{"report_id":"8c5cf2cc-cb85-43b4-8f14-ad9b405440f5","version":6,"status":"done","tags":[],"date":"2026-04-04T23:36:00Z","url":{"schema":"https","addr":"zexbets.com","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"104.21.6.195","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zexbets.com/w/","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"title":"ZEXBETS | Play at the best online casino based on Blockchain","dom":{"size":27018,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27018), with no line terminators","md5":"00377da70f749da8a1887dc30c24bde0","sha1":"76f264d47643224521affd05310f0eba4fe719f3","sha256":"bf1f62d1187fca57f013bbc1b758e846aecb502066c932fef98ff1ecfea1b231","sha512":"6229239181c3221357c19faa12f445ea17d5c5cff9dca6d79c92a7b7facc52f57e5ea6501d5176bffab3f712e2fc331081b924df8c9690ad2eade82015aa2744","ssdeep":"384:nXeo40MTfDbzmvhuWhynvvCOCNPBvCOC4PMexyFPsjIOtjOZtW2titM0E:nOo4RCvhuWhpahFPuIkIWMgMT","tlshash":"0bc2d97a61a4cdd6a91b9fa5d0bd3d3e208b857e8b124ddcc19ccea0c2829fd1e55cc0","dom_hash":"domhash7f6c308bc750340482ce528f827672dc","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"zexbets.com","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"104.21.6.195","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T23:36:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"zexbets.com","ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-20","domain_rank":0,"first_seen":"2026-03-05T13:18:14.609548Z","last_seen":"2026-03-05T13:18:14.609548Z","alert_count":104,"request_count":52,"received_data":1510301,"sent_data":23701,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/app/(landing)/layout-ca81564ca7ab2f8a.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a5367f9275c124ff441c9f2dda2be9a","sha1":"56f8efc747406730e680b5583b239301797b3f64","sha256":"0d653de16d82ad5663b217d4f67165a5b6d771a51a38c219689792e8566c0eb8","sha512":"c2a82168a520244bbb60a03ab8b4fbf64319ec5f6d01fbe5adc9965af8db74b0f0e0d6418e212934a9f667317e916f879cf9f096bb684d404258653708db6172","ssdeep":"","tlshash":"c1d0a78939817d1d2a136564d977086136f704a8789bbcc166209d911c333ac83a1c8c","size":226,"data":"","first_seen":"2025-03-19T10:41:28.874854Z","last_seen":"2026-06-02T12:09:08.115039Z","times_seen":1897,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/webpack-c7c03c296ab8a799.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"640af1092aecf89d7d6af2d00741c3ab","sha1":"270ed477a665cd1155eb90543a51d6a98b3de92a","sha256":"850ca4b8cbde5ce387c5444ad089e8cc03e3d31f15b35a5132c968ba78cac432","sha512":"efcead94c2191daad6a3818ba9df8a8b9447990f8269e1d213633c30cf3202ec7c5e1ae41ab66eaa8ed980b280c3a99b10207aa4d401748a240634be4ecb8129","ssdeep":"96:kMyYE1q9WlR3lMka20VGL6VLW56l2WRr9mrLDYyM:kz1mWlNfajUmYyRuhM","tlshash":"2981a8de71a1f4b91782a4a1443f9146f13f28f2281ed4a0da25e4f5fc7554d8323fa9","size":4156,"data":"","first_seen":"2026-03-20T20:06:36.501839Z","last_seen":"2026-04-19T18:31:05.672468Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/app/(landing)/page-308c23aa618f754a.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"75421032c9f8bb473d414aa147d261f6","sha1":"141eaccd335657f61a300d3dd70391342b045132","sha256":"b86b04128e9daf5565203960c1a538614614f6e56d955b546376aeee2e230813","sha512":"7e08cc039365fe8c00260488a1e92c0f618e00a70b3c3b6b5f78931570f0d7704fc518eca66005cfc4ad77aaa4c5e5a1dd3d28ae72d1c282e43c2867e2e6cad8","ssdeep":"384:k05D8yjHisHBOham1LobXv5LD5nP1vqLzxtJbZO1:8yjHi+CFoXv5LDp1vq5tZZO1","tlshash":"80928319e05de6e8ba720c60962fc449712e365ccb09ccf4f9bca8011a5e4d87b27bd9","size":19554,"data":"","first_seen":"2026-01-03T14:23:16.857555Z","last_seen":"2026-06-02T12:09:08.10252Z","times_seen":1081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/9157-1ba04d5623695b43.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d07df211aa09f7a327fd8f7536b1f0f1","sha1":"5e3565273ec641ac5cfd756f5a472cab88fb2fbf","sha256":"c9a61872f0519908e071b9a59fef73f722cfd24c6b3b2800b82a5d8edef6705a","sha512":"b80ff42d0aa35f0e369978332f8517e7e0b2562857f29ea136f000a5d64b77e978245dcff3bd007fe982155e6dc27fd13c7fcc3c65ee7a7faa1d76ab32d8462a","ssdeep":"3072:fexL57gsIi4o2r5pCJfqeaaUxWUQwA+SPg:fsLisv4dQJfN+WpTdg","tlshash":"45f307ad7115b02d4ab31abb40bf5807a87817361c0dc8b0e354f99e91fdad9616bfe0","size":159124,"data":"","first_seen":"2025-04-05T22:58:02.07516Z","last_seen":"2026-06-02T12:09:08.12251Z","times_seen":1895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-06-06T10:05:12.06823Z","times_seen":93576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53c62f567df8a88881c1d8eea64a8756","sha1":"eccc7a5ae448c86795a3b8786318dac7a2148016","sha256":"f811bc6907e4ebb75de78be9891213a23a20b13898a07693cade6576596497b0","sha512":"c0696986ca77329f53a1d6bd8cfa738f36804de6af132afd500153e2d3607eb08ef4b76d1d7da7ba537137ec66f6b79ea38d76841c7d7f5b62d5a0aab2264b50","ssdeep":"","tlshash":"4ff09e5cfc06fcaa5528692f142b5f58e09cda6d53d488ec6798cc97c245c7e038c9c5","size":460,"data":"","first_seen":"2025-12-07T15:18:05.837941Z","last_seen":"2026-06-02T12:09:08.129693Z","times_seen":1123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3eb0d2a42805a861bb454511f88d44c1","sha1":"b56f2125a4a0b8dc2e764853dd9feef82297d855","sha256":"6d21854c20c5d522b6bba41c5683e52dc3bdd8d23bdbb62c7ebaadeb746545fe","sha512":"8056d1c0e96f9fcf1f11ebe4c6b5b663e8dd1bdc9f23c98294410e9196443229139f04de19e736dfc689c1dc6cb6395fecf17d2e8ccd327c92e215747a41674a","ssdeep":"","tlshash":"03f0289bf291d8527893df1ba1371f36489dcc37463cf448a46cc57a2312ebad7a9844","size":641,"data":"","first_seen":"2026-01-20T03:48:07.845538Z","last_seen":"2026-06-02T12:09:08.132302Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/app/layout-331673f02c0ea2a1.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a5a2e867d88ad547ca0bff25baa625f","sha1":"3eb1161cf26afdac4df98c5d21576bc59af60818","sha256":"4ceb9198272a6b6b5537c268d3b82c5fcc82c48110634fb45fdbbd8c836e91a6","sha512":"987381b91ae5369bf96b455eb615b8763c674bc4a68326d5c3203bd87db716a0e46339bc2ae68a5a9fe5969856ddb484fed925ec33b7d0bf5600ba9a967bc09c","ssdeep":"96:DNHzEAF7EMFkTT2TcT9h90Rf9FqI7QsqQTmLIdK9F5bMhqnmwd1CLeD7tDApz3RP:REMFkecuJQs7CkdEBzjDoa4Bel5H6","tlshash":"7412a555b659f8ae0f93d06c58bf9049c22d0b2ddccc403e9f2a96912072d6cb361f9d","size":9101,"data":"","first_seen":"2026-01-20T03:48:07.840798Z","last_seen":"2026-06-02T12:09:08.117619Z","times_seen":472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/1651-820248bc81fac6c2.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca8e72541bf83c94d1a213de187d6a4f","sha1":"e54ad99d5071d3f779ed50de211b49cc2b113efe","sha256":"94514b7b9eddc7c7c3aa5e0394bc24529461b97b27b0a49aef9a5144665eb6f1","sha512":"b113fcb07ae20c11b66c169c2752e2e8887c73aa63519c79532f9b6279a497553cea39cbf31224189e20c9244802f27fcea2ba099df9da45aa4ca455d6aa379e","ssdeep":"384:U4ulVutY+Ne1VMAPJaY9fDDpj7V3vHLuUVLs7BLkP9K+8FskPo4:2XmPNcVMAPJR9pfV3vHLuUVLs7BLkA+Q","tlshash":"b252a565e3e8e7d0963d4bb851eba02f723f338897078ca4e5696c24d4644dd3b41ec9","size":13749,"data":"","first_seen":"2026-03-20T20:06:36.497006Z","last_seen":"2026-06-02T12:09:08.049948Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/2117-603ce227f12237bb.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd99d7878c7e8888b6ab24e40ab69fc5","sha1":"7b304634632723e583517d33e34998346eab166d","sha256":"ece772926ce274f6d31508d891ec5fe44697a6e67273a5c359b17a44dc3fa2bf","sha512":"19be4f0c4789e62bb9d6245b21aaf21f87346f84abda7d1ab8661280dd9e6ab3c57e5fbe07b427e4cf03a6c00b14c154ad9f649989c1d16d35db1dd17bbdabec","ssdeep":"768:PY9P55e7wbSlPYtVDl//d9icrEAKH1ag8xxqKjj3fOpDKdlr/Na8MQr93UsGoROz:Cgw2lMWc3mY5jFdl/UPsibn2kJ51oCv7","tlshash":"05c3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":124467,"data":"","first_seen":"2026-03-03T16:15:40.652661Z","last_seen":"2026-06-02T12:09:08.113348Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/fd9d1056-da5caefe92cdbb5c.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2e6693b6b8e2ae5167ce7ceb21dd431","sha1":"625b83e4cdbc0bc71ca90f7de6633000d5908f96","sha256":"a87677f28d0d640a628d81e90ec37a86c6674c1c656277318f17b14c9542d045","sha512":"4a219d7524f60f77557dd49d61838d092f7517e9b0984cf2860a9638608cf848c381d9988dad5129a63b4eadf274941a786cbc08d3052715407962a6e131aead","ssdeep":"1536:tVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:lzug758kkEiXjOAprX2wd5WjguGOK","tlshash":"b4f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172835,"data":"","first_seen":"2025-01-19T23:51:52.179106Z","last_seen":"2026-06-06T09:55:04.514309Z","times_seen":3422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6bc4ce8045d8ff3cabd2f563664da5b","sha1":"b09b7541744c30bd6e012a17c219e11397d9cbd3","sha256":"039c5b533aa64b0af8cc3be106bd904edc2b2135a0cbcf8e45441ce5a5b074a3","sha512":"db13a3af83f8575782bf574307a00de3d2f2d374ea147914b5bfb77280ca21055917f3f35cffb64e0fc2473635e03ff450b376fec0dc80ffc857a00f6b3a9c56","ssdeep":"48:LZ5Wt+ZyyAx6zA4iA8pRqKsnbn5ncnbnWnXnnnFnDnsVezGBnqPFmGejBnqk5yLi:LrWIUB2tnkurV+rc3nBzQnviktkfEaW","tlshash":"d181592e5406cd4aec6cbd66423f6c3154cd4a7b4b91def8c18cce5581074ba3aeacc1","size":4097,"data":"","first_seen":"2026-03-20T20:06:36.514034Z","last_seen":"2026-04-19T18:31:05.685704Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/app/not-found-fdba94afb6e61d6b.