{"report_id":"95527bd7-1181-4afa-bef4-a62685757016","version":0,"status":"done","tags":[],"date":"2026-09-02T13:31:40Z","url":{"schema":"http","addr":"manbet.tv/","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":0,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"manbet.tv/home/register","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"title":"ManBetX(万博体育)官网|英超狼队和水晶宫全球赞助伙伴","dom":{"size":116137,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1787)","md5":"9202d8e454828eef2a9c6e3b1bfd664a","sha1":"ba7f22116424b89c4a87b0cd08f5f12f4f0dfa5a","sha256":"637c38045cbad19a51e7c5d65b4f5296dc90a3d9a4682d42e9a2b390d8f23408","sha512":"a591c875553bcc8e3a6e4885e92048a170d3cd81ef52d6d2fa71368f3c2555b8fd486c7f750efdf456b72bd2d8a9d87e660cf4c2f1f4909d1ddc40a0ab92007c","ssdeep":"1536:wPIrvcNvgRRl5OIuGHg95RFgbiwPRMInsfdVBSJycT918Hdbq6k081bQfDSL8ob3:KK5OkPvAdVe1BWTlzkAaZOBjDwyRlZG1","tlshash":"f1b31951a8fa0437017790d665b7af1abeab8437c6068c10b2fe4fc46fc2e818d5765e","dom_hash":"domhashfb6bf3c51f3d6b6690e539d3593dae07","first_seen":"2026-09-02T13:31:50.630667Z","last_seen":"2026-09-02T13:31:50.630667Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"manbet.tv/","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":0,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-07T13:31:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"static-content-j.mpdulhtmburd.com","ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-02T13:31:44.948526Z","last_seen":"2026-09-02T13:31:44.948526Z","alert_count":0,"request_count":1,"received_data":6700,"sent_data":594,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}]},{"fqdn":"www.vrfpshbc.com","ip":{"addr":"172.67.186.168","port":2053,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-29","domain_rank":0,"first_seen":"2023-07-07T23:23:19Z","last_seen":"2026-09-02T13:20:05.467426Z","alert_count":0,"request_count":1,"received_data":4938,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static-content-cn.mpdulhtmburd.com","ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-02T13:20:03.178412Z","last_seen":"2026-09-02T13:20:03.178412Z","alert_count":0,"request_count":16,"received_data":628884,"sent_data":8323,"comment":"","tags":null,"fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.eaafacef.com","ip":{"addr":"172.67.180.38","port":2053,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-29","domain_rank":0,"first_seen":"2024-08-15T12:53:23Z","last_seen":"2026-09-02T13:20:04.529001Z","alert_count":0,"request_count":1,"received_data":3193,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.f4bzyrz92us3.com","ip":{"addr":"172.65.201.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-11-02","domain_rank":0,"first_seen":"2019-11-02T15:14:40Z","last_seen":"2026-09-02T13:20:04.18478Z","alert_count":0,"request_count":2,"received_data":57647,"sent_data":1127,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}]},{"fqdn":"cdn.dingxiang-inc.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-05-23","domain_rank":2207511,"first_seen":"2017-09-05T08:42:18Z","last_seen":"2026-08-27T05:52:57.893175Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":491,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.hfamr4v43k9n.com","ip":{"addr":"172.65.201.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-10","domain_rank":0,"first_seen":"2026-08-06T00:00:21.200749Z","last_seen":"2026-09-02T13:20:05.396448Z","alert_count":0,"request_count":1,"received_data":1584,"sent_data":559,"comment":"","tags":null,"fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static-content-t.mpdulhtmburd.com","ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-02T13:20:03.177406Z","last_seen":"2026-09-02T13:20:03.177407Z","alert_count":0,"request_count":37,"received_data":1226376,"sent_data":21766,"comment":"","tags":null,"fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-30T22:35:21.728174Z","alert_count":0,"request_count":2,"received_data":845519,"sent_data":962,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.kvkfolsc.com","ip":{"addr":"61.110.221.58","port":51240,"asn":54994,"as":"ML-1432-54994","country":"Japan","country_code":"JP"},"domain_registered":"2021-06-18","domain_rank":0,"first_seen":"2026-07-22T09:12:04.493816Z","last_seen":"2026-09-02T13:20:05.283479Z","alert_count":0,"request_count":1,"received_data":35347,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"manbet.tv","ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"domain_registered":"2016-04-07","domain_rank":0,"first_seen":"2026-03-19T10:32:57.310115Z","last_seen":"2026-09-02T13:20:04.251598Z","alert_count":24,"request_count":12,"received_data":652572,"sent_data":6861,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.5.2","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"file-latest.rkvcviwf.com","ip":{"addr":"14.0.60.131","port":443,"asn":54994,"as":"ML-1432-54994","country":"India","country_code":"IN"},"domain_registered":"2022-07-29","domain_rank":0,"first_seen":"2026-02-14T03:18:41.625249Z","last_seen":"2026-09-02T13:20:04.110416Z","alert_count":0,"request_count":2,"received_data":127234,"sent_data":1176,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"file-new.rkvcviwf.com","ip":{"addr":"14.0.60.131","port":443,"asn":54994,"as":"ML-1432-54994","country":"India","country_code":"IN"},"domain_registered":"2022-07-29","domain_rank":0,"first_seen":"2022-12-11T15:49:34Z","last_seen":"2026-09-02T13:20:05.472052Z","alert_count":0,"request_count":1,"received_data":91563,"sent_data":585,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-09-02T16:16:33.114228Z","times_seen":89433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/js/newlivechat.js?20260126","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"82236be894134d60c1165840a2f1f432","sha1":"299865c8584f72365c7f4d87d99e8702c4cfb68d","sha256":"ccc9ca0fdd0b8e6f3cf3145e5ad7b9730cdf9573d46631916fa5055e1f6f84bd","sha512":"8ba9b5c320cdab328fef9faf00a641ed97c0e36eafb46b330637f90cbbc8bf503e0ccea92c33e6a886f53f37502fea66f5ec4722787c2334f6ec41ca58bbe768","ssdeep":"","tlshash":"2801d089bc45b076ab56326c713bfa07516213156844683348ee87bbeb32e9b410358c","size":733,"data":"","first_seen":"2026-03-04T07:05:29.810152Z","last_seen":"2026-09-02T13:31:50.687061Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/home/register","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"1fc2eee77e9b6b67bd98b45e619f9a36","sha1":"ae4da2732d7f9750d1fd09d6bc0a3d7e0e9425d1","sha256":"8ab876af19c093af3abf3394bc867016508d8e873b715e97feeb4ce3a2e075e1","sha512":"92a35bda8796cc33c4b6c372d15841d04bbdda341a2bc65162617ab759a86b62d77a8dbb29b1d48f917edf4229cbe6147b427bb08177035765d2ee37f743515e","ssdeep":"","tlshash":"3ae02b2a73f41004217730150b2ff6663d55302b0284ee013e5d57b13f54097f103a48","size":331,"data":"","first_seen":"2026-06-08T22:25:14.006246Z","last_seen":"2026-09-02T13:31:50.706352Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/home/register","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"4df2eec3f94fbb19efc4a596ccc41f6e","sha1":"fd9d6c5b69e1d8e9a9dba7a1a452e2e3b54a0cb2","sha256":"7fc17e94dcd2f910165fd89b0b08d9cd2d8859afe835cf2709b81b067db83880","sha512":"8c999690f96d596fbf0e55d4160471a9b52bc038a915067e643d17ba14642777e6c8e58e2729ff0590110d0eb4495a8cca1093e0530bc3927eb362a5510927cc","ssdeep":"","tlshash":"10b092aa2f49565e7051042b0459a0eea12a04ac084fca68cf2dcb0ceac3880070999f","size":126,"data":"","first_seen":"2026-08-09T03:24:39.663385Z","last_seen":"2026-09-02T13:31:50.707147Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/home/register","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"64fe78723a33db71fac331cbdfd30baf","sha1":"c19418251e9861d365f2f4a2bdc51b1ccdc18acf","sha256":"7167e4deafc47f799fe8056af04ec806402d3f18c98ec4e34451a703bfe00f4f","sha512":"284cdee6c80176fbd7f2cd9e00b1b692a1e5e11bb3e790fc8bfe070c85cade3223dc0689e82b6d76b6d54c33ee64684fca5ae6a48873febab22541f1c91573a3","ssdeep":"","tlshash":"ed217b066dba148227fb307943bfc2c832b99017058bd9c03d5c55408f2cefa26e9b85","size":1199,"data":"","first_seen":"2026-09-02T13:31:50.708008Z","last_seen":"2026-09-02T13:31:50.708008Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/home/register","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c4128d9f780e1b43537457563a033b0","sha1":"b696fb51aa9f9407d56148beeaf1b087547fc725","sha256":"36fcd72e76aac7f12b10b0390bb74fe09c6e75f87a50c6c1d6ce1e0f087b8cdc","sha512":"011f1dd75066b3a90dcf58a98d3601aa8010a36032e0406ac5e6e38efe86e2c412656f08d4c26a8d905254484715e5b7903be81cfc038c9b3637f6802796cf73","ssdeep":"192:Z0Ddh3EGClSTYtR/yy9lWVCytUNJDkG1yY:ZTSCLDn","tlshash":"f412cb8df1a752b829b73036137f10c2ab6f021bd456dc30badf66a44f82a10e756799","size":9053,"data":"","first_seen":"2026-08-29T02:14:36.907567Z","last_seen":"2026-09-02T13:31:50.710266Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/home/register","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e949054ef051bc461e6833443c22381","sha1":"fc2680cdfd1ced97d415c8064d22ed957dc6f921","sha256":"3b726499e302f1404a5e1563df3523ae832525809973c31f96222de7ac535762","sha512":"05d498b871070cbbad001ce618b15118226aca42590884802aa0fb0a08791f816b74c2448a94e9bc4e779de084dbd19546a03bac67818e71c9003cf05d4e8aba","ssdeep":"","tlshash":"c6011038f2744a4670bb70722d6be81aa9bd4c072c0bde14f86c05e12fc06858f71d4d","size":757,"data":"","first_seen":"2026-06-08T22:25:14.010234Z","last_seen":"2026-09-02T13:31:50.711272Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/home/register","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e66e68889d22b0154ef1cc72e6af04c9","sha1":"2ded59cf642746f954f0d3c7408c61d20ee07097","sha256":"685c5c898e9fe5e1780ea23c7438e3cdc14eb4b5971e93d923528f4ee386cb08","sha512":"49d55e91dcce5083f13e2d77e4535a0afab223d2087d66e734f549b4595cebf0ff8f126e9f15ffe690a2a5c4f94f25725885429d824a32ed9c4bc0091bdc69d8","ssdeep":"96:Sm8Pm5Hcnr7EmkVPDar7HufE20IjB0JJdpJl4DLMwSCyagd:1Svn8T9DaPq10CmXqLMwSCyJd","tlshash":"5291236abeb30165507b102f16bf6a587d9100236508ee2dbcacccc55fe0d05b5bbaad","size":4587,"data":"","first_seen":"2026-09-02T13:20:15.266835Z","last_seen":"2026-09-02T13:31:50.712141Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/home/register","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f48eff617971886c8cc96d031f4bb51","sha1":"397c88b1c83bce9da0907fd40a22707367359132","sha256":"4082cd49b266c23b9dab2e2507ff9878c56580a95fc67e80f323e856ca2d2f45","sha512":"72f851ce5e2cb466c1369ff9e7cc7423a3cbf87d6b341b0954c1b3f89034e8c23936827f6e69406a82b514f7cfba3a40464a8de65a1f2ca46814fd1a7a4c556a","ssdeep":"192:k4tYyfgH8iImXyiCavEEM8g2Frp3dx4rOyKctANA2A8A/adKHKCTj:eB02hk1bl","tlshash":"de02a51ef9ab1645693730bd1b7f4188b5b8d1236048cf20794daad80f96914d2fafec","size":8196,"data":"","first_seen":"2026-08-29T02:14:36.913356Z","last_seen":"2026-09-02T13:31:50.713723Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/home/register","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"3054e6f3ec24a7ff146ffe691d3c2039","sha1":"5d1200c92acc6df5df44e399cfb82eab2fa5323f","sha256":"2d6a7351ca9c6f4946001e9a3cab74b6fbaa5348252c16c60aa36c9936e82e52","sha512":"49ed02efdceba371bb3ecfda35f3b2f9373852d9e3f0a5c54f916ed020cd7da25f8a18349fdbf0a50553c1e7d4aaad2014d0b713f4eaf778061dded663a0d068","ssdeep":"","tlshash":"227120e2fa58331c94bed4e90cbb21c6b19508e111418c74bd5d53e07b2686d2f3beac","size":3702,"data":"","first_seen":"2026-06-08T22:25:14.013534Z","last_seen":"2026-09-02T13:31:50.714594Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/home/register","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"926d9ad4cebb8163e3ef260c520b28b5","sha1":"de23bca23b7b20789483b9312ee53e05932fa22a","sha256":"286c4cb5e55d5b5f6f9168849549a63c98d334547e567875fa33235c1ae56a47","sha512":"6299c8a75ee65e90d9fb82c851fbacbca5815ee0ad4662f28907cef55eeb1cac165c385833d4014cc794959a7d9deb61b391231bbb030a230d96812d114ce92f","ssdeep":"","tlshash":"68c02bc8211a0c7191fb27008b3ff600b401720898d969318d0a33054d20e03db58c40","size":151,"data":"","first_seen":"2026-06-08T22:25:14.01786Z","last_seen":"2026-09-02T13:31:50.715386Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/home/register","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