpnFuqNhawao5IBTFhFXX5xcRHTFarDCeboONWvy7pCblZO4TOfc0xAXKxr%2FaqR%2BpvEHn1C71D69w%3D\"}]}\r\nCF-RAY: 9fcae1521dfe56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7056,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df77a0f52f18d5fca5aabb4cb764e8e3","sha1":"68b39f88910b1aed54e3b50c61359b7d16763359","sha256":"e3dfb41b01553ad283faa82fb64f730d00b5c20b1dfe08e8a49501f755ef818d","sha512":"9ca1678006eb1999de6784460085988fb6106f1b2359707891c95555fb40daa179ca4e0974ef91574c9322aca441d39bd6fcbe3d0c08ec02ef8b6c3484f6641b","ssdeep":"192:sd0WserTBdvjxO7JgGjvbZxyykRI96kn+Lp46:s+QXbxONVZxyySI9Jn+Lp3","tlshash":"ece18e156f12dc000e05fb45abf0b84b35174ac87dc1b1779ceaee6196711eae2468db","first_seen":"2026-04-08T10:41:45.195408Z","last_seen":"2026-07-25T02:29:56.438241Z","times_seen":28,"resource_available":false,"data":null}},"time_used":5927,"timings":{"blocked":5680,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/footer/footer-gt.webp?ver=1774419640","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.025Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/footer/footer-gt.webp?ver=1774419640 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:28 GMT\r\nContent-Type: image/webp\r\nContent-Length: 310\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69c37eb8-136\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Wed, 25 Mar 2026 06:20:40 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GXxf4vhTz1JLqHcYviAc9sFmQhEO9FrSag%2Fp6e%2Fs1gULQ003TUZMNkVMMaGpbPAgmfnoDJ5eNuAVnLSUE1ZEskiDFCe0b4s1LXwlMzNBiCV6f69YHJB7Q3h8L%2FeMYuwKgJIx1%2FM%3D\"}]}\r\nCF-RAY: 9fcae156cf880883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"465584f73773f68d0760b29326b4a2b0","sha1":"5182e2ebe58a6932035a7644cca38abee29401bd","sha256":"06f674025a749f04231965b74b634acc85d4f835beb52917649a75a46ff88161","sha512":"ea4d5e4ab9f94fb3a6abb06be670a9540eb1653fd9c235853403498a2a016fec1f43d4151e0547c7587887ee9aa24750eb19d56e4b24e0425d3458a475ef379f","ssdeep":"","tlshash":"07e07d51c2520901efee6cb9631a95e155c782875957882774f105a411a84565141b78","first_seen":"2026-04-08T10:41:45.200711Z","last_seen":"2026-07-25T02:29:56.417622Z","times_seen":59,"resource_available":false,"data":null}},"time_used":6681,"timings":{"blocked":6419,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images/dc_hot.webp?ver=1774419635","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:26.178Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/dc_hot.webp?ver=1774419635 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:28 GMT\r\nContent-Type: image/webp\r\nContent-Length: 674\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69c37eb3-2a2\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:10 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cnUg08zF1OVw%2FW0MmFbAluGjiqf1qNpaei0zz%2BRZhTyEtIbawfu70%2FMWAdNttcdGl4hAVt2lEoywkCJwEdFKO7f%2B53lcGxRBebE44UjyOK3k%2F6DIilU74niwpOLe%2B249lQc%2FP8A%3D\"}]}\r\nCF-RAY: 9fcae1569ee60883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":674,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7f143808eb48da2ca609b6473964da18","sha1":"b6266777f586c4abd64eda24e7f9102e989d3bcb","sha256":"8233e08afe9d267e86ae889b9a47a6414a4a2147ce5a598712b73196642764f5","sha512":"6791b4348002af2134166997d7296ba2ccc10c879d73b1fb64d3b75bd5f27e511671917d4c9d7f94a4455a99c6f89c4797b03cb7004c2cf283524c6cdfbf55ce","ssdeep":"","tlshash":"7a01835ec280b4abdb215af2c09e92c9a27330a206f40709417c34ae956788be2b014d","first_seen":"2026-04-08T10:41:45.158164Z","last_seen":"2026-07-25T02:29:56.409645Z","times_seen":59,"resource_available":false,"data":null}},"time_used":2457,"timings":{"blocked":2231,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/css/swiper.min.css?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.938Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/plugin/css/swiper.min.css?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:22 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nEtag: W/\"5f412ba9-4bef\"\r\nLast-Modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RE4HwH6IHn%2BVrj2W4FVTDmv522vjkbk096gnjvJfcxphQe22CMWP6GWXQEe%2BZeoPEDna2Ejr1uwjJoJlsARHSCELsURJApzCuwHSNqj3HHHjMLBm62DtgjLPXQWI0m51JWUESew%3D\"}]}\r\nCF-RAY: 9fcae12e28280883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19439,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19174)","md5":"319f20c8f06461463f24bfc703551a18","sha1":"f3bc53e03aefc4ee3be3adbcc707f7ed4c1c65a0","sha256":"67b6584af0fff14908d8f05c0eb9d59cb809da113feffd197f3ddb38a779ea45","sha512":"56439e25a232e6f80b79505aa867b341628cdc5818be22d4d83b7dac66d314a3d91f3eb4dcaa6240795c1a5f990322082c2e85e89a9fce6721cacf828cbe2c4a","ssdeep":"192:YxaNv/lSSyJWCj8zfi5o/uDN3eBxwdJ5c:Yxa1/lS0CYfi5o/uOGJ5c","tlshash":"8a92602c17003057e6334f1a87d99778c724c9939e4358ef6250ee48c7bb96a32af766","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T23:37:15.507864Z","times_seen":5223,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":4,"dns":32,"connect":1,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/css/common/index.css?ver=1685095467","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.949Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/css/common/index.css?ver=1685095467 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 2379\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nCteonnt-Length: 8159\r\nEtag: \"6470842b-1fdf\"\r\nLast-Modified: Fri, 26 May 2023 10:04:27 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AmmUuYq2DFCNXBsbwfS3SyOFCr76MNWLVRr1FEpte4nHnk8OdKT%2FZRew81ABK8FS5bKUNPSmD4ojwhqlz4%2FP9opEARWlLUjvIrVzLzq0OHT%2BX%2BFSBXk076JxcWOLjzaznhDyuHs%3D\"}]}\r\nCF-RAY: 9fcae12e28290883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8159,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"c572b5475cafa52665867ea34e941107","sha1":"9e84cb39ea5b4edd820afc675516b2da0afde1c4","sha256":"22fb660621cf5492145daf4e4c4dcf5671f19105dda41b1df6f5cc695dd906c4","sha512":"732b6a9c3c052a23b2a1030083111dd12c96a143df6db6c492c00f8860a69c3a6db12fb34883c0d5019dece30352ed53266e37d9fb0f0cdc0ab89b0807882a5a","ssdeep":"192:ucR93quipoSiBFT8mra9WJpCbYZbatUxT9k+OL/wskJY:Xp1ipRWFNa9WqYBdjY","tlshash":"81f111ba5bf71d42771281e5ab6eab504329e003910ee62c7fe0725c8fc629489773c9","first_seen":"2023-07-20T05:21:01Z","last_seen":"2026-07-25T02:29:56.40838Z","times_seen":1011,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":36,"connect":1,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/promotion/images/uploads/73.webp?ver=1774419897","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.008Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /promotion/images/uploads/73.webp?ver=1774419897 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:27 GMT\r\nContent-Type: image/webp\r\nContent-Length: 20190\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69c37fb9-4ede\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Wed, 25 Mar 2026 06:24:57 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p6x71sXcxni73WzxlEYa4A0urKsUr4aFUgZeaGj0H6Sf3D0tXyDPAZ6NWexfy%2BErUJmteIMIioMEXnIFPzSn89B4CbO%2ByOjOBKfbzK1SXRapbwHXwQrNr7ul6CFOMg%2BdztAy12w%3D\"}]}\r\nCF-RAY: 9fcae1506b8d0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 736x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bf41c1b6982ed20fbed27c8aa97ce769","sha1":"9f22f1eae6a1b2cac0e69b4d0baaf9a649fc2a56","sha256":"ffc1f1256705217ab2bc82c68adfddf1974909e6194eddb1eb1878053c0f8514","sha512":"f1b50ce02199c77b2a95ce1c0b8d66cb1495e64d4a00eb05f63aa7bb1af1e82970de948481b92ff4f47959316815aea89d321ead1df554b201078a645fa1e9b3","ssdeep":"384:FHq/zcbZMBtF/P8QrG3f/i4f+2RVXNEtq7QzQsj7I/aDsLPVqaKgsbP:FHoGZMBtN8mG3f/i4fz48T67ISwLPVqf","tlshash":"a092e1836d4a5717a2d5299337e0f7914045ec7b87bcad3cca919dc54f370c8eeaa212","first_seen":"2026-05-10T19:50:54.152837Z","last_seen":"2026-06-23T18:27:49.680325Z","times_seen":16,"resource_available":false,"data":null}},"time_used":5880,"timings":{"blocked":5415,"dns":0,"connect":0,"send":0,"wait":244,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/gdcode_1778939720","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.015Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /gdcode_1778939720 HTTP/1.1\r\nHost: www.bet73019.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZ0ZVwvVE5pQXVOSXYxblBtS3c5ZmFRPT0iLCJ2YWx1ZSI6IlBid0ZVSlJnbU5lN09ZcEI5WjFzdndHelVYWGFidmxNQmpwUGREclRZcTVneGRPT1d6ZmszR2FcL1lkU0lPQkxWaUZQNlFcL0tyQlo3YWJNSlwvNHpSXC9lZz09IiwibWFjIjoiZDdhOTRjYmU2YTdmNWM4ZjQ0NDI2Y2Y1OGFlM2VkZmM5MmNiNmU4YmI3MWJkMGUxMzkzM2NlNDQ3N2ViYWEwMCJ9; vanguard_session=eyJpdiI6IllHK1hZUXV6XC95bmY1SXpRZktYXC8wdz09IiwidmFsdWUiOiJIVTlXemtMNkVQODRjZHZUNTF0T1wvbmVieE9lejhsMGNpVWZlRkZRK1R1N0piTUFGMWFHN1VmVVdHSCs4Nlh6ZjgwN2xUXC8rdVEwRDY3eGk2VUdmeVBnPT0iLCJtYWMiOiI3ZGU2NjQwNDUxODk0NTZiYWMxM2E0NjgwMmVkYTUxYzYwM2QxMmNiZDg0ZDc2MDIzNTRlMjFlNjA3Njg3ZWZhIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1141\r\nConnection: keep-alive\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nCache-Control: max-age=315360000\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nPragma: no-cache\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6IkgrYTF6Nk1Hd29VZHNLNUd2U25xNlE9PSIsInZhbHVlIjoiMGYzSXlEUnh5WXcrYnB0bW5Wb3ZkaFFNUFlZOFZDS0ZPbjJ6a29HaE13aWNBQlRZeDBKTVdXRyttRFljYnBNWmVNU2hjN3ZCc1pEV3NsMGR3NEJLZFE9PSIsIm1hYyI6IjdhNGM0MDE3N2MwMGRlMzYwMWYyZTgwMDI2ZjE0NzdmMTc3NTlkMzNhNjk0YzlkZDMwN2VmOGI1ZmRhYmNkMjUifQ%3D%3D; expires=Sat, 16-May-2026 15:55:26 GMT; Max-Age=7200; path=/\nvanguard_session=eyJpdiI6IjZQUUtYbHNRTXZoQ2kxbnc5WWFJWFE9PSIsInZhbHVlIjoiZ2lYT0NCWVUzXC9YYzhXeG0yeDlONG40NU5oZnZPcmtOY3U0eDdicTBoV2RZZ3hoVkg1UUE1cVNiSEViNElMeWM4NThYVjJYNWY2dlFrWVhmNG15OUV3PT0iLCJtYWMiOiI4MGMwOTY2M2Q3OGJiYjIzNjgyZGFiNWI2Mzk0ZWE1ZDI5NDIxNWYwNmE1MTFhYjk3ODNhZWQwNDk0NmZkYTA4In0%3D; expires=Sat, 16-May-2026 15:55:26 GMT; Max-Age=7200; path=/; httponly\r\nX-Bos: b83\r\nX-Cache: BYPASS\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1141,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 56x23, components 3","md5":"4eff2066ed852108a11487a0597626d0","sha1":"d523d99d7393ce25523c25a218b5493da369d14e","sha256":"a4b5da63c01054ed0dd4e5d45d70149feedbcd79d02cbdb0bdec9fb017a91024","sha512":"aea118d33fc91138b613106f63deab94c3bbde4b61fb5e26f76b60eef84b247c4a2dded2fa93bd1dad94c55fc176ed08c3f947cadf1c5c8a5061f3e59e9aa4a5","ssdeep":"","tlshash":"712186265b5b8b654f11c97ad5583476a18e1d017f61333c17f143a6cb61cf8445471e","first_seen":"2026-05-16T13:55:45.791075Z","last_seen":"2026-05-16T13:55:45.791075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4506,"timings":{"blocked":4045,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"www.bet73019.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/css/jquery-ui.min.css?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.930Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/plugin/css/jquery-ui.min.css?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:22 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nEtag: W/\"5f412ba9-7d4c\"\r\nLast-Modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqCGMhX2p4vo71pM2zuBn0BsuRqm%2F6COcyyoWKSvbc0AljDll3Q80WNKQ5Iz99IU11YRXir1W05tGWeuhuRj1yO49o8QdvaaKcfwDU28TrDyf6VUA4iamkGbEugt5%2B%2BdSp2c2l0%3D\"}]}\r\nCF-RAY: 9fcae12e28d056a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32076,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29137)","md5":"0b5729a931d113be34b6fac13bcf5b29","sha1":"88ba90d2d2944315afd28a706ee5715ed980c634","sha256":"ac1c8f94750b39b12327a5d0c56fdf946dabfb6d91e5d2a202879ff9a5d67e29","sha512":"68e1b473a9cf3731a4fb9ce3c3225aa1152009d3ab7d20e198c203daee3e388b25af41a3a4b2a8ed79b4028df19a93384fc026228b9192ac23d67add56c2ca11","ssdeep":"384:pCwiEt7lcR8lOXHc11evBMzymUh+4C6G/zDcSc7nfZBhVi:slEtiXHcEBMznURC6G/zD8BhA","tlshash":"ade25330a5c2242dfe33c23060e11ef4523bc146eda65fbda09af65953ea8e4c47b971","first_seen":"2023-03-10T04:06:13Z","last_seen":"2026-07-26T18:33:12.014597Z","times_seen":11836,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":11,"dns":25,"connect":1,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/plus/plugin/css/to_bootstrap.css?ver=1598106537","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.945Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/plugin/css/to_bootstrap.css?ver=1598106537 HTTP/1.1\r\nHost: www.bet73019.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZ0ZVwvVE5pQXVOSXYxblBtS3c5ZmFRPT0iLCJ2YWx1ZSI6IlBid0ZVSlJnbU5lN09ZcEI5WjFzdndHelVYWGFidmxNQmpwUGREclRZcTVneGRPT1d6ZmszR2FcL1lkU0lPQkxWaUZQNlFcL0tyQlo3YWJNSlwvNHpSXC9lZz09IiwibWFjIjoiZDdhOTRjYmU2YTdmNWM4ZjQ0NDI2Y2Y1OGFlM2VkZmM5MmNiNmU4YmI3MWJkMGUxMzkzM2NlNDQ3N2ViYWEwMCJ9; vanguard_session=eyJpdiI6IllHK1hZUXV6XC95bmY1SXpRZktYXC8wdz09IiwidmFsdWUiOiJIVTlXemtMNkVQODRjZHZUNTF0T1wvbmVieE9lejhsMGNpVWZlRkZRK1R1N0piTUFGMWFHN1VmVVdHSCs4Nlh6ZjgwN2xUXC8rdVEwRDY3eGk2VUdmeVBnPT0iLCJtYWMiOiI3ZGU2NjQwNDUxODk0NTZiYWMxM2E0NjgwMmVkYTUxYzYwM2QxMmNiZDg0ZDc2MDIzNTRlMjFlNjA3Njg3ZWZhIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:22 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nContent-Encoding: gzip\r\nEtag: W/\"5f412ba9-2dc4a\"\r\nLast-Modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nX-Bos: b83\r\nX-Cache: UPDATING\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":187466,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (386), with CRLF line terminators","md5":"8778d79f7633526cee2d636c518d9d76","sha1":"b2e715b1c401220e8165353c60d1e3b3815cdb60","sha256":"de3c1a93b240cc733fec329f2272d3b640ffa5bb736ee5df966745c20aa71d32","sha512":"13eebee14a8f011114e3352939d8f0440dcfa3a28f3f0737126b661d669914ae97534f029fab80fa9d0bfa376ec68b86b86e2fc18b5aa844fd7b8cbe397e7eb8","ssdeep":"3072:v4rq/Ei8U6V3/k1UqQGQr79YiVk/UOiCYdf4Q4t1v1S38pWLgdXyLSJeFR+PfmgM:v4rq/Ei8U6V3/k1UqQGQr79YiVk/UOiP","tlshash":"a604a9989b003bc2a231867c736f4d01bf8881a195ea4d3db75f33785e679e66133e85","first_seen":"2023-04-15T09:13:24Z","last_seen":"2026-07-25T02:29:56.432795Z","times_seen":5038,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"www.bet73019.