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"669057438158e9cf084e395dc89efe56","sha1":"1f0086606f09bd2b11ff56e83d3d519d2bc16b46","sha256":"5507fd9352e89802f440ba96545f0388e7bde1ac188f10c5f5b60d1dd62b865a","sha512":"a14cb12812f663622ae408f7a4e954a2d0b48cc6e661ff2a880b00ecacd9e5b16bea0dce20cbf14cde0fb1c13eb2c6bdf0391c6ef243f9d002c2e81b84f89340","ssdeep":"","tlshash":"bd01520531c176d8b5176cfc11bf940d306b269c109e44b2d8b6ac912d2228cba43fcc","size":822,"data":"","first_seen":"2025-10-11T08:19:51.958408Z","last_seen":"2026-06-02T12:09:08.059802Z","times_seen":1452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/5353-d8888e459d0d123e.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc61d7ef60504a2f5fef5b43fd53e2ae","sha1":"80bbd7890ab251264753feb976d58bf471bf7217","sha256":"457fb993e9c8544b646cc0b8f599cc88f5a63336c700d17da2cda5cd79a5968f","sha512":"e615c715ebce5a84cefa043a47818a84d9bbfda95716b581dff806441665ae419271190ad835faf79805c31287ec3a083c0df5357f1c32806846eff2f5d63a84","ssdeep":"384:tpWv91E0kbfrT42FPpXAhjyXmP7TivCOqX3rXWXvX4r9gYxRxPzr0Ag:HWvHjkbfVPpXEyXgTpRXbXWXvX4r9g+Q","tlshash":"7662e8fca3f458e83a479f74c46f600e713b547daa5285d9b678acb056141e87702fc4","size":15602,"data":"","first_seen":"2025-10-14T22:47:35.996421Z","last_seen":"2026-06-02T12:09:08.062468Z","times_seen":773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/3573-12ac2d81d89669a5.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3bd4822ddbf1f7446d776dcd249bfca","sha1":"040946db6fb87030c667eeba8477ee89f1cbd1dc","sha256":"9fd6b792fbc7a2eaa0e4bb7024af4981bbe86478ae4b05d20362f4e1cd79bd7e","sha512":"540c23ec40d84af7e7e90b8452b5daad70eeb9f9cd3f2cf73e3585d5f7d91b6ec2b15e9f8eae8315952f3e74c9522f5f12f09cd02ae634d8f52c87cd5ec4e321","ssdeep":"768:6rBewJM1ghuPLywyUZva9kAhczB01NrEez8KN40nLgfNEbk5a29aoLpsgYXzFMEm:adwDfB01NrgKN4cIrz9USE4ta+qMscz","tlshash":"a543199db3b9b9d4b5068b94aaaf5418713f22bd9f04c470abbcac5071244cc7b46fc9","size":55435,"data":"","first_seen":"2026-01-20T03:48:07.795472Z","last_seen":"2026-06-02T12:09:08.115729Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5220dab0418d57da2826b162799371a5","sha1":"9b6b66ab2fe2e790bdc6802a3ec62251107ebf1c","sha256":"f1c8f349dfd680abe6a7898a61ab6a9998c6ff0b91b1e260750d788be4bb94b3","sha512":"7e743ebac584e95f85dcf7c2642c56ea615cd7eeabbacfa857fc217c2b60cf34f4861d37746fc6bf7b9617dfe1852af2282191e296bc816c87b8e4a91985ab15","ssdeep":"","tlshash":"a4f099b2dc11ed0ecb82ce3a0c3e2ca922cd86b90346a546a884c99958629345ef1ec5","size":656,"data":"","first_seen":"2026-03-05T13:18:17.53893Z","last_seen":"2026-04-04T23:36:03.284321Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/8003-35d6c4e938d60f65.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8014900ea0b06de9aba6c034a95c2e68","sha1":"f5f9791bc97c1a2973734e6999868eb15e2096e1","sha256":"bb2ba96a789f1f0c6144a6d6ddba4a09c139b4060a1c9e97af56538d29415c2d","sha512":"cfa275c652a59e72983c88b3a934681c6f29ffc87c4c99ce4a55137b1f5b0cd6f011d8ea93cecdca39f82ef3f2049fdebb3465a52d80ac6887dbf2ea295ede80","ssdeep":"192:cQkUmrphg1A1ZfGVYOw/39aS2wBgrn0z9bjcjF64KGUZbczUdj:tm+EBGVo3kSicbyp9a","tlshash":"ede1e9b2b7d4fd35135a44d484378247b6542e37601e7080d3fa8cea62b8dca85e2f8d","size":7119,"data":"","first_seen":"2025-03-19T10:41:28.915816Z","last_seen":"2026-06-02T12:09:08.114185Z","times_seen":1922,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/main-app-df523c8931f70c0a.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"780f1f062143f470ccc751e8e9d0ba05","sha1":"c9deba27d87d3e1b411b741a1d7249479fe500b5","sha256":"82b916c2ff6e9ac8cdc115f596700aff44c67c4cb3fcae2c6dad80a6baab40fa","sha512":"77205548712b78834d6277e82f573ab652162e8daee458234ee877477cb98410450a7465d681c859ae71bddc4a2d40249260d3a9c8f7f34a7e9eb5010279aaf4","ssdeep":"","tlshash":"a8f0129a2a4c742f2913ad24fdd36c2e256e916028a759501a14ddb12c736ac93f1c7d","size":464,"data":"","first_seen":"2025-01-31T10:41:20.167782Z","last_seen":"2026-06-02T12:09:08.058632Z","times_seen":1913,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/app/global-error-8b742238adb6a5a3.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0093b22be6609d18ff430e7880188de","sha1":"18d4a05eea23af4ae3e18662ee7728912fe7b1d1","sha256":"07604cc56cea07e226aec7b1cd3bfdb6df907ca4288a50f18ac864db849ecdec","sha512":"785673a17a523c7eac0ae9edd5b401d61c4b11ddf109a4d6b9249dce7e2f5b3dff0da38852c2365245c3e2f4260ab01936f589cff05b243bed92c92d49a1c1a9","ssdeep":"","tlshash":"7d21118db0807994665ba8de916f940d729b259d100d2ca2d9725cb11c663dc7903fcd","size":1390,"data":"","first_seen":"2025-10-11T08:19:51.900596Z","last_seen":"2026-06-02T12:09:08.091108Z","times_seen":1451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/fbq.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","size":408,"data":"","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-06-06T10:17:33.971001Z","times_seen":16165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/twq.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","size":308,"data":"","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-06-06T10:17:33.973082Z","times_seen":16159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"21ed0e5e04370200f89b4460164d7043","sha1":"2d0cab70303a39c876f8df68daa83bf97db6ff1a","sha256":"e0bf013bc2484ef3db55c9ac15307e8956b187e1e240a6a36093ab5fa2110055","sha512":"d78680b250968373d70e0022ab44e8aa609fcdfec11548baaf8c07a459a6cd56d36dcdc90c60cf638988bca38c492cc5c6bbbf26e2d0a17e1abc13d146a7457b","ssdeep":"","tlshash":"c9e0221eb141e8426cf3de0a903f2e23809d8877063ca59ca98cca7e150287dab1dc82","size":411,"data":"","first_seen":"2026-03-20T20:06:36.517435Z","last_seen":"2026-05-03T00:02:50.706819Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zexbets.com/w/","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T23:35:36.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/ HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-powered-by: Next.js\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fMUXQ3opIyHU7Z1cTFiOu9aYyiJriwRKXu9qEgEc7morW6jro8%2FzdsiQpAciss21MeI4FNULRjzv%2FtX6YLWfT4urdYHzxVkECc4XNq7uGVTT3WQhLFC4U9d8TbO9Hg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e74216589e856c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":26726,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (26726), with no line terminators","md5":"0d592f7bbb4d7bacd05846d9a9edffad","sha1":"33c6bf2dfa73f96781289edcebad0159649cf792","sha256":"b40b24b29b63cb90359b1d336064b8139de10ea50ad757365748953c31b4a314","sha512":"c0337b37f04fe0a7441878d97251d0b6827bd459760f173140dc5462c38f37ded62297378613a67b860f55b71188eb1c300096e23e19fa6ab88a41e34637c249","ssdeep":"384:nqklp0vWGfDbzmvhuWhynivCOCGPBvCOC5PMexnFPsjIOtjOZtW2titM09:qApgCvhuWh8tlFPuIkIWMgMk","tlshash":"47c2c87aa1a4cdd6a91b9fb5d0bd3d3e208b857e8b164ddcc19ccda0c2819bd1e59cc0","first_seen":"2026-04-04T23:36:03.191309Z","last_seen":"2026-04-04T23:36:03.238268Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/css/0c973de4e2fc1e14.css","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/css/0c973de4e2fc1e14.css HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"707-19d08b78f8e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pM7IGBKb3w6qEJoKHIPgmdHcgavaud%2FjRpW%2F1F7OILunPUf2HtwMmZMjkp5uBAi9%2FvYGoIpr6RKycUXBk3XrEhBHb0EcmuBqP8mbvLiVub46qxhhR0BLl7G1V996lg%3D%3D\"}]}\r\ncf-ray: 9e7421672ab756c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1799,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1799), with no line terminators","md5":"296fba201c130b6b93416c13f0f0cc8a","sha1":"4d40444f295f7258d33950d34ee0e5974da61a24","sha256":"dd8109222fc020762b769c0d87d0642086837dd54e885a1bef4e18b316299b2c","sha512":"34ad6c14c0754241feab02b05a75f6b18e5a5fb4af966cb4a0ae0108e542d38985a7a497c8512a2d629c5e1f2021fd1c1c88eddf54d7c19d3ce4a72e8053862b","ssdeep":"","tlshash":"3c312c4d54462e68e1878b1a7c61633d14b9b0ceebaa2a0d86ec773043d96e220e97c4","first_seen":"2025-12-07T15:18:05.796833Z","last_seen":"2026-06-02T12:09:08.099259Z","times_seen":1124,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/css/8fa659781ff3396a.css","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/css/8fa659781ff3396a.css HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"21c4-19d08b78f8e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vRNyCwPtlaTTsvk6CxqtI%2BDXKkj58j%2BnrNxu385AHs95hZUQ5inlly8xD7FIyRX5SmSNLBOH7cqJqNaK3Csn%2BgypnCFCMKhlylGgiq3gXaH3Jhhxk2D8kF%2FPxL%2Fq4g%3D%3D\"}]}\r\ncf-ray: 9e7421672ab956c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8644,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (8644), with no line terminators","md5":"25e6558b12d5016924b8400768c25abe","sha1":"a6f75d5383b421a8a72c012161bf117ba1a9722a","sha256":"a20d3c3236a63854ec92f8a795f3c386ca7776126d9419916485826cd153b445","sha512":"8b7892d0d27462c8d025c2d109b3c874acf68b7e02c8996113c98757a43641ded8b4f25900c6082bcc35377c66f21ffbc8d2ff4e60e34ed3c9bd7bead3e9917f","ssdeep":"192:ynKRjQoRX2SKRFg4kik8Ux08RY3/RwGuR+phRvN1uhmYwRzMERP+AYRYcURiNLj/:AwMIPhBFiodUWUcra2Es","tlshash":"0502fb7fd03d50b82ad57cb5914c51093423ca02d7b763cfb788f93ad1ca1a925a3758","first_seen":"2025-08-30T00:34:17.02688Z","last_seen":"2026-06-02T12:09:08.088125Z","times_seen":1480,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/3573-12ac2d81d89669a5.