a00ba66a9e8057719ba9f49c0a66bdae","sha1":"cf0e5d5b42fabdd0c353a671c31c25667a04212c","sha256":"b1c7ed01c3ee6f313e0f2eeff63bcff69bf7f36ac5e80f5777477b098d5bb629","sha512":"9a8c4342de034fb40c4897ed4d5f7d135af29a53f768b0a62e5eeaba2994c3155b6dda777884173a2955a6a366c0f7fac5f5c69ce4743e5d2be04f73066ccf6c","ssdeep":"","tlshash":"d401834e345c05e721b776e733b3420cb46756071084f492f74c869c0d008ba005b4ac","size":678,"data":"","first_seen":"2026-06-08T22:25:14.020099Z","last_seen":"2026-09-02T13:31:50.716393Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/home/register","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"aee0d5bdef43a85bd18c30a1f215f032","sha1":"0ace8309423322940c2d5a31b558e23d839a7fc2","sha256":"8ca56d5f3455548d3180ab7ccd1f146ad8c48b65f3373221482b77ebfe723e91","sha512":"611c45b292d99649e74a1b5eb43cb93f310aa9ff696c9f612ba7386e196dd2f377758f128a1cd9277ee9cbca8152ce55e3ee4813227234d55d7174ea2c7bd69a","ssdeep":"","tlshash":"3ed0950f1c1514382379147d10bae5ccb171104c907dd50040dcd4504964ed50c3d7c8","size":252,"data":"","first_seen":"2026-06-08T22:25:14.02139Z","last_seen":"2026-09-02T13:31:50.717181Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/home/register","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"190178ac3e928303ff3c59368ae8c128","sha1":"117746164db469aff41193a3acbd943be7291426","sha256":"aa8e272e7a33ccd599b057a9caa470598ebd0dd5828db03a056164a84336c52c","sha512":"fcd83c943ad07035ac2228ed2314d7f30a06031bd5b8669ce8e3f67884964e4741583b3ee75cad05aff7a3c6e1e367852c8d06be9fa55255b108ea02bb0249e7","ssdeep":"","tlshash":"06c08cc028e20ea2553ee04214b9c28220712fed01739894e0ae931c1208060bbed23e","size":154,"data":"","first_seen":"2026-06-08T22:25:14.022666Z","last_seen":"2026-09-02T13:31:50.717969Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/home/register","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"568ac2454ab22baf21803f80d7954f7d","sha1":"fb22fd33216565453b4e6009453d2b42808f3e7d","sha256":"7501d7e9d2a375d65a94027980e9053485d694e260ac4e84e7f604f2d8920d87","sha512":"5b5495402e7b4ac9f8445ba3c796089ab96fad7e5168751e138efd542b5a38bdd2bac3835f85c16265834f7bf5d519b44ebd0d41e90f259a882b1c21c8360f8d","ssdeep":"","tlshash":"a5b012311710512d1194d02d353b1800fcc66116ca0049b5563fc8d148c4cf0c1608cf","size":99,"data":"","first_seen":"2026-06-08T22:25:14.023863Z","last_seen":"2026-09-02T13:31:50.718713Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/home/register","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd8838e3b49e2c259a5fb1c91067016b","sha1":"2527178c9c5203b9e327d1fc1c690f053a96bf5d","sha256":"1d4c39982af9e5165d098549cf23a4c042b26411824174b8ab830b6b213c564b","sha512":"6b824122c8ad531214bea0fafb0e8d19d1048b0949dd1427b5de2dd1f3f3f769cedd2b54568185a2334f3c20213c9dd44c87446552ce4b9e378e95a7e659af5e","ssdeep":"","tlshash":"f9b09288e9a8402a91ba1922242212c819aa1866e8c000821422d990097ab4c656be9b","size":111,"data":"","first_seen":"2026-06-08T22:25:14.025127Z","last_seen":"2026-09-02T13:31:50.71953Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/home/register","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8cdefc226999dd5d01d7b8e759fd87a","sha1":"36e539717fa11b124edc5e0769dbc260f31dceef","sha256":"eaa93a0a821250620f997ab7de7d32389600daa489a8a03b90a73f8b703eb66f","sha512":"d445c9fe848c20ecf0214e505900e208041ce85bfdf2ba510b2255e0c95cb776fb6423e4e268da3320cad462c43e71b9798fd8bdf6af3aa4c7b751980d32ebb3","ssdeep":"","tlshash":"4fc09b31d97990d45d3694c5041593793cf4e03206dc5321f7d8716ca7ec7515161643","size":132,"data":"","first_seen":"2026-06-08T22:25:14.026427Z","last_seen":"2026-09-02T13:31:50.720317Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kvkfolsc.com:51240/global-activity-entry/js/rain-icon.js","fqdn":"www.kvkfolsc.com","domain":"kvkfolsc.com","tld":"com"},"ip":{"addr":"61.110.221.58","port":51240,"asn":54994,"as":"ML-1432-54994","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"59767c53c4cb277425bce5c5e7ea9d41","sha1":"36ee5b49ceb915d4369fe92ca49dbd8bba702c96","sha256":"5b43bfa813b9f48656d868fbdacd693bf7fc0f4324d5b815db42ceb80c5a4a27","sha512":"f56b905cc921ab836e06c2c2f1e9dab1033056b68043b6fc1a24f78446dfcfeed89d1408b26ddd176540761784e7652fe2b4d1e5103f07f510bf3e886267e967","ssdeep":"768:kCcZeOuOBMThTlp0Ef7X879b7zT2MSVHyDP:kRDQt0FSVHk","tlshash":"42f2632e5afa10516a0370654f6f91087675a02b160bdc183e5e93d8df806b846fafff","size":34779,"data":"","first_seen":"2025-03-02T07:32:23.132184Z","last_seen":"2026-09-02T13:31:50.639833Z","times_seen":833,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/util/all.js?20231116","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5aa16a242596257e153e33c5b8fb232","sha1":"804252d4387c4fda0141e9bf4fd2a05bb3c7068a","sha256":"c21ffeeff6782e69216ce2fdf3fd54289af1d7b4a8bc2af9b83c0679c5969782","sha512":"1ae9de5c195af57a93c2bbc30c0597c8f7f2e96e98af1c1a514d21d170b54c4bafc882689096e117cd36f25570474bd059edfb8bf9023571ff7531ace1491c59","ssdeep":"1536:rfee/RrYiHhJ9Q0f16d9zeDN5qW4wTW3Jny+aSsG+Kjbd2m43ftShEhJ+7Rh0Om:rfD/miHhJ9Q0fd5B8jYhi0t","tlshash":"6273f88c7591306a4aef31b7782b224f73769a69500e5068f0b8d4e53ebce857167f38","size":77892,"data":"","first_seen":"2023-09-15T15:49:20Z","last_seen":"2026-09-02T13:31:50.678755Z","times_seen":1077,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/js/captcha/geetest_captcha.js?20260410","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d75e20308c9baf465ae493434e88d5ff","sha1":"949ff9f07855150c310481ea3eccc8c81984e22a","sha256":"a745d360ff83964f66ee7581fca332aa71be4b1234c0037b670709002f51fd83","sha512":"1afb561f2a91d4a68e7813da23e6e33494f695906005bd3791471044f8104a3c6e3baf1f4de218bf9cb0f44c09e106097b7eb80cd74a1fc00a63d5772fb74245","ssdeep":"","tlshash":"d671147994b6cc420c2b60ab677f9984d6008617f905de843decc9dd9f164dc80a1fd6","size":3524,"data":"","first_seen":"2026-08-29T02:14:36.864577Z","last_seen":"2026-09-02T13:31:50.668611Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/js/jquery-ui.js?20260516","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbc65ff85e08b21d7e0c0394fbf3a371","sha1":"0ebabcd2c6da47bde11fadf331a02c98845b0a8d","sha256":"c4b0fb9e123ad9f72c1192b6feff0bb0171be251bb76050b92e5e85c1fe3f757","sha512":"ca70d36e3179ad41ec5818f3ee7b258ebad25aa2d33c968e47349ee5a1821713a28116519b0334e72fa4b82b716a8092cd5181d4acb75de459b0385b48b7735d","ssdeep":"12288:mFemHFgymkplyHCcmM0/W/EEwKvQRgPrVhDdRlY:wlyHCcmM0/W/EEwKbhhDdRlY","tlshash":"20b4a6c9f39c265a857a32595c2e42cdb23c8075e60058bfbc5d59dc29a883c43bbf79","size":529159,"data":"","first_seen":"2023-03-07T14:44:55Z","last_seen":"2026-09-02T13:31:50.687669Z","times_seen":4296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"311b141bfd151d77b276e03a36cfd6c3","sha1":"a674ded7b892a211ab1f7ea8103b31312b7157b5","sha256":"ab72bb54e9c47b2c0237b050f97c30863009c8a496370f79dc3f6e9fcc4e6b32","sha512":"ec92d153edd82ce2839d433559449ab4f70bf843c62e4eea5f8a67fc8b00091cccceaf2dae9d3568d200f5237340e940f3decbacd6bf937da0eefbfe9a217c00","ssdeep":"","tlshash":"c68004cd5100c10715f113057d033304d45710dd0d005f0141000d70110535f4117dc7","size":37,"data":"","first_seen":"2026-06-08T22:25:14.028239Z","last_seen":"2026-09-02T13:31:50.721159Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/js/jquery/jquery-3.5.1.min.js","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12b69d0ae6c6f0c42942ae6da2896e84","sha1":"d2cc8d43ce1c854b1172e42b1209502ad563db83","sha256":"6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f","sha512":"a55f55d56899ab440ef0cae17b28d5cc8f5b9766d1e9bc1a8ac6b89376924b476c1ab0c325497eb5d44af41f4ebf8eea236d87a36902244b8a3eca54994b8711","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:AYh8eip3huuf6IidlrvakdtQ47GKl","tlshash":"e893f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89475,"data":"","first_seen":"2023-03-07T01:02:27Z","last_seen":"2026-09-02T15:26:57.028425Z","times_seen":17682,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/js/captcha/geetest.js","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7b340e01f62559af09e1e18798703de","sha1":"924f9233a48936eee0871498e0f5ed2bfd57c350","sha256":"999339952d10e2be3c416dccb51821a164038c2c871583d5a2feb20c6851021a","sha512":"050929fa90d7dd6757dc2114dd6137b71369492b8f93c547742e1a5ee1bf35e6a588346b03d4b0197e5993510a7f5ee63ba198daaf8574f34326c37307f994cd","ssdeep":"384:OcB6Y6+HiaWSXauU058DIml6yDwFJQqVqp:OcB6Y6+H9HII22zc","tlshash":"7552114d68f7609385a3b428ca9fa114b9788a57002ccd85bd4ce3589f9447c9bbbfdc","size":13352,"data":"","first_seen":"2026-01-06T02:22:39.991269Z","last_seen":"2026-09-02T13:31:50.702051Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/util/error.js?20260612","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c0ea593018e80a10c20beffafa848a9","sha1":"2b8b9970d92aa3a4c04e3b15060f6aec8598c221","sha256":"4207bfc8630bf3017f592b22e0e5caac43e1ca03f2e0d00348a5af92e16625e7","sha512":"1d8adf99611e5804a9f7b5ae964da417892bbc7d5c71e544502083d04fada001eb16082edfa7921fb1b3b41e89d94a10f2e59b50cfc17d62489ac03c7639759d","ssdeep":"192:MTh94QOQzfyG3jChyTRmbxDeDWiYXYyC3SfZVYvxwYXPFj6vJRQ+lcQrdQr:MTh94wz73jChQgF+eXUeu","tlshash":"c72296b608f58b8a100df980c11b41293448744b8e1cba6a7befa5465fcc65f4bff99d","size":10458,"data":"","first_seen":"2026-06-12T02:05:05.713559Z","last_seen":"2026-09-02T13:31:50.661253Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/js/jquery/jquery.validate.js?202605","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"58f7023d6b4ac8f1b6313c0b3b481c1d","sha1":"be7f4dc28e63386ec28836130d133d98974e1373","sha256":"211ef6fcc71e550b70e54a5ded9e90d45122409d81090c67430c2437a58f0693","sha512":"846981b3af1a2806b0df8c4a73f8fbbc3c69b8c6e1b4200ec98447145f1bde450941e1d5c822b70b2c4e044a01844d340c6c18b31c962d818bb3d7f17f1b6f9f","ssdeep":"1536:HQTb/8QTZI/Vrl/KKb4/cUAK89OyjA1QKs1zjXaALx84kI9YOBmGnTQ0XiAOSe3l:wTAQT8bLBKsIAL+4ku3XX/dK1","tlshash":"18337288fbde005a8a6931eeac4e51cd76fd80729500a87ebcdd14a415e4cbc12f9f79","size":53312,"data":"","first_seen":"2026-05-25T13:03:04.989106Z","last_seen":"2026-09-02T13:31:50.673582Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.f4bzyrz92us3.com/E2/EagleEye.js?1788355867","fqdn":"www.f4bzyrz92us3.com","domain":"f4bzyrz92us3.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1ff13fa03320de9d9d03d897e089b0f","sha1":"a2e610b134b2e05a12d8a7b65dfa528c518187ca","sha256":"35c4ac6e78a42c9f55ec33854b4cc18c1f47d25707ca9e89550462d3cea2dd9f","sha512":"1ad9235447d3183bdafb86355eee5c1145c4c923105b2048faa5ded6c7f5176c901c7cb8003978897dcf027aebcf28170aed9ada5ca506784fb90545c4edbf53","ssdeep":"1536:tolk6G1j9Bk/k0q7Mfx5+2I7v7D71Ies9GUWfth7KBbTE21gAWIOuYyR4mr/qDAT:+GW/k0q7Mfx5+2I7v7D77FftlKBbTv1P","tlshash":"1c43e61ab2963539c56230775caf9148b33d85a61298505cab0fc5e4783987e83bfff8","size":55510,"data":"","first_seen":"2026-09-02T13:31:50.691193Z","last_seen":"2026-09-02T13:31:50.691193Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/js/game/Game.js?20251217","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb6fcdbaea66ee468067eeec6170d505","sha1":"e93110e937a3b13ea40a000f196ccc74f955b8cc","sha256":"77f4e4a925e65acf024ad936e0c7cb87ce827a2d02a20ba7af6da8a0272fb5d8","sha512":"55ee175cb807a2fd3bfa724552b97456c193248b1ed3efa1832fb93850005a10f4542987cf37c47b5db0ca222e7cbb0d89e995eec55586ebd010f291c00f075b","ssdeep":"384:AURoUtVbztM3nigTG7SG4lznSVs5Lq/vtQEttGsOSVD:AURoU3ztwJou50QEttGsO2","tlshash":"6253154caea318e35a3654348b7f31956d5166032508dd1c3e0cd3a3df9a0be66b1efa","size":62420,"data":"","first_seen":"2026-04-08T20:50:32.513767Z","last_seen":"2026-09-02T13:31:50.683136Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/util/rsa.js","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e28749b1ce6013a456d4498a447dff3","sha1":"89d8c436922a84f097e86090179d112c3d6e13c2","sha256":"1748bdff25c71702d781b076f961920ef32283e324153b256e963202431a35ba","sha512":"2a675090d740e1600eaca9da2229b34cf764181bf65df4d023bb0e95feea6a7b83f3651a8eb70473e76313cc1fcdd38cd71a72b41fd57fdc34668b7d3b10b62e","ssdeep":"384:B1eJdA6YDf7WA5lK4UYl38uHrKFaY8BpC:bdjfm82aNy","tlshash":"5752a6857ad9302d07a95071055f054b7e35f8be598c04bdb1a0e8e938f198d833ef78","size":13514,"data":"","first_seen":"2023-03-07T01:28:09Z","last_seen":"2026-09-02T13:31:50.654597Z","times_seen":1238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/js/member/reg.simple.js?20230220","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00700c86085a74a2d7c28d0d78b17109","sha1":"2df4044173181d2843049f1d433fd7ef5bf9f0cf","sha256":"5ad140355d2396cc010829d9fa455a94c8d143f6e1c9407b9991b7dfd51a5b66","sha512":"3c9403de6efc950ec5e6ba2f209957b38432f22caad36baee61546ecf580c0615a07bc0e7c168356a8f671307528739270536bad1d3f4c2e404e9661f8266685","ssdeep":"192:eDY86gShDWhDxhD0hDJGx3DPdy7Uwm1AFtOtHoNNvqtnHzHensyaAS7xMdtY:eDY8gcfejatpsSkq","tlshash":"0122502eecab42871d3b70695e7f004569a6c0136b0cce24fe4ca5d08f85e24b5b6fd8","size":10494,"data":"","first_seen":"2026-03-31T07:11:16.978276Z","last_seen":"2026-09-02T13:31:50.641133Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hfamr4v43k9n.com/ETBridge","fqdn":"www.hfamr4v43k9n.com","domain":"hfamr4v43k9n.