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/css/custom/login_modal_custom.css?ver=1726650059?v=1778939720","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.971Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/css/custom/login_modal_custom.css?ver=1726650059?v=1778939720 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:23 GMT\r\nContent-Type: text/css\r\nContent-Length: 772\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nCteonnt-Length: 2491\r\nEtag: \"66ea96cb-9bb\"\r\nLast-Modified: Wed, 18 Sep 2024 09:00:59 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SDS0EcbJCD8ldduHTm7cBQAC6tX9ucqGXcmYr14Forjr%2BJvsVWHJc9aU1hId7aAZW37oVgRx0ggrtcs8OiJqJuYAmH1yeYbCgZRIYD584Hq1fQG9M6IGqvTVuD2LyMka7Po%2BG5M%3D\"}]}\r\nCF-RAY: 9fcae1347f1656a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2491,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"1c9324c073c8d8db7f32df740feceace","sha1":"5465a38fe6f669c4df9a2265a654c0815bb7373a","sha256":"79ecbd9aa7b6311f29cda59980feac8ac8263131b8089580f60f4ad6188f86ce","sha512":"2dd2e0b5645e119bcb2357c489d55fc76cedb95e19750489a32bb0974cfc1e974db62c06ee1f3b738114c3310776c73f59ad69149348a1701ea87d21efe3544d","ssdeep":"","tlshash":"215147026ebf2e93908c406d35de4e84225d400bc569ee2e3ff723648f5a6a6a177f04","first_seen":"2024-09-19T13:36:38Z","last_seen":"2026-07-25T02:29:56.441048Z","times_seen":2982,"resource_available":false,"data":null}},"time_used":1493,"timings":{"blocked":984,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/MEX.png?v3","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.006Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/MEX.png?v3 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 120611\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69e19c78-1d723\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Fri, 17 Apr 2026 02:35:36 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9QH%2Ftotb5QUdXFZ7OiXLroexpR%2FUwzPnTQdQjNKJukOqG0oTf9zJPcaV4L24NXFQcocE223fNsDwf%2BM%2F9FDOO3kQE%2FjTYhpk1B06IoTpdkE1sGdyoDlfyxZEB%2BnnAR39TBVgbQI%3D\"}]}\r\nCF-RAY: 9fcae147eb440883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 344, 8-bit/color RGBA, non-interlaced","md5":"b39c83c0b13e78a8d1bfe5d162437c43","sha1":"49e2752062651f4f1db6a077da83e5b73dae09d2","sha256":"cc9b26dfe958aaeb3f9771bb962774200de3ddd79cbcdca0087045f52e9dafc3","sha512":"624c343c8ded3fd4130622611c4fbf493fba47df4cfe378c7825c045061378ec3480532b0ed47af91b03bbba6d20cba16bb646174fc3a3cb430f0268c6308815","ssdeep":"3072:V34qYajzitFa6i0eJ6+/HsbIPLeWYi9GdhPZHZ8B4GmD48F:VoqYaXCZi0eJ6+/HQ8Le+9GU+GC48F","tlshash":"7ec30247b8c550d97b84e83206037df08bb166c8d0ba9d8fa399476d0ded66ff9424e8","first_seen":"2026-05-10T19:50:54.257646Z","last_seen":"2026-07-19T11:09:23.448293Z","times_seen":22,"resource_available":false,"data":null}},"time_used":5168,"timings":{"blocked":4054,"dns":0,"connect":0,"send":0,"wait":468,"receive":646,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/unite/moment.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.012Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/js/unite/moment.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:24 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrPy7v7GxtN%2F1f3fPL4zkVEbwWinbxDKl1VCRgeI%2Bqap3KTxuSDE86vBWdtC%2FwXTDwS%2FIKSWnoGnioqbSPuzJ1rxnHBBr7UbF0I6%2BY0nauRDA%2FQPF0ZN60CGVbeUS8kv458uF9c%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"5f412ba9-24db2\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae138be390883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150962,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"928f93d12cf250ca4e0139c38fdf7f33","sha1":"e4b6c150b229c0f12b355fc2fb10460010e4ece5","sha256":"fa1d88b3f7e313ca24d861dbbf0b0c7b4c8e2bfef04f3443ae98bb7aa426e0d5","sha512":"4f2f423a0f9522515d3bbb719cbbea6263e4a7ecbbbab5f47b71a2f71d73acdf80667fa63fe1ce516e5d8844ea03e9ea604d4311a240fbcccadf4bfed30da890","ssdeep":"1536:IOpSD1Cb6yVBXfW1vCUUdQQTj06HPU3qQFSNF1T7GbF/nlzUIKnCIioTYnv2BcY:IOpSDJucXUdQQSu1T7GbF/nlz3ga2Bp","tlshash":"00e31b4a69e760224623b2794fef5405aa38c517150ede097c8da3d4af81c7847fafec","first_seen":"2023-03-29T23:01:19Z","last_seen":"2026-07-26T14:48:45.50749Z","times_seen":92,"resource_available":true,"data":null}},"time_used":2841,"timings":{"blocked":1624,"dns":0,"connect":0,"send":0,"wait":498,"receive":719,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/jquery-ui.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.017Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/plugin/js/jquery-ui.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:24 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WB6Zz13nK7u60IMZ80Sj6MT%2Fo6SA5noPoy1csxNjPs3YPeoHuTHE0tzJZ4D1pcNbtcimipq6GfDK%2B3FsliLZOYM2JlgeWAJlBupReEjLmjyBl%2FJIH8xfIai%2B7iaOrzZWM49S5SE%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Sat, 16 May 2026 13:54:10 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"5f412ba9-3dee5\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae13bef3856a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253669,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32074)","md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-07-26T20:30:11.15268Z","times_seen":22840,"resource_available":true,"data":null}},"time_used":3542,"timings":{"blocked":2129,"dns":0,"connect":0,"send":0,"wait":481,"receive":932,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/index/sec-nav-bg-grad.gif","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:26.256Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/index/sec-nav-bg-grad.gif HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://3f38sfb.qdhyxt.com/plus/css/common/index.css?ver=1685095467\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:27 GMT\r\nContent-Type: image/gif\r\nContent-Length: 376\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"5f3faae1-178\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 12:47:04 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C6JJVa0WKOd4zogh0bDv9lfFgPB2mgGzNPbwbT0RLscSoFPpY7ynD2mB0%2FpR9MAGfq23G8%2FLN3XTcMknVlom11QWw1xeJsaUI2zqNO8Ju8tvJ%2FlCgdPFszzCnt%2FUy6z5t2U8o7U%3D\"}]}\r\nCF-RAY: 9fcae14c2f2856a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 594","md5":"355b2cb853d78ae262c093065eaa6e70","sha1":"3e8d2a456204e635cfe5bd959cff47faf63023fc","sha256":"cd58d657e3d79583a5722257d8770e3b5f620f1d58e392f1d9460cc89ac485fa","sha512":"0700f78d8d439d90ed2eba294bccc07451cec67b8bf518c13a8221cccf223a31c9e620f193874149ac818a39a90efbaa8748607600b01c7c0f89f89b18521042","ssdeep":"","tlshash":"04e02d731aa377b0de08ec39abcb30ba280d243eb20ab1c0300c74da85c1832fd088c0","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-07-25T02:29:56.443482Z","times_seen":4786,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":485,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/css/font-awesome.min.css?ver=1753257975","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.920Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/plugin/css/font-awesome.min.css?ver=1753257975 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:22 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nEtag: W/\"688097f7-71b3\"\r\nLast-Modified: Wed, 23 Jul 2025 08:06:15 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A9HBtg%2BIQTzyuMyFK7Ydb%2F3khGd2wovTATZV7iJj6qvyz6jShmoejVxJuJYkAf1hjyFPXJb3FPilwFsXufvQbmAk7KAjSILkndgKMlsuk9M%2FvDe6Xg%2FLT%2BKdEc1%2Fp2tSt%2BlVHyc%3D\"}]}\r\nCF-RAY: 9fcae12e28cc56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29107,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28900)","md5":"31bacfe1d010712cb3837aec4ec1e237","sha1":"3c28b0f6e91fa137ab67c8370f11f60a63d87d02","sha256":"4f0bbfaec56962e62f55bef603cc25d0f56cabce57471131b21f4e9438066baa","sha512":"29c73d08840e5e21c677748c0aa88ee7900968602af5cbb5c6f6bf801c765b64562f4401a49f041aad7e229461be70db9a5a74317bbff479724547013a0d19cc","ssdeep":"384:Qu5yWeTUKW+KlkJ5de2UYDyVfwYUas8l8yQ/8dwwdG:blr+Klk3Yi+fwYUf8l8yQ/eC","tlshash":"73d250e8e54c01d66731c48bff81b36862baf73dd5844d99f01f690c29d22a522c5fba","first_seen":"2025-07-24T08:18:25.967403Z","last_seen":"2026-07-25T02:29:56.401828Z","times_seen":2884,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":21,"dns":43,"connect":1,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/css/unite/float_unite.css?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.962Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/css/unite/float_unite.css?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 272\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nCteonnt-Length: 725\r\nEtag: \"5f412ba9-2d5\"\r\nLast-Modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8JMNPurOyLGkzTT41%2FW%2FMjIJ6R3xRcum1lw5EfpCCUpGzWjpJ%2FbUQKr2FFAuDTVHojZJpV3DMS9Vhv4yxfx5Z2LBp6nyEEgPtRRwMvhGdCLSH0BMZbZsfXlqx3XolvNm4nUs5xQ%3D\"}]}\r\nCF-RAY: 9fcae1319c0e56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":725,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"077a2c1ebe25590b50eae8ce89787e0c","sha1":"499751737e286bbc93a46a1d2d4aaa3e2163d336","sha256":"093a799f9422754f7e53dfcc8516d3753616de283a14553f37d58b3822fd1b3a","sha512":"390f32fe8e81d9a379c14e0552c198d5f83e650f085b1df623c45cfc1aa4076d2e220ef02a4ef6747c0cd597eeecc510a67933c26190cdc306b28ffc861c366a","ssdeep":"","tlshash":"080147d307230b40fc1ea3196fde835e142a00cb9c9ecc08366827689f4b62c9662ff4","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T02:29:56.445126Z","times_seen":5043,"resource_available":false,"data":null}},"time_used":992,"timings":{"blocked":531,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/css/font-awesome.min.css?ver=1753257975?v=1778939720","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.965Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/plugin/css/font-awesome.min.css?ver=1753257975?v=1778939720 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:23 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nEtag: W/\"688097f7-71b3\"\r\nLast-Modified: Wed, 23 Jul 2025 08:06:15 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FFDXmT8otsQ4cwLUreKOW2xcwD3IDrGu1Y0pUkbVd8ij%2FXH4%2FgrqSx7MSxZKqw%2B2AClqX%2FoVh0Gedg6bz2%2FB1yOVdkMhL6UqUQzEjVmmNtpuBBbBHhzB0%2B%2BaRrgOgJwLNB68G30%3D\"}]}\r\nCF-RAY: 9fcae1346a0e0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29107,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28900)","md5":"31bacfe1d010712cb3837aec4ec1e237","sha1":"3c28b0f6e91fa137ab67c8370f11f60a63d87d02","sha256":"4f0bbfaec56962e62f55bef603cc25d0f56cabce57471131b21f4e9438066baa","sha512":"29c73d08840e5e21c677748c0aa88ee7900968602af5cbb5c6f6bf801c765b64562f4401a49f041aad7e229461be70db9a5a74317bbff479724547013a0d19cc","ssdeep":"384:Qu5yWeTUKW+KlkJ5de2UYDyVfwYUas8l8yQ/8dwwdG:blr+Klk3Yi+fwYUf8l8yQ/eC","tlshash":"73d250e8e54c01d66731c48bff81b36862baf73dd5844d99f01f690c29d22a522c5fba","first_seen":"2025-07-24T08:18:25.967403Z","last_seen":"2026-07-25T02:29:56.401828Z","times_seen":2884,"resource_available":false,"data":null}},"time_used":1492,"timings":{"blocked":975,"dns":0,"connect":0,"send":0,"wait":516,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/index/g03.webp?ver=1774419758","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.022Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/index/g03.webp?ver=1774419758 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:28 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3860\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69c37f2e-f14\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 12:12:14 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYMdkF%2Bxzw7dE3kN0dfZhaFioryg9s%2BtIt%2FHboviWI3NN62PjASiYg06AAFFxr%2BGDsYV%2FtHjSrzq%2BdFAeYZJVdtaFpXuQ2F4qgXOZwCxdMa1YJzq%2FEBms07lol9PE44%2Bn7W9X7s%3D\"}]}\r\nCF-RAY: 9fcae154c8a556a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3860,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 269x79, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4169243fc5abab616bf10494558721bd","sha1":"239bf2d9328448cdaf414a064b0fb68ab045acc7","sha256":"269dfbd483dfb41a39a7e851ffcc896350243b14ee62c8596551aa5e14972a34","sha512":"edb899cf13a56f4ac140bc7a5cd3099ee34f4e5c8a53f555cd0b5f48a80e8f8502f72ce47bfe15129f8052caef73c0d3adcf408316110e15b123fc7d77e5adcc","ssdeep":"","tlshash":"ea816c8037a5fe444b74a413f3dee390dba0ae2208674a29d17904e03550e7abc1eb3f","first_seen":"2026-04-11T00:00:37.152977Z","last_seen":"2026-07-25T02:29:56.39209Z","times_seen":19,"resource_available":false,"data":null}},"time_used":6597,"timings":{"blocked":6101,"dns":0,"connect":0,"send":0,"wait":496,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/footer/footer-gibraltar.webp?ver=1774419640","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.027Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/footer/footer-gibraltar.webp?ver=1774419640 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:29 GMT\r\nContent-Type: image/webp\r\nContent-Length: 518\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69c37eb8-206\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:14 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=An2CDZHuchK1Bao9y841qgwWh%2BiasdlcxTIr61yVb6KSu1DbvPMIjyO06mVMmiAxWm76J29OnoKgaCflSm3OSmgsGfXYfSlYVCEPg55W9KDqO2LyWpaEnSvYrOahLj4eXcFw7I8%3D\"}]}\r\nCF-RAY: 9fcae1586d0c0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":518,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25543b3725f4b1bce18a6cd3aed77029","sha1":"5725dbd78138ae3364bb156ef07b39550dc596bf","sha256":"256d7c3abd2614d1d0b3650855455787f2a1baff7c24faad2037bc3727a6382f","sha512":"828874104fa2aab8b1168e1c92085d5f969f3f4e4597f9cbef6661705e4537be7a4a8e29f656a6ff49c40069c8af54a92dba03b067688155f7d2a35c2d2d38d4","ssdeep":"","tlshash":"b8f0051e6734609f5b744c7d839ea61f49b5683cd76559861c9094e0001933776a7942","first_seen":"2026-04-08T10:41:45.184442Z","last_seen":"2026-07-25T02:29:56.390018Z","times_seen":59,"resource_available":false,"data":null}},"time_used":7119,"timings":{"blocked":6680,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/index/icon_play.png","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:26.260Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/index/icon_play.png HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://3f38sfb.qdhyxt.com/plus/css/common/index.css?ver=1685095467\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 214\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"644f850e-d6\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:12 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2Fl84kMojg0ih66GIouvViUrklS1eLx6G%2FgUhD7tWUX8OByVuALJ8cN%2FKjJBhFwNRmoTbY3Nps1mvrVnXg8%2Bg8g8Srq95wDyivPreDbcut0yx%2BlXMWn55IALVRBIi6XxwraYlwU%3D\"}]}\r\nCF-RAY: 9fcae14dd91056a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 7 x 11, 8-bit/color RGBA, non-interlaced","md5":"1d3364063dfed42858dddb89b22c4d71","sha1":"6d66d841a97e61c64dac75e15006bceedd7a0f93","sha256":"207b4691434677f319a50bd137a579be31f50c6c47ddbc3e2daa6eab7b9b05a0","sha512":"280a18a864ffd4963331d31553c9aad4dc519c89fcd32f46f06abde3289e28b0e17c292b8cb42ce8f06dec8863fd1345522ada523e20a1933f9dacde17cd0c93","ssdeep":"","tlshash":"fcd023c20191892ce15471331782e030c0324d01992083cc1f12e02b3f72601d43a021","first_seen":"2023-07-20T05:21:02Z","last_seen":"2026-07-25T02:29:56.446191Z","times_seen":1010,"resource_available":false,"data":null}},"time_used":1215,"timings":{"blocked":758,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/jquery-ui.