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/chunks/3573-12ac2d81d89669a5.js HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"d88b-19d08b78f8e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oVQEStry4lvseha9luGz9fpNak7TrR3DM7fpPcGTod2YJVpiHkGJanaMDCfUw2uWWUYNfaGps4GMyNxTv6tkJcBm2jzeV5yTy2dyqzdFVHzJx8mAbZw6T0darfw5sQ%3D%3D\"}]}\r\ncf-ray: 9e7421673ac956c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55435,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (55435), with no line terminators","md5":"b3bd4822ddbf1f7446d776dcd249bfca","sha1":"040946db6fb87030c667eeba8477ee89f1cbd1dc","sha256":"9fd6b792fbc7a2eaa0e4bb7024af4981bbe86478ae4b05d20362f4e1cd79bd7e","sha512":"540c23ec40d84af7e7e90b8452b5daad70eeb9f9cd3f2cf73e3585d5f7d91b6ec2b15e9f8eae8315952f3e74c9522f5f12f09cd02ae634d8f52c87cd5ec4e321","ssdeep":"768:6rBewJM1ghuPLywyUZva9kAhczB01NrEez8KN40nLgfNEbk5a29aoLpsgYXzFMEm:adwDfB01NrgKN4cIrz9USE4ta+qMscz","tlshash":"a543199db3b9b9d4b5068b94aaaf5418713f22bd9f04c470abbcac5071244cc7b46fc9","first_seen":"2026-01-20T03:48:07.795472Z","last_seen":"2026-06-02T12:09:08.115729Z","times_seen":474,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/fonts/inter/stylesheet.css","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/fonts/inter/stylesheet.css HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/_next/static/css/0c973de4e2fc1e14.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:37 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:55:59 GMT\r\netag: W/\"18cb-1989632abf4\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iFFJaErlWKdhkCJjCidoDvh1xw47ZbY4eroG7RY4QYK0%2BhvQjs69wmLjXz2XM9yzQOUsNwNYsYrN1pzcqGugZZXu85GYzm%2BiBwdp76kciMce%2B2XLjILjTFFNWGJeIg%3D%3D\"}]}\r\ncf-ray: 9e742167db3556c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6347,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"0a511d5ef880ee90b13a3114a3580d9e","sha1":"afe980d039932ebdb029eda7b828ea5044f9da25","sha256":"a277e69d8b8344546b1869f001873192c454164940ef1bebca997a648217e470","sha512":"392bef4e910c4c7df5a3730b019e6585db50285d5dd722bed2ce812bc446be78c5b79bb43adfc3889d341de78cec99fce49240872f0500ed4f973b5783b65603","ssdeep":"192:HXKVXsXYwPXfXPXFwwX4XOXGwFXdXhX7wKXmXgXkwrX7XTXxwsXUXCXCwtXJXlXQ:HXKVXsXYaXfXPXFhX4XOXGMXdXhX7fXQ","tlshash":"0cd15403067f2e21364148693f9e9a77fd7c188a71b611a6b979a1500df3c9383cef4a","first_seen":"2025-08-11T12:35:45.430867Z","last_seen":"2026-06-02T12:09:08.078614Z","times_seen":1490,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/new/green_fav.ico","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:37.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /new/green_fav.ico HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 04 Apr 2026 23:35:37 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nvary: Origin\r\nlocation: /w/new/green_fav.ico\r\nx-cast-cache: MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H8d9ExD%2BNq7py%2FDyp2jirnZZNK7J60VtDM8tqxh0djjsR0ZGh5FlnGYEQf7e7EtBrd%2FlXv4HL7YdgjUjCTpPbiAdGV4cH5leTWPgL26%2F365N57DX1X0W0%2BoequHpVw%3D%3D\"}]}\r\ncf-ray: 9e74216a0c2356c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10026,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T10:08:54.983399Z","times_seen":16173820,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/new/custom/default_2.svg","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/new/custom/default_2.svg HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 28 Aug 2025 14:35:31 GMT\r\netag: W/\"485-198f11aefc9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a6NTWiR2NuKFf9y5rNO7fnKOCFTY3AGzbtWEycDA2ehzR4hUwEC7n5AGAjrSJnOwnOqq1elp9Vq3rEmVsT1ea0eu%2BBL8JOEW6BJTKnJgrqc5mVJJg%2F7NY0wlPla%2FuQ%3D%3D\"}]}\r\ncf-ray: 9e7421672ab656c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1157,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"62b62a277b44ec14107b27d12b27a440","sha1":"0db3b7f58eba15b3ee1b892785d1d400bb9797ee","sha256":"83161700330e7dc1656ebfa4039d90c1558d2caf178f67d3df8c1d6ad3e117cc","sha512":"14b19c0777dd92a816cef736820104357e057aa3ff129e62aadb25d82e0ac38d74206bd8cf308f5e617c397040db3e8c2b9a19d66a60a93e080a6e9715501b66","ssdeep":"","tlshash":"0f21661ce25c4125c51453e82f05d4359f97a1db87488238e4d9ffaa90140a76b7ecc2","first_seen":"2025-08-23T08:17:51.606868Z","last_seen":"2026-05-03T00:02:50.663835Z","times_seen":349,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/app/global-error-8b742238adb6a5a3.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/chunks/app/global-error-8b742238adb6a5a3.js HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"56e-19d08b78f8a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I4aD4yzRSCDBppVfnYy%2BPgZWzlsE7EqHhUdDGYocp94iITtG9rZZLp64XdJlnsuvoBqZPEJ3M8IrF3NCUhgaO9VA7LdG4Enyv553ZNeWlvQY%2Ff%2Fv%2BbOLEA4%2Bhb210A%3D%3D\"}]}\r\ncf-ray: 9e7421674ace56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1390), with no line terminators","md5":"c0093b22be6609d18ff430e7880188de","sha1":"18d4a05eea23af4ae3e18662ee7728912fe7b1d1","sha256":"07604cc56cea07e226aec7b1cd3bfdb6df907ca4288a50f18ac864db849ecdec","sha512":"785673a17a523c7eac0ae9edd5b401d61c4b11ddf109a4d6b9249dce7e2f5b3dff0da38852c2365245c3e2f4260ab01936f589cff05b243bed92c92d49a1c1a9","ssdeep":"","tlshash":"7d21118db0807994665ba8de916f940d729b259d100d2ca2d9725cb11c663dc7903fcd","first_seen":"2025-10-11T08:19:51.900596Z","last_seen":"2026-06-02T12:09:08.091108Z","times_seen":1451,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/app/(landing)/page-308c23aa618f754a.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/chunks/app/(landing)/page-308c23aa618f754a.js HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"4c62-19d08b78f8a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rq2MYPdpjH6m3pNBjE2E0BCCNnovay%2FnzCe%2FGbycTlpz69UEoXCuqq0vs%2FSwh2aQErG0%2B7phkohO4nJI5ikTfEqzeiy88ZYi7p1l9QqwEgFcPkYjPzcipwnPh8LqEA%3D%3D\"}]}\r\ncf-ray: 9e7421674ad356c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19554,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19554), with no line terminators","md5":"75421032c9f8bb473d414aa147d261f6","sha1":"141eaccd335657f61a300d3dd70391342b045132","sha256":"b86b04128e9daf5565203960c1a538614614f6e56d955b546376aeee2e230813","sha512":"7e08cc039365fe8c00260488a1e92c0f618e00a70b3c3b6b5f78931570f0d7704fc518eca66005cfc4ad77aaa4c5e5a1dd3d28ae72d1c282e43c2867e2e6cad8","ssdeep":"384:k05D8yjHisHBOham1LobXv5LD5nP1vqLzxtJbZO1:8yjHi+CFoXv5LDp1vq5tZZO1","tlshash":"80928319e05de6e8ba720c60962fc449712e365ccb09ccf4f9bca8011a5e4d87b27bd9","first_seen":"2026-01-03T14:23:16.857555Z","last_seen":"2026-06-02T12:09:08.10252Z","times_seen":1081,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/new/landing/block2_1.webp","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/new/landing/block2_1.webp HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:37 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"8a08-1989632ac38\"\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oo7zByXiiyb%2BewYWv6uTbBCFO5E3gJYAeQrwwm4ZAvSFfnNO4N0A2nR97czyQ97vwHcraNdLn3VIRIj2GHCCGLLweiv7HSQW5QZzkToXh%2FLv2WckiMA5TSM3REVreQ%3D%3D\"}]}\r\ncf-ray: 9e7421674adb56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35336,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"27af9080beb8306cddacd1a9037925bc","sha1":"be2a7157460eb6ecec53392c3a0a4b403e86ff48","sha256":"64f67f85d1e3bbdf632351a794605b742e8293f29c762897dcf855ecbcda6d4b","sha512":"6451167d859df5e5eb343f48239026bb35a46a2e6f25cc47bee910ddbc949a37772d5322a27dcc73e8ffd8e534d868653b83d9e0355f9fdb2e703d2b1f651db4","ssdeep":"768:Y5AgxlJUP/BLpP+9ejuyf89L6LrzRH2N/O3jeCZ+EPvxrT6x5w3UBIXl:SAgxlJUXB9mCuyf89QH2N/QeCZnHxrTj","tlshash":"6bf2f1985019152ae3524e25d298752267c7dfec17f0b221de90dfe852f11ee30aface","first_seen":"2025-01-31T10:41:20.160976Z","last_seen":"2026-06-02T12:09:08.048254Z","times_seen":1903,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T23:35:36.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nvary: Origin\r\nlocation: /w\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LzmeBqyjJqvfMnVDtDBtc5iFkb4%2B4I9NVYGnclr3nQfu73kXhqotz%2BADRZ7OgCozKAg3ZcJVyTg0HQHHN859HNJ2e50OA%2Fv9bge40dDEilpchPw1UTDhwRtutAOtcg%3D%3D\"}]}\r\ncf-ray: 9e742164595856c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26726,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T10:08:54.983399Z","times_seen":16173820,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":14,"dns":0,"connect":1,"send":0,"wait":77,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/css/317691348e35dd2f.css","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/css/317691348e35dd2f.css HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"853-19d08b78f8e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a1vSSP2qGwlYaXdFZjExCab%2B1ZSXSyQQtpAJnxJnl3HKtKXAAfZslbFQTURNMr8jDtVzd6YH7FN2n0PlI5KKUl5EeaTtRZ9geZVrfToEJfV5CkRjUeYmevMsXlY8Pg%3D%3D\"}]}\r\ncf-ray: 9e7421672abb56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2131,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2131), with no line terminators","md5":"c66423fb88d7272cc42515b5c255800c","sha1":"622df8403db965331f0108ad5e532c6a1831fd1c","sha256":"28de71941d77d94d371ac216119d39292e7a92b5baf7c36feede5a4db9cc4437","sha512":"35068b1c594a31b430d7ba1f1b1cfb1d081980251514b42b7c6ec69b3f395bcf56e25bc231beb0997853026572ee853aae533b02b49ce8e0274143d10373b3da","ssdeep":"","tlshash":"6941223a303ea2ff7966baf254dc049ba127c9815633af5da6446d39c3c91d10b61b8c","first_seen":"2025-03-19T10:41:28.890253Z","last_seen":"2026-06-02T12:09:08.101595Z","times_seen":1901,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/8003-35d6c4e938d60f65.