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"66a545da3debbef516af0424eea7e647","sha1":"5a745f99e039115b803cb7e03848ae4c181e1095","sha256":"995c30f01baa37e1ebba986f86234aecab206aaa3898ee7368dfdbf7fa3826a5","sha512":"b9996b025980405a556a2c44cb2a9dd8aab743ec76492e61f0d3645557b874013cca1eb4562a3169285410183aa29473fec4ec85e7b0d045800a3e0c309a00e3","ssdeep":"","tlshash":"291190defcb9743d2597b12c3b5f3915351240575005ea90bdccca555f505fa8060bce","size":1025,"data":"","first_seen":"2026-08-06T00:00:27.934901Z","last_seen":"2026-09-02T13:31:50.721998Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/js/swiper.min.js","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33b9d4a357523bff559c7db14d6327fe","sha1":"17e9e89057510d49e1d86750bce1eb209d8a5477","sha256":"51aadb3fec87c08df816d37956b3db189cb0c09c3c6efe14c7b39b486c8a0ff3","sha512":"904fa866e7dd872e44c70c4facc9e0180217130eead81df013e5ab327dfd85cd8f6367b812f202d9a442885f73274cdc1ecc0db7377474a2322faccc7c131e9f","ssdeep":"1536:OL2qg0G1fVLJW4bU98IA9SK8FDliAfKrGny55T1s53V7gZxj8rvHgZsUOUBDBWq1:1pbUAxSqBohgZu7HgZsUOUFBWqjxJ5","tlshash":"9dc3094eb390619510e36257529e9241a3b72849780ad0ac35b68cd7adbde4c13bfffc","size":122734,"data":"","first_seen":"2023-03-14T07:20:43Z","last_seen":"2026-09-02T13:31:50.690422Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/js/kz.js?20260729","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6235cc58482d8a740d5553e496aa0c1b","sha1":"82b473271ad26651edc91ba782663619c6ca3a49","sha256":"653ee8d8f9147fc78b14a50ae463a56e0cf0ba1354d71896a3b7e17b4fc19f98","sha512":"491486632541187178ef9744a4a9f58b2d6bee6cd5789077751a8536059a705c6c843500d002190438ebd081f674a31555a6f8203de5e9be28179adddc6f9bf6","ssdeep":"384:J5PPCzLF8jM9CxvqD2AtuOOXGKcrvmN2WbYeOyAXI93EsB:y8ks6E6PsB","tlshash":"1863732de9fb52951c3b70391f7f4001e629c407750cee197e2ca6c09f48669a6b6fe8","size":70210,"data":"","first_seen":"2026-08-07T01:26:51.907929Z","last_seen":"2026-09-02T13:31:50.664691Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/js/member/captcha.js?20230919","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"af5c80b7be75a99af8d3c1f9f9329718","sha1":"04cbc723e1eb8788a53197e191c70d1cdaf4bba4","sha256":"fe38dcb25afd6157d938da2bb21b229bb8660bdf2894a62341300998317ea1b2","sha512":"21c669b0cc023eba1b4158be72285261e85ded3790667447784871902eb10171faf60a6a5ce44de43dc8a64c7e499169e554e604f9637fdbe33bcc84dc022f1c","ssdeep":"","tlshash":"7561a929e4b241e13caf386b0a2f4d40e5618013b64eef667d1c46d0af859fa016bfdc","size":3459,"data":"","first_seen":"2026-03-04T13:33:41.511679Z","last_seen":"2026-09-02T13:31:50.697789Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.f4bzyrz92us3.com/E2/logo.js","fqdn":"www.f4bzyrz92us3.com","domain":"f4bzyrz92us3.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cbf98fbb50c1b755857d45656c62af7","sha1":"eed4c8d2ad5fe5a6d0dc37e92e36c886c29b816f","sha256":"dc5cbd772e91b2a6ed8a6619b45de05610270a82d15136df3684e17ace342fd8","sha512":"27a8fa9754cc994dffba4b8d344e2f81def89b2d0d551716eb181b792b4234027bb3598c7c5d92900d0c5d331b023e9bb4dc9ef62651ab370cd649beb3aff37e","ssdeep":"","tlshash":"b5b0124859086005f0311aff94d0900489280c350907e1931490293372cc09a9db830f","size":98,"data":"","first_seen":"2026-09-02T13:31:50.675754Z","last_seen":"2026-09-02T13:31:50.675754Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-3LRD95F87M\u0026cx=c\u0026gtm=4e68v1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d51a6a6a99cd59a6dd9e52cdb9146c5","sha1":"af5d05962e2f376857802c935ef75ff3614f9b75","sha256":"37951e6cc86287838fc7bd7990953002dabd1d203e17480910a766e392937ead","sha512":"fb869b01b8e89d9c83eecd28ec63a2d1cc003bc1aa9ff143824ab683828b619e0a0517bb9cce44b5bb3a6bca0625b7527164c9bd9ffff3f9d482a0688318ec7e","ssdeep":"6144:WRld0NBIrgm+LpwhukcrsA/2EgD3YjkGfVkmu6Xofm+UJD:Firp+akkgkI5nd","tlshash":"7ba419cd73c674229392f578903f018bb67a69a2b44cc899f28adcd42e3465a4177f7c","size":462696,"data":"","first_seen":"2026-09-02T13:20:15.258373Z","last_seen":"2026-09-02T13:31:50.636153Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/js/jquery/jquery-migrate-3.5.2.min.js","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88d82ba2bc432aa8ea45a71fb47ebccf","sha1":"e2382b1ecea7bff8870bdf7ce03a7a6262b60237","sha256":"a1c51ea6d1cda1dd205b65f567ea25dce3550065b32095d4988b3ee2751e0cb2","sha512":"e6cfa24544c0af49d4b42eb5fe6b2cfacd628a511954cf02f82dc78dd774a79b197dfc71bde4b0f5fbc8e8c1f0dbbe715d4a121747c232e52f3dd57506b9f2c4","ssdeep":"192:XAprDN+s0g6YfKIUfmI9vP1lg+vm9kdg6iLJJaCJQ+h4MlcjbR4:XAprx0kfKIi7P1lrvmAiLJo+h4M2ju","tlshash":"e352e96db56679724eb731b8f03bd20b71b205dd160d8940d19cc8f6686dc9e822bf78","size":13949,"data":"","first_seen":"2024-07-22T23:39:43Z","last_seen":"2026-09-02T14:54:30.378853Z","times_seen":2999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/js/jquery/jquery.carousel.js","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1552106a3e80457c7c75722b7372d303","sha1":"32ba62ff7b3590d3325d159141aa50a1db5802aa","sha256":"52947c9e6ac3e2f45c2b2a19802a91eeb75dc70902bf4bd87419a6386300848c","sha512":"e6b3f5bcdb5cea57241c6ca4f3c235a8ec04fe3d4baf75e2e33d67fa1ae4e094c08072772e3bc6a87dafb81e94a6ab81f38c670394f4f2a533ca5090e5879630","ssdeep":"384:MnvnA+MrUQ5x1jcvHGmUYnkrVdINO4XmfFmKK2vif3UE:Mn4+MrUk1j0UwNO4XmfF7K2vAv","tlshash":"50b2941b31a32172597b72298b9f5109333190979208ee507cbf8b147f9527897f2fea","size":24119,"data":"","first_seen":"2023-03-07T13:00:36Z","last_seen":"2026-09-02T13:31:50.70288Z","times_seen":853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-119765380-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a1741dce36d66a26fd2ce02f63f2d67","sha1":"1141a3f92724bfec8efba87f5c79e58feece827d","sha256":"457214e5b4fe08e24bc2db15be96965183540b31b2a58d1e9dabd96ad0363d61","sha512":"8f491556f26dec3581256bd664634b254a9803e6d319959a3d88551cc6c7f9428bd866686a112283e6b82ba7f7c52a3907232e15560311248e1dd9d6bef926ce","ssdeep":"6144:tld0aIudmxm/MjcrsA/2EgD3YjE2fVuNwz7D:4uAxSEwuqzP","tlshash":"568419cdb3d6b42283a2b574503f018bb27a6d92b84cc898f286ddd42e3465a5177f7c","size":381589,"data":"","first_seen":"2026-09-02T13:31:50.649587Z","last_seen":"2026-09-02T13:31:50.649587Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.5.2","filename":"https://static-content-cn.mpdulhtmburd.com:9587/js/jquery/jquery-migrate-3.5.2.min.js","line_number":2,"column_number":981},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj105 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj106 class:Object extensible:true frozen:false isError:false ownPropertyLength:16 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj107 class:Object extensible:true frozen:false isError:false ownPropertyLength:15 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj108 class:Object extensible:true frozen:false isError:false ownPropertyLength:18 sealed:false type:object]] kind:ArrayLike length:3] sealed:false type:object]","filename":"https://www.kvkfolsc.com:51240/global-activity-entry/js/rain-icon.js","line_number":107,"column_number":17}]},"http":[{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/d11_images/modal_reminder_logo.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.456Z","timestamp":1788355875456,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /d11_images/modal_reminder_logo.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 14074\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:45:39 GMT\r\nETag: \"62d84d53-36fa\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 7c8d0515fa8fb5a44ce9626cbd1d7e8d\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14074,"size_decoded":14516,"mime_type":"image/png","magic":"PNG image data, 569 x 555, 4-bit colormap, non-interlaced","md5":"3494fbc85e95ef708a1db6668fd2e401","sha1":"b9fbfc60416cd990012546e74b0fdb38bdbebe19","sha256":"3167f9728906a03ceaea850d57533fb5c253a38b94cfd55d245f714d7f18afac","sha512":"78791223a160d4012f76fad660815eb9fa01d4beb0bc98de01288e66b477a3c739a4b8ec0fcae6263fc66aee0eae43780d1abb663dc25b635bb9f702bb0eefff","ssdeep":"384:ZArYvJEV26jJlaWFjf8KvQdlbT3mc1qm+wTR:WcxaJlaOQRN14wV","tlshash":"0d52cf1c0cdd9c4dbd74129169409f8b5c70abfab9f051eb88caf218b6af9402554f23","first_seen":"2024-03-28T04:38:14Z","last_seen":"2026-09-02T13:31:50.634602Z","times_seen":798,"resource_available":false,"data":null}},"time_used":8357,"timings":{"blocked":8147,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-3LRD95F87M\u0026cx=c\u0026gtm=4e68v1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.803Z","timestamp":1788355875803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-3LRD95F87M\u0026cx=c\u0026gtm=4e68v1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 02 Sep 2026 13:31:15 GMT\r\nexpires: Wed, 02 Sep 2026 13:31:15 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 159508\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":462696,"size_decoded":160092,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"2d51a6a6a99cd59a6dd9e52cdb9146c5","sha1":"af5d05962e2f376857802c935ef75ff3614f9b75","sha256":"37951e6cc86287838fc7bd7990953002dabd1d203e17480910a766e392937ead","sha512":"fb869b01b8e89d9c83eecd28ec63a2d1cc003bc1aa9ff143824ab683828b619e0a0517bb9cce44b5bb3a6bca0625b7527164c9bd9ffff3f9d482a0688318ec7e","ssdeep":"6144:WRld0NBIrgm+LpwhukcrsA/2EgD3YjkGfVkmu6Xofm+UJD:Firp+akkgkI5nd","tlshash":"7ba419cd73c674229392f578903f018bb67a69a2b44cc899f28adcd42e3465a4177f7c","first_seen":"2026-09-02T13:20:15.258373Z","last_seen":"2026-09-02T13:31:50.636153Z","times_seen":2,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/nav/promo_1.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.173Z","timestamp":1788355868173,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/nav/promo_1.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 9153\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nETag: \"62d84dd9-23c1\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 7edd2001a207f0304bf9252014d77148\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":9153,"size_decoded":9594,"mime_type":"image/png","magic":"PNG image data, 200 x 100, 8-bit/color RGBA, non-interlaced","md5":"35232fc24b2dc1c976d9c5dc6a13c8c8","sha1":"f5003ab920e63450703abae5e6e6be411c04de45","sha256":"e13f9e04322055a0384d1cb68558705c6514711cd65496f8d640537ee6c03247","sha512":"b7ff4fd1576beeef3fb95a7c0a493891e4dfea064b585ad697f4a092dfb54b5f086bf4cfb197d68574db1f634fd6209161408bf83d61a84ec6094d5b108c7fc1","ssdeep":"192:gvmo1b5upO8VQNrg22Q2aRrjnhImlrznwbcLl+IgGT:gvDXMNuqujhIMzkKII/T","tlshash":"de12afad3974c4133b3670a42867c776c8ddc7b08a555c4ab58c4712ba30330951ebeb","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.638444Z","times_seen":955,"resource_available":false,"data":null}},"time_used":7377,"timings":{"blocked":7161,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kvkfolsc.com:51240/global-activity-entry/js/rain-icon.js","fqdn":"www.kvkfolsc.com","domain":"kvkfolsc.com","tld":"com"},"ip":{"addr":"61.110.221.58","port":51240,"asn":54994,"as":"ML-1432-54994","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.184Z","timestamp":1788355868184,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.kvkfolsc.