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:26.278Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/plugin/js/jquery-ui.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:26 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NtbOsQT5N8hEHTZYrZAI%2FuU9j5afAzv4VHKQnScFd6EtyRV1vQADel0kCf8MwAR28oiT0hVC6ux3jXb%2BqxEOWemAeR61rSJV9A90hx0YbbVBfizYiyJKTjTsSUzdzCVX3jTsvxk%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Sat, 16 May 2026 13:54:10 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\nAge: 1\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nEtag: W/\"5f412ba9-3dee5\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae1498c8756a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253669,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32074)","md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-07-26T20:30:11.15268Z","times_seen":22840,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/unite/countdown.min.js?ver=1663911607","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.012Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/js/unite/countdown.min.js?ver=1663911607 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:24 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tsMBeh621ZC7IN6GwhGE8xTgKkFBuz02UiUAfSjW4xQwd8gu%2BTwlhlxT0SeCsL3Y3oB2SK%2FocATm1o2d7bvcqYbuYBiUqm6bZlhiQsEjVJlL7JkjUdXEG7YcS5y%2BHapuuq1zmw8%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Fri, 23 Sep 2022 05:40:07 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"632d46b7-1cc3\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae138dc0c56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7363,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (514)","md5":"d9ef714974f58eede8526db005f26b92","sha1":"6fd64709325b5b71c79429b2e5f1cc900108e5a5","sha256":"ef1fd94cfe9cd440eccc5e91db340db22ccdb298a1d4a7a0f1302a36ee8a53d4","sha512":"8af9c072b9b67f0afb4ce40ec4abdc34be452f221f3ba256be122ed34d806d6cda8b32516cd969fe6a071ace8e4e8b60d04e91c3961658a4f2f590c3f3f7246f","ssdeep":"192:7ZMj+vKn7G1N12QKdErjigRQ078bxKl9zru:iK4MN12CfigRnkKltru","tlshash":"73e163cf262215362f32529ea4af11073170ca3064045d1c97ecfa44a9f8ce765beb39","first_seen":"2025-03-03T20:52:38.658434Z","last_seen":"2026-07-24T14:00:15.294522Z","times_seen":62,"resource_available":true,"data":null}},"time_used":2145,"timings":{"blocked":1644,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/index/en/204x30-live-streaming-02.gif?ver=1678956392","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.020Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/index/en/204x30-live-streaming-02.gif?ver=1678956392 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:28 GMT\r\nContent-Type: image/gif\r\nContent-Length: 425\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"6412d768-1a9\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:12 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=67CtVViIJlhBkj%2Fj0GHw0zn8HSKTFB0%2BSldw5ov5uwagiRBHO2sr%2FxyT32rnHjg6cVFqizphX08jLgAr7WVMndqWVCC8fyZipr9Co9CZ2QQPpNEpBD3dHIVqwsEGBhCWvnqfa90%3D\"}]}\r\nCF-RAY: 9fcae153af8756a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":425,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 204 x 30","md5":"63c123f206f80da19ec63d929f8e5f45","sha1":"41fbde8999e4486fc23779736c4717dff55702b6","sha256":"7ca0b58a9b93be2acea0a96626d5c6597eefeeee1602330f60e2f5b54dbef61a","sha512":"26a7fa7546037e3961e73f71c45a6fba16af15012af3ddaff41c0fdacd01e4826dceff00cfa8653313480a1bc899739cbf31bc30266c9e317cae9da9a1e7563f","ssdeep":"","tlshash":"67e060eef04444ece90ebd3b8b081204fe9c57a001524fe18c7021e488a77eb33a838e","first_seen":"2023-07-20T05:21:01Z","last_seen":"2026-07-25T02:29:56.425686Z","times_seen":1010,"resource_available":false,"data":null}},"time_used":6374,"timings":{"blocked":5926,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/jquery-migrate.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.030Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/plugin/js/jquery-migrate.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:25 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YJp19OCxbOA7GXb%2BSJOsTJGeQmLW9lk5gQH2ld9cnph08nTKmPvJ0oPa0BaPmcwyeohXEBkG0gayo4u973APrv%2FcEGylIvswT3yoYTCqSLyFJr%2F%2FeQ5Ng1CK7b%2BKglQeuorECE%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"5f412ba9-1c1f\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae13eda1b56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7199,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7085)","md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-07-26T21:08:48.404922Z","times_seen":24744,"resource_available":true,"data":null}},"time_used":3051,"timings":{"blocked":2585,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/css/sweetalert.css?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.916Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/plugin/css/sweetalert.css?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:22 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nEtag: W/\"5f412ba9-59ad\"\r\nLast-Modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P6ZgBedWSstJssjog%2FJfOjp%2Bl0hR4%2FPel6ZD36O98p%2BnQM7Y2oIjUkGkIbyTr%2BEzaUnAqCxjJ8nRgXaW0LP2PZLCDUzNegIkKKRGN2YZ1sC7UXp7tWg9ECZ1eLf0FJ2PYIXQQZw%3D\"}]}\r\nCF-RAY: 9fcae12e28270883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22957,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d8cc26070373f41241f37ce5a9c9d885","sha1":"3ecb6f91187c0153724c950efcea0b0d944fd5aa","sha256":"460df149ba9d2eb000637d9bfb2df51c5080a19e9071ff4ed5a4b7e21a0bd2f1","sha512":"a10fd7b306bbe186c50c35066e45fb6491741c8ab161d6e8447069aa919e943b00768a3b65180195d68f6f2b7f4195035247d0b9115e5a758189a60bc1c04533","ssdeep":"384:MrFKaS31F8FkfZ6vFyFiFz2FFF01GF7xGxTxGxJwdD3qX1YtiemnEzpazAP:MrFKaS31eFkR6vFyFiFyFFFhxGxTxGxe","tlshash":"5ca223eb1de31284a727874553de4b2827384043a81bdcad77cd519ecf81eec21dab56","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T03:46:39.224772Z","times_seen":5515,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":24,"dns":42,"connect":1,"send":0,"wait":519,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/common/storage/cms/cms_1083.png?v=1612880139","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.017Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/storage/cms/cms_1083.png?v=1612880139 HTTP/1.1\r\nHost: www.bet73019.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZ0ZVwvVE5pQXVOSXYxblBtS3c5ZmFRPT0iLCJ2YWx1ZSI6IlBid0ZVSlJnbU5lN09ZcEI5WjFzdndHelVYWGFidmxNQmpwUGREclRZcTVneGRPT1d6ZmszR2FcL1lkU0lPQkxWaUZQNlFcL0tyQlo3YWJNSlwvNHpSXC9lZz09IiwibWFjIjoiZDdhOTRjYmU2YTdmNWM4ZjQ0NDI2Y2Y1OGFlM2VkZmM5MmNiNmU4YmI3MWJkMGUxMzkzM2NlNDQ3N2ViYWEwMCJ9; vanguard_session=eyJpdiI6IllHK1hZUXV6XC95bmY1SXpRZktYXC8wdz09IiwidmFsdWUiOiJIVTlXemtMNkVQODRjZHZUNTF0T1wvbmVieE9lejhsMGNpVWZlRkZRK1R1N0piTUFGMWFHN1VmVVdHSCs4Nlh6ZjgwN2xUXC8rdVEwRDY3eGk2VUdmeVBnPT0iLCJtYWMiOiI3ZGU2NjQwNDUxODk0NTZiYWMxM2E0NjgwMmVkYTUxYzYwM2QxMmNiZDg0ZDc2MDIzNTRlMjFlNjA3Njg3ZWZhIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 27231\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nCache-Control: max-age=315360000\r\nEtag: \"60229911-6a5f\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Tue, 09 Feb 2021 14:15:45 GMT\r\nX-Cache: UPDATING\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit colormap, non-interlaced","md5":"083dcae037d113283d35610595299275","sha1":"f225b2b127e8d225a8911426742be25a683e8c11","sha256":"5f8dfd94e1774c3de80fa4fd84b1ec88aca70b1f0404b901e6937f69e6073a4a","sha512":"f3961a8cfd7d8c80a4fcd61fa20d7089347cdbeb8bac61672f8e810c90f61fce64c664929de946f1681c401dbe865e8971915d2b987bd84c76439b3d1aa1bb09","ssdeep":"768:Bd2Xa9+Nq/JMYDHnGnTy6IunVqUL7tDIoM+:BA7NKqYDmnu6tqFI","tlshash":"06c2e14d84f8ffb28c48192d85c07e271d68989207ca83755c94caaf31db79790fe5e0","first_seen":"2023-07-20T05:21:02Z","last_seen":"2026-07-25T02:29:56.420608Z","times_seen":1009,"resource_available":false,"data":null}},"time_used":4508,"timings":{"blocked":4043,"dns":0,"connect":0,"send":0,"wait":250,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"www.bet73019.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/index/footer_tindex.png?ver=1606876112","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.023Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/index/footer_tindex.png?ver=1606876112 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:28 GMT\r\nContent-Type: image/png\r\nContent-Length: 30700\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"5fc6fbd0-77ec\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Wed, 02 Dec 2020 02:28:32 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hbixVDzRI9msCVbXUa8CfMiVn71l1kgjX8jQb7iQQQNPedysYODxjyOEgnHv0A2qGyfCkc5bwVe0ZyxYDKerR81BbqwU96hHXm9h66W7hDUw9LxuYXlbE90S8UI9DcQv8B1iNY%3D\"}]}\r\nCF-RAY: 9fcae15589dd56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30700,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 860 x 320, 8-bit colormap, non-interlaced","md5":"4cff4dc9e549d34af27afdf92ca7d2fa","sha1":"0eb049b2a26b17cbb3f8245ed917d1cde98270b8","sha256":"0cd23fe23383f6e30f715b9fdbbe23561ad39cedad929a2622464bd6b50f9f29","sha512":"d1adaefaea4ed22f7d6d52da60d05758b18d79624f8fd58b531d90fc377928b31e235d0bce16306225534875f2ba28d03bd94105fcd5d71729461aac7a19dd02","ssdeep":"768:WfNuoY2JXbpSK8Kl4JZ6xyTqERQ2mKmY5Cha4Zv:WfNuoY2J38KOUie2QYj4Zv","tlshash":"13d2e083c312a6d154a3147be9d7bf80cafca505891a8d7d00de9821a7bb4d3ea530f2","first_seen":"2023-07-20T05:21:02Z","last_seen":"2026-07-25T02:29:56.429097Z","times_seen":1010,"resource_available":false,"data":null}},"time_used":6975,"timings":{"blocked":6220,"dns":0,"connect":0,"send":0,"wait":506,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/custom/login.js?ver=1597629260","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.034Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/js/custom/login.js?ver=1597629260 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:25 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JAYRDn%2BAXE4msvuDP39%2BPtPSa2Jc4UNb3LD1%2BFAsQnw93M0qznIciUmlT%2Fow6GmaqYPNebp5f6OTTGR7XjNCzVF2Nl2tkYlkcu%2F7tKtt7q34YyahhTtuenARk%2FGAsLfeoa%2Bpybw%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Mon, 17 Aug 2020 01:54:20 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"5f39e34c-bf\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae141cd3056a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"24bc8669caf172f2c17a06fcd73ae539","sha1":"3bad8f340bca43d8fb98c3ca39def12f816769a8","sha256":"29df48677fd1c2b2a602c35faeadd3693f083b78550b2c0f3108f356c34b74bd","sha512":"0b4b2dc35f8b97238079334be832751d1e33dfbbddda4961c38127afadcb088101bad71b0442bd810930df2658dfd9f42da0b08d44bb1e1f1dd0a5dde33423a3","ssdeep":"","tlshash":"f3c02240b13f377c587372a0803a0506df73701c1c0056e0b0b842a02c187040813c78","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.416995Z","times_seen":5059,"resource_available":true,"data":null}},"time_used":3526,"timings":{"blocked":3048,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?13d000e86c487ab21ddde56b764037d6","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.183.79","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:26.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?13d000e86c487ab21ddde56b764037d6 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11297\r\nContent-Type: application/javascript\r\nDate: Sat, 16 May 2026 13:55:27 GMT\r\nEtag: f3d6ca439a999b7e355fd1c13930baf8\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=045228777BDA0CFE; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29903,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (627)","md5":"fbb7bcb469e06fb14e6458b041555b5e","sha1":"149bde8f010c1c8eef4eec3f73f255d3ec0ebf76","sha256":"a5748e173110e330b88d26861ec977b2f81050327fae6ec80e0a080e973f75ec","sha512":"5596598508ff2a59b50f9a9e15caa04b5025d9bdc272cc13dd39f165b225fc7f499a78003e5db7f3a4fe86e4278f5d31484a4a2f7b6e2c846d4c295804da458f","ssdeep":"384:1bJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:1b4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"4ad2c9a9b282713293a324a5153f324af07b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2026-05-16T13:55:45.8201Z","last_seen":"2026-05-16T13:55:45.8201Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2784,"timings":{"blocked":1174,"dns":329,"connect":278,"send":0,"wait":434,"receive":1,"ssl":566},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=045228777BDA0CFE\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=157431402\u0026si=13d000e86c487ab21ddde56b764037d6\u0026v=1.3.2\u0026lv=1\u0026sn=57688\u0026r=0\u0026ww=1280\u0026u=http%3A%2F%2Fwww.bet73019.com%2F%23\u0026tt=365%E8%8B%B1%E5%9B%BD%E4%B8%8A%E5%B8%82%E5%AE%98%E7%BD%91","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.183.79","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:28.