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/chunks/8003-35d6c4e938d60f65.js HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"1bcf-19d08b78f8e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AV2xPC87Y476eUm12kmVQZLCzxWwagk%2Bh1K8rJ3HusJTTmANr6j0TlQBUNZbujzmOd3MPi0xsBHBkXsnriahWL8FcXoHyoXiryeLauecTvxkgEzVjqY%2F5woQvecUBQ%3D%3D\"}]}\r\ncf-ray: 9e7421673ac656c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7119,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7119), with no line terminators","md5":"8014900ea0b06de9aba6c034a95c2e68","sha1":"f5f9791bc97c1a2973734e6999868eb15e2096e1","sha256":"bb2ba96a789f1f0c6144a6d6ddba4a09c139b4060a1c9e97af56538d29415c2d","sha512":"cfa275c652a59e72983c88b3a934681c6f29ffc87c4c99ce4a55137b1f5b0cd6f011d8ea93cecdca39f82ef3f2049fdebb3465a52d80ac6887dbf2ea295ede80","ssdeep":"192:cQkUmrphg1A1ZfGVYOw/39aS2wBgrn0z9bjcjF64KGUZbczUdj:tm+EBGVo3kSicbyp9a","tlshash":"ede1e9b2b7d4fd35135a44d484378247b6542e37601e7080d3fa8cea62b8dca85e2f8d","first_seen":"2025-03-19T10:41:28.915816Z","last_seen":"2026-06-02T12:09:08.114185Z","times_seen":1922,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/twq.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/twq.js HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"134-1989632ac50\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4sJzRdFs0ffK6t9Ybg0UA5I1RhCWIuYlg5Azug5A3rK0QNDvKzuVxOVXuPu8iG3Hla1fVBUtHQGxUEbW17tsQGlV58igbgng2vorYrdfzYkg99YYx5LDL6XtQQ%2FtUQ%3D%3D\"}]}\r\ncf-ray: 9e7421674ad656c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"CSV ASCII text","md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-06-06T10:17:33.973082Z","times_seen":16159,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/new/landing/triangles.webp","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/new/landing/triangles.webp HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"2e10-1989632ac38\"\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8rd9Zmo78tbAk3Ej8pQW3gkz1LAkY64Nqz4nEd7xQe7Cg2HkNnXLXbnA9v551HMixjsuTYJ0xYmQegxz5ZEwCDuuUiJpw3Dul1XX5GDFJA2j1nIHIAEhKpgDy8Ct7w%3D%3D\"}]}\r\ncf-ray: 9e7421674ad756c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f05371865ecf62cab6e1001717f97449","sha1":"00d6417678f2f685bfc86621c08404ce4253bd5e","sha256":"002a8352268a2601a960a8e9b0d195162969c477e0588d706db73ff7311b8ced","sha512":"9e28d757cc992746bda182ea76cafa4709ad4ab239206d68c1468d9a2fc00cf977927054ed2ea7447d69d53a876315aa767240e079e7ecedc66bff05a8556714","ssdeep":"192:6FsZYa0wgkcKoiKgstmh7AHiik445mhlOQHJqFOe2NoE0hp8W7Z5PAVMC6LA0gUW:6oYaZgkcwQ45glzRe2GE0hOW7nPAVgX8","tlshash":"2d32bf7f338274f57d2b214219359e571b71c7404be7d720c813b0b7cabb88769948a9","first_seen":"2025-01-31T10:41:20.120763Z","last_seen":"2026-06-02T12:09:08.109707Z","times_seen":1905,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/new/landing/block2_2.webp","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/new/landing/block2_2.webp HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"e896-1989632ac38\"\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UtsNKROtOy9Ho1eHMtXYyCMk6iLlaGtpUs5W7Nbjn%2FrHn3ISQE3ARDXfY%2BSlWGcANJQNvL587nXsZXkIZM2b%2B2Us9MhBR1EE2H7TZcKEMmNvJBq%2BtPs5rqakbBHUjg%3D%3D\"}]}\r\ncf-ray: 9e7421674add56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59542,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e84373a6466299fa094ba5363b7b5611","sha1":"b664588840cddc484127d918b9e723a7150ae1fd","sha256":"e40b65c3cb0a0765e299a82e05a7b5e093eea9997af4d8f09338efb2e84a2ede","sha512":"1d376cef3ea264b8e514e7e14b2dab5abc77d9ee59c92a9825df43f0ac98eadc7112c0ce2a37b5bb393947dc31bdcad4a96dcf284314939a07301ac9578791bf","ssdeep":"1536:g6eq9+r8Cal3xQkiJSGZWJ2KsFMMoL4FT+5n:g659I03xQkwUJ2K6Mn4B+5n","tlshash":"db4301a2dbd65305efbf4f8e2163161d586f842a37c3676d4829a84a33185f11bf4b0e","first_seen":"2025-01-31T10:41:20.12249Z","last_seen":"2026-06-02T12:09:08.106051Z","times_seen":1907,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/land/gifts.png","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/land/gifts.png HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 39210\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"992a-1989632ac04\"\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZnwlOeKBnKXkoImLNeLxXZXkHNeio%2BlwpoDmS4Y%2BfIF1s5S5Un6xnXg5F7gN07iPrPqu553oHjGZneLiPeHPrbxL%2Bd5prnvgyYtai6So71zyhHyABxZTnvlvMz%2BF6Q%3D%3D\"}]}\r\ncf-ray: 9e7421674ae756c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 146 x 186, 8-bit/color RGBA, non-interlaced","md5":"a28357f6c9f39f6ec64467e56d3a088f","sha1":"cb234100a21aaacf188eee7b9b42de088714cc49","sha256":"8ff0124600e50a161b28e2ca5bfe0af59aea0df8925436fe9930041b26b1082a","sha512":"de04eab9e4ef717730c25dd226941c92a7510df30eaa56454113dd543a18c70dcb4c2f7becba3ff7a6b825b754a4ba1109016fe3365b3b321a7566660fc54d93","ssdeep":"768:91k0eN4ZSFsy+dSc4Hd6WlWv2zVdYg87W+iN8Y+zsb6KFxAJwXQ9k:9W0eoy+Uc4HQQNzVdYFYAI1nt+k","tlshash":"5403f185412d4623ef2d5f86094530e0cee926bf9d49de5c427f772b0c1b6394c86a6f","first_seen":"2024-12-12T16:53:28.001894Z","last_seen":"2026-06-02T12:09:08.11196Z","times_seen":1898,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/fonts/ttnorms/TTNorms-Regular.woff","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:37.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/fonts/ttnorms/TTNorms-Regular.woff HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/fonts/ttnorms/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:37 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31112\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"7988-1989632ac00\"\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h62e%2FGo4iDnxqJ69NyiYspZJLr8nKv4yTs2uHybdeKjaFD87NS2PTUKvC9qPJHy7vAOpiUfSdYerG%2FFDx3vONQctNaUbIhAbhkh6V4Ihnc%2BcnHXupd8MbZ%2FSVqMrPQ%3D%3D\"}]}\r\ncf-ray: 9e742168db9456c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31112,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31112, version 0.0","md5":"33f150c6ac81219f18b55864e087dd12","sha1":"7e3f9fee0b08c64fd733aaf64029c2947130b9a3","sha256":"0d9f772dcc9cd484c98410488a12c0865b31531a79e8e9c1926945e7b5e66a95","sha512":"d014e3e7ea7dbe8f123c1cc9fed70c6b8ab5cb65703fa2d04814c640c07521b94175c5830eafe01b67c73881a9a1f374231279a75285ac9a4e62b32ab0158139","ssdeep":"768:MA2xVa+8iyIHNUTmc5XZ5x39iaKiR6TMYB+qOk:MA2vz8N5TmwZ79ZptY+k","tlshash":"aed2f18f626c12dcf970e4fea2e217cd8745347de13a4665c646d0cfca61e70ed88219","first_seen":"2023-05-07T16:06:45Z","last_seen":"2026-06-04T13:22:53.020245Z","times_seen":1948,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/new/custom/default_2_mob_no.jpg","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/new/custom/default_2_mob_no.jpg HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 54126\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 28 Aug 2025 14:35:31 GMT\r\netag: W/\"d36e-198f11aefc9\"\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnPTsKPJREUOYmHAtLn8jRzuPHaOTQKgb4Ax%2BfHtFzBybSfwAK7ZNBBThQ8aXuww3peDA1y7BVSy0OtOIYcIkJfIfAwnGEis%2FEK7MIxUFmuodMS9n%2B7QbgXUyxhe2w%3D%3D\"}]}\r\ncf-ray: 9e7421672ab556c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54126,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 688x570, components 3","md5":"fc3ed98a5629244966b58b78b4cbab07","sha1":"95ab229dd7da6df0f8fd697f49f48aa3b5afe407","sha256":"6485c2fd6448aabd07d06eadf2ff428ee28cc18a192e5681143956cad5fe0f50","sha512":"8c7814c1967ed1646abaef3b68f95bf5c54b992daa3c57fc1090c56b9b805cc647886009039993bca75f30037a45c18421cbdb7c86350b6e0d9ecbb4941a63a5","ssdeep":"1536:AEU9+H2MKe20kYAaTUCvNdtlEYYU8RYl+:vPRsYPBvNdtPYU8SY","tlshash":"4033024b1af5023f7bac4df40097929cff4eda54d4952bd140a1291c64e60f4da8ebe9","first_seen":"2026-02-05T01:21:21.641312Z","last_seen":"2026-05-03T00:02:50.537034Z","times_seen":15,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/css/3f1fd21e079483d9.css","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/css/3f1fd21e079483d9.css HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"1fd5-19d08b78f92\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mjgrZiw3GqxW9VsqO%2BpXWLuMPdoneiolGgnc19d3SVUscH3XxxgIe%2FU8gJtUYUyxmZSJjo2A2j94vb3rc6NE%2BuJA6mrLMl%2BjoDQXjCFVgYT9jrY6q15PxWchZvU6aw%3D%3D\"}]}\r\ncf-ray: 9e7421673abf56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8149,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (8149), with no line terminators","md5":"d2992b3fc8846472b32f4eafca8c141a","sha1":"b1ba8f25dc911871f7455fa2593ae6aa0510a461","sha256":"0d2d7b228b3d0e0becb161a8836e846fb9c9400e842f9bfbb954c3491a4ac062","sha512":"b612fc58e50ef52cd93baecf264bbcb5d88cbeb7452f5ef3ea8a166ee339f03b1ce813d59a59cd5b2da1ad2faada5b915cb4c033c00f9881fc3cff898dd1130b","ssdeep":"192:ZlFRa0g88VW0QbxPCjMxL3uy9o/zvoPodLy/tlt:K0g86+PCAxj/94zvx18t","tlshash":"0af12332267a602cbeeaf476efe0b96931c0c527933b15e1fd49f926c08916b3711359","first_seen":"2025-12-07T15:18:05.819577Z","last_seen":"2026-06-02T12:09:08.088879Z","times_seen":1120,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/app/not-found-fdba94afb6e61d6b.