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 01:54:18 GMT","end":"Sat, 14 Nov 2026 01:54:17 GMT"},"fingerprint":{"sha1":"39:5A:02:28:3D:30:CF:66:0E:67:B3:02:2D:06:24:4A:4C:36:90:7F","sha256":"46:5B:EA:59:3B:4F:BF:1A:01:D5:A9:92:3B:6A:C9:D3:92:7D:F1:02:A2:0A:56:D8:D9:80:D5:D8:1E:CE:91:C0"}}},"request":{"raw":"GET /global-activity-entry/js/rain-icon.js HTTP/1.1\r\nHost: www.kvkfolsc.com:51240\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:08 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Nov 2023 07:48:38 GMT\r\nETag: W/\"654c8ed6-88a9\"\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nAge: 1200428\r\nserver: nginx\r\nx-req-id: 6a98251c_PS-CDG-040L238_17376-20220\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34985,"size_decoded":10455,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"59767c53c4cb277425bce5c5e7ea9d41","sha1":"36ee5b49ceb915d4369fe92ca49dbd8bba702c96","sha256":"5b43bfa813b9f48656d868fbdacd693bf7fc0f4324d5b815db42ceb80c5a4a27","sha512":"f56b905cc921ab836e06c2c2f1e9dab1033056b68043b6fc1a24f78446dfcfeed89d1408b26ddd176540761784e7652fe2b4d1e5103f07f510bf3e886267e967","ssdeep":"768:kCcZeOuOBMThTlp0Ef7X879b7zT2MSVHyDP:kRDQt0FSVHk","tlshash":"42f2632e5afa10516a0370654f6f91087675a02b160bdc183e5e93d8df806b846fafff","first_seen":"2025-03-02T07:32:23.132184Z","last_seen":"2026-09-02T13:31:50.639833Z","times_seen":833,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":66,"connect":26,"send":0,"wait":30,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/js/member/reg.simple.js?20230220","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.193Z","timestamp":1788355868193,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-cn.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"ED:14:2F:4F:7D:32:46:7B:F5:03:5B:E8:4E:81:9D:E4:22:37:56:4B","sha256":"20:32:58:7D:65:C2:04:76:B6:E1:06:D0:86:3A:26:79:16:59:62:35:25:C7:A3:B0:3B:40:A3:9F:03:4F:4D:0D"}}},"request":{"raw":"GET /js/member/reg.simple.js?20230220 HTTP/1.1\r\nHost: static-content-cn.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:09 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 31 Mar 2026 03:35:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69cb40eb-2a00\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:09 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: fc4fceb82f043b9c1c2dc39f16662acc\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10752,"size_decoded":3232,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"00700c86085a74a2d7c28d0d78b17109","sha1":"2df4044173181d2843049f1d433fd7ef5bf9f0cf","sha256":"5ad140355d2396cc010829d9fa455a94c8d143f6e1c9407b9991b7dfd51a5b66","sha512":"3c9403de6efc950ec5e6ba2f209957b38432f22caad36baee61546ecf580c0615a07bc0e7c168356a8f671307528739270536bad1d3f4c2e404e9661f8266685","ssdeep":"192:eDY86gShDWhDxhD0hDJGx3DPdy7Uwm1AFtOtHoNNvqtnHzHensyaAS7xMdtY:eDY8gcfejatpsSkq","tlshash":"0122502eecab42871d3b70695e7f004569a6c0136b0cce24fe4ca5d08f85e24b5b6fd8","first_seen":"2026-03-31T07:11:16.978276Z","last_seen":"2026-09-02T13:31:50.641133Z","times_seen":194,"resource_available":true,"data":null}},"time_used":1275,"timings":{"blocked":1052,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/service/verifycode","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.197Z","timestamp":1788355868197,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbet.tv","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:EA:E8:BD:56:80:50:46:DE:82:01:DF:AB:3C:EE:D1:E9:FD:FD:3B","sha256":"2D:C3:6C:DF:B4:22:76:B8:FA:87:AC:DC:E9:50:CA:C1:AB:79:E1:85:2F:F0:D9:00:C9:1C:D5:34:FD:33:A8:B0"}}},"request":{"raw":"GET /service/verifycode HTTP/1.1\r\nHost: manbet.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/home/register\r\nCookie: PHPSESSID=8nabcd5c0rr1k9pbsio8fvre03; _first=false\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: JSESSIONID=5221949BDB250AE96EBC7C32F9C784BF; Path=/; Secure; HttpOnly\n_vcid=5221949BDB250AE96EBC7C32F9C784BF; Domain=.manbet.tv; Path=/; HttpOnly\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nServer: gocache\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nc-Type: df\r\nrid: 5a63015a2d98486ec2b1b636a501873c\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":[{"name":"JSESSIONID","value":"5221949BDB250AE96EBC7C32F9C784BF","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"JSESSIONID=5221949BDB250AE96EBC7C32F9C784BF; Path=/; Secure; HttpOnly"},{"name":"_vcid","value":"5221949BDB250AE96EBC7C32F9C784BF","quoted":false,"path":"/","domain":".manbet.tv","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"_vcid=5221949BDB250AE96EBC7C32F9C784BF; Domain=.manbet.tv; Path=/; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":1321,"size_decoded":1845,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x28, components 3","md5":"e44a12ef6b3676e4c3d4e01b35425f5e","sha1":"89d872e4bba71243550eb68896a57ebffe21eacb","sha256":"b49509ca9ae9425427720e230ccb356a54118794a8faa9934b71716f66b8e9db","sha512":"9a23e2f5b8847c7ea784007ba94664cc06be7fb65d8a1e127098c3cb5100b8bd79ef24a6f759ce5c1099867b0faf03643ffe7bda62f22ae4f5276c51e9a9ee91","ssdeep":"","tlshash":"9e211a87cf52c5932f24a7b6080131a7c2e9d88769fa2b3575f0e351ea30cb0490cd97","first_seen":"2026-09-02T13:31:50.64228Z","last_seen":"2026-09-02T13:31:50.64228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7505,"timings":{"blocked":7140,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/footer_supports_hover.png?9","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.464Z","timestamp":1788355875464,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/footer_supports_hover.png?9 HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 7362\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nETag: \"62d84dd9-1cc2\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 2e72adfd0940354e725ee3c45d39373b\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":7362,"size_decoded":7803,"mime_type":"image/png","magic":"PNG image data, 30 x 174, 8-bit/color RGBA, non-interlaced","md5":"450da5e1024050be47083963bfeef8a1","sha1":"498dc30e72d3f82ddc7d12b8a8cfdb2fa1aa4323","sha256":"b8eb162ba4dd5f1752300b9625aa98f924eb55d937826b2a227f86ffb51f05cc","sha512":"af4c3f1367a37f623dbe211a17f3d55c9211e388d879d22a286b23ea5ab353adbedb3375199b7a50a8a1e391b9027f22d0102baa7c719533570c3b86a8f04bd2","ssdeep":"96:GY2gCFi+8zRv9iku2V0zRWTFatQL8R2zRPJWs1Y4v/iP0TnRiNXoHAY334hrK31Z:GQVsklKrt0wKE4ugnANYgY3blMu4xG","tlshash":"c8e1ae64bdf180d5d29dbc8d7fd6d063e82b8fd78180722658aec40a55a40b1e8a0a6f","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.64504Z","times_seen":946,"resource_available":false,"data":null}},"time_used":7726,"timings":{"blocked":7514,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"file-latest.rkvcviwf.com/activity/2026/03/20/fb495e8b2d7133af8bbdfdd8438e21a1.png","fqdn":"file-latest.rkvcviwf.com","domain":"rkvcviwf.com","tld":"com"},"ip":{"addr":"14.0.60.131","port":443,"asn":54994,"as":"ML-1432-54994","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:16.673Z","timestamp":1788355876673,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"file-latest.rkvcviwf.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 05:14:43 GMT","end":"Sat, 14 Nov 2026 05:14:42 GMT"},"fingerprint":{"sha1":"51:60:80:25:38:A6:34:F0:66:14:16:9B:36:DA:14:11:94:71:C9:83","sha256":"F3:CA:44:0E:FE:F6:37:7D:C4:58:07:9F:54:1F:E3:04:E9:2C:4B:D3:45:BC:C4:44:C5:4E:63:E7:32:F8:11:EF"}}},"request":{"raw":"GET /activity/2026/03/20/fb495e8b2d7133af8bbdfdd8438e21a1.png HTTP/1.1\r\nHost: file-latest.rkvcviwf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 28604\r\nConnection: keep-alive\r\nx-amz-id-2: L+RO2S9H+VZXWxnEzpe9/2P5bB0ChiZ6euiq4viPMoYmc8d5YnbtTddchTyzo1Rd9KAhpAhE83sNw1BleYdwYiVpxkgxFeJ1\r\nx-amz-request-id: 63QXW3NG64TNQ0Y8\r\nLast-Modified: Fri, 20 Mar 2026 02:13:17 GMT\r\nETag: \"6225e0e01ecc4291dd8ebce1bc01b4e4\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nserver: nginx\r\nAge: 1196819\r\nx-req-id: 6a98252b_PS-CDG-040L238_17266-22788\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28604,"size_decoded":29102,"mime_type":"image/png","magic":"PNG image data, 272 x 272, 8-bit colormap, non-interlaced","md5":"6225e0e01ecc4291dd8ebce1bc01b4e4","sha1":"8cb46a3cba655a6a56d8087ed71bd84ecaef9131","sha256":"e29a5cb12d631069b17a410e9156f9fe034cd54ccf76247462bd7a0f7832d9b5","sha512":"dcb2bbfdec9eb987700bb3641b78e69478214dbaea52475e9403145ac9fd2ece6e64d7d61a6093c5cb26c492e1315d65c2daa7d392b175fb2190c6bb254914db","ssdeep":"768:zH97mivQh7qf+fCQhg0TZ3UMR38Hu1R8uMjEBFFjYTlCMjr90i+TBBYL:DIivc7qtQi0xUMR33ujcYBBrui+TBBYL","tlshash":"23d2f1ee5b614ca835e3ca649c1e074435b2405c7eb02bfe6b8129bf54e6b8c0342de7","first_seen":"2026-03-22T08:38:49.382978Z","last_seen":"2026-09-02T13:31:50.647168Z","times_seen":171,"resource_available":false,"data":null}},"time_used":6394,"timings":{"blocked":6304,"dns":1,"connect":26,"send":0,"wait":28,"receive":2,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/nav/promo_12p.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.175Z","timestamp":1788355868175,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/nav/promo_12p.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 13381\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nETag: \"62d84dd9-3445\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 7fb6ef6100264f0c70b8c2d65c7b7f04\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13381,"size_decoded":13823,"mime_type":"image/png","magic":"PNG image data, 200 x 100, 8-bit/color RGBA, non-interlaced","md5":"771df357a82b3f121039b605126d9031","sha1":"49ac1b1ce8829f54c43e4012c0b21f2fffc6fea7","sha256":"7020ab66168f898a06e3743b3793745da0a9d6017bae2934e842e6ec4addc094","sha512":"acb489f3f721c83653262e26fc5831cff21e293becedd745153219f0300318977a485df8717b9195639e7a4a8760c2a988dc1b18a8a4bf5b907da84674cc4c5f","ssdeep":"384:XJXE05gzzzzzzzzz2Qz9IcDmF/COICUtw6ei/CXd:F35gzzzzzzzzz3xydLZUtAt","tlshash":"4052e14f486980fb060929e40fa043559e9667ff4f65ae34c0d27db7942de5b2fa8423","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.648017Z","times_seen":955,"resource_available":false,"data":null}},"time_used":7385,"timings":{"blocked":7161,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/nav/promo_event.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.177Z","timestamp":1788355868177,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/nav/promo_event.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 33820\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nETag: \"62d84dd9-841c\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: bb0573386d04a3e911f0c4e0a0bf2b9a\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33820,"size_decoded":34262,"mime_type":"image/png","magic":"PNG image data, 231 x 184, 8-bit/color RGBA, non-interlaced","md5":"4590b5333179fefe5ea8e8f1a3638da3","sha1":"a0a932f3ca433bc1ea5f788e09eddfa617a4c69e","sha256":"0b3af6b7e8676050661aedd1b94b28045c7a9c905424cbde85f95f7faaf1ea43","sha512":"7ad8e92d6797b8c8c094e8651b566ea510b0bbaf998f9456d1fa1216e33b9bd8afc3840c6a3203fddb0f98e583070113a2329b34ff371dfbbc988a30ee41c425","ssdeep":"384:vdYFfWN0DI5+xe/+sRdXI/nTNAHfs2QZ4ldgeP94lYVIPR22M/96yNtHD9eDk0d4:y0gF/TNF2JSeFLIPR22M/9b/elbPs","tlshash":"7de2f1d07fa4e82156b397c770463aee708dc0ba5b43f5c6131a316b9b24b3c684799e","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.648796Z","times_seen":953,"resource_available":false,"data":null}},"time_used":15679,"timings":{"blocked":15436,"dns":0,"connect":0,"send":0,"wait":223,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-119765380-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.187Z","timestamp":1788355868187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=UA-119765380-3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 02 Sep 2026 13:31:08 GMT\r\nexpires: Wed, 02 Sep 2026 13:31:08 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 02 Sep 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 134806\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":381589,"size_decoded":135456,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5145)","md5":"8a1741dce36d66a26fd2ce02f63f2d67","sha1":"1141a3f92724bfec8efba87f5c79e58feece827d","sha256":"457214e5b4fe08e24bc2db15be96965183540b31b2a58d1e9dabd96ad0363d61","sha512":"8f491556f26dec3581256bd664634b254a9803e6d319959a3d88551cc6c7f9428bd866686a112283e6b82ba7f7c52a3907232e15560311248e1dd9d6bef926ce","ssdeep":"6144:tld0aIudmxm/MjcrsA/2EgD3YjE2fVuNwz7D:4uAxSEwuqzP","tlshash":"568419cdb3d6b42283a2b574503f018bb27a6d92b84cc898f286ddd42e3465a5177f7c","first_seen":"2026-09-02T13:31:50.649587Z","last_seen":"2026-09-02T13:31:50.649587Z","times_seen":1,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":38,"receive":44,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/images/modal_reminder_deco.png","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.457Z","timestamp":1788355875457,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-cn.