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=045228777BDA0CFE\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=157431402\u0026si=13d000e86c487ab21ddde56b764037d6\u0026v=1.3.2\u0026lv=1\u0026sn=57688\u0026r=0\u0026ww=1280\u0026u=http%3A%2F%2Fwww.bet73019.com%2F%23\u0026tt=365%E8%8B%B1%E5%9B%BD%E4%B8%8A%E5%B8%82%E5%AE%98%E7%BD%91 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Sat, 16 May 2026 13:55:28 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=4950911EB35AECE1; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-26T20:50:57.216969Z","times_seen":375162,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/js/www/decrypt.js","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.069Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/www/decrypt.js HTTP/1.1\r\nHost: www.bet73019.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZ0ZVwvVE5pQXVOSXYxblBtS3c5ZmFRPT0iLCJ2YWx1ZSI6IlBid0ZVSlJnbU5lN09ZcEI5WjFzdndHelVYWGFidmxNQmpwUGREclRZcTVneGRPT1d6ZmszR2FcL1lkU0lPQkxWaUZQNlFcL0tyQlo3YWJNSlwvNHpSXC9lZz09IiwibWFjIjoiZDdhOTRjYmU2YTdmNWM4ZjQ0NDI2Y2Y1OGFlM2VkZmM5MmNiNmU4YmI3MWJkMGUxMzkzM2NlNDQ3N2ViYWEwMCJ9; vanguard_session=eyJpdiI6IllHK1hZUXV6XC95bmY1SXpRZktYXC8wdz09IiwidmFsdWUiOiJIVTlXemtMNkVQODRjZHZUNTF0T1wvbmVieE9lejhsMGNpVWZlRkZRK1R1N0piTUFGMWFHN1VmVVdHSCs4Nlh6ZjgwN2xUXC8rdVEwRDY3eGk2VUdmeVBnPT0iLCJtYWMiOiI3ZGU2NjQwNDUxODk0NTZiYWMxM2E0NjgwMmVkYTUxYzYwM2QxMmNiZDg0ZDc2MDIzNTRlMjFlNjA3Njg3ZWZhIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:21 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 531\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nEtag: \"65572be5-213\"\r\nLast-Modified: Fri, 17 Nov 2023 09:01:25 GMT\r\nX-Bos: b83\r\nX-Cache: UPDATING\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":531,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"1d1d23f897c7f9fa4b24eeb8159d7e21","sha1":"9c6ab5fed65abe81454978f1e844c4f36d61a1c7","sha256":"8da1db8adc85dc835413880c71cc811c762e48018590f9a991115e83a722c869","sha512":"4d258cf5b37b503615a1373aebf3474ec8f94351455729665223a9318067ca6b815d0bf3c265ead937660bfb3b0e75b25f450ef1b235a64b32d87df01e1b8e32","ssdeep":"","tlshash":"b9f0bec8adaffdd4add295d2627ec809a99315430209df52b688ac1c9fc80281a2b0f1","first_seen":"2023-12-21T07:44:20Z","last_seen":"2026-07-25T02:29:56.42339Z","times_seen":4755,"resource_available":true,"data":null}},"time_used":658,"timings":{"blocked":210,"dns":1,"connect":212,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"www.bet73019.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/USA.png?v3","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.006Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/USA.png?v3 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 60661\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69e19c78-ecf5\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:09 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5HTNLLezJdYInhxEzCdW5ra5p6JNHbKryDZspb1WyZCy653F8xzbtC3hiYlO3dyt84s6hMHoy2BFkMB1RAYisPejMxIK%2Bw%2BuZPygo%2BDj45APd%2Fby4rhCgo1uZ%2BAgK8NvdQT73ko%3D\"}]}\r\nCF-RAY: 9fcae147eb2f56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60661,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 236 x 227, 8-bit/color RGBA, non-interlaced","md5":"1c6c8b7a828940378aba6224d5f0cd4d","sha1":"62cde70bf8216da450e9693b69b103b30108ea4e","sha256":"1e359bee231ea72f6f3c30bf75cc274b2833c2eccd771d3918c24b229edbe4cd","sha512":"968b08d7b7928874e57d5e01681d2f46136aa7bc78fd8b489b09be2dbed52062bbda69359593b6e2282ee9de107e78ee07566f1b73a1733ac525b06ef3f852fd","ssdeep":"768:d8LcTwob/5RKWP/p0sqX0XnYMvyJSoT1gNacD398oWkTdOWcizDxLuBa67NY41Qg:iwTwoqWqsqUnFvE9BeSxkU5ID96jcPI","tlshash":"b15302873d505777c2ee49c788baa053ff41e67902398aabc624b14d29e43bb45f0a0d","first_seen":"2026-05-10T19:50:54.190065Z","last_seen":"2026-07-19T11:09:23.454692Z","times_seen":22,"resource_available":false,"data":null}},"time_used":5012,"timings":{"blocked":4054,"dns":0,"connect":0,"send":0,"wait":496,"receive":462,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/index/en/bg-sports-title-white.gif?ver=1678955880","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.018Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/index/en/bg-sports-title-white.gif?ver=1678955880 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:28 GMT\r\nContent-Type: image/gif\r\nContent-Length: 536\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"6412d568-218\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:11 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FMdHviyI%2B%2BpNHptlmA9wxLLK92rHF86906ntWV1%2B2IsQ2SKKhx%2F7Y9nIZADIdreGTy0uJiKdIGHBdmxyjBVdmprPYY4AKFlCIh2%2B19Cuy6teTk4uM83ZlFvPpVmkoS%2BJY7XLLIE%3D\"}]}\r\nCF-RAY: 9fcae1520dde56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":536,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 130 x 38","md5":"3ecfa3bc82874fe5208d9e9924cebd51","sha1":"e801a0bb64370407da31412e432326e8b9887a73","sha256":"1e59d016b5ca6a09c1df3fb8c51d3cdd0e2dcadb980aca2f0f5c81a8216e4ec2","sha512":"7d808fc92d38e316ee78d5023ef50c386a219671a0d99d8c58b85c4ed8ff5a0de1d6b5e6db6ff52d61008ea589b9eed6838d340ee8c0a04641893f9230e7deea","ssdeep":"","tlshash":"26f00569f361ddd4cfd832bc5301102526646735260d1ffa411135e5334dc7b505c5a8","first_seen":"2023-07-20T05:21:01Z","last_seen":"2026-07-25T02:29:56.436689Z","times_seen":1010,"resource_available":false,"data":null}},"time_used":6105,"timings":{"blocked":5664,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/sweetalert.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.029Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/plugin/js/sweetalert.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:24 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3m2ZLtAT70Y1SyTY85GPxDQDFWUQu0Rz%2BaL2tOx2mKs1QCKMIEFjvwxH57qJK1Qqn26sq%2FKbj5NzxN5hqQTu%2Ff2pchc140iIhGKV4PjQhOsxM%2BsdKxwnnowXJ05noPATroRmbes%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"5f412ba9-4262\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae13dee510883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16994,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16994), with no line terminators","md5":"2f9966a615f3f46d846807adbe42644f","sha1":"441544c084828da55ca0bafdc4c3df7dc7020820","sha256":"be4d1215ef6f2b2915b7f65cd28b9a9f7dcef17e1f0d883edd19400ca0ea795c","sha512":"e85f14552c1b5837780990e210223c5d6f532dd55f16589f682d1f2f95acc540b715aaac23ce12f871661006f80ec9043a9674dfdec1c3efc0819125d492dff6","ssdeep":"384:Rigwo5UpVZG9lOUlgkhzj7FRNE82XyySyTYayWri/SRVRXFKP9nWZcT2Rc8ex51f:RiB8lOuR5wSWrrRVR1KP9WK6Rc8ex/","tlshash":"ad72c899325438b327e361f1009f504ba4b196bde8095861376cc9e62ff8cc95ae2f77","first_seen":"2023-03-07T01:11:43Z","last_seen":"2026-07-26T21:49:28.375625Z","times_seen":7196,"resource_available":true,"data":null}},"time_used":3184,"timings":{"blocked":2435,"dns":0,"connect":0,"send":0,"wait":510,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/scheduleBTN_en.png?v2","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:26.099Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/scheduleBTN_en.png?v2 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://3f38sfb.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/css/e20260331_FIFA2026.css?ver=1776739135\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 52719\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69e19c78-cdef\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:09 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wpb%2Bl0jW7Ph3QQEZQLI8kVPQALMtlJOsEYWejF35y%2Fx3vMWet33fZU8qCvvy3%2BP1DH4MPI0a%2FdpDALap2PYIPu9m9oIaQdbyh2hmSnH45JVteRiIANIdd0MeDddb5oWQHEWnNhk%3D\"}]}\r\nCF-RAY: 9fcae14b1c010883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 211 x 183, 8-bit/color RGBA, non-interlaced","md5":"91d406f219d5983334e288f8b8da70cd","sha1":"6ae4bd03a4387f5d00e7297a13b6dab20f02b3f1","sha256":"822cf9f487bc3d68ef41dfa2e8c79c854b358c559b0ec8a9a42b47f1835c1e98","sha512":"3e42cada2928bd98a57831ba65e6d3721ac078254eb8679f7ecbdc28cc718c3988bea9bcaddf5c96df4de8cc4214ab84c11f001f28acdd0863f5736f0fef16d9","ssdeep":"768:7OGdP4nNkLq670ceya5vowj2lMuCTOCtjWM1a45g2FiY2tWBAjlyyGHbBeCj:7OcCkLqD5Rt2lZ2jWM1a+FxAjpIMCj","tlshash":"b033f114f84f0dffd9a7b4b3f996c0f11ab620eb164023cd8baf2c6e5059a19b5a1494","first_seen":"2026-05-10T19:50:54.161574Z","last_seen":"2026-07-19T11:09:23.450214Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1182,"timings":{"blocked":476,"dns":0,"connect":0,"send":0,"wait":240,"receive":466,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/common/storage/cms/cms_1050.webp?ver=1774418057","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:26.257Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/storage/cms/cms_1050.webp?ver=1774418057 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:27 GMT\r\nContent-Type: image/webp\r\nContent-Length: 18518\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69c37889-4856\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:11 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=in%2BrmXhjzXY6DRc4oLwAe%2FH%2FD7%2BH4HZ0VVV3stfk8mmNKbi%2BEICbKYsQwv1DRjGvkQg2W3VSOtWc0cfi0BWHWjRw4b73pyvkfRAcp7z839fDsGGtz6wW5dXVLWsszyQGwDVHsUo%3D\"}]}\r\nCF-RAY: 9fcae14dd90956a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18518,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 844x214, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8d7f65856366fd4f6d989a4120265868","sha1":"8c60923667aef638e5be2107f872ffc1973c823e","sha256":"f9befd4e26f59abeeb87c3cf57f1667f67f359c724c49a1e3b0bf7074d08774c","sha512":"24d4a03639ee28f3043868525f4f7a89037951ec0817f683bc155a1780f8f1fcae5500f102a1b1097aa1c6cb42c8c0e4b155755d55a8d7fb3126384df2069690","ssdeep":"384:18dzfbDAwCh+9Ii9p3PcCKGDKcaPPsZoHAtXPjmMkThl:WRAK99p34GDlaP0E8qMkThl","tlshash":"cf82e15166b91f9758d02893915e20d12221bdd6070eb2a7bedfcdbd478d9883f781c3","first_seen":"2026-04-08T10:41:45.172266Z","last_seen":"2026-07-25T02:29:56.414953Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1441,"timings":{"blocked":759,"dns":0,"connect":0,"send":0,"wait":461,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/css/animate.css?ver=1776393336","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.956Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/css/animate.css?ver=1776393336 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:22 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nEtag: W/\"69e19c78-12fc4\"\r\nLast-Modified: Fri, 17 Apr 2026 02:35:36 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UPylG5DYBfYt36qVBN1au5cSUfkHBSD3tIgdDKqApgHCEHATtIlqqcuI3TTixZZgRX2qppYV6KEFmcDwkSwDhEDQ7nBEMCcbVzko0UzO1IR8O3RyUXgrJoT6ZPHzqZNDrCI8avo%3D\"}]}\r\nCF-RAY: 9fcae1317bfb56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77764,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d77152dfdebb91ffa5108efb8421b43e","sha1":"220f973db66efd53eb0fcf2d3a7da7a9b9281642","sha256":"fce0a5fd68a0a23d2cb433580948f1bd5344dbdb1aab2b19ddd8c34f39a427d6","sha512":"be311d8d2a9e31b197e45b91877c4425816605229f502ae58ceb3e912ff3b3fdba2f48d06c482f5efec6e93f1fd319062e395042249920951a5736509d22fbf7","ssdeep":"384:BHNuKu1Lsg9unuFl3lH/4/0uJuDqDxbe3NxdV2PVriTKIZQMcLceo:JNuKuWg9unuLuJu9KIZQMcLceo","tlshash":"1c732fad2991108456638a1d83df5e68273ce573181aacef73c2488fcf8bf6857c9147","first_seen":"2026-05-10T19:50:54.229955Z","last_seen":"2026-07-19T11:09:23.477569Z","times_seen":22,"resource_available":false,"data":null}},"time_used":997,"timings":{"blocked":519,"dns":0,"connect":0,"send":0,"wait":477,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/index/en/liveinplay.gif?ver=1682933216","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.019Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/index/en/liveinplay.gif?ver=1682933216 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:28 GMT\r\nContent-Type: image/gif\r\nContent-Length: 616\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"644f85e0-268\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 12:07:35 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FCoOVCVM4k7Hakuk66VQXk9%2FIYUNYwdYTVNu5UigezQFyjVBi%2FDtS6bxpYj8LzGOgh%2Fovb8J%2BG%2BfkWuMTBaqflwgtfdZHhxN6GqdNJrZYp4ltNZivjO7rKBKzjXGlfexLNLhaPk%3D\"}]}\r\nCF-RAY: 9fcae1534d660883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 204 x 30","md5":"712ffb89e85b2e1e254ec1c77b23fc74","sha1":"7e385f698a88e70953384d4bcd3698993fb6c322","sha256":"6ac8853ce4ba2bf9bbe37da81b96be06b0463bee89fe6166a02a913ce379307b","sha512":"34e6aed4474677abc763d44805a12df54313eea3a98847aa12fe940f81247ad6b218ec25c7e6d66107527adcbec0bf8e7dfa5facab3c8886dcc026452ec2b7f6","ssdeep":"","tlshash":"7df062c6f65b54bb862a46ecd74cb9140bc820884b000c8295f1f8efe00c7705bba0e0","first_seen":"2023-07-20T05:21:01Z","last_seen":"2026-07-25T02:29:56.391404Z","times_seen":1010,"resource_available":false,"data":null}},"time_used":6390,"timings":{"blocked":5870,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/index/g02.webp?ver=1774419757","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.021Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/index/g02.webp?ver=1774419757 