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/chunks/app/not-found-fdba94afb6e61d6b.js HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"336-19d08b78f8a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z4UKRbwJdev8rQ%2FULtZxy6OhXHeMsFbQohG%2BLHgw4uSLVKm6jzrRd9ZWX8%2BMHFqJ8BH6%2FQKawXd%2BJOKVTGvv3WO8NVIvSMCQ7%2BHv8cKX8oPC86ALlQFB%2FjisPXwCig%3D%3D\"}]}\r\ncf-ray: 9e7421673acb56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":822,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (822), with no line terminators","md5":"669057438158e9cf084e395dc89efe56","sha1":"1f0086606f09bd2b11ff56e83d3d519d2bc16b46","sha256":"5507fd9352e89802f440ba96545f0388e7bde1ac188f10c5f5b60d1dd62b865a","sha512":"a14cb12812f663622ae408f7a4e954a2d0b48cc6e661ff2a880b00ecacd9e5b16bea0dce20cbf14cde0fb1c13eb2c6bdf0391c6ef243f9d002c2e81b84f89340","ssdeep":"","tlshash":"bd01520531c176d8b5176cfc11bf940d306b269c109e44b2d8b6ac912d2228cba43fcc","first_seen":"2025-10-11T08:19:51.958408Z","last_seen":"2026-06-02T12:09:08.059802Z","times_seen":1452,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/app/layout-331673f02c0ea2a1.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/chunks/app/layout-331673f02c0ea2a1.js HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"238d-19d08b78f8a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3zmyyvIVMWrWQymqJda3RAkRZqLHn2l6f4aCJQtICWsUaDfdrGZf%2FBI0FNv3wa%2FwLy3PSCTgZxQpKMU7KwflvFiH%2BazrekH8VC47s%2FJCjfovj9heDODnboVe3BHNqg%3D%3D\"}]}\r\ncf-ray: 9e7421674acd56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9101,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9101), with no line terminators","md5":"9a5a2e867d88ad547ca0bff25baa625f","sha1":"3eb1161cf26afdac4df98c5d21576bc59af60818","sha256":"4ceb9198272a6b6b5537c268d3b82c5fcc82c48110634fb45fdbbd8c836e91a6","sha512":"987381b91ae5369bf96b455eb615b8763c674bc4a68326d5c3203bd87db716a0e46339bc2ae68a5a9fe5969856ddb484fed925ec33b7d0bf5600ba9a967bc09c","ssdeep":"96:DNHzEAF7EMFkTT2TcT9h90Rf9FqI7QsqQTmLIdK9F5bMhqnmwd1CLeD7tDApz3RP:REMFkecuJQs7CkdEBzjDoa4Bel5H6","tlshash":"7412a555b659f8ae0f93d06c58bf9049c22d0b2ddccc403e9f2a96912072d6cb361f9d","first_seen":"2026-01-20T03:48:07.840798Z","last_seen":"2026-06-02T12:09:08.117619Z","times_seen":472,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/5353-d8888e459d0d123e.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/chunks/5353-d8888e459d0d123e.js HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"3cf2-19d08b78f8e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w27ncHuHZAutbYjD%2FHoe%2BtuV%2Blo2d0viXZR7dMa2QunDGLIsEKFvx9TSMM2kIw4fT3aXm5G18hosviYZoFAvRUlA92BErDt3kBegSvLrBiBmZJcRtJQywdgQwzOz6Q%3D%3D\"}]}\r\ncf-ray: 9e7421674acf56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15602,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15602), with no line terminators","md5":"fc61d7ef60504a2f5fef5b43fd53e2ae","sha1":"80bbd7890ab251264753feb976d58bf471bf7217","sha256":"457fb993e9c8544b646cc0b8f599cc88f5a63336c700d17da2cda5cd79a5968f","sha512":"e615c715ebce5a84cefa043a47818a84d9bbfda95716b581dff806441665ae419271190ad835faf79805c31287ec3a083c0df5357f1c32806846eff2f5d63a84","ssdeep":"384:tpWv91E0kbfrT42FPpXAhjyXmP7TivCOqX3rXWXvX4r9gYxRxPzr0Ag:HWvHjkbfVPpXEyXgTpRXbXWXvX4r9g+Q","tlshash":"7662e8fca3f458e83a479f74c46f600e713b547daa5285d9b678acb056141e87702fc4","first_seen":"2025-10-14T22:47:35.996421Z","last_seen":"2026-06-02T12:09:08.062468Z","times_seen":773,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/new/landing/block5BgMobile.webp","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/new/landing/block5BgMobile.webp HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"bfb2-1989632ac38\"\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3X5l5u9jEG9DfsvMd%2BQsqjF%2BRlacojzXi7VV1PDodmpEKwIphIo96H8%2Fj0cqNlcpF5gR9Lgl0Fx8o%2FglLuO4qMbgwxli0yLqLUT0VTPgw7m%2FPrbfAPfAtKWSALRcow%3D%3D\"}]}\r\ncf-ray: 9e7421674ae356c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49074,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ce596f2875175161c32cc277e495175","sha1":"de336df23f662cb35e35030d7ac43105fd6f75af","sha256":"3f6626eb2f59ea9fc3a1297d7fb2aa365f5270f0ae3a84586a3eca83dd243ec1","sha512":"25e128edd7574d76ca34e04f30b86cede5efb8b27d4a257898577a96295100dbefd4f3de5ce2d6afb9913c3532ca24bac90e60e90bf926b2d50b9ba7b0f8b02f","ssdeep":"768:hsWhVWv4Ru5NV5dm4vdWHe7GtiCzAoQegljsVNRiKIds4bTyNnu5UBLJEzxTX3:J44ANVP/10GKbQeaj2NRFIKBLJkFX3","tlshash":"752301a0ce99f00b89649520f529ebe62e7147cd8f9cd71a188cd07465faa1fd0b4f83","first_seen":"2025-01-31T10:41:20.132022Z","last_seen":"2026-06-02T12:09:08.05613Z","times_seen":1902,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/fonts/ttnorms/stylesheet.css","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/fonts/ttnorms/stylesheet.css HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/_next/static/css/0c973de4e2fc1e14.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:37 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"1b47-1989632ac00\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urlVmz%2BsA5o9C3UwT8geXyH%2BSJcz6%2BYtxnxRoq58iCAt5BbCjXXFX%2FmqZEGvTXPF6s2qzpdOA2Z%2BaGlVuarmlTVF332JmtjXHgMXFKGPiH96kE8NjL7yeiaOnYw0VA%3D%3D\"}]}\r\ncf-ray: 9e742167eb3d56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6983,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"13a30e1d1d98980f8d05fd08ec50bb35","sha1":"6ea5a517edd970ae8f3ac4d194c27d6bf5ff5433","sha256":"474eb22e42e75ae5cd195e8b724c0c35ac1f40bb1b6cedb21e7e7f290aa9792c","sha512":"37b23920f002d430045ab3b7686e53d56a8358ac999a9e69a7b8b25236d7a43719dfa78e8f1696bcf12a2baa947bfe660f0544aa5369c72bf70f9e65ebffe912","ssdeep":"96:hv/VbGB9pVwhoEVfaSmVtLJdV/lByoVNBhBVECGVDdqOV7BYKVzeoVhDIkV4A1xa:jyvifsv/l3N7ugC77ZhJ48DP4hBwTTq","tlshash":"bae1a7508acfb4d9e46e188d37cf5a64c60e301b2009b95bbbfde9445f6bb9e425072c","first_seen":"2025-04-11T21:37:07.818928Z","last_seen":"2026-06-02T12:09:08.09667Z","times_seen":1883,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/fonts/source-sans-3/stylesheet.css","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/fonts/source-sans-3/stylesheet.css HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/_next/static/css/0c973de4e2fc1e14.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:37 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:55:59 GMT\r\netag: W/\"294-1989632abf4\"\r\nvary: Accept-Encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e5yT2QN%2FdRwZpgiq5gHPsr2laSg6JAFBGXVvYdbLFgnKT0I6FrFIRWtXJuruj%2FVFQivRlj3qcKq6L6GM22d18dBgnB%2FrTNI%2BBzlt53Oey%2FASQUwe0KNQhfRMR5iehQ%3D%3D\"}]}\r\ncf-ray: 9e742167db3856c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":660,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"dbe63d040f877b29c93289369d94d3c7","sha1":"983aa9dc8ae17a825d82138b21167124c6c2128a","sha256":"0ab7066382f22c741f2b85472fefd6988bfae08a8e615106e9268dc7c924a3c4","sha512":"051224a8f79de3417756412dd45055e43aa56209367b7c976fb3987f9088161d8967d73bfad67ba92766968d113baae4a289dbbe723f05fe6a92d1ef3429e59a","ssdeep":"","tlshash":"15019923426a1a7072204958bf5ee663be7c080bb3a241baf93451000db2d1903cef8e","first_seen":"2025-08-11T12:35:45.427412Z","last_seen":"2026-06-02T12:09:08.103393Z","times_seen":1492,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/css/33d281c8208aa46a.css","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/css/33d281c8208aa46a.css HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"a54-19d08b78f92\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PTTVRACoXwMqWBy3EqWjZ1bHs8S63sXdi8OyMgU%2BDSTUW3CoXRg91BapmGmXhtHYD%2FGaVOv73QzsE42i8KHt4qrDJEO6LO7G2Lnkc8G7pAyPwwKr%2B%2Bvfqr65CrD%2FKg%3D%3D\"}]}\r\ncf-ray: 9e7421672abd56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2644,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2644), with no line terminators","md5":"9d935283d4552afa39b54bab1beea66b","sha1":"144c949c211c4280cba0fd88949206f468e1357a","sha256":"5f91900db8f97cf0c851424457aaed6b05a56fa946ef6845cdad4403375ee67c","sha512":"cd243dbbc68d1bf223f0e4121e0fe8df61b20f8fab7734eb8d5d578c8fc1967cb0a7f8db82401323b81b9a2e433371b176adf0d19d5bc734cc8cc81a999ecf31","ssdeep":"","tlshash":"50519fe3a67134b461154e536f50b76a30f487b663375a23b619ef2cb18f6d3091c24c","first_seen":"2025-01-31T10:41:20.146825Z","last_seen":"2026-06-02T12:09:08.064967Z","times_seen":1915,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/webpack-c7c03c296ab8a799.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/chunks/webpack-c7c03c296ab8a799.js HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"103c-19d08b78f8e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Cjve3gQEUIi1kxMYJks2rU%2B0S7XETPrA7VSHNAcej5gftjjIRPGX%2BigQjRi6lxlF8aceCOOfkXoPt09j1evbHyPFyiiXiWz1fRPHuIQ1TREL2%2BNVj7MAlkS7St7bg%3D%3D\"}]}\r\ncf-ray: 9e7421673ac156c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4156,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4156), with no line terminators","md5":"640af1092aecf89d7d6af2d00741c3ab","sha1":"270ed477a665cd1155eb90543a51d6a98b3de92a","sha256":"850ca4b8cbde5ce387c5444ad089e8cc03e3d31f15b35a5132c968ba78cac432","sha512":"efcead94c2191daad6a3818ba9df8a8b9447990f8269e1d213633c30cf3202ec7c5e1ae41ab66eaa8ed980b280c3a99b10207aa4d401748a240634be4ecb8129","ssdeep":"96:kMyYE1q9WlR3lMka20VGL6VLW56l2WRr9mrLDYyM:kz1mWlNfajUmYyRuhM","tlshash":"2981a8de71a1f4b91782a4a1443f9146f13f28f2281ed4a0da25e4f5fc7554d8323fa9","first_seen":"2026-03-20T20:06:36.501839Z","last_seen":"2026-04-19T18:31:05.672468Z","times_seen":5,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/fd9d1056-da5caefe92cdbb5c.