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"ED:14:2F:4F:7D:32:46:7B:F5:03:5B:E8:4E:81:9D:E4:22:37:56:4B","sha256":"20:32:58:7D:65:C2:04:76:B6:E1:06:D0:86:3A:26:79:16:59:62:35:25:C7:A3:B0:3B:40:A3:9F:03:4F:4D:0D"}}},"request":{"raw":"GET /images/modal_reminder_deco.png HTTP/1.1\r\nHost: static-content-cn.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-cn.mpdulhtmburd.com:9587/css/base.css?20240823\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 1119\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:52 GMT\r\nETag: \"62d84dd8-45f\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 57385e1311f015f79e98613d35c73b72\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1119,"size_decoded":1559,"mime_type":"image/png","magic":"PNG image data, 232 x 12, 8-bit/color RGBA, non-interlaced","md5":"3f99b65d5f4c689ea127400c44026e81","sha1":"60f91d0531242fed70f77991419d8c0442ae4299","sha256":"581ca9e4c82ad7b55ba31fa2033aae45ec122c4be965c2c0eb465da2cbe13dee","sha512":"5cb9d5f09e1877bbf50b680e2e79bdeb17403380db0830e398f3582f2d30207b3925007d19f1416d6e0e9b1aed11b735337a0437ebdb35d70479f2d9f65d3fe2","ssdeep":"","tlshash":"4221038df6115c42925ef99238fa0562e9120c81c7e0e4677dcbc4c648316ba886d9c7","first_seen":"2024-03-28T04:38:13Z","last_seen":"2026-09-02T13:31:50.651507Z","times_seen":812,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/css/base.css?20240823","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.145Z","timestamp":1788355868145,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-cn.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"ED:14:2F:4F:7D:32:46:7B:F5:03:5B:E8:4E:81:9D:E4:22:37:56:4B","sha256":"20:32:58:7D:65:C2:04:76:B6:E1:06:D0:86:3A:26:79:16:59:62:35:25:C7:A3:B0:3B:40:A3:9F:03:4F:4D:0D"}}},"request":{"raw":"GET /css/base.css?20240823 HTTP/1.1\r\nHost: static-content-cn.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thu, 22 Jan 2026 04:17:42 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6971a4e6-2a835\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 4840d6b6fd0fcff0136918c9949625e0\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":174133,"size_decoded":31060,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (539)","md5":"05af91b494845ac53747a6d8764b97c8","sha1":"161db8ff7a66fb31e12771ab87fc490adc2e1fae","sha256":"d91291f4785c691ec6142e4315dee74780961fb1a0f9e73a4543e0e80b35f377","sha512":"7099c8f3a7bb963d69f62a25045bb03f2fa5452031f5b65974cbd1179059bb263268473aca0144c9f61d475034bdf0d9563230510c5fc52d46f61c19631449ed","ssdeep":"1536:11H5u9h1KXKFfCoYD8B+5yZbosh3kRRHMOFCaIAVUT2sbGVyGeDzb2NcdYqaGN+3:YWXKFfCoYD8B+xDzV7sbGpeDzbi+SX","tlshash":"a004dc0ad0ef218b717bd8b530abb6e5e119815ae1064f7d726c33bce1fa65c8132e15","first_seen":"2026-01-23T05:01:52.474463Z","last_seen":"2026-09-02T13:31:50.652382Z","times_seen":290,"resource_available":false,"data":null}},"time_used":7196,"timings":{"blocked":-1,"dns":99,"connect":1,"send":0,"wait":221,"receive":22,"ssl":6853},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/util/messenger.css","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.150Z","timestamp":1788355868150,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-cn.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"ED:14:2F:4F:7D:32:46:7B:F5:03:5B:E8:4E:81:9D:E4:22:37:56:4B","sha256":"20:32:58:7D:65:C2:04:76:B6:E1:06:D0:86:3A:26:79:16:59:62:35:25:C7:A3:B0:3B:40:A3:9F:03:4F:4D:0D"}}},"request":{"raw":"GET /util/messenger.css HTTP/1.1\r\nHost: static-content-cn.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:08 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"62d84dd9-2410\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:08 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: d23bffd826b2c36c6fcfb03fecfb3ad0\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":9232,"size_decoded":2163,"mime_type":"text/css","magic":"ASCII text, with very long lines (538)","md5":"26f774e67203df0b4387b8fdee38643c","sha1":"d46d750b7882c8c3aff3690472c6ad6c5c32d546","sha256":"3d3b344953f5a8668a3a045c902c84e530407997885301cfffd4a1724b6b37f8","sha512":"d2fbe717e58dbc07551690f0d18256cbef2b33adce004da7d83adb34866764ec94ea6ec5d91a9a65754f0239cc98dfc4b7caefb1a1b427a7e5818671c03288c2","ssdeep":"192:Qi0KrdIJjkB1IbXwdRoqXaS3TIFTKC32XifM1N:QiBrdIJnbXwdPC32XeKN","tlshash":"a812f022c5c51927133fcb53add557584f238b03aa1ed4ad66deec4fc70ae6812e630a","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.653111Z","times_seen":1115,"resource_available":false,"data":null}},"time_used":757,"timings":{"blocked":-1,"dns":95,"connect":1,"send":0,"wait":216,"receive":0,"ssl":442},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/nav/sponsor5.png?5","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.171Z","timestamp":1788355868171,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/nav/sponsor5.png?5 HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 12004\r\nConnection: keep-alive\r\nLast-Modified: Fri, 23 Jan 2026 04:32:15 GMT\r\nETag: \"6972f9cf-2ee4\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 1e733f5514298c37b42e58bbd9e26122\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12004,"size_decoded":12446,"mime_type":"image/png","magic":"PNG image data, 292 x 80, 8-bit/color RGBA, non-interlaced","md5":"e772d932f095a917115ff85857088d0f","sha1":"1ba7b6967a2fb9f291cbe99bb3b3b9a0ed125c50","sha256":"00503366d78e5d7e3b29fb8d8c072ee6ded94655d9d19c0eab97216666ea06af","sha512":"b547dfd1a2130094169366d050119fca01bdfe6857a2d2cb65083271fa2bb6591e2c005f8d9f0de583b2a28721d7e90ffad3e460232a3931e1fc61257ea2e447","ssdeep":"192:mPoZpPVYl4jp4mMape1FWCyxwtefLxwC4+LlkFROlSJc7AmNZlpdJnrwD1jT:mQZceNZpe1FVyxw0Ls+WFxuAg/Xns","tlshash":"7042bf3da8d0abc56dce902c3a2d398203870dd466769d93f76cb477b36e162341dc65","first_seen":"2026-01-23T05:01:52.451331Z","last_seen":"2026-09-02T13:31:50.653882Z","times_seen":288,"resource_available":false,"data":null}},"time_used":15231,"timings":{"blocked":15014,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/util/rsa.js","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.190Z","timestamp":1788355868190,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-cn.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"ED:14:2F:4F:7D:32:46:7B:F5:03:5B:E8:4E:81:9D:E4:22:37:56:4B","sha256":"20:32:58:7D:65:C2:04:76:B6:E1:06:D0:86:3A:26:79:16:59:62:35:25:C7:A3:B0:3B:40:A3:9F:03:4F:4D:0D"}}},"request":{"raw":"GET /util/rsa.js HTTP/1.1\r\nHost: static-content-cn.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:09 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"62d84dd9-34ca\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:09 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 9a1ed456b9d46710e97addb626bb9f64\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13514,"size_decoded":5223,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (5026)","md5":"2e28749b1ce6013a456d4498a447dff3","sha1":"89d8c436922a84f097e86090179d112c3d6e13c2","sha256":"1748bdff25c71702d781b076f961920ef32283e324153b256e963202431a35ba","sha512":"2a675090d740e1600eaca9da2229b34cf764181bf65df4d023bb0e95feea6a7b83f3651a8eb70473e76313cc1fcdd38cd71a72b41fd57fdc34668b7d3b10b62e","ssdeep":"384:B1eJdA6YDf7WA5lK4UYl38uHrKFaY8BpC:bdjfm82aNy","tlshash":"5752a6857ad9302d07a95071055f054b7e35f8be598c04bdb1a0e8e938f198d833ef78","first_seen":"2023-03-07T01:28:09Z","last_seen":"2026-09-02T13:31:50.654597Z","times_seen":1238,"resource_available":true,"data":null}},"time_used":1120,"timings":{"blocked":908,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/images/close.png","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.449Z","timestamp":1788355875449,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-cn.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"ED:14:2F:4F:7D:32:46:7B:F5:03:5B:E8:4E:81:9D:E4:22:37:56:4B","sha256":"20:32:58:7D:65:C2:04:76:B6:E1:06:D0:86:3A:26:79:16:59:62:35:25:C7:A3:B0:3B:40:A3:9F:03:4F:4D:0D"}}},"request":{"raw":"GET /images/close.png HTTP/1.1\r\nHost: static-content-cn.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-cn.mpdulhtmburd.com:9587/css/base.css?20240823\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 1148\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:52 GMT\r\nETag: \"62d84dd8-47c\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: e671aabe4a98dd2f83408b716cbf591f\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":1148,"size_decoded":1588,"mime_type":"image/png","magic":"PNG image data, 21 x 40, 8-bit/color RGBA, non-interlaced","md5":"64ead6c5d9cbfe3e933c97c2cb20dacc","sha1":"b7b034fd70b27180d27daa9c8bacb50ce721f025","sha256":"55aa71e8f5f59bec62fc6361e10bcf106d21af39a087c4009931884fd03b5229","sha512":"869b8e2b2c8d8ee615c302cbff59fd745f0cb1f32afbca0c89a469b4d1ab61bbe01905b0a8ac07527aa4f763fd11dad2141a58706334062f37dc6267f55dda80","ssdeep":"","tlshash":"0221674dfb8068029445c5c75dfa8033ea234984daf0f861b487e4151ea12b549496eb","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-09-02T13:31:50.655373Z","times_seen":998,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.eaafacef.com:2053/entrance/api/config?status=1","fqdn":"api.eaafacef.com","domain":"eaafacef.com","tld":"com"},"ip":{"addr":"172.67.180.38","port":2053,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.771Z","timestamp":1788355875771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaafacef.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 01:39:03 GMT","end":"Sat, 21 Nov 2026 02:37:41 GMT"},"fingerprint":{"sha1":"4E:69:FA:AB:B7:CB:20:6C:AA:8B:30:B5:19:6B:A7:DB:6D:4D:0B:E3","sha256":"C0:D6:A5:3A:72:D1:C1:A9:98:69:19:C3:04:A0:A7:E6:56:79:61:7B:30:79:DA:9F:CD:7C:29:5B:47:AE:18:1E"}}},"request":{"raw":"GET /entrance/api/config?status=1 HTTP/1.1\r\nHost: api.eaafacef.com:2053\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://manbet.tv\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 13:31:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 37\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, Content-Type, Cookie, Accept,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, OPTIONS\r\naccess-control-allow-credentials: false\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pyHCQctnWbdKXjPIYqUkDeYH9Nx%2BdnuWi1hrIEMNs9UMSPEgNhv4AXWGGK3%2FoLIa07dSoJcbCfWIdqYePyVhMpT6Xf04h3wDBzunnHL4D3BYJPkmvUxbCM6a2hd1masM%2FBTv\"}]}\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a34cdfbfdcc5120a-OSL\r\nalt-svc: h3=\":2053\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2268,"size_decoded":1622,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"d6628766123b7c3fa9aab16683c09eb7","sha1":"c837317f517f9089298d7c75c469faa0037a7818","sha256":"82a6693a44dbf5bba8239cfa0165b7bb677925628301edf7edeeffe6bb5db983","sha512":"35fba29e9f6728ad0cf27b209118131de6c06bd3e621e06db67045db4cd3e9e55a0e3e69e8fc7d755bfc12817f9c6794072a60f765e403bc691aa5b5483da99d","ssdeep":"","tlshash":"f8418e6753a57671c99762c5808f3bea913e3f338945edb77a5e6a1481603f2240812b","first_seen":"2026-06-25T01:39:35.730215Z","last_seen":"2026-09-02T13:31:50.656108Z","times_seen":31,"resource_available":false,"data":null}},"time_used":875,"timings":{"blocked":0,"dns":30,"connect":1,"send":0,"wait":831,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/icon_return.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.455Z","timestamp":1788355875455,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/icon_return.