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:28 GMT\r\nContent-Type: image/webp\r\nContent-Length: 5328\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69c37f2d-14d0\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:11 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZZKjGIXdmgrlISyiUeLCEHKX%2F21cmMRKSGIM6qvL3UHiVbwsuw6K6JwuiL7OuCXHiGeLOIX%2FDol5VSkipB%2Bl7eMGYui7DDqfNnosP8rH4XdR5bje2oIfzkYAwUYrZCdwtzta6U%3D\"}]}\r\nCF-RAY: 9fcae153def50883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5328,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 269x79, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1ce88d741e672f46802fd23dc5fc96b0","sha1":"ff963037d969532b914c05453b06b7918c716968","sha256":"622481deb342e810e8f549b74d074e7282db78aaf9bbd88da9ef519eb5dfaf36","sha512":"5a07869bf369d6d69c91b954720ca7275ab3f8abd14ab561a2fd77dc76c4a24f826381ceca4a6f952c834ce3706dc5ac3f86d30ad654c8987a502897f500e54b","ssdeep":"96:BYm0mU1DFz3iAfXs15xLyaagdN3vCA1e6s+GZNytXsXM:BYmmBiGs15xuaagdJ6cJGZcXsc","tlshash":"50b18d117e10dda8c8419ad07c70ea972d6f0db49723f2b2442ea85796d601fbea4a50","first_seen":"2026-04-11T00:00:37.120617Z","last_seen":"2026-07-25T02:29:56.437234Z","times_seen":19,"resource_available":false,"data":null}},"time_used":6404,"timings":{"blocked":5953,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/footer/footer-logo.webp?ver=1774419641","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.024Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/footer/footer-logo.webp?ver=1774419641 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:28 GMT\r\nContent-Type: image/webp\r\nContent-Length: 586\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69c37eb9-24a\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:13 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RKAZ%2F3EhJRsGmSJnLJqfuNriQHANqXaMWgVYBAmEWEgDp40vHP%2F8xHSt2OgwWhgUIUEbizVaG%2Bw67e8iZfswP2So8b1cDaXf3d%2Fbh6JvGHi5nUD%2B1xJuKRmXy%2BIoEF0tRm%2B32Co%3D\"}]}\r\nCF-RAY: 9fcae156af2f0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca961cbdb433105d1f8e77d1c7f9fbd2","sha1":"c814d504939f1278b106262be56096e1182b4754","sha256":"8e28462ad4bb87f3f0d5150b2ed1a3e6e4b1b29c1e27520888dcf80a1e5e86ad","sha512":"c0ebc1469e71e1ca07c914172528ddd9b979b35288dc2f5ec414d97ffa2aa8e17edf90e82f7228b79060b5a38d79f3b797a69e74056be93dd6257eae6a7d4d65","ssdeep":"","tlshash":"6bf00c1ca3a5282199cc9daf7a2024795c076d61db962e04047241a7312a54e766a6ff","first_seen":"2026-04-08T10:41:45.181998Z","last_seen":"2026-07-25T02:29:56.442989Z","times_seen":59,"resource_available":false,"data":null}},"time_used":6885,"timings":{"blocked":6402,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/custom/moment-timezone.js?ver=1580697220","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.039Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/js/custom/moment-timezone.js?ver=1580697220 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:25 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a2LJalug9K1zULstxZJyn%2FO%2FkCOc4sEG6sidiMjJSWz6H9HhwLNPUnfM%2B5hE%2BxD091M6qmvN%2FdqQPizkB%2Ft6TxJhvUo1pgEw1SYetkDwTyUy2t2Mno91g2MUhKYkaVNWIryTwY0%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Mon, 03 Feb 2020 02:33:40 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"5e378684-2feef\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae144c81c56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196335,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1434), with CRLF line terminators","md5":"bc45c47c99fe4d26b2b24e46cec399ad","sha1":"221067a4147ece74b03934528ad61bcd4026e477","sha256":"4a65c2af68e89944c3da128c9b329596d930ce09dc9b8ba726b640d812e1fd88","sha512":"1658e474170022d40e698a422f024b4872bff33c78af1dbe98df3a6a99a0f1cd1eb36725ac9fca7bc1264ea491d0a19a2ee0a3a952adba4aba3242c06f830f93","ssdeep":"3072:olpkvlaDD/DCD/DCD2iqWCPrMBq1rGPuAZDDD1DDWoST+piMhrlon5Blu4hK:CkbW0sNpiMx","tlshash":"f714b0292617bb44e459c08bfa3779c0caade18a940614d25f7d57b31fa37e2de68c03","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.393971Z","times_seen":5062,"resource_available":true,"data":null}},"time_used":4284,"timings":{"blocked":3521,"dns":0,"connect":0,"send":0,"wait":265,"receive":498,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/common/storage/cms/cms_1204.webp?ver=1774418057","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:26.783Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/storage/cms/cms_1204.webp?ver=1774418057 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:29 GMT\r\nContent-Type: image/webp\r\nContent-Length: 45654\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69c37889-b256\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:14 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dl3wmfU7hP21p93k%2Bsc5onHAiAj9xdh88glEQXSh5N5r110NV9SoBsStK3RNPn7vhcSRGpjfuQt%2BYiRkxHpS90CRbm2jMSU%2F%2FDqJyi4LB8NIACjSPWM1kY84CekKcTx671EfDBc%3D\"}]}\r\nCF-RAY: 9fcae159b8de0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45654,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x420, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6a800ba0f7f1a78397e3ddfc65098eef","sha1":"a5707d495a317010774ea92269712daca7ed9bcf","sha256":"5afc628e98de522979040e194e729d848cd6309c92529ea7af93daac2728a8d9","sha512":"c56f8c3a2ddf3a6a00668e2d5b7f086fe04949f2521927d8788284f23d00a6c6f5ea272cfe91166f74c35780c77e479d5769cb1f351ba8de17e376df4a4a037f","ssdeep":"768:yq1tAEnnfZMp9z9p0YTDucZUdx8Gl7bbCs9Gudi3Jvf+s7+bZxXnk1H2GhqD7eOp:yetAgnCZpJDdkHl7bbeWi39l+bZxXnkS","tlshash":"d923f103c6c51c28f817d1584569ab0a4a1f71e33d5d286a33eb62f81d7aca32dd4b73","first_seen":"2026-04-11T00:00:37.114393Z","last_seen":"2026-07-25T02:29:56.41556Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2831,"timings":{"blocked":2127,"dns":0,"connect":0,"send":0,"wait":240,"receive":464,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/css/common/bet365_style.css?ver=1685497875","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.924Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/css/common/bet365_style.css?ver=1685497875 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:22 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nEtag: W/\"6476a813-3db7\"\r\nLast-Modified: Wed, 31 May 2023 01:51:15 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nj2rUadkq%2BHrWJzE8WOF6kY8QJR5AhhmdmUOFfS1pxppzuFvLJBz8aykikZFNXRsKTynehqbhfci8olRF8Te0JrSrGg5fNzCFiWXAvv8PMrkiv6UTveBFa70h0ltHmZjhqiEPA4%3D\"}]}\r\nCF-RAY: 9fcae12e28cd56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15799,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"63d91c124b45be43dfba690f9045f34b","sha1":"e387df588d63853316200db1994fb05f2971dcdd","sha256":"f2f6ae08f73e63fa21a560b88fdeb49afc9dc7386c6db1bfb317904a3dc3bf85","sha512":"b7c973f6d4ef57c03d0ed0f2d27d87a29fa9bca34222d3fc0486f23739c871cfe2f313d9d8cf6255d07cd8a9812cf45aaa1a49e4cd2253434e3c1517a3bdae76","ssdeep":"192:kI/btVaRFgGntC76JlL/mt8ZM2Qpdr/0CCsafFUsOA8mxiqfFK4PNlQVOwGWNOn9:cF3LmaFU0FKfIXLAG","tlshash":"716262f69b671c45b926c1a9af68a7c133695213c00dc92d7fd4721c8fce5e898e238d","first_seen":"2025-04-11T10:47:55.702437Z","last_seen":"2026-07-25T02:29:56.431691Z","times_seen":2891,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":17,"dns":40,"connect":1,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/css/e20260331_FIFA2026_custom.css","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.959Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/css/e20260331_FIFA2026_custom.css HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 16 May 2026 13:55:23 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y0SD2BXI%2F36sb5JUDxdD5IPKGq2vj0rwKA5gMfxCHptoA2VPelL%2BKpQErwoI2lj90CdLq8Ua7BNzZGdzg1xXBaXSEhkTumLJK%2FFY9Es3d9onyNZT2VZSxCApU6hPX%2B%2Fr1RFnm%2Bg%3D\"}]}\r\nServer: cloudflare\r\nX-Cache: BYPASS, Status: 404\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae1319a290883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":1171,"timings":{"blocked":534,"dns":0,"connect":0,"send":0,"wait":637,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/main/logo.gif?ver=1612839866","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.016Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/main/logo.gif?ver=1612839866 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:27 GMT\r\nContent-Type: image/gif\r\nContent-Length: 15313\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"6021fbba-3bd1\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Tue, 09 Feb 2021 03:04:26 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aMqkhsXm6rFVcAeXwpRQee7WCOF9kJJOchOwGKpdeYaYtjJ31Ndzrf4oZYrnGYwU6z4yGpcFDbq07HB9kVW4e0U%2B%2FfHxK5zWoTG5GlN%2BeOi1DxLO6TP5sumUiirkZvE7tRGkqng%3D\"}]}\r\nCF-RAY: 9fcae150bc5556a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15313,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 224 x 91","md5":"3719047940db89e415097aa46f3bfe51","sha1":"ffa944db5a95f8771081a2147ef08115095d55b9","sha256":"819ed93b5f94181c65947ee5e77fedd1237ab03f8c9d2ce75e2811405d0114f7","sha512":"fd156ce12d4ea6ad124da6388022dd6349d96c3b5ce05953850f91d6cea30a7215fd9aea4307650671c564b9ef15110beb89df019c25b9bee39963607761ba68","ssdeep":"384:WnG3n4ZBE8t/DRPm6/EG4U50BE8t/DRPm6/EG4U5+:WamBE8t/tPm6/EJBE8t/tPm6/E7","tlshash":"a0627c0dc17771fef15a3ab076223f090d9489b86d069ee5c81cabddfd8d04e4198ba6","first_seen":"2023-07-20T05:21:01Z","last_seen":"2026-07-25T02:29:56.420018Z","times_seen":3293,"resource_available":false,"data":null}},"time_used":6227,"timings":{"blocked":5459,"dns":0,"connect":0,"send":0,"wait":524,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/index/g04.webp?ver=1774419757","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.023Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/index/g04.webp?ver=1774419757 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:28 GMT\r\nContent-Type: image/webp\r\nContent-Length: 7564\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69c37f2d-1d8c\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:12 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FQzo6uUGN1Q%2BTrDkRKYHzkuTQxGi1QON32K3BuSzstg%2FZ8Vnc2FN1tv8EBgjcOZ7sCv54b74DMrg2Ep8Z%2BkSUhyZjbMw05DiPZEPpRfKwbCeH2E2YboH1S7jJETZzFYqcXKsGyY%3D\"}]}\r\nCF-RAY: 9fcae1554b450883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d9e311eb61f608428218640bb8a884f7","sha1":"cc5db4a8c64d3b1a3b038de09cc1ef8826679dfa","sha256":"695953b68ee5d5df9d54159756465c4917ace3ee40258d8ef5c9434746822754","sha512":"ff503e24958f2242d1e611640bbd92cc160172d824b73336582812732ba5f04b0bab83f1537a7c6ed3e741e9bd4a4097737b6fd5a5ed784c97aef9d723c64cb6","ssdeep":"96:z41QgENA6dTazfhduFRKXGKfsxIq6xK+hzRyN5rx30VLSxDjv4zdCzNb17Oz6HEe:z41xEa6dOJY+nf1xK+CvxnNbAhi3GK","tlshash":"12f1af0d78856f53cd51b0e0dd855156cf3309d644047b3a00ef90eab3a62e1c67aeaf","first_seen":"2026-04-11T00:00:37.127847Z","last_seen":"2026-07-25T02:29:56.413722Z","times_seen":19,"resource_available":false,"data":null}},"time_used":6422,"timings":{"blocked":6182,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/custom/main.js?ver=1598008226","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.032Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/js/custom/main.js?ver=1598008226 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:25 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oyXfTFBWD90TDTMHsKzjsl7CpwE8ZsfDrGA0%2FbRQQ3jNj1fViWZP7XiNGNzrG6AnOjr7WzjqxIUJ1Tgr9azWzSpGHhbjZ%2BIIq1T0pJiCLAZ3o9B%2FzcMITLFvCcKUNyedCqgXT1M%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Fri, 21 Aug 2020 11:10:26 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"5f3faba2-78d\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae1405de50883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1933,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6a579f2e4d3b31b3ea017e7b03a475dd","sha1":"8d9a6430face051ae1365d421f15c60cff36613c","sha256":"ca0d1288490dab47eb98606d7e519b4be96e1d5f354b8cf4a6ef39dd1846c41c","sha512":"e5c65863509fb786d1a2ac8a1c0e0ec1446158037079a067eb6976040a0d912e326c2254e7968a7e22ae794d3adad6b9bfccbd2a4eb35dad622676d3a989d742","ssdeep":"","tlshash":"1941cc1df9f665c208b730164f3f451c2163a81f6a09ce40395c65c09fa267ed2dbeba","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.408998Z","times_seen":5056,"resource_available":true,"data":null}},"time_used":3322,"timings":{"blocked":2820,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-16T13:55:20.139Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bet73019.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:20 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nCache-Control: no-cache, private\r\nContent-Encoding: gzip\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6IkZ0ZVwvVE5pQXVOSXYxblBtS3c5ZmFRPT0iLCJ2YWx1ZSI6IlBid0ZVSlJnbU5lN09ZcEI5WjFzdndHelVYWGFidmxNQmpwUGREclRZcTVneGRPT1d6ZmszR2FcL1lkU0lPQkxWaUZQNlFcL0tyQlo3YWJNSlwvNHpSXC9lZz09IiwibWFjIjoiZDdhOTRjYmU2YTdmNWM4ZjQ0NDI2Y2Y1OGFlM2VkZmM5MmNiNmU4YmI3MWJkMGUxMzkzM2NlNDQ3N2ViYWEwMCJ9; expires=Sat, 16-May-2026 15:55:20 GMT; Max-Age=7200; path=/\nvanguard_session=eyJpdiI6IllHK1hZUXV6XC95bmY1SXpRZktYXC8wdz09IiwidmFsdWUiOiJIVTlXemtMNkVQODRjZHZUNTF0T1wvbmVieE9lejhsMGNpVWZlRkZRK1R1N0piTUFGMWFHN1VmVVdHSCs4Nlh6ZjgwN2xUXC8rdVEwRDY3eGk2VUdmeVBnPT0iLCJtYWMiOiI3ZGU2NjQwNDUxODk0NTZiYWMxM2E0NjgwMmVkYTUxYzYwM2QxMmNiZDg0ZDc2MDIzNTRlMjFlNjA3Njg3ZWZhIn0%3D; expires=Sat, 16-May-2026 15:55:20 GMT; Max-Age=7200; path=/; httponly\r\nX-Bos: b83\r\nX-Cache: BYPASS\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}],"data":{"size":136195,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"3e19b8eecb98883b7294febd453f1eb9","sha1":"3736d2ca1f3aad5252ba12b17dafc6ac07a4c1b3","sha256":"e8c2fd8d84b9ab4c807aa4986803287229e1291ee12721d7d96142e7fde9e2e8","sha512":"eab73e2528fef99d0acc565c8f7a672681d568b9367b9316e608de2eac3b9a5a634b1146a2ad605bd9b0be69d5f7dce43df8c9b62693b925c9b410f27cdff17f","ssdeep":"3072:XqBoWOow3yp3NLzTfZLh4CkeTzlecRtAfPChW4O8smQfk:XGrWotX18eTzMcr8r4OgQfk","tlshash":"5ad31244f2cdf81d93504207b26d281de8f2c454bc4c8ab933f9b6a75d16e30ae66ce8","first_seen":"2026-05-16T13:55:45.848257Z","last_seen":"2026-05-16T13:55:45.848257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1705,"timings":{"blocked":213,"dns":1,"connect":215,"send":0,"wait":636,"receive":639,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"www.bet73019.