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/chunks/fd9d1056-da5caefe92cdbb5c.js HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"2a323-19d08b78f8e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iAxs8B18B65MfGAT9%2FlScmT%2BA%2B5jqYukLtHAc09iI39oCT7qiPaUrn1hiXxVel4wThaskEwPFUaaauGea83PxvQT54Rsr6dtzYZXavByia%2FL7dvbkXF%2B0oN4Mz2atw%3D%3D\"}]}\r\ncf-ray: 9e7421673ac356c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172835,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a2e6693b6b8e2ae5167ce7ceb21dd431","sha1":"625b83e4cdbc0bc71ca90f7de6633000d5908f96","sha256":"a87677f28d0d640a628d81e90ec37a86c6674c1c656277318f17b14c9542d045","sha512":"4a219d7524f60f77557dd49d61838d092f7517e9b0984cf2860a9638608cf848c381d9988dad5129a63b4eadf274941a786cbc08d3052715407962a6e131aead","ssdeep":"1536:tVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:lzug758kkEiXjOAprX2wd5WjguGOK","tlshash":"b4f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2025-01-19T23:51:52.179106Z","last_seen":"2026-06-06T09:55:04.514309Z","times_seen":3422,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/9157-1ba04d5623695b43.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/chunks/9157-1ba04d5623695b43.js HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"26d94-19d08b78f8e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qdetZ9BudBI9YYCo%2BeDz2evRCFNUSASlqvtnI6126B1xnwDjVjwRE1AXGqzmhvqeQaTIhFIWrFl2plTm5gH%2FErbj7cuDW5xK7RRRKkXF%2FETVHL647s3jh5tkis%2FP3w%3D%3D\"}]}\r\ncf-ray: 9e7421673ac856c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159124,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d07df211aa09f7a327fd8f7536b1f0f1","sha1":"5e3565273ec641ac5cfd756f5a472cab88fb2fbf","sha256":"c9a61872f0519908e071b9a59fef73f722cfd24c6b3b2800b82a5d8edef6705a","sha512":"b80ff42d0aa35f0e369978332f8517e7e0b2562857f29ea136f000a5d64b77e978245dcff3bd007fe982155e6dc27fd13c7fcc3c65ee7a7faa1d76ab32d8462a","ssdeep":"3072:fexL57gsIi4o2r5pCJfqeaaUxWUQwA+SPg:fsLisv4dQJfN+WpTdg","tlshash":"45f307ad7115b02d4ab31abb40bf5807a87817361c0dc8b0e354f99e91fdad9616bfe0","first_seen":"2025-04-05T22:58:02.07516Z","last_seen":"2026-06-02T12:09:08.12251Z","times_seen":1895,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/new/green_fav.ico","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:37.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/new/green_fav.ico HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zexbets.com/w/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:37 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 20 Aug 2025 22:56:31 GMT\r\netag: W/\"272a-198c9b2bf86\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QiqPiWnEJDrr90pBkxcpREA8ygpjE7rRAJax6KAnTU%2BveWD9pNNyXFan%2Fze3trKYsrcIGpSf0iLh9%2BrCUR1Q9tC6%2BGsOCJR%2FJlPKix7K5kXzXiG7LGmPQIiTCJSV5w%3D%3D\"}]}\r\ncf-ray: 9e74216a7c5256c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10026,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"8a1a85ff395e10ec6c13d9cfbf7ff6cb","sha1":"57475dcf21961cfc0b2d2e8ceb9cc0884cb3136e","sha256":"1211c73a178974f0c8183ad2a113ad4a52afdfe175f038fa623f95da1b96e046","sha512":"45fc667be005851269291feddae5a17ac2f40ffe3d661e4ff09dea674c35c1f288594538f17a47ad11a0221a4b1d81d90f8d00f9ace667ddf61bf702a14529bd","ssdeep":"192:D0bLsXbHP1zpXaVXdD1lFbjslfYmkFbMyDyJDj6zo7:D0bL6bH9z0n1LnslfYmkFwyGF2s7","tlshash":"1022ae894a8662d6cd8119b17e34035f32680eafa4694d0fd7fb5df929d2d89cd434cc","first_seen":"2025-08-23T08:17:51.631386Z","last_seen":"2026-05-28T13:54:28.404129Z","times_seen":785,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/css/c6c7cbe7c5388caf.css","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/css/c6c7cbe7c5388caf.css HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"122e4-19d08b78f8e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QwENCHTsJzxGY5X6sx7F85MIbwpN2oKaARY5DM1yuvWu2lf2Y%2FQuusNPbJefsN5TF5miqmUPgTSXG8vrCE1ZJnI8oJlftOr0iaIXgaBF2ZFS0XbbCl3kdWMXuuiznA%3D%3D\"}]}\r\ncf-ray: 9e7421672aba56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74468,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c92db200a490f7551018633bc7ac7f97","sha1":"696270977bb31456c840b5633850c446bfc61e47","sha256":"3d430b4769e9763b6cd52286adb424663081d110c70f29773c416b07843453f3","sha512":"b712401c407e1c361f91d070f21f69fd311d4ceb7b066f8e24e2aa67827ba7667aebb08b0c86f288b43068651281a7d678f0f78c101f7002b43b47a983a4f1b8","ssdeep":"1536:2+ysg6WNlUEe+wdPIzf39OM/hxTWg+96f43tRBwhJJGppDzBCYr2uhsTs:UNlU3","tlshash":"10739572a21aa41cf463801370d1a59d7174c297b73356aeea957b1bc2d32a32b737cc","first_seen":"2025-12-07T15:18:05.81794Z","last_seen":"2026-06-02T12:09:08.094392Z","times_seen":1126,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/2117-603ce227f12237bb.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/chunks/2117-603ce227f12237bb.js HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"1e633-19d08b78f8e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Yl4wkGm1lZaDKOAf%2B9h5D4%2BRh9XqsCl8ZQjth7gGNGbAwiUfO4bsNLePh%2Boj6lXccKbgqTbcsWlVbM17smoLnRGHZYBg98DGDx8g0iZSyJ2aDPe1iqAfJkIFiz6MQ%3D%3D\"}]}\r\ncf-ray: 9e7421673ac456c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124467,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bd99d7878c7e8888b6ab24e40ab69fc5","sha1":"7b304634632723e583517d33e34998346eab166d","sha256":"ece772926ce274f6d31508d891ec5fe44697a6e67273a5c359b17a44dc3fa2bf","sha512":"19be4f0c4789e62bb9d6245b21aaf21f87346f84abda7d1ab8661280dd9e6ab3c57e5fbe07b427e4cf03a6c00b14c154ad9f649989c1d16d35db1dd17bbdabec","ssdeep":"768:PY9P55e7wbSlPYtVDl//d9icrEAKH1ag8xxqKjj3fOpDKdlr/Na8MQr93UsGoROz:Cgw2lMWc3mY5jFdl/UPsibn2kJ51oCv7","tlshash":"05c3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2026-03-03T16:15:40.652661Z","last_seen":"2026-06-02T12:09:08.113348Z","times_seen":79,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/main-app-df523c8931f70c0a.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/chunks/main-app-df523c8931f70c0a.js HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"1d0-19d08b78f8a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l3kKgdQ3xjq%2BYM8PNKrpgyGYZVZLv%2FP2GXdQPMwir5AfIVOiz3U98QG0fGMDkhvN8zOr%2BMsvOLwUVUeZpVBwWUOq5jrHPavJ5lvTTNxR1alipnBHxALxwgL14kXeJw%3D%3D\"}]}\r\ncf-ray: 9e7421673ac556c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":464,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (464), with no line terminators","md5":"780f1f062143f470ccc751e8e9d0ba05","sha1":"c9deba27d87d3e1b411b741a1d7249479fe500b5","sha256":"82b916c2ff6e9ac8cdc115f596700aff44c67c4cb3fcae2c6dad80a6baab40fa","sha512":"77205548712b78834d6277e82f573ab652162e8daee458234ee877477cb98410450a7465d681c859ae71bddc4a2d40249260d3a9c8f7f34a7e9eb5010279aaf4","ssdeep":"","tlshash":"a8f0129a2a4c742f2913ad24fdd36c2e256e916028a759501a14ddb12c736ac93f1c7d","first_seen":"2025-01-31T10:41:20.167782Z","last_seen":"2026-06-02T12:09:08.058632Z","times_seen":1913,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/app/(landing)/layout-ca81564ca7ab2f8a.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/chunks/app/(landing)/layout-ca81564ca7ab2f8a.js HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"e2-19d08b78f8a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ZUVImyYL4kG6AbZAabLxZMcvmwyofKzSvd163Aykry%2BGkD7j3cx%2Fo%2BYnttg3Vcj3jHmGJdHFVv14kB%2F1GucMBfPldFBGS7i1lsDNMOr44zKk0Envm%2FEu9HUPgMlRA%3D%3D\"}]}\r\ncf-ray: 9e7421673ac756c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7a5367f9275c124ff441c9f2dda2be9a","sha1":"56f8efc747406730e680b5583b239301797b3f64","sha256":"0d653de16d82ad5663b217d4f67165a5b6d771a51a38c219689792e8566c0eb8","sha512":"c2a82168a520244bbb60a03ab8b4fbf64319ec5f6d01fbe5adc9965af8db74b0f0e0d6418e212934a9f667317e916f879cf9f096bb684d404258653708db6172","ssdeep":"","tlshash":"c1d0a78939817d1d2a136564d977086136f704a8789bbcc166209d911c333ac83a1c8c","first_seen":"2025-03-19T10:41:28.874854Z","last_seen":"2026-06-02T12:09:08.115039Z","times_seen":1897,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/new/landing/block1Bg.webp","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/new/landing/block1Bg.webp HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"5f7e-1989632ac38\"\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JslmkvemHOtPsqkfTMS%2FZCfbk18o%2FvrN4QfF2HhryIeCx159hSgNTmKD5ROBzaFgn4x83VXnIfAMeR1R3Dq3muUfpHx01ShUVBTvw%2BMCBSI6gfF%2BBPGPooRA5u1zGQ%3D%3D\"}]}\r\ncf-ray: 9e7421674ad856c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24446,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1450x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"43ecadeebe099275233f25da3d5d7b25","sha1":"939a8734db86195892ca05078d12bcc5ab0cbedc","sha256":"64cc10e9de9290364654d6f2387eb1333e22f59931d05f9d3626102670f1eea3","sha512":"5fce11cf8cbe35686f74fdd583e82e36c0b4b77ba93dfae8aa271c53b5053de2835ef590303a8f2cbee110605c629d5bae3e1aafe41f86df5422f9c462f41ff8","ssdeep":"384:quk8HyH7AkmJKGiqN6ABdtGFAvUNnReYGzdFocLkHVkKNBJuLi:i8SH7Wz66nGganReBZicw1kcBUe","tlshash":"bab2e115ddcd8d28a650a474095bf1063a9788e21fe5ffe898893010a7cdef4f6a4bd3","first_seen":"2025-01-31T10:41:20.113549Z","last_seen":"2026-06-02T12:09:08.057396Z","times_seen":1901,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/new/landing/block3Bg.webp","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/new/landing/block3Bg.webp HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"7ce0-1989632ac38\"\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TmR1upE5ce7lO6efIVPpCpsU4quLSlgAIty2bH2804eW4nGCIa30if05VFl60f7htb22RQcJpOesboaTdkrZ3wCgKFQWaZHWQinZ%2BFAqajQXLSjq5gpP4ydo2Vl7bw%3D%3D\"}]}\r\ncf-ray: 9e7421674adf56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31968,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9e48516d30fc0185a62d4d44782d7114","sha1":"8c8de6204cf95cb371c8181dfa68609b82874802","sha256":"9f65b5f84da360952bf621b40cb8c01719e3d66f386154fe73122a06eed3e5f9","sha512":"ac57b94a1412db4893f4cc5bbb7208be9d486d6cd3acf70ea19630ba10b129f53abaf058878b5eb7b4a1e64ea87bc0d845fc268decd470e1fd789a206ea1b08c","ssdeep":"768:Yq/RYKrxOSBsYeXstjo3Tac9jHQna6yFw4OoxkEg1nTRo0msG0:Yq/RYYwmeXsO3BjODy+4OmkEuTRFFv","tlshash":"bce2e1453b945006d1eba9ac050fcced827a5ceb8a6f5427fd161a94cb3b220e7028db","first_seen":"2025-01-31T10:41:20.127884Z","last_seen":"2026-06-02T12:09:08.112638Z","times_seen":1906,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/new/landing/block5Mobile.webp","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/new/landing/block5Mobile.webp HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"52e4-1989632ac38\"\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2F12TlN4OdKcZadMxv2Do2gd6HckUCu66YXBbe1iLRknZszEp3nfLmw09E2A%2B0VC%2Fa4tGw9bB%2FWE4SmtZ56XQJZIanqNtOV4ZSvdowpOLLsfItiVtABopbK2sEe40A%3D%3D\"}]}\r\ncf-ray: 9e7421674ae456c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21220,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1c7fe573ca47cd563c79920b4f9c262e","sha1":"d33337fe8dd023420e98e164d3744679898c5e1a","sha256":"597c551769acbbb8aac81167c78718c2fac6dde65952a7a7b2925d38ba0f87dc","sha512":"c778e0c020face244b2c2c246513ae0565aa5d9773607ff4e8c8eef27cf966a215ba4682c1fb68e08fedc45dc19e846c6bef2ae37d5bba254f9dcc7b5016d310","ssdeep":"384:kkI81KBET/Me6fMz1KPRqcjLWxDOPeaj5CQnHqErz5CVKYG5njHibBynqnk0U+fL:LI813/MVfMBKP8cPWxAn1HPIVBG9HKyM","tlshash":"6c92d0bd4889c9f4a0ebdc27e80d7ba2484cc7ad270b6a44d2db60ccb77218ba55d515","first_seen":"2025-01-31T10:41:20.133561Z","last_seen":"2026-06-02T12:09:08.123414Z","times_seen":1904,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/fonts/ttnorms/TTNorms-ExtraBoldItalic.woff","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:37.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/fonts/ttnorms/TTNorms-ExtraBoldItalic.woff HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/fonts/ttnorms/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:37 GMT\r\ncontent-type: font/woff\r\ncontent-length: 34680\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:55:59 GMT\r\netag: W/\"8778-1989632abf8\"\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oD0YBwkfVI1Eo2QeN9mzEzq%2Fc662L1%2BLFUwXZb6d%2BIhtX3bazI%2Bz%2F7Bv0QbOFK39EEJOZk0m%2FRvUE8lPsEWzkoT0TV69pmq2CGPpzZbaZrTStXsBQLlRslnTL0GGgg%3D%3D\"}]}\r\ncf-ray: 9e742168eb9f56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34680,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 34680, version 0.0","md5":"9a30e8f0dd95fceaa89cf08605ea7236","sha1":"1d44d7d9c95c173576f844b081ce9300873099cd","sha256":"8adb6b1b4270089cb85b970e5f1a9dafa6187d864534bb55a3f9775b4b957528","sha512":"86994026ded042339e8157d7420f31e3757dbe6681b3a49464e0b5a4c09c77e6be757aba86c2045d66b72cd9f03580cedc452f178ba794ff2637eb4e0f5d2f26","ssdeep":"768:nllcp5nxgKPVOT79IHkwzRYyQSL0tSBf5BFkqY1Fzd9:nll+yW0m1Qs0q57YR9","tlshash":"eff2f1729d657d209249a579f0fa0e9c1ac8732a7133c34a973eba39714bd70b03761e","first_seen":"2023-11-04T05:15:18Z","last_seen":"2026-06-02T12:09:08.073647Z","times_seen":1895,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T23:35:36.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: text/html\r\nlocation: http://zexbets.com/w/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VHF3L6UURLBoq50obHyNHjzUnqbYrYuhMl6Tkfv%2FARTRqK3naoFMVfhGdK9yCPtloUQtZWIGErVq7ucxzJAnXXbZABFmSPc56lNWXI24QGO7zrq4JciztLe%2BKUhKxA%3D%3D\"}]}\r\ncf-ray: 9e742164d99756c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26726,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T10:08:54.983399Z","times_seen":16173820,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/chunks/1651-820248bc81fac6c2.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/chunks/1651-820248bc81fac6c2.js HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"35b5-19d08b78f8e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S5%2BhqnLN8uDcv8F318A3J4e9Spdn%2BvtQnSdxAXF2A5ZPI3N4o5KkhnXxDhnkILkPThqlkCwCzW47Bprde%2BHKZsIz7FL22u1br4jh9k7pj0Tbn1WJ4ETMRxC3y1suAg%3D%3D\"}]}\r\ncf-ray: 9e7421674ad156c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13749,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13749), with no line terminators","md5":"ca8e72541bf83c94d1a213de187d6a4f","sha1":"e54ad99d5071d3f779ed50de211b49cc2b113efe","sha256":"94514b7b9eddc7c7c3aa5e0394bc24529461b97b27b0a49aef9a5144665eb6f1","sha512":"b113fcb07ae20c11b66c169c2752e2e8887c73aa63519c79532f9b6279a497553cea39cbf31224189e20c9244802f27fcea2ba099df9da45aa4ca455d6aa379e","ssdeep":"384:U4ulVutY+Ne1VMAPJaY9fDDpj7V3vHLuUVLs7BLkP9K+8FskPo4:2XmPNcVMAPJR9pfV3vHLuUVLs7BLkA+Q","tlshash":"b252a565e3e8e7d0963d4bb851eba02f723f338897078ca4e5696c24d4644dd3b41ec9","first_seen":"2026-03-20T20:06:36.497006Z","last_seen":"2026-06-02T12:09:08.049948Z","times_seen":60,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/fbq.js","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/fbq.js HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:55:59 GMT\r\netag: W/\"198-1989632abe8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qlez%2Boe9nwJQByfhtgBY91UTFog6ciRwaHZmmeqDifigk2soKCpWZ3U9%2BOnAxOoQDnZFkRYHNPcWUHIetU3YcqbD5FvfQdyQoyp7FCj80G3lZFIjm6tPusiiXxWayg%3D%3D\"}]}\r\ncf-ray: 9e7421674ad456c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":408,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-06-06T10:17:33.971001Z","times_seen":16165,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/fonts/ttnorms/TTNorms-Black.woff","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:37.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/fonts/ttnorms/TTNorms-Black.woff HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/fonts/ttnorms/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:37 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31216\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:55:59 GMT\r\netag: W/\"79f0-1989632abf4\"\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9YbgAIkIs5RPlvqfHJTyA8HbMB9qODxAxoQcFkTIqraThHrPBUdjXg5sqf34MUvLoLg3u3rTDi2T4BTZfVy9brpQB7oRpc6tVIgLkxHt7P4TGMMk0SRmrodc%2Bt9Lg%3D%3D\"}]}\r\ncf-ray: 9e742168eb9956c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31216,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31216, version 0.0","md5":"5a246f88fc7f4539fa8d90711016d1c0","sha1":"9eb704fe64bf328ada5b4fc909fc03b135e96813","sha256":"5f48c991bdc64557d6496e3e290d351881e3f10ae469fdfc332b03aca7a2ca02","sha512":"d6ac3ad66d794dd4152ff9fa3569dfd0bb7144fecaaf8d5e61eb77af07dd0d91cbc90226c9feb35a9a2d99bd1fc0af08f3d0e682357494c4267542b8f237212a","ssdeep":"384:odPYEr8Zw2sKLcrdCssSNlrHGZyeGeAyIZdF2UzFcLe0TQO97Bnihbtb3x+HoXS3:gKZp/ApeS+gebXIsLeEtBnihhbQc/a","tlshash":"71e2e1292f8e39519b99e37984ba8f357450381760358c7a4c36ad4ab03c54a3b3b96f","first_seen":"2025-01-03T03:56:47.436444Z","last_seen":"2026-05-28T13:54:28.419473Z","times_seen":1011,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/api/extra/pixel","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:37.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /api/extra/pixel HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zexbets.com/w/\r\ncontent-type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:37 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nvary: Origin, accept-encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jyRBh%2FPyUWwFkIEWIhZCAXoKyiK3%2By8jYRlAqMuZ40ZiK03vU1Q9dfH03hHAGuO8KgC6NRdWfdDsW0zttvSCFlk0mPk3tzNHIrKRJ7MO3%2BcwwHivphJrijkiO6KCKg%3D%3D\"}]}\r\ncf-ray: 9e7421693bd256c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"428647be4acae0d85bd0799a59237001","sha1":"25b1dbe5aaaf5fe53a11fdb05fd14bcad3e92ebb","sha256":"edad519cb99926a099d84224b6b7427bbfbaa60c6ecc1673c039a0723be93006","sha512":"8ed0b8ab8b00e7883301e4dc47e6ae3c38abe1686e6de48d43983fa8105203f86c36b86cff1a09c9bdf9406ac7c4ac2f8b6a8654a42e1b5d03d843b5085428dc","ssdeep":"","tlshash":"f4a022c30a200bc2cc00000008203b22eec823238300022bc00c0200caae0fc30c333e","first_seen":"2025-06-04T11:30:16.150294Z","last_seen":"2026-06-05T22:28:14.637238Z","times_seen":12879,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/api/extra/promoIp","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:37.