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 778\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nETag: \"62d84dd9-30a\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 3188e38d4e217f50a826e6adcd74d7f3\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":778,"size_decoded":1217,"mime_type":"image/png","magic":"PNG image data, 18 x 18, 8-bit/color RGBA, interlaced","md5":"fabab84476aede515f6619fb53cec396","sha1":"84650df8e118c2c101bc0bf6e20d9c76d4303b06","sha256":"8141cf949879defeb74a01e369563041075c8417c2f3e8789bd07fcdb6499552","sha512":"99f267bd6c596ca4ccf617f05a2c86edb2ae6a805fdd5ff3458c66853e87760d215225373e71cbdae688936cbcb88441bc3138eadbad694364fcfc7490eb50c7","ssdeep":"","tlshash":"d70120c5d7761db0c2c161b7163f9a8b1a0b8516a805a10d2e8634b39945f842d8679d","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.656867Z","times_seen":963,"resource_available":false,"data":null}},"time_used":8156,"timings":{"blocked":7946,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/d11_images/footer_supports_hover.png?9","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.463Z","timestamp":1788355875463,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /d11_images/footer_supports_hover.png?9 HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 6153\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:45:39 GMT\r\nETag: \"62d84d53-1809\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: b995962d63cca25c85ef2699f1717e8f\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6153,"size_decoded":6594,"mime_type":"image/png","magic":"PNG image data, 30 x 174, 8-bit/color RGBA, non-interlaced","md5":"89203da3a7f6cd69c626446854368222","sha1":"0a861d62cd091a150ce253ecedf0dff49c80b3f0","sha256":"ae58de0a439617b67724ced1eee3bc04d8103d1a8f34a9ac362d1a842e06d2e7","sha512":"37b0293f4c467a53f8b4527c40345e89d407811a4e7894263663847ecc5406c8d101c2dd9711f4fd099ec325b9013d1337154600b0f87b8fc3e5252a771993c5","ssdeep":"96:tnCr4K+CdLuWy5kOy2k17lRtUsvqI8ydwBlz2gcwNkABBbbk/eH+Tm4Mi0UPftR7:tnCr40dKOOytRhFNaNTDbsxCdixHtUQ","tlshash":"5dc1aef06ab50164f022342747b70504a4167fd89974bc9063bf9f8defe6743e868ad1","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.65762Z","times_seen":945,"resource_available":false,"data":null}},"time_used":7728,"timings":{"blocked":7515,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/js/jquery/jquery-migrate-3.5.2.min.js","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.152Z","timestamp":1788355868152,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-cn.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"ED:14:2F:4F:7D:32:46:7B:F5:03:5B:E8:4E:81:9D:E4:22:37:56:4B","sha256":"20:32:58:7D:65:C2:04:76:B6:E1:06:D0:86:3A:26:79:16:59:62:35:25:C7:A3:B0:3B:40:A3:9F:03:4F:4D:0D"}}},"request":{"raw":"GET /js/jquery/jquery-migrate-3.5.2.min.js HTTP/1.1\r\nHost: static-content-cn.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:08 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 24 Feb 2026 02:38:24 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"699d0f20-367d\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:08 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: ff6a7ac54a4ca0b3f0dadf5fe93294bf\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13949,"size_decoded":5515,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13851)","md5":"88d82ba2bc432aa8ea45a71fb47ebccf","sha1":"e2382b1ecea7bff8870bdf7ce03a7a6262b60237","sha256":"a1c51ea6d1cda1dd205b65f567ea25dce3550065b32095d4988b3ee2751e0cb2","sha512":"e6cfa24544c0af49d4b42eb5fe6b2cfacd628a511954cf02f82dc78dd774a79b197dfc71bde4b0f5fbc8e8c1f0dbbe715d4a121747c232e52f3dd57506b9f2c4","ssdeep":"192:XAprDN+s0g6YfKIUfmI9vP1lg+vm9kdg6iLJJaCJQ+h4MlcjbR4:XAprx0kfKIi7P1lrvmAiLJo+h4M2ju","tlshash":"e352e96db56679724eb731b8f03bd20b71b205dd160d8940d19cc8f6686dc9e822bf78","first_seen":"2024-07-22T23:39:43Z","last_seen":"2026-09-02T14:54:30.378853Z","times_seen":2999,"resource_available":true,"data":null}},"time_used":739,"timings":{"blocked":-1,"dns":92,"connect":3,"send":0,"wait":208,"receive":0,"ssl":431},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/nav/sponsor4.png?4","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.170Z","timestamp":1788355868170,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/nav/sponsor4.png?4 HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 6656\r\nConnection: keep-alive\r\nLast-Modified: Fri, 23 Jan 2026 04:32:15 GMT\r\nETag: \"6972f9cf-1a00\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 16168329281562d0f5c414a351d719b4\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6656,"size_decoded":7097,"mime_type":"image/png","magic":"PNG image data, 292 x 80, 8-bit/color RGBA, non-interlaced","md5":"bc0bfba88f57dddbcab058d13a0178fe","sha1":"3a82ca7e0de411faf17a0280292e18365817790d","sha256":"a91a58962bbd93730191f75f51b50108a6ee274b663c5b1f6eea2e09868abe17","sha512":"934411294e564656520460a6806d0f51058bf5d0dda73ca0e3e8b09c370e41a1d0afa135b8bc9bcd3f0d966a59cdb488b6b669ef6012c403c163e947dcc3d6fc","ssdeep":"96:oaLKcsHv7kI8AO6uNlW1/OvAT4AocvRaqMDlFB2QZkC0JfFdGcg1dcH8rsho6g/h:okFPWROvQzRsqCmtwcgHrsQksZz","tlshash":"ddd1bf6ba7ce2cd9a38ed2871f96796bafb1001491e319002c3332ba5a413844f31dd7","first_seen":"2026-01-23T05:01:52.465953Z","last_seen":"2026-09-02T13:31:50.659084Z","times_seen":289,"resource_available":false,"data":null}},"time_used":15228,"timings":{"blocked":15014,"dns":0,"connect":0,"send":0,"wait":208,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/nav/sponsor6.png?6","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.172Z","timestamp":1788355868172,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/nav/sponsor6.png?6 HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 10667\r\nConnection: keep-alive\r\nLast-Modified: Fri, 23 Jan 2026 04:32:15 GMT\r\nETag: \"6972f9cf-29ab\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 89bf7ce9c777d60d37a246762b1876d2\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10667,"size_decoded":11109,"mime_type":"image/png","magic":"PNG image data, 292 x 80, 8-bit/color RGBA, non-interlaced","md5":"a76186a57df2e8a08e4f43859de232ee","sha1":"15efac52c8cca31ef66fa30ab03882ac19f8c450","sha256":"1e9ad8182cbb1acafd9c7346931c9097af4064ae4c68d6c51359c4c81338b71b","sha512":"3a811da9146d744e34c6a8bd91f09641285507f23e086e42cad94dc0c1536cb9b7abc3284c22402a9f25615259f73bf7681addcce5d139065f01272f4b07f360","ssdeep":"192:EzUldKHgvCMYzzpM/YMDKs689IWMdgZbEXCWU3M2DwEwhFp7:hdM5zzpY68+WM+xKCWMcnZ","tlshash":"b522cfeb6cd13879eba3648310757c89f9bbd31e5471e8bb6ae31c640080c5ea156dd8","first_seen":"2026-01-23T05:01:52.44616Z","last_seen":"2026-09-02T13:31:50.660015Z","times_seen":288,"resource_available":false,"data":null}},"time_used":15435,"timings":{"blocked":15219,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/util/error.js?20260612","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.191Z","timestamp":1788355868191,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-cn.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"ED:14:2F:4F:7D:32:46:7B:F5:03:5B:E8:4E:81:9D:E4:22:37:56:4B","sha256":"20:32:58:7D:65:C2:04:76:B6:E1:06:D0:86:3A:26:79:16:59:62:35:25:C7:A3:B0:3B:40:A3:9F:03:4F:4D:0D"}}},"request":{"raw":"GET /util/error.js?20260612 HTTP/1.1\r\nHost: static-content-cn.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:09 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 12 Jun 2026 00:57:24 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a2b5974-28da\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:09 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 00db72d6f385b782fb4369b8310d7948\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10458,"size_decoded":4310,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"2c0ea593018e80a10c20beffafa848a9","sha1":"2b8b9970d92aa3a4c04e3b15060f6aec8598c221","sha256":"4207bfc8630bf3017f592b22e0e5caac43e1ca03f2e0d00348a5af92e16625e7","sha512":"1d8adf99611e5804a9f7b5ae964da417892bbc7d5c71e544502083d04fada001eb16082edfa7921fb1b3b41e89d94a10f2e59b50cfc17d62489ac03c7639759d","ssdeep":"192:MTh94QOQzfyG3jChyTRmbxDeDWiYXYyC3SfZVYvxwYXPFj6vJRQ+lcQrdQr:MTh94wz73jChQgF+eXUeu","tlshash":"c72296b608f58b8a100df980c11b41293448744b8e1cba6a7befa5465fcc65f4bff99d","first_seen":"2026-06-12T02:05:05.713559Z","last_seen":"2026-09-02T13:31:50.661253Z","times_seen":61,"resource_available":true,"data":null}},"time_used":1158,"timings":{"blocked":943,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/home/tg_icon.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.198Z","timestamp":1788355868198,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/home/tg_icon.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 7233\r\nConnection: keep-alive\r\nLast-Modified: Tue, 13 Aug 2024 02:02:22 GMT\r\nETag: \"66babeae-1c41\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: dc49b17d27a715ab6d455fb9483c1dc1\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7233,"size_decoded":7674,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"6f828495b8948381356d8f958e0e3816","sha1":"8a776df06f7f07a71a8811311450b978399117e9","sha256":"fe6c74efa40b05488d4e4944a45f32d22a8b13e60637ce57bbc04b5b8323663b","sha512":"5a64ed664f2bf2d934d7c0a41a51a5b95ef998087f3badfef552d3a898648fef2b561d3a09ccd64188d55f598fa3c62d98f3d3052c28f7a17bc1d887acf9b398","ssdeep":"192:5OC/PcLhB496ikdrltIH7XTYtHSEskZNpjZf1GqsiR4KM:3k3BiGrltO7Utrp3GURxM","tlshash":"a4e1a0ebf811dcc2f508a74bc452d10286ad59074774f5ae7f9eb5c3ac2098547ef44a","first_seen":"2024-08-15T14:53:49Z","last_seen":"2026-09-02T13:31:50.662142Z","times_seen":754,"resource_available":false,"data":null}},"time_used":15411,"timings":{"blocked":15203,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"file-new.rkvcviwf.com/activity/2025/05/26/35b9d0913c44ce35920430bd8ddfc1eb.png","fqdn":"file-new.rkvcviwf.com","domain":"rkvcviwf.com","tld":"com"},"ip":{"addr":"14.0.60.131","port":443,"asn":54994,"as":"ML-1432-54994","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:16.675Z","timestamp":1788355876675,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rkvcviwf.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Jun 2026 14:32:56 GMT","end":"Mon, 14 Sep 2026 14:32:55 GMT"},"fingerprint":{"sha1":"C7:21:9F:0B:DE:1F:53:12:D5:B5:F5:68:81:C1:41:7A:1C:B9:1D:38","sha256":"03:8F:D4:89:E4:DB:3D:64:B6:9E:FB:FF:31:AF:03:8E:86:BA:07:D5:32:04:92:C9:42:F1:16:CD:3D:CF:21:35"}}},"request":{"raw":"GET /activity/2025/05/26/35b9d0913c44ce35920430bd8ddfc1eb.png HTTP/1.1\r\nHost: file-new.rkvcviwf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 91065\r\nConnection: keep-alive\r\nx-amz-id-2: IN/Z4E34nGldpvqWpenYVKgTC6azS+mg4dmOQF/TyJbQO13eMm5eR4bMBSWf9kbrgoDIGqMTkpZIVhZnBl52i6USMx8If1Jy\r\nx-amz-request-id: VC7MDDZXVCXA3D03\r\nLast-Modified: Sat, 17 Jan 2026 06:23:27 GMT\r\nETag: \"a6f34694a8892178a7e449b0043d1429\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nserver: nginx\r\nAge: 1196819\r\nx-req-id: 6a98252b_PS-CDG-040L238_16198-50126\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":91065,"size_decoded":91563,"mime_type":"image/png","magic":"PNG image data, 272 x 272, 8-bit/color RGBA, non-interlaced","md5":"a6f34694a8892178a7e449b0043d1429","sha1":"33d658afacb80d35cdde497bb530f08e38e23132","sha256":"766f82c583cabf2b73af2e8d6dd0595ab3ce6bd55c4b9841edf555a1639d1263","sha512":"396caa64116ac49e99f11da3c95eaa7b926f4f9eb08ff5b9aec7ca6d43d704fae3a2a2e75178db4e4082381e2480d788d4b31007dc91a091312ed1279681f978","ssdeep":"1536:nRalahFemQUbzfAgaVLBbB1RZNhmSiVdOFf5Z1Uk6VcD1s7aP0HRb9Knism8zu2E:n+abbzCPPRZjYPOFf5Z1U1uO7c0LOiYa","tlshash":"e193024fea06c57f99655c8012609993a8d1b84f0ca3b793eb588e0907dc946fe37d37","first_seen":"2025-07-18T11:22:50.653674Z","last_seen":"2026-09-02T13:31:50.662963Z","times_seen":643,"resource_available":false,"data":null}},"time_used":6686,"timings":{"blocked":6305,"dns":0,"connect":27,"send":0,"wait":27,"receive":28,"ssl":298},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T13:31:05.304Z","timestamp":1788355865304,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: manbet.