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/common/storage/cms/cms_1079.webp?ver=1770027519","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.998Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/storage/cms/cms_1079.webp?ver=1770027519 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:27 GMT\r\nContent-Type: image/webp\r\nContent-Length: 6734\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"698079ff-1a4e\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:08 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nCX3TEiX8ZtSTTjhajKQqw5mAa7zQDdl9zjhqgdnig9MIuUxS5BFbsyumtrA6AX8Pu1K2lk01y6Lrrxmc7qF%2FxL75zFDPUEzlg2CqaC8j78ma4t0mmGKV3fYoO4hjY1yB88XqtU%3D\"}]}\r\nCF-RAY: 9fcae14edf290883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6734,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b164c8c9063157fa2fcb5fa3298b851","sha1":"7c967561db4876e2414e5c26653010636232281d","sha256":"42769c9ea8ef671c0ac3c50c8171171df0caf6f5472475bf37d5893230966184","sha512":"9b49422986ce5325354062a4cb0a4ace7bc39b1fccb457e55dc4bfe1e95c7be8e5fcf443e66487383f56e5ba534c63fde96d3b4853c1a80b1629cb890449b4e1","ssdeep":"96:PY7Zo5bdSw55l+aoVpwQA/YlunnGrCP63N+0Lgh9PHz7X5MDjXK3qv811opu0Tf:PIZo3Sw55yfA9Iu6o0Mn7GD7K3K8Xz+","tlshash":"1bd19e60e87cf8b32083d72723d9a57436cf9bc222c90785349bcdc329a56b2a55099e","first_seen":"2026-02-02T21:06:37.60327Z","last_seen":"2026-07-25T02:29:56.412331Z","times_seen":50,"resource_available":false,"data":null}},"time_used":5425,"timings":{"blocked":5176,"dns":0,"connect":0,"send":0,"wait":246,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/promotion/images/uploads/88.webp?ver=1774419904","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.007Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /promotion/images/uploads/88.webp?ver=1774419904 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:26 GMT\r\nContent-Type: image/webp\r\nContent-Length: 14292\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69c37fc0-37d4\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Wed, 25 Mar 2026 06:25:04 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pq%2BnO19jXHvSt2gBYFv%2Bvh5erzDGvAlPiuVRvK1vZ2mvyuTYwIFPfC%2FdRB1CxatPBdpK7sDSToojfxMXXvJ5eMP6sa2FYZ5SNmrH7j1aAyS3RbGeh8ft4%2B694XFXsVDV5UA9UH8%3D\"}]}\r\nCF-RAY: 9fcae147eb460883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14292,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 736x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3753bc663ddcf1a839f7ecb88980ade8","sha1":"cf5b47ad78403e99f962285f449a7e905ea78452","sha256":"92c254d048a2052c9bec955f18ec3fc017c57619123469eeb465736aba25bf35","sha512":"e2765bad734b17e0b8a9a95ae583bf6ae1395948fe58a5a68e14bfca7ac56205e1b1ffe3a8fdd904cc0f3c1606149e1b5758b7b913699a3762a4cf43ad251534","ssdeep":"384:7M1uaLdNjxePwQGuRqP849LP8vSQt4OmvjZZY69vqfE/:ba7jxrx84yv/jAtq69vqfS","tlshash":"3152bf50df5d35e00a2213adc8e389613e128ad9c853d381af7625027edcc16c970e8b","first_seen":"2026-05-10T19:50:54.252149Z","last_seen":"2026-06-23T18:27:49.674247Z","times_seen":16,"resource_available":false,"data":null}},"time_used":4728,"timings":{"blocked":4053,"dns":0,"connect":0,"send":0,"wait":462,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/unite/encforms.js?ver=1761119296","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.036Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/js/unite/encforms.js?ver=1761119296 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:25 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DEOyyXcokJnm3UdMKwztEMhoU%2FkGR6I2I5lVepvcEuSsTpbaS3fnP5Z46MAUhZgfMUKf9PHqmnIUaLpksFFfScaToW9FD9im8JXxpXxteKXnRjuSKbUbxCvTjK9p52YvNTyXjOU%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Wed, 22 Oct 2025 07:48:16 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"68f88c40-2e52\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae1437edf0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d2d77387c0dedc78ae85a7ab52aad886","sha1":"0d8ee19645e8246409f76adee4412ecef3466b76","sha256":"2af6b51b39ceab86129d473a1fb9a4a827539efc7452de2103a84ebd09d75790","sha512":"d922ced4a418ef9049cebadaf49f897432449ad051ece1361014ca9c64514f9eb53f6d77d6e83551ed2939d0eab9d518f0c048e12aef3e167ef3d1d517dbe3ca","ssdeep":"192:gxlzcp1ISvp1S/yakFAn1hQu66H1Ka1t4l/O3a6Nr:zb6cu6IQM","tlshash":"9f32209871bb1870993338344bbf8512793ac11f4c5cd954bdac2aa07f58a5ec6e1bb4","first_seen":"2025-10-22T08:39:12.013749Z","last_seen":"2026-07-25T02:29:56.445614Z","times_seen":1506,"resource_available":true,"data":null}},"time_used":3575,"timings":{"blocked":3318,"dns":0,"connect":0,"send":0,"wait":242,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/css/custom/prizedraw_pop_custom.css?ver=1663905027","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.955Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/css/custom/prizedraw_pop_custom.css?ver=1663905027 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 38\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nCteonnt-Length: 18\r\nEtag: \"632d2d03-12\"\r\nLast-Modified: Fri, 23 Sep 2022 03:50:27 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x0a5KIRhFr6FLOxUhjhIYUKbbXw3NzTYwT%2Bkk3RGFIK3IU0Iw3eBR0nNN2eFmcHh8r2qn8fR9GtoPK5LMg4OU9i6ezmykFPQfVakMOJV3yhYGD2nwBV5P77FAhU%2FMDSvKfKdJwo%3D\"}]}\r\nCF-RAY: 9fcae1316be756a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4957b1edbdaab02ae3242ff27d3732b8","sha1":"0fa68da2f11737fdc4d7961a632581c13f7a8577","sha256":"1adeb028e615a654ebf218f188ad6bc841ad3851da01b28dc4af82ea77179108","sha512":"4965ba38ebc9edebf0321e50f78d18cb9562fc234ffaf91715ecc3c9c9842e56a153a3cc9a30d01a234e8be4e0137d35a06dca1dee9b671ce80a4fa10152d485","ssdeep":"","tlshash":"8d7000000002000082308a280802002800a8b0822200888c8880002a302a0020000880","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T02:29:56.423919Z","times_seen":5162,"resource_available":false,"data":null}},"time_used":976,"timings":{"blocked":505,"dns":0,"connect":0,"send":0,"wait":470,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/css/e20260331_FIFA2026.css?ver=1776739135","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.957Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/css/e20260331_FIFA2026.css?ver=1776739135 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:22 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nEtag: W/\"69e6e33f-34f4\"\r\nLast-Modified: Tue, 21 Apr 2026 02:38:55 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F9C4DE1t7mRkgW5TNPCTzW7wdW0Pw14EhAwpG8PlHTDsf%2FfmfCasC0JOBo4jBzaTnUm8pLdTnWbrw4LdlJm8E%2BdJBqNhyxM0i3u1U%2FHchPUXNCfXx7fiG9eCHv96mz8l2cc3uJ4%3D\"}]}\r\nCF-RAY: 9fcae13179ff0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13556,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"41933e03d2cfdc580cd408c2167dbf5c","sha1":"5e729cd64870161830ce284ffe59d1989264d866","sha256":"75eb3909d536d505095096ad39d90dcb86f000b1f122899fc20f75f03e480946","sha512":"11cd5612a1ce2097887d0bc1ee6b68bd366532fc23be61bcb45d98f3572bb118dc30fde70f7e8e90daff76ce3d5c68547325bd9c4894013382bd17fbe965590c","ssdeep":"192:CojbaC4Jy/Sfel+MOFrs8gTCx5rj3PovpXRwXDd2xpPAHIcV8K0z/UPnqmiywLsQ:wGrOFrZEBOD4MaonDPDPDXDkh9","tlshash":"bb52214635af18486a17f07c2feb471c623c8063860aac6c76ee684dcfcb99c52937c5","first_seen":"2026-05-10T19:50:54.215971Z","last_seen":"2026-06-08T00:40:31.455059Z","times_seen":12,"resource_available":false,"data":null}},"time_used":983,"timings":{"blocked":521,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/css/custom/header_custom.css?ver=1738643282","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.981Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/css/custom/header_custom.css?ver=1738643282 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:23 GMT\r\nContent-Type: text/css\r\nContent-Length: 2028\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nCteonnt-Length: 6702\r\nEtag: \"67a19752-1a2e\"\r\nLast-Modified: Tue, 04 Feb 2025 04:28:02 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AupWF7R9A0IxYfdXRstpyGbTEZMZmsOFZ5VoeXetADTloFngqz7cz8hUJwlM07agQcGq3ovZQI5bJftQr5hhiZ6YKbQ6Qa1crqccbADzdyBWQen2QK%2B%2F8fSA3Eubnm9FAFPoL4I%3D\"}]}\r\nCF-RAY: 9fcae1376a9f56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6702,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9bb336c25275a44be055593cee547e55","sha1":"881e45a4d3bfc4ff6e3eb29bd7dad13fef00cbb3","sha256":"f093c1ff1c5576fe70b99542fa3ec95459e2353380574e6b3b9621d4d0d5e310","sha512":"94d669998c59ce5b10a47738e1b6ac68c54a590afe0ed793c08d57f2dbd4e334d8586dc9d76e0704adbdc2bf01689c681453a796605f716a56f8072934c40674","ssdeep":"96:585UOKrCo+wyCWiV9PR6FS5+j60XF1RnfgE6Gvg1CFcSk6yx2/kK5wN0DzMaZ:6oNRRrPIFW+j60XXFcdbLCvMaZ","tlshash":"a5d174c167e16448b526c5f2bc616a68635f6052c40fdd2cf3f8246cddee1c6a376368","first_seen":"2025-02-06T13:25:38.25631Z","last_seen":"2026-07-25T02:29:56.424942Z","times_seen":2897,"resource_available":false,"data":null}},"time_used":1916,"timings":{"blocked":1444,"dns":0,"connect":0,"send":0,"wait":471,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/footer/footer-18plus.png?ver=1600747939","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.027Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/footer/footer-18plus.png?ver=1600747939 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:29 GMT\r\nContent-Type: image/png\r\nContent-Length: 441\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"5f6979a3-1b9\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Tue, 22 Sep 2020 04:12:19 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AMXajR6kCaTh2Hf%2BYDrRx%2BaTUB0iV5WngENE%2BmInr8tMX6Gimojwmh62nXP2XLLLJ6p%2BktIIMpvsX%2Ffq6FO%2BablgLmfueiYevesVlHtRyAT0pVXgEp0Lbuefm7kO%2FcQ%2B9U5oWO4%3D\"}]}\r\nCF-RAY: 9fcae1598e5056a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 4-bit colormap, non-interlaced","md5":"950ceac8f20ad504e908c855fef89833","sha1":"694bdd9709a9bb3be26c6f7bb350205eb44ac7b3","sha256":"e17939202163e612402dbf251414bbb4e5faffdd133fdccd0bf2afd356e0d635","sha512":"07ef639d2d340fe07a2c32c06d67548675b57884e9c89e508cd1abce17dafa0e33bdff120c5c6f41e7fbb9d68f32908e859ed01b0d6f27a1fdb28b040749d289","ssdeep":"","tlshash":"f1f023d3874e9c50f4505f61c66f1a8398b68e0cd0afe906d91073bc283a724b2d36c3","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-07-25T02:29:56.394586Z","times_seen":5047,"resource_available":false,"data":null}},"time_used":7089,"timings":{"blocked":6852,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/plus/js/unite/crypto-js.min.js","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.067Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/js/unite/crypto-js.min.js HTTP/1.1\r\nHost: www.bet73019.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZ0ZVwvVE5pQXVOSXYxblBtS3c5ZmFRPT0iLCJ2YWx1ZSI6IlBid0ZVSlJnbU5lN09ZcEI5WjFzdndHelVYWGFidmxNQmpwUGREclRZcTVneGRPT1d6ZmszR2FcL1lkU0lPQkxWaUZQNlFcL0tyQlo3YWJNSlwvNHpSXC9lZz09IiwibWFjIjoiZDdhOTRjYmU2YTdmNWM4ZjQ0NDI2Y2Y1OGFlM2VkZmM5MmNiNmU4YmI3MWJkMGUxMzkzM2NlNDQ3N2ViYWEwMCJ9; vanguard_session=eyJpdiI6IllHK1hZUXV6XC95bmY1SXpRZktYXC8wdz09IiwidmFsdWUiOiJIVTlXemtMNkVQODRjZHZUNTF0T1wvbmVieE9lejhsMGNpVWZlRkZRK1R1N0piTUFGMWFHN1VmVVdHSCs4Nlh6ZjgwN2xUXC8rdVEwRDY3eGk2VUdmeVBnPT0iLCJtYWMiOiI3ZGU2NjQwNDUxODk0NTZiYWMxM2E0NjgwMmVkYTUxYzYwM2QxMmNiZDg0ZDc2MDIzNTRlMjFlNjA3Njg3ZWZhIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:21 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nEtag: W/\"61dff778-bb78\"\r\nLast-Modified: Thu, 13 Jan 2022 09:57:12 GMT\r\nX-Bos: b83\r\nX-Cache: UPDATING\r\nServer: nginx\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47992,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47992), with no line terminators","md5":"cf3402d7483b127ded4069d651ea4a22","sha1":"bde186152457cacf9c35477b5bdda5bcb56b1f45","sha256":"eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc","sha512":"9ce42ebc3f672a2aefc4376f43d38ca9ed9d81aa5b3c1eef60032bcc98a1c399be68d71fd1d5f9de6e98c4ce0b800f6ef1ef5e83d417fbffa63eef2408da55d8","ssdeep":"768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe","tlshash":"9c231bc1a19c219152a774d0093f7107b463353a460ed5acf668e9eeecbcaea903dd7c","first_seen":"2023-03-07T12:04:24Z","last_seen":"2026-07-26T20:56:08.54372Z","times_seen":76986,"resource_available":true,"data":null}},"time_used":971,"timings":{"blocked":212,"dns":1,"connect":212,"send":0,"wait":334,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"www.bet73019.