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /api/extra/promoIp HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zexbets.com/w/\r\ncontent-type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:37 GMT\r\ncontent-type: application/json\r\ncontent-length: 16\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KSSSTfC8liim6J%2F%2BEEQfEx9HizKFwpV8D1LVAVw7CW4PJkDBdwmoQzspkctm%2FDJKlXKCrkC22f%2B8Tx5HL%2BNh%2FlpkbvVanRnlfha4xiYu0Aq4eXd%2FpklPFUC4B2e%2BFA%3D%3D\"}]}\r\ncf-ray: 9e7421693bd356c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-06-06T10:04:01.059512Z","times_seen":153164,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/_next/static/css/2b3198649a078c56.css","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/_next/static/css/2b3198649a078c56.css HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 00:49:00 GMT\r\netag: W/\"7a4-19d08b78f92\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ijr341Ysrl4U9C0z%2BfjvtsFXP6bk0y3rhKpw9dLC4MmvYIRWz82yS0URHGsYLDk7X7agEnFOr%2FUCeUF0mrjj36G%2F73zh5aRDqDe4sOyUOfqUR7DI302huQQrG63AfQ%3D%3D\"}]}\r\ncf-ray: 9e7421673ac056c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1956,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1956), with no line terminators","md5":"a40a0db04beb37ff985968da200beeb9","sha1":"43599a6376c0e01d48e68a6a16325b01def3191a","sha256":"c6ce83ab109eb73ee51d309e1b8996660a62a5a0b9b724b54bcbd31dba3bb9de","sha512":"1047d3271e96383f0a382f426e4d3de0d6e1e62adb2ee6db4edc9078fe95d616642a4f6bbe969c27151abc35c09f53ebb8b8a1476bf8856ce7be043d758bb925","ssdeep":"","tlshash":"ba41dd712044226cf4d9a09af406644f75c1892ae21328b0b28de4acd1e3ef7fdf13a1","first_seen":"2025-01-31T10:41:20.175967Z","last_seen":"2026-06-02T12:09:08.107196Z","times_seen":1887,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/new/landing/block1BgM.webp","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/new/landing/block1BgM.webp HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"772e-1989632ac38\"\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J3FrNlkV8Ft8ZVTo%2BvDd3dL4ZCGTNLGc5uoPsXLZgN7%2BgSMUNdIr%2FywuqLAoh7oOSMQsHD%2BLNU8dDNO%2FEsqkrmHQYOKTc3%2Bc2KohuYCvMH%2F4bhbCoMlDiorpPJoNNw%3D%3D\"}]}\r\ncf-ray: 9e7421674ada56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30510,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f1d26004f83735bd2521a49722ea6c06","sha1":"6eae79b2d1c8a1539bee33abae3ee09825468b54","sha256":"7a5783cd7895fd743a8efa30ee7de9402deedc294d8eeb71ea22f676b787ea10","sha512":"8cc7a3b942340c94f55232e222fc27cbde7815ca763c483ae770397d3f46b5fe49d2db9f2daa80736f32caa1eb9996b0c4ea08d05fb691b29083b7d2a6032601","ssdeep":"768:SYZ9DOJNKHAYuYgmHR9NjvFwyaDtATAFSUt:XIKHAYuYvHR9Nj9Ba5A/U","tlshash":"3fd2f18c066ff44c505ae723823d4f4917df885e963c355a8aa78335a4e9e136c8f53d","first_seen":"2025-01-31T10:41:20.119302Z","last_seen":"2026-06-02T12:09:08.128049Z","times_seen":1906,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/new/landing/block3Bg2.webp","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/new/landing/block3Bg2.webp HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"a50e-1989632ac38\"\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NO3VbdFh%2F7Jqk3j3ZiAnj1LHRRy4DutmoigseuICDzcKuCbp472PQeCY%2B2WxUEM3Tk3krOlBICtBdZKox1vx9EF21YIb2UDM70u7EWBlqot7ftWcgd3gmgysrU6ncw%3D%3D\"}]}\r\ncf-ray: 9e7421674ae056c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42254,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d478c3f4a716990ed217e6ace31734d3","sha1":"c773fb06a91834dfa0874a7ac02e1ed063709706","sha256":"5111eb0ea2e9c86e8f4c57da58821b50781c345eeb65a397dfe10799f34c21f2","sha512":"d1844b16ad017ca258c943cef26e6c2125b94dcc9bfc3a62a13e83a8ebe510230d9531a156df6da080597b6697bcca10ee75912ba7378e17c4266f5b9f5aa047","ssdeep":"768:W62xl5LOCUFdXVdS1z0zfs8ulIjL82K7usf6571t0lfk3dRGtrOOdTONmk5T4LHP:Wtnqvdmubs8u6jL8Tusf6Z0l+wJwNmBz","tlshash":"0d13f1b13d4b9594bc7c444cef80074f9acc66ed9182dc67c1ae68f1a789ca84a309f4","first_seen":"2025-01-31T10:41:20.124542Z","last_seen":"2026-06-02T12:09:08.065866Z","times_seen":1904,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/new/landing/block5Bg.webp","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/new/landing/block5Bg.webp HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:56:00 GMT\r\netag: W/\"d128-1989632ac38\"\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cfinsJ0kWJ2h5p4f5o4NZEvEdbb%2BYO4tcQC6dPFBRThW42GDFru3IJljM9DxmrkRs2VAwyisQSg%2BVOzq7W1XQN25B59f5JObDwnq6o4IW%2BpuAVhPXsL4yFV4aa%2F8Aw%3D%3D\"}]}\r\ncf-ray: 9e7421674ae256c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53544,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c6d0567946b20d3f91228186c8425ade","sha1":"90e84b04c251dbbe1cfd12cd2220f07beed207f2","sha256":"5782471d28353cb1ae76e0d8463801d81bef491501aa62f3146004df0fc8ede4","sha512":"9f1b0f50c8990665ddc8d8489742eb34e13220e47977a22227dec4189fcd725fd9452c90114fab8f1a129bda2754a925c5b4a60bbe31fbf02dcc82b30b78b4f9","ssdeep":"1536:wQBneNzFJFsR1NTJ69EVl+DVj6VwVo/aA2G4Z1KL7/bY:8NNc11Vl+50wOCA2G4Z1K3jY","tlshash":"c03302c8121dac27bda99a512204cfd742b198ce5ad860b1edc0fe1af12c46ec4d5cfa","first_seen":"2025-01-31T10:41:20.129062Z","last_seen":"2026-06-02T12:09:08.054414Z","times_seen":1906,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/new/custom/default_2.jpg","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:36.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/new/custom/default_2.jpg HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 92711\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 28 Aug 2025 14:35:31 GMT\r\netag: W/\"16a27-198f11aefc9\"\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TVqh60gLVkWY6Xes62sK3H%2FhTFUIhVrLWNPVsXGXXlTa%2FDWEwgXwhqn7uwQscoj4esWrAZab%2FRK9YDoFgBp4iiKIQ5wy0Nrahjx%2BguJGwytcyGTc5l189MDkP2N%2Fvg%3D%3D\"}]}\r\ncf-ray: 9e7421674ae956c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92711,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3","md5":"d8c1440b10961a6c02852518da21ab0f","sha1":"ba1590f0c03ba1a6dc3a32c6ba46f4db0f2ba5b6","sha256":"f9d67f6baf83965f3b363254dc7ae0de5bd80ca87b0af896ee8250b1e4358cd6","sha512":"c9238fb3f3d7668fe2cf86d2f2af4c66c4af8082b27f78d4433d3779b38c6585ccf1c119379b91872758916e3bc780fc34397b8e4c6585e780e8343f2de25a82","ssdeep":"1536:+nMcmQ5zU95UQarUx38ueOigin6h0eGMng3Gpc80pUuzEAk5YYt0sIW32fEqPTrm:KMiwGr8zMgin6GNdWMFI/YYttkE0rELR","tlshash":"3093027387e04e8ce95c9c7b805b85dc17686dae2bef5569a1251854ff3e3813a20f43","first_seen":"2025-08-23T08:17:51.602264Z","last_seen":"2026-05-03T00:02:50.680187Z","times_seen":348,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/w/fonts/ttnorms/TTNorms-Bold.woff","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:37.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /w/fonts/ttnorms/TTNorms-Bold.woff HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zexbets.com/w/fonts/ttnorms/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:37 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31356\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 10 Aug 2025 22:55:59 GMT\r\netag: W/\"7a7c-1989632abf8\"\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sdeo5gpZXiP4SUX1eVcKIpv%2B6fbvbeIy02hKs3Ta52Va%2Fo0eFjlRHuUT6c%2Bk%2F58N9ayDBmSkT83djElWFiblvCcVIaR%2B%2FI9ovI1tuj29YkL7ijFde2c%2Bf5q9VbxIIg%3D%3D\"}]}\r\ncf-ray: 9e742168eb9a56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31356,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31356, version 0.0","md5":"1009f03324315eb8bb66d610775afe82","sha1":"0f23bd1f8f9cefd55d70e8adc0630cef4c17ca52","sha256":"9e710930d6b03e68bdc6ba959f0d2c887130bfb798396be23a681052a65dac08","sha512":"aa49efbd3abbf9f1725d374df9cf78c265404df78b7559403ee63e87d753156cb5c29b7c12a464db02984c2c487a680556ce95d3e4f549faf2aaa8963c6513bd","ssdeep":"384:yDE5sruZZalQZm8rBdPelcvyApojd2CijOognqC1paaHxOpS8q3YuqvHd3nbTTzY:bZoSZm4zm6j3ZfD+B9M93TY+oc/s","tlshash":"7be2e0eced1fe7a38314c5ef11354e2b137429c7701bc78986289555eca61b2bd31513","first_seen":"2023-05-07T16:06:45Z","last_seen":"2026-06-04T13:22:52.909135Z","times_seen":1946,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zexbets.com/api/extra/holiday","fqdn":"zexbets.com","domain":"zexbets.com","tld":"com"},"ip":{"addr":"172.67.135.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zexbets.com/w/","date":"2026-04-04T23:35:37.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zexbets.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 19:49:08 GMT","end":"Sat, 23 May 2026 19:49:07 GMT"},"fingerprint":{"sha1":"39:0F:97:22:C7:67:FA:F2:1A:96:50:AA:9C:3D:2C:68:D9:30:87:D1","sha256":"AE:67:A0:C0:FB:5A:DC:EB:38:B0:CD:01:DD:5C:1E:54:FF:F7:03:53:69:75:5B:8D:0A:A2:A5:B4:10:E7:D5:82"}}},"request":{"raw":"GET /api/extra/holiday HTTP/1.1\r\nHost: zexbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zexbets.com/w/\r\ncontent-type: application/json\r\nauthorization: \r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:35:37 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nvary: Origin, accept-encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3kgxLdVi5Vd8LYqCnIKguoh9BVR388rB9mTtGjQzz81aliMiO1PLdsn%2FvFeAey6gsDp6S5ERvjCp60H%2FMJIaiFS1VuLk9fOEFoYmuPjuz2Bm6rw%2F2p60ogn8Uvyymw%3D%3D\"}]}\r\ncf-ray: 9e7421694bd556c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"64bd1ee4cca69558fca5317e81a2b469","sha1":"7be9c89474e4f8526395703aacc31165a48f6c7f","sha256":"5ec7611613d86543be443ebd6f2043ba9cb5379a9e39e7b37c8fa3d7e88278d5","sha512":"457194cab8d05978a245ca36617cb89d474ddeb0c1181e5d5e29f03a092c21fea68332e1e7bd23c01a2721aa304d67822888fe41d01b69f83da3eed5e149bc25","ssdeep":"","tlshash":"228000022a2008aac808228002382f0028a8222ba0002008e08ca008eaa2022308382b","first_seen":"2023-06-17T21:25:09Z","last_seen":"2026-06-06T10:17:33.953373Z","times_seen":11897,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"zexbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}