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:06 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\nvcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\nccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\nccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\nvcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\nvcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\nPHPSESSID=8nabcd5c0rr1k9pbsio8fvre03; path=/\n_first=false; expires=Mon, 14-Sep-2026 13:31:06 GMT; Max-Age=1036800; path=/\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 86400\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nc-Type: df\r\nrid: df6d341fa1bdefa11e5739f0891e87b9\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":[{"name":"ccd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"ccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"},{"name":"vcd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"vcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"},{"name":"ccd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"ccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"},{"name":"ccd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"ccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"},{"name":"vcd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"vcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"},{"name":"vcd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"vcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"},{"name":"PHPSESSID","value":"8nabcd5c0rr1k9pbsio8fvre03","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=8nabcd5c0rr1k9pbsio8fvre03; path=/"},{"name":"_first","value":"false","quoted":false,"path":"/","expires":"2026-09-14T13:31:06Z","raw_expires":"Mon, 14-Sep-2026 13:31:06 GMT","max_age":1036800,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"_first=false; expires=Mon, 14-Sep-2026 13:31:06 GMT; Max-Age=1036800; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/js/kz.js?20260729","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.192Z","timestamp":1788355868192,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-cn.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"ED:14:2F:4F:7D:32:46:7B:F5:03:5B:E8:4E:81:9D:E4:22:37:56:4B","sha256":"20:32:58:7D:65:C2:04:76:B6:E1:06:D0:86:3A:26:79:16:59:62:35:25:C7:A3:B0:3B:40:A3:9F:03:4F:4D:0D"}}},"request":{"raw":"GET /js/kz.js?20260729 HTTP/1.1\r\nHost: static-content-cn.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:09 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 03 Aug 2026 20:53:17 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a70ffbd-11242\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:09 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: c38f19ca84f0b36e6c14d4c706cd27e2\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70210,"size_decoded":12628,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6235cc58482d8a740d5553e496aa0c1b","sha1":"82b473271ad26651edc91ba782663619c6ca3a49","sha256":"653ee8d8f9147fc78b14a50ae463a56e0cf0ba1354d71896a3b7e17b4fc19f98","sha512":"491486632541187178ef9744a4a9f58b2d6bee6cd5789077751a8536059a705c6c843500d002190438ebd081f674a31555a6f8203de5e9be28179adddc6f9bf6","ssdeep":"384:J5PPCzLF8jM9CxvqD2AtuOOXGKcrvmN2WbYeOyAXI93EsB:y8ks6E6PsB","tlshash":"1863732de9fb52951c3b70391f7f4001e629c407750cee197e2ca6c09f48669a6b6fe8","first_seen":"2026-08-07T01:26:51.907929Z","last_seen":"2026-09-02T13:31:50.664691Z","times_seen":17,"resource_available":true,"data":null}},"time_used":1182,"timings":{"blocked":947,"dns":0,"connect":0,"send":0,"wait":226,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/images/common_spirits.png","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.446Z","timestamp":1788355875446,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-cn.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"ED:14:2F:4F:7D:32:46:7B:F5:03:5B:E8:4E:81:9D:E4:22:37:56:4B","sha256":"20:32:58:7D:65:C2:04:76:B6:E1:06:D0:86:3A:26:79:16:59:62:35:25:C7:A3:B0:3B:40:A3:9F:03:4F:4D:0D"}}},"request":{"raw":"GET /images/common_spirits.png HTTP/1.1\r\nHost: static-content-cn.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-cn.mpdulhtmburd.com:9587/css/base.css?20240823\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 8399\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:52 GMT\r\nETag: \"62d84dd8-20cf\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: df5c089d7ab03479145dd76908c89ce5\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":8399,"size_decoded":8840,"mime_type":"image/png","magic":"PNG image data, 197 x 853, 8-bit/color RGBA, non-interlaced","md5":"44540d8c4a0f15ac3c79ec50c38068ba","sha1":"09a60fef078669da7113fbc9f9129b3a238e1b10","sha256":"d963d332fe095e110da648b267af4941bcb3d0b3988459d5f2039ebcadf4c2f0","sha512":"d67fb563e9db8d886bf09cd391361411e19aefeb2a60a37bf11eb38d985dc1c568281bae50aa71b504efb6a7bc6026340f809e797356816a430118e4f92f82e5","ssdeep":"96:1PodqmMbZJnxtCv2QIo3WG/INSvX3pwN0lu/hpSj8hj4LeQtJmzpwYFE1+m30tBY:1PqgnT8n5DluZph4y64zpx8aM3DJl","tlshash":"51028ed002b9316ed9643b22abbf39680ee289aaf4bec33448d4173731694d0457ce5f","first_seen":"2024-03-28T04:38:13Z","last_seen":"2026-09-02T13:31:50.665551Z","times_seen":815,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/home/register","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T13:31:06.770Z","timestamp":1788355866770,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbet.tv","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:EA:E8:BD:56:80:50:46:DE:82:01:DF:AB:3C:EE:D1:E9:FD:FD:3B","sha256":"2D:C3:6C:DF:B4:22:76:B8:FA:87:AC:DC:E9:50:CA:C1:AB:79:E1:85:2F:F0:D9:00:C9:1C:D5:34:FD:33:A8:B0"}}},"request":{"raw":"GET /home/register HTTP/1.1\r\nHost: manbet.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nCookie: PHPSESSID=8nabcd5c0rr1k9pbsio8fvre03; _first=false\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:07 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\nvcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\nccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\nccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\nvcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\nvcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 86400\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nc-Type: df\r\nrid: 45a9a2372293b6622cee72facc0aaf49\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":[{"name":"ccd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"ccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"},{"name":"vcd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"vcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"},{"name":"ccd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"ccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"},{"name":"ccd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"ccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"},{"name":"vcd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"vcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"},{"name":"vcd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"vcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.5.2","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100513,"size_decoded":23736,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (396)","md5":"dc5d2b9dc5f0c75fb42217d245ec301e","sha1":"d30d5af1883e416bb06714d5eb9504d013413873","sha256":"7ef697e8a1f2e79b850df549a0c39d0dc2b674a05e3eb5f67219ee891adab7c7","sha512":"dce0e5a8215ad0b33ca4d8287c00e608f1cb6d535788c53c653dd0db8a5baee5e2acb429c3c5bfb60a861c8bb6cdd67db13c5f1f49166b03364c2a09e0846e92","ssdeep":"1536:6PxrmrNvgRRu5lf9H+sYAEsVdwPRaLnt8vVJjxT94ddq3uOyAbJfDSL8Rbk1b5c7:Fn5lQPWK7blT6zkjaZOBjDwy9lZG2","tlshash":"bca3f701a8fa4537017790da65b7ef1abeaa8037d206cc10b6fe4fc45fc2e81895766d","first_seen":"2026-09-02T13:31:50.66635Z","last_seen":"2026-09-02T13:31:50.66635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1166,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-content-j.mpdulhtmburd.com:9587/fimg/202505/1a9924b67880434fb3771e34217f417e.png","fqdn":"static-content-j.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.166Z","timestamp":1788355868166,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-j.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"97:8D:F9:AD:80:54:AD:79:26:90:C9:3D:46:97:6A:BE:44:4F:FA:7B","sha256":"4B:94:17:36:EF:1A:CD:D2:3B:13:E3:96:36:AD:F6:61:9D:26:73:12:81:B9:13:36:B2:35:04:2B:13:AD:DC:82"}}},"request":{"raw":"GET /fimg/202505/1a9924b67880434fb3771e34217f417e.png HTTP/1.1\r\nHost: static-content-j.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 6259\r\nConnection: keep-alive\r\nLast-Modified: Sun, 11 May 2025 06:29:47 GMT\r\nETag: \"682043db-1873\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 7db7703343150117e7ef782ee7145ed6\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":6259,"size_decoded":6700,"mime_type":"image/png","magic":"PNG image data, 292 x 80, 8-bit colormap, non-interlaced","md5":"8c4532aea4471647fef42bbfb068a07b","sha1":"817cd77579876f295d130b198b0619210681035c","sha256":"62278a2db166030d1157dd13ad3e3cd3564df80fa8acf4b8f0396de467ca330e","sha512":"23dec8e31d8dbf92568525198d09b0fe91e6aef5aee59a4b4d55e655aeff0f0f28a404490524f0907eb19522033af6754bfbf5c7f810a2013fc92b101e17d1c7","ssdeep":"192:ddxAOgq6/irKvADndSJhpg2o6GOHFLWH5i9cY:d3gvieIR2o6bFLAkOY","tlshash":"b7d1ae6ea1fdb53e5628e1d5e40dd714444b3ec4922c1ca7c7f129d46b7087be583a8c","first_seen":"2025-08-07T15:42:17.356378Z","last_seen":"2026-09-02T13:31:50.667895Z","times_seen":694,"resource_available":false,"data":null}},"time_used":7823,"timings":{"blocked":7162,"dns":0,"connect":5,"send":0,"wait":211,"receive":0,"ssl":445},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/js/captcha/geetest_captcha.js?20260410","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.195Z","timestamp":1788355868195,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbet.tv","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:EA:E8:BD:56:80:50:46:DE:82:01:DF:AB:3C:EE:D1:E9:FD:FD:3B","sha256":"2D:C3:6C:DF:B4:22:76:B8:FA:87:AC:DC:E9:50:CA:C1:AB:79:E1:85:2F:F0:D9:00:C9:1C:D5:34:FD:33:A8:B0"}}},"request":{"raw":"GET /js/captcha/geetest_captcha.js?20260410 HTTP/1.1\r\nHost: manbet.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/home/register\r\nCookie: PHPSESSID=8nabcd5c0rr1k9pbsio8fvre03; _first=false\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:08 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nLast-Modified: Wed, 22 Apr 2026 04:31:24 GMT\r\nETag: W/\"69e84f1c-dc4\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:08 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: de5decf076470d0492656f8082298869\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":3524,"size_decoded":1659,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d75e20308c9baf465ae493434e88d5ff","sha1":"949ff9f07855150c310481ea3eccc8c81984e22a","sha256":"a745d360ff83964f66ee7581fca332aa71be4b1234c0037b670709002f51fd83","sha512":"1afb561f2a91d4a68e7813da23e6e33494f695906005bd3791471044f8104a3c6e3baf1f4de218bf9cb0f44c09e106097b7eb80cd74a1fc00a63d5772fb74245","ssdeep":"","tlshash":"d671147994b6cc420c2b60ab677f9984d6008617f905de843decc9dd9f164dc80a1fd6","first_seen":"2026-08-29T02:14:36.864577Z","last_seen":"2026-09-02T13:31:50.668611Z","times_seen":4,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/d11_images/icon_live_channel.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.440Z","timestamp":1788355875440,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /d11_images/icon_live_channel.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nServer: gocache\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/register/tick.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.462Z","timestamp":1788355875462,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/register/tick.