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/css/unite/prizedraw_pop_unite.css?ver=1776758733","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.954Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/css/unite/prizedraw_pop_unite.css?ver=1776758733 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 1773\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nCteonnt-Length: 7367\r\nEtag: \"69e72fcd-1cc7\"\r\nLast-Modified: Tue, 21 Apr 2026 08:05:33 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LvaET%2F0tQ%2Fd6CMWZrIltApBL%2FbLHlmkKk4ljyob7LFkkPfcw%2FUpQODmZetH6RGM0OYCOz55rgGtLQE3CsD9RjOYwWvwU4ulncCD4HrHM%2Bv77MHUk%2BuGsGJpIBZH%2B%2FNBobFyNfGY%3D\"}]}\r\nCF-RAY: 9fcae13169b10883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7367,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"3e122aeec2f331f838ac02196911c053","sha1":"36529cf5fcaf899aca56186cad0cc4b6a1f4be9d","sha256":"33b86def05863e32da07888eae98f8839c924576cdfb89484366f251e1d651d0","sha512":"527f177b2f2f32f83249bc2da169eddb3b00461fb615cb3880a54daea2e2b27e00efbd86ae6b8a4a5c20afa1201eea10f9c8ec385603db1dfa6dbc0d6cbeeebb","ssdeep":"96:jIjyND5elhmYza9/4O8nn0LDqsEx6hhIArcBlCWhXW5bQMqYsxhe0CKFwftVo:zMfeun0LDqlx6hfcBkW5WN3IhsKFwftK","tlshash":"87e1f3f4e28f3ccd77b797e96eeb0d52a50a02dbe202ce04a3585ce55f5a13c2536284","first_seen":"2026-05-02T03:51:45.646189Z","last_seen":"2026-07-25T02:29:56.447653Z","times_seen":57,"resource_available":false,"data":null}},"time_used":1026,"timings":{"blocked":506,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/css/unite/header_unite.css?ver=1744941935","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.979Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/css/unite/header_unite.css?ver=1744941935 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:23 GMT\r\nContent-Type: text/css\r\nContent-Length: 1796\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nCteonnt-Length: 4957\r\nEtag: \"6801b36f-135d\"\r\nLast-Modified: Fri, 18 Apr 2025 02:05:35 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5bhDopjPNASEIWUXV08Hnmxt1VHGMEppTd10ppfGQVfLjWTN3dEEHlDnqmL%2F1K3nMbd%2Bi0e%2FIh%2F23UqAuQL%2BH2UugDYzX9G837JdE5dWlVllY41CxB2nUM7w0SWXhcLuz4u47TM%3D\"}]}\r\nCF-RAY: 9fcae1375a9556a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4957,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"b934b75c09f2645b1e46dc5a89d13fe9","sha1":"91a38586f325f7b98af5eef96d66f38a04dace2b","sha256":"f17daf0db63aa8fbab2a4a73efe37469d9b17d13df2a1d7ad0512671c6ebb408","sha512":"d8e77a3eeb8a2d055767cbbe218a53bafa85c99fa3efaee736a4dd74743b922e6d64115317560c72969d0e3496c13f5b684803ca71ff6b0c4b3f7c0fa7122862","ssdeep":"96:N1/uCASG8K0h91s2sqVKnmqHuRbElB/sAx7BdlAfq0WO:N1llK0h98nHkbaB/HB+N","tlshash":"56a165ba9304100ab367d56578a0cfea63bfa1918442ab7dadf9304dc4ce1d456f62c5","first_seen":"2025-04-30T10:38:17.688345Z","last_seen":"2026-07-25T02:29:56.437741Z","times_seen":4307,"resource_available":false,"data":null}},"time_used":1677,"timings":{"blocked":1434,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/jquery.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.983Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/plugin/js/jquery.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:23 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BvaVTJoWUHXTPyxm1p%2FmiWCzkQfs8ZXtu26rA1yNib8b0%2FrsKDFeL%2BqY6Ucw%2FvKDNlrlw2ZoK4uEeRzH6qhfOBT5QcicYuf28oDz2LveubgZm69TRVnypxMcHSHQsY7d6j%2FZHDo%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"5f412ba9-14979\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae1379b0b0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84345,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"f9c7afd05729f10f55b689f36bb20172","sha1":"43dc554608df885a59ddeece1598c6ace434d747","sha256":"f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c","sha512":"3dcae1ff6e98c64e3586be3eb14dd486c51f7d4e9fa1b8f9a628be4fbb6a9ab562f31f9b50e16d2e0c72b942bdbe84eee8e0ef87fa730db1428b199a59d88232","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ","tlshash":"ca83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-07-26T13:58:25.771607Z","times_seen":26158,"resource_available":true,"data":null}},"time_used":2481,"timings":{"blocked":1473,"dns":0,"connect":0,"send":0,"wait":512,"receive":496,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/celebrate/js/carousel.js?ver=1637918556","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.010Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/celebrate/js/carousel.js?ver=1637918556 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:23 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XvH76Oq1%2F4fdyFvPY133eI%2BzPz9AfQrbs9f%2FfcOR6tBrF1i3dyQ9qV4NYbyrmEtqutG9Sb4Ls6hOMDWtvUnVE13i2jUmrw9nkXJqPG%2BfgFoW8IgTbJ1OPkdTICSqDeoaOwYWX4w%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Fri, 26 Nov 2021 09:22:36 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"61a0a75c-8da\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae137cb770883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2266,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a55f280dcdbcb4a968d8f6364a2714e5","sha1":"7815466d8a2584bf137ad80138462b39cb62d236","sha256":"c2e540b8dda366b0898cc14ecda800ce2787ed2222b6ca38f67444882d8abd75","sha512":"f8404ad28595dd418ca26a6a7d1a984eb38d7a83ccee3286ed90c34c3c72f7c57cee42c59281ee9071b32c30c0c91d4d5ff5ff40c5741e75d611c1b7a8b15485","ssdeep":"","tlshash":"cc411124dd7214389533332991f7cb45ef2ea767a6418ca770fc4129afb0409569cee9","first_seen":"2024-12-20T12:48:50.204122Z","last_seen":"2026-07-19T11:09:23.445716Z","times_seen":97,"resource_available":true,"data":null}},"time_used":1960,"timings":{"blocked":1469,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bet73019.com/plus/plugin/js/bootstrap.min.js?ver=1598106537","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":80,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.031Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/plugin/js/bootstrap.min.js?ver=1598106537 HTTP/1.1\r\nHost: www.bet73019.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZ0ZVwvVE5pQXVOSXYxblBtS3c5ZmFRPT0iLCJ2YWx1ZSI6IlBid0ZVSlJnbU5lN09ZcEI5WjFzdndHelVYWGFidmxNQmpwUGREclRZcTVneGRPT1d6ZmszR2FcL1lkU0lPQkxWaUZQNlFcL0tyQlo3YWJNSlwvNHpSXC9lZz09IiwibWFjIjoiZDdhOTRjYmU2YTdmNWM4ZjQ0NDI2Y2Y1OGFlM2VkZmM5MmNiNmU4YmI3MWJkMGUxMzkzM2NlNDQ3N2ViYWEwMCJ9; vanguard_session=eyJpdiI6IllHK1hZUXV6XC95bmY1SXpRZktYXC8wdz09IiwidmFsdWUiOiJIVTlXemtMNkVQODRjZHZUNTF0T1wvbmVieE9lejhsMGNpVWZlRkZRK1R1N0piTUFGMWFHN1VmVVdHSCs4Nlh6ZjgwN2xUXC8rdVEwRDY3eGk2VUdmeVBnPT0iLCJtYWMiOiI3ZGU2NjQwNDUxODk0NTZiYWMxM2E0NjgwMmVkYTUxYzYwM2QxMmNiZDg0ZDc2MDIzNTRlMjFlNjA3Njg3ZWZhIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:22 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nEtag: W/\"5f412ba9-90b5\"\r\nLast-Modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nX-Bos: b83\r\nX-Cache: UPDATING\r\nServer: nginx\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-26T20:33:05.437148Z","times_seen":96514,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"www.bet73019.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/unite/jsencrypt.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.035Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/js/unite/jsencrypt.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:25 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXUfcrh7Stcp976ejJRDArLYQe2ojweOisQO%2F8BgdlLuGBdNY1vNl5Wy3AUgYwGbndcM6UrHLy%2BM5mfca6R1Ey7pwcfH84vjImcp22vzeHc4e28U23yEZdpSyMFlRsVAUIeOu%2Bk%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"5f412ba9-db4e\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae1429c020883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56142,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13814)","md5":"64507221feddff84c80b99c98827d76c","sha1":"5c7000638c6bae1a1c448367822a8682d59d371f","sha256":"5a0be406a1bdf94a25a9d142d4124e3dccbdeb5593cd78fb0bd234df89dd7389","sha512":"cc3beba9e9c0d1e149642c41b2bcb351972f8a1bcd9445dbb5e32feb6c91c5d851e2cecad5a6b3f8b8ec4727e4e8cf9824bc80244baeaae20023c23c1a02c2f0","ssdeep":"1536:cJxLSEwwmr2yZPp8yQPj6OR1fdfqovoRonm7f6T:cPErPp8yQPOOR1fdfqg2l7f6T","tlshash":"cb43e9853ae6b075039a50f0051f084ab13ab92e192f44ecf699d8e17cb584d637ffb9","first_seen":"2023-03-07T13:16:24Z","last_seen":"2026-07-26T21:15:50.821988Z","times_seen":20198,"resource_available":true,"data":null}},"time_used":4068,"timings":{"blocked":3179,"dns":0,"connect":0,"send":0,"wait":459,"receive":430,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/plugin/css/font-awesome-addsvg.css?v=2507231","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.481Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/plugin/css/font-awesome-addsvg.css?v=2507231 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://3f38sfb.qdhyxt.com/plus/plugin/css/font-awesome.min.css?ver=1753257975\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:26 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nEtag: W/\"688097f7-5ce0\"\r\nLast-Modified: Wed, 23 Jul 2025 08:06:15 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3E3I9PaUsKqBjeWiPON%2FCipIdiSf29OEfueL3PxTf6BNFcEctF0Zx0aHx%2BZZsCJx%2BGIE7RCEsnFShPfaNPkBj89uKZ71bqBPfeK1ynZ%2FM88LPP6szKcOJAcJ35fyg4mii9H6xko%3D\"}]}\r\nCF-RAY: 9fcae1451b810883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23776,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2811)","md5":"6097f31c1b8ed2b58b36a26a704531d1","sha1":"f9d2b2c866d186c372ff6c11d5f69e608ca0f457","sha256":"4acd44ed0da6eae50d2f4b38649e6085c73d3202c08ba85870be5e0eb80a55c9","sha512":"a02f15b6e01f10bac28e3e1e24f8605ab65bf0c1e0a10b6746cae341194037cc71b124f39ee75fbe28bd1175f329e7065595437131f8856801c574642b84acc8","ssdeep":"384:AD+8djF3PcO3Pc4XfVK2wMXyWq73r2wMXyWq739WqMWqq2gw/2gw72fQ62fQ99:S+wxBjVHyvjqyvjUi1wDwq9","tlshash":"86b263b2460a78e24d143b3bd2a92a0d574dd6e2fe93ee56d07609588b0ff1837471bc","first_seen":"2025-07-24T08:18:26.078876Z","last_seen":"2026-07-25T02:29:56.39522Z","times_seen":2883,"resource_available":false,"data":null}},"time_used":3578,"timings":{"blocked":3130,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bet73019.com/","fqdn":"www.bet73019.com","domain":"bet73019.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-16T13:55:15.472Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bet73019.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T20:50:59.211778Z","times_seen":17549941,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":0,"dns":114,"connect":211,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"www.bet73019.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-16","alert":"Phishing Block","trigger":"www.bet73019.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/css/custom/float_customer.css?ver=1607755023","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.965Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/css/custom/float_customer.css?ver=1607755023 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:23 GMT\r\nContent-Type: text/css\r\nContent-Length: 397\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nCteonnt-Length: 1259\r\nEtag: \"5fd4650f-4eb\"\r\nLast-Modified: Sat, 12 Dec 2020 06:37:03 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=beeYPVO%2BowVrk05KWeXB9dnRZI2ueFCWygjirOHSx1ETx7Kjo4sRbwkVU6DrHhNkKA3McFVD3W2ExMFK5XHV6SgVgzeNRgFeoC1I%2FHYKlWXqWoSVQEtUV65adpplEG9FI%2BxJbc4%3D\"}]}\r\nCF-RAY: 9fcae1345ef456a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2ddfef0c4056c3d9eb5f3df7fd940bdc","sha1":"5632067b6e1c0e2db3f7420470f8f5e15a78f2e8","sha256":"abb89644d467e88130629d409fe0c26f98779a78b539b6ff9996c720dfc8e662","sha512":"f989c4151853270e2ea25e60449305e0f9b0f5847a580e57b09908271d0d37f6b150515b3c49a343768b7cf4b34d42e858a9b30dbc3b7900747f40a5bd19e2f5","ssdeep":"","tlshash":"412195930d272904fc15e1742fc4112d122a80cfaa5fdc1c76d99f195fd266c98a6be0","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T02:29:56.43403Z","times_seen":3299,"resource_available":false,"data":null}},"time_used":1448,"timings":{"blocked":966,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/css/custom/login_custom.css?ver=1663905027","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.977Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/css/custom/login_custom.css?ver=1663905027 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:23 GMT\r\nContent-Type: text/css\r\nContent-Length: 92\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nCteonnt-Length: 105\r\nEtag: \"632d2d03-69\"\r\nLast-Modified: Fri, 23 Sep 2022 03:50:27 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2HqpL52reMEwyOdQvQfxYEqi86jI%2FHaK%2F0iXiKUTmyuz7N9QdKK7bLAT1zWJo5fK%2BNh2beAw8Um%2F6HJexR%2Fz8XMGwpxW5qE5JaHBM8P2C6CfYXexlZEz9BE9Koz6No2%2BmFcabeM%3D\"}]}\r\nCF-RAY: 9fcae1359d4f0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d520ae5e8e22ca748c7a9f42456b2999","sha1":"bc32a4581b85bbba126872bed2d05be6e8db1c96","sha256":"2ef18a39610b5f98818cd76249061e93a4bc8c01677b51d73ea80fd3b1519865","sha512":"2a6bd8693789250119a0a9fb8d109eea7ff436ac974ea547b5ae7282d4e6450f2c1fc7c076486395d056ad7cc775f3ff5cbf1cc08ce718e7f5e2a58e0ce90ad8","ssdeep":"","tlshash":"1db092900c5a4f238407c595689a87018e3d90219f888f2f0c3928a4ca8af1410a6670","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T02:29:56.441969Z","times_seen":5048,"resource_available":false,"data":null}},"time_used":1658,"timings":{"blocked":1153,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/common/storage/cms/cms_1081.webp?ver=1770027519","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:21.996Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/storage/cms/cms_1081.webp?ver=1770027519 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:26 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2908\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"698079ff-b5c\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Mon, 02 Feb 2026 10:18:39 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0BH4JBxwq8hqVTTGhSUjPSnTOP7tzl8o%2Bb0Km0k5ACjyaHNtlPRKQYJYcFIbI0PG98aXC9CCUJK0Joc7v1X2z8Yj9xQc%2BtLUER2AGMe%2Bs7QxGAtuM7BRXn3mipeHd6U%2BN30z4yQ%3D\"}]}\r\nCF-RAY: 9fcae1482c0c0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2908,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"416ff0c16af0dff01b882b21bf6cba00","sha1":"40c1de608f455121728182eb5354d087a6b40694","sha256":"10c6ea4e033e35feeff885e6be9ab177afb6cff709abaf5a0dfc9c4df0e8929f","sha512":"a3974291ee961b41b2cb3d7bdd17222c4f7bbe19e609d456f145c7ea4c019240bc35c28c79698aba3aa3f6fc144bb59d551c2f8905b18b3d5ce12c63b75f214b","ssdeep":"","tlshash":"c2513a845288a8dec2fd85a8d9d94701a5b0cc591c7f426074b8d5e663b38c88a78a79","first_seen":"2026-02-02T21:06:37.634962Z","last_seen":"2026-07-25T02:29:56.405379Z","times_seen":50,"resource_available":false,"data":null}},"time_used":4579,"timings":{"blocked":4107,"dns":0,"connect":0,"send":0,"wait":468,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/footer/footer-gamcare.webp?ver=1774419641","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.026Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/footer/footer-gamcare.webp?ver=1774419641 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:29 GMT\r\nContent-Type: image/webp\r\nContent-Length: 336\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69c37eb9-150\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:14 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DwTSrtGvI55%2FtqbIDVpsANtJ14X8L0dYEHBe5KXZ%2FchhBNvix1rNLpH9UdeSav0jACWyH9aez2qFmUX0SfnV7uG9PlsZulY8csAXupY%2FpVvsXf7vpStEY8FepdoQTcjKG7CqATE%3D\"}]}\r\nCF-RAY: 9fcae157fb3f0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":336,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5a1953d64f560ee27905861537433026","sha1":"ed173c49ef46ea566ad2470bf4a24449530ad7d9","sha256":"1703e1bece2064267bce137403a1bbb163da29ada7c52bb6e480b6117390e3a3","sha512":"c7afbe576bbd81bb5298bf358cfb3187994c209c0d4bc9808d6c3118c0129c8e6dcbabacb3a7e2beee126199c3d846f4c21d5909eac55f3744f0d14d3f1b7277","ssdeep":"","tlshash":"bde026c042e680a0c9c76c36b759a1056b9b9ea151a1c8a110e2b49531747f8b39aa38","first_seen":"2026-04-11T00:00:37.125323Z","last_seen":"2026-07-25T02:29:56.430683Z","times_seen":21,"resource_available":false,"data":null}},"time_used":7090,"timings":{"blocked":6609,"dns":0,"connect":0,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/assets/js/caller.js?ver=1675418258","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.036Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/js/caller.js?ver=1675418258 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:25 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWUYP5md3J%2BlOAkkBzqRmHVXpCO%2BiCDyZywbri6xNP1RPT%2FoJdeeEGArluyRIl%2Ft2B6UwAYExa9xCQMIGZmEbSRba%2B9y2gnVaytYxYmnxhdMmkoOAXDLfRoK12k2z4D2PVUg%2B6Q%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Fri, 03 Feb 2023 09:57:38 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"63dcda92-1122\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae1437eed0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4386,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4e7441dc033395b76a96b25b6efef0f0","sha1":"c833e33f4a95efa559a847dfff036cb904260b48","sha256":"80caabbe50f5f83254e2545d01bacf299c7f417a103e912bd41d6c330a6e4f86","sha512":"e96041ac2b7106fe9aceddc1faa3e996ffaa97945d56cff7b3ca0697492cf6ff53f6fc3826319a85eb360e684a166c0c8c075118a37655312dfbf231ff9aa167","ssdeep":"96:veR5suijTWxKhgCBTSCkAjnhefPMm03OMu9eqeeV0vMu9eqeeVqgYi:veR5su+TWsU1eO70v76i","tlshash":"dc914212de042051f76332b85a55661f6131684f7f8a888dbcbc747f9b70acb857d189","first_seen":"2023-03-13T18:11:33Z","last_seen":"2026-07-25T02:29:56.41883Z","times_seen":5054,"resource_available":true,"data":null}},"time_used":3792,"timings":{"blocked":3318,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/custom/moment.js?ver=1580697220","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.038Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/js/custom/moment.js?ver=1580697220 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:26 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uCoFVa2okpvF8TPsJRZzKeqdchoh9ObXhMG9uSU6ua08bNmAAvaVvs4vkA%2BWJnFH5iKFJ2DabO2Htt19UnsvyCgeCKnbKSK%2FGnpQdN8VG6lbHlBVpNsJhZgskzUDnT3C2ejzR1M%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Sat, 16 May 2026 13:54:11 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"5e378684-1f30d\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae144c81b56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127757,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e70edb526ff09f426618efade93a4782","sha1":"840b05449d3851118fc835592bd98af885bdbf1f","sha256":"ab513aa4626ba224ac61b747674e6aead965f6e2cf87a2e60c7d4645b519817f","sha512":"943192c03e09b13bbdee324fda4c81d019b4cb5178596b5c548a1e6776022aded289a6076d32d5f55f99316b57b6f7db13c6429edb3a1e6927e7bcea89774cd9","ssdeep":"1536:/cZlnfxbjbJzvdvpeG2iMuz/M6z4QZFSNwmJaxxKZ5dFR79LNOf0uK:/cZlntbEG2i8umYx620uK","tlshash":"cfc3508a69476123467267398f9f4509ff6985330a0e8605bc9d92d83f71c6c43bafec","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.419416Z","times_seen":5116,"resource_available":true,"data":null}},"time_used":4703,"timings":{"blocked":3521,"dns":0,"connect":0,"send":0,"wait":481,"receive":701,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/2026fifaWC_stickyBG.png?v1","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:26.098Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/2026fifaWC_stickyBG.png?v1 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://3f38sfb.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/css/e20260331_FIFA2026.css?ver=1776739135\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 72815\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69e19c78-11c6f\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 12:12:14 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ISvsPHi%2FMNceQyPgU3hhLUi9RO3oahUAarZCcB65FkbfOFV8EtAtqKo0SOFJI09xdAOL8YlWIh8qg5kvNz1ZrItuixtrr3AYgoY98kZKFDNY7CI%2FK8RQCvjJdb7rdO%2BjbRHWoRc%3D\"}]}\r\nCF-RAY: 9fcae149acaf56a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1346 x 419, 8-bit/color RGBA, non-interlaced","md5":"383f5b7b42b1c0262111d03dc6674589","sha1":"e888db2cfa9f90c1ece24611313a7daa316fd581","sha256":"d66c2a8fd43775968cfab86acd57b1b3cd9afa29097dc7bcab35faae39475a36","sha512":"5a3fe008dc5122aefbc22ff11b857199c74f8f02ac4246d3ee94868995f2664687e8f7682381cca4533069c829b94d356f56cff43819aef8189f728ca81a82a7","ssdeep":"1536:AuSBcL5CopgOBfulXcuHDV8zWZig0i6GQVI6ITWv7mv/1cHUmuXTpatcz:5SCrNBScuj0rxO3n1QYXTpH","tlshash":"fb6302cd315cb1989852a40fe5804b88f4e51eaf52f587fb870cf3fb5b7aa928045276","first_seen":"2026-05-10T19:50:54.228017Z","last_seen":"2026-07-19T11:09:23.457215Z","times_seen":22,"resource_available":false,"data":null}},"time_used":918,"timings":{"blocked":248,"dns":0,"connect":0,"send":0,"wait":230,"receive":440,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/unite/moment-timezone.min.js?ver=1663911607","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.014Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/js/unite/moment-timezone.min.js?ver=1663911607 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:24 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NrT0DNwVjxQGyuZfwJ46cFD65sJcncPxxB5hwgLfTAc1wZix2%2BDl2ZKfhJbvRc0gho8eQYPI5k1lVwvnXE%2FdcX2jDYlD0NaU7JFkEqALm%2BuUOqTK6MUpp3BkI9Qt30uEHNaDgLM%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Fri, 23 Sep 2022 05:40:07 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"632d46b7-d74f\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae13adcc20883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55119,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (607)","md5":"88fb4a278aa21a9116c7c91d4091c2dc","sha1":"938a777b5afb85170ecba565280327523844ccff","sha256":"b04505388f10657744e0fb1b3d5bab6232d1f1a3144c11b3693f36447dc27a6b","sha512":"3ebf18fd3c351de2da9b6dde2b269563b9d9ec0eeefcb86a0c42aa1cb4736788c47ccc861f182846411d394fc09cd6bc68771804b9bc8391cc65ddc035541527","ssdeep":"768:9CFCFS8nv9KkkBTShRDCDnievxeIdj2k+I9:TFroMRDCDlJXjTv9","tlshash":"29331d47466e395251a28017fc0eb7c9606ed1114cd95ccb6fbc22a3ca68ef5bb33a17","first_seen":"2026-05-10T19:50:54.180969Z","last_seen":"2026-07-19T11:09:23.451125Z","times_seen":22,"resource_available":true,"data":null}},"time_used":2879,"timings":{"blocked":1957,"dns":0,"connect":0,"send":0,"wait":481,"receive":441,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/footer/footer-thwate.png?ver=1600719130","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.025Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/footer/footer-thwate.png?ver=1600719130 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:29 GMT\r\nContent-Type: image/png\r\nContent-Length: 809\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"5f69091a-329\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:13 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3m0kIqnTAJE1WN4wSgCWJK581ay2aPJo6Hsz1rdg8WKciWteFDK0maC%2FimWw7odKDT1KjZ8W%2FP919M3iyLXy2Zz8jKA9J19%2F7%2FYfuVxaFDHmmrel8F5mMhUuND0tIJv%2F9XAW6d4%3D\"}]}\r\nCF-RAY: 9fcae157ec8956a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":809,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 123 x 32, 4-bit colormap, non-interlaced","md5":"997ba7f2d6da9a90f5517d426b5994e9","sha1":"61bdecfa266e48f6f0dc9469f598a45c7bff9036","sha256":"146c3bcd19eef83c9a698efae1d39cdbbf4a948f75b7677931654dffb89ae5f5","sha512":"673b28fdc116da7e830f7fdcab47496a72c13317065e4e4a934a86c89c939287f902f9dd225c78eb7c36a5859ba6fed717423078dc71dda886aaff9de2dcfad6","ssdeep":"","tlshash":"6d018669437c54668d94d3b0633cec11c5a7a3831878b353960380c9ef58a0260c618b","first_seen":"2023-07-20T05:21:02Z","last_seen":"2026-07-25T02:29:56.438696Z","times_seen":3291,"resource_available":false,"data":null}},"time_used":7057,"timings":{"blocked":6595,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/plus/js/unite/share_unite.js?ver=1749181409","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:22.033Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/js/unite/share_unite.js?ver=1749181409 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:25 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HZC9akSKlH0NXc%2F022Ls1LjIwkGhy4c2%2BD3r5LfKEoXXVvKoQrGgDds03zn1nugjVUWih6YRVMz0OFYsQ%2F6Cc35Qf88czf%2BBgPK9oQW3IWXhVovMVisyGaFIxHk%2BQu4u5uRJL7s%3D\"}]}\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLast-Modified: Fri, 06 Jun 2025 03:43:29 GMT\r\nServer: cloudflare\r\nX-Cache: UPDATING\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nEtag: W/\"684263e1-a6b\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9fcae1409e9f0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2667,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (527)","md5":"00c6288b67f7750a75b6e9abbf74c8a4","sha1":"5f464f4ce28448acc1c2fe825d4218795b023db4","sha256":"20327edf72e6632c450e8f8e443db2f728361f74b68697932491108c7f483b9e","sha512":"39dac004bb9b904ec4c4bb4d4963c3b8c4c9d98f9a80d90e53134e28c6055831652f0911e59b58f54c4b1e7156d8aba181b90ee3fe0ba6aefb67162b990787c0","ssdeep":"","tlshash":"37513127e6b82006207730a7deee346b556a8426b3417f06b7bc01a54fc58ac7f9270c","first_seen":"2025-06-07T06:32:46.623015Z","last_seen":"2026-07-25T02:29:56.404775Z","times_seen":4086,"resource_available":true,"data":null}},"time_used":3321,"timings":{"blocked":2860,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images/dc_new.webp?ver=1774419635","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:26.177Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/dc_new.webp?ver=1774419635 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.bet73019.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:28 GMT\r\nContent-Type: image/webp\r\nContent-Length: 680\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"69c37eb3-2a8\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 12:20:37 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=16hBW1Z%2BZhPEpdcVEePBV92iQOppbhUdEAXkZwPCHpmayLzkiYWyRb8P52y5cN52ho49BBKYOHUpT8zfSED02Bv1w%2F9KbZD2byPeA%2F7AsodRn%2B4ksZVXHOZgwvfaFBJwlnf8SHw%3D\"}]}\r\nCF-RAY: 9fcae1567b1356a3-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":680,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f06b671b24b39dd51812a3d90e7e632b","sha1":"74cf3af220d3662fa71853a31128db97699a70c8","sha256":"c6e2ee2c77bc6faf0510f019c8d7d3c0540c64afbd8251bb4f3aa0c3fcd37fe8","sha512":"5ede7ad2295703853ac2604a2ced564a1d6c43cae90481f1ad2d912eebab2f918985785e6746c8d0597ad123df2ceddadab1a0477d6ef3ea2c3da49839c78d27","ssdeep":"","tlshash":"ba01832ad658dbecdd5a957a8b0e2004398ab07317f38740803e6a8848e0f46e193391","first_seen":"2026-04-08T10:41:45.18626Z","last_seen":"2026-07-25T02:29:56.396707Z","times_seen":59,"resource_available":false,"data":null}},"time_used":2703,"timings":{"blocked":2219,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3f38sfb.qdhyxt.com/images_plus/header/common/kefu_icon.png","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bet73019.com/","date":"2026-05-16T13:55:26.179Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images_plus/header/common/kefu_icon.png HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://3f38sfb.qdhyxt.com/plus/css/custom/header_custom.css?ver=1738643282\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 16 May 2026 13:55:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 582\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: max-age=315360000\r\nEtag: \"5fc6f20f-246\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Sat, 16 May 2026 13:25:11 GMT\r\nServer: cloudflare\r\nX-Cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FfijBaDGG%2F2lB%2FkLpDJoaoldL2WiKhsZnWnzfGQKVaz3U%2BnJZ32c6RTX3aPW3l7O43UFCWuNi3wDuG48afk0dorU5G0dY8b8fW7YNoytncjY8oWuBk%2BbDQc%2FotSCRqOgQ32em%2Fs%3D\"}]}\r\nCF-RAY: 9fcae14c1ece0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 16, 8-bit colormap, non-interlaced","md5":"d66100dc3b6143ccaab68587edf59169","sha1":"aec841ed002d6f0572b1bc380212d38be5858728","sha256":"cba9dfe544df0c8b71bb9881e1d77b9be08007df320acfb8398c9b636bc1afc5","sha512":"a5db92a6bb8e2bed2268ba81ebcfbff6564ee50d09ed94c2302cbafb4e234cf9acc99d585568adb0de318e38e790467cf81fcb05643338c7200277a878d04d73","ssdeep":"","tlshash":"abf041ded0770db9f6a8245ae0a20980fd525a1c9ee6534e2a9ce04f08ed0049ab6746","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-07-25T02:29:56.439847Z","times_seen":5048,"resource_available":false,"data":null}},"time_used":1046,"timings":{"blocked":557,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}