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 444\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nETag: \"62d84dd9-1bc\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 79738e48294fdcce14cff3b10839451c\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":444,"size_decoded":883,"mime_type":"image/png","magic":"PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced","md5":"077cd6729828909df9e8d387b91bdaa9","sha1":"e18a6a43471158c5af525d6fce505a5695a87e49","sha256":"c3dd497f34d2204de6f86a554ca97321a269d2d35482c4b79249a2cd95476783","sha512":"fca1c13107960e24c1fe4e2d26da0953e9fe707dc8a7f5127c349afecac92bfaa98d551d9c031fd1c3b71eb3ede634ced3ac7e5e971ed23a2b21562e28798f0d","ssdeep":"","tlshash":"60f05c52ab957d1dde5895721b8d025908b24204252a0b4cc00cf0765ab9bc17e51079","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.669201Z","times_seen":940,"resource_available":false,"data":null}},"time_used":7727,"timings":{"blocked":7514,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"file-latest.rkvcviwf.com/activity/2026/06/24/5480491118bd3841eb5ac5e2ac3d4428.png","fqdn":"file-latest.rkvcviwf.com","domain":"rkvcviwf.com","tld":"com"},"ip":{"addr":"14.0.60.131","port":443,"asn":54994,"as":"ML-1432-54994","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:16.676Z","timestamp":1788355876676,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"file-latest.rkvcviwf.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 05:14:43 GMT","end":"Sat, 14 Nov 2026 05:14:42 GMT"},"fingerprint":{"sha1":"51:60:80:25:38:A6:34:F0:66:14:16:9B:36:DA:14:11:94:71:C9:83","sha256":"F3:CA:44:0E:FE:F6:37:7D:C4:58:07:9F:54:1F:E3:04:E9:2C:4B:D3:45:BC:C4:44:C5:4E:63:E7:32:F8:11:EF"}}},"request":{"raw":"GET /activity/2026/06/24/5480491118bd3841eb5ac5e2ac3d4428.png HTTP/1.1\r\nHost: file-latest.rkvcviwf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 97634\r\nConnection: keep-alive\r\nx-amz-id-2: iV0i2LWc8ur/9P3IT6kFXRUl9dvM55vP/FSw6SaTQQ2yPoyVPJMq3RyM2+NV5QyAVlDijm+MuP38FUGm1S/h5Qkm8uDS5cAY\r\nx-amz-request-id: VC7XS8ZVA9YPATSX\r\nLast-Modified: Wed, 24 Jun 2026 03:20:22 GMT\r\nETag: \"38f1c96c16e3e22bd9c76b676c0f1b75\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nserver: nginx\r\nAge: 1196819\r\nx-req-id: 6a98252b_PS-CDG-040L238_17126-17583\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":97634,"size_decoded":98132,"mime_type":"image/png","magic":"PNG image data, 272 x 272, 8-bit/color RGBA, non-interlaced","md5":"38f1c96c16e3e22bd9c76b676c0f1b75","sha1":"e234d98bf9a6316249dd49758e6515aa963942c7","sha256":"b3bee7af08b10d3e1c22cea09fd3f3ef0c4bab2d605c6365a753dcccd2589456","sha512":"3b1667d1ace4d39d3950981656fc18cfd5517163e7b068fff7007b723f882a620f1a45c5e1dbd03a82f9634e47f459d5b4d37031c9b377630668e1be2646d8d7","ssdeep":"1536:L3j1bBfDRf8IjdxlvU8XuwmRTq/hpXDZdTJGt+TkrzyO6FVGPk+uK/P63HsoL0Ki:L3NhCum0pXDZdtw+TkrzyP3P+uCGHsas","tlshash":"939312fb490e8abdad042805e71e0027cc6bec27950493f39f85a42727d7678a5d63cd","first_seen":"2026-06-26T15:42:14.599391Z","last_seen":"2026-09-02T13:31:50.669779Z","times_seen":8,"resource_available":false,"data":null}},"time_used":6676,"timings":{"blocked":6304,"dns":1,"connect":25,"send":0,"wait":28,"receive":29,"ssl":287},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.147Z","timestamp":1788355868147,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /style/main.css?1788355867 HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:09 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 19 Aug 2026 05:00:39 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a853877-14f66\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:09 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: b8b2a4666553c2f76f78e94b3906ae17\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85862,"size_decoded":17458,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (449)","md5":"14db586013a1be48664ae669d9991a7f","sha1":"0a14edb6c3a75f08f78af31161aeaaca345fa79b","sha256":"d804c466292b1297c71ac66ef975320ddbcdffcc1f74508c1d9292d43343ea78","sha512":"4347d6b232fbaed217bf0e6ccad9b0368a4fd6b76bbf526d6bbea5a0ef63c6b182bdccda95dd82462a40ac70c8b8070c3d9b9643524511911adb6503e5872008","ssdeep":"1536:Zsg6fFP93YRk3pZcG1cF3NE9GG0gYAajP7wEUVtrydv4ffJqyPouRPf++J1quyqC:Z4P93YRk3pZcG1cF3NE9GGNEUVtryCHu","tlshash":"ac839431e6b5220bb43be2a6f5d02bfa62398007d1171fbc657a3e6dd58f0d60572b90","first_seen":"2026-08-23T03:57:23.484256Z","last_seen":"2026-09-02T13:31:50.670475Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1052,"timings":{"blocked":-1,"dns":104,"connect":1,"send":0,"wait":249,"receive":35,"ssl":663},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/style/css.css?1788355867","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.148Z","timestamp":1788355868148,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /style/css.css?1788355867 HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:08 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 21 Jul 2026 04:34:18 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a5ef6ca-1f83b\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:08 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 942d01266badc13c4c63d01f7dc56800\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":129083,"size_decoded":21788,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (525)","md5":"8b6592f722a32d6f5479ce47bf99e663","sha1":"ab5de4f1ec393fc00b24749a644067d17bfcc0d4","sha256":"1805d282e5fbfd4423faa08f569f442b23dc3aacbfebe3ec5c877a0476dff597","sha512":"a11e1d5d228ef387e41d46a4e85e25e4331f5c37836f6f7bb7e799545cb0be01489146387f1698307f30f8b804e5dc3de0d38d583a2afcee5caf6129763379cf","ssdeep":"3072:tNlIZVV0pv2kohJeqCfVkY2t1cicY270HaLMZ9R1oF:tNlsP0pPohJeqCfVkY2t1cicY270HaLP","tlshash":"89c3f8229252204bb137c6557a9da7b86369c003d6436ffe72eebadad16e19403337d0","first_seen":"2026-07-21T11:23:55.494807Z","last_seen":"2026-09-02T13:31:50.671072Z","times_seen":24,"resource_available":false,"data":null}},"time_used":864,"timings":{"blocked":-1,"dns":103,"connect":2,"send":0,"wait":285,"receive":45,"ssl":426},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/js/jquery/jquery-3.5.1.min.js","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.151Z","timestamp":1788355868151,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-cn.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"ED:14:2F:4F:7D:32:46:7B:F5:03:5B:E8:4E:81:9D:E4:22:37:56:4B","sha256":"20:32:58:7D:65:C2:04:76:B6:E1:06:D0:86:3A:26:79:16:59:62:35:25:C7:A3:B0:3B:40:A3:9F:03:4F:4D:0D"}}},"request":{"raw":"GET /js/jquery/jquery-3.5.1.min.js HTTP/1.1\r\nHost: static-content-cn.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:09 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 04 Feb 2026 02:12:15 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6982aaff-15d83\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:09 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 8e23ffb1fbf6fdd530598a646e9de671\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":89475,"size_decoded":31434,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"12b69d0ae6c6f0c42942ae6da2896e84","sha1":"d2cc8d43ce1c854b1172e42b1209502ad563db83","sha256":"6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f","sha512":"a55f55d56899ab440ef0cae17b28d5cc8f5b9766d1e9bc1a8ac6b89376924b476c1ab0c325497eb5d44af41f4ebf8eea236d87a36902244b8a3eca54994b8711","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:AYh8eip3huuf6IidlrvakdtQ47GKl","tlshash":"e893f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:27Z","last_seen":"2026-09-02T15:26:57.028425Z","times_seen":17682,"resource_available":true,"data":null}},"time_used":996,"timings":{"blocked":-1,"dns":94,"connect":1,"send":0,"wait":211,"receive":24,"ssl":664},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/icon_notice.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.433Z","timestamp":1788355875433,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/icon_notice.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 456\r\nConnection: keep-alive\r\nLast-Modified: Tue, 08 Nov 2022 03:11:23 GMT\r\nETag: \"6369c8db-1c8\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: a8e4031fe86a5943f8863fefbec9e7e2\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":456,"size_decoded":895,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit colormap, non-interlaced","md5":"1a89c1b0da2dd8e949b7cbfbf97b0207","sha1":"eb7047b074d6e8ab5453ccd9450d30ff781e9988","sha256":"941720c6f4b421e3b7a1312f8c713c13cd6aa7033a04089795c59b96c5d50a9c","sha512":"97ff9190823f66f21d090c88aacfc49526e42d24127bc465ac9ddf4ced53c2981c14627752f77d57d85d8971752101819b9332480a65ec0c2612e8688b8ad26c","ssdeep":"","tlshash":"12f0c091268c9c1cc3dc5cbba3b69756fd18555141035c40bc79c06c579502979f89bb","first_seen":"2023-05-10T13:44:32Z","last_seen":"2026-09-02T13:31:50.671968Z","times_seen":806,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":121,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/register/form_bg.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.460Z","timestamp":1788355875460,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/register/form_bg.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 3222\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nETag: \"62d84dd9-c96\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: e5d0312bad6bb0058b42d9723eeb07d4\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":3222,"size_decoded":3662,"mime_type":"image/png","magic":"PNG image data, 410 x 800, 8-bit/color RGBA, non-interlaced","md5":"0f7cd96cb7cef4b9217f90e92920ab6e","sha1":"36cc27443ed415c168ef9e700224011fcc56dfc4","sha256":"cd8bbd1b5d1b7309612fe10c894f8c0a3a5ca889331da9a56414f373464501c5","sha512":"c62f01a4b4c4e59533179f7bd4b710964fdf1127a07ac56d7ce0e1908b8b351586dccb548e58ebb9424365894bb70acc33da4c41d3c2399ea78dd17c6c36b804","ssdeep":"","tlshash":"af614d6d6d9f238d11e99491f491b0ca0c31cbef74805d1564f7cc82ee91f5748398e5","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.672499Z","times_seen":939,"resource_available":false,"data":null}},"time_used":7725,"timings":{"blocked":7515,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/home/getGeo","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.779Z","timestamp":1788355875779,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbet.tv","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:EA:E8:BD:56:80:50:46:DE:82:01:DF:AB:3C:EE:D1:E9:FD:FD:3B","sha256":"2D:C3:6C:DF:B4:22:76:B8:FA:87:AC:DC:E9:50:CA:C1:AB:79:E1:85:2F:F0:D9:00:C9:1C:D5:34:FD:33:A8:B0"}}},"request":{"raw":"POST /home/getGeo HTTP/1.1\r\nHost: manbet.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://manbet.tv\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/home/register\r\nCookie: PHPSESSID=8nabcd5c0rr1k9pbsio8fvre03; _first=false; JSESSIONID=5221949BDB250AE96EBC7C32F9C784BF; _vcid=5221949BDB250AE96EBC7C32F9C784BF\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:16 GMT\r\nContent-Type: application/json;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nSet-Cookie: ccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\nvcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\nccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\nccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\nvcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\nvcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nc-Type: df\r\nrid: c0c6e7b498e20a0c8f2c633f0a5a0f46\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":[{"name":"ccd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"ccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"},{"name":"vcd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"vcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"},{"name":"ccd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"ccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"},{"name":"ccd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"ccd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"},{"name":"vcd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"vcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"},{"name":"vcd11","value":"deleted","quoted":false,"path":"/","domain":"manbet.tv","expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"vcd11=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=manbet.tv"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":148,"size_decoded":1170,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5c7860fc15bc336359d4bce2aadc7211","sha1":"fb59b9a0190fbcb3a5b97b018823c0615a4a3106","sha256":"4b9d4c476886d2c1afd9fd7165c5e1a4dcc9e92febb409bc91a42d2f8528d5a9","sha512":"beb3de3e7d19c57246d95e101e6f96a684c933ab594ec81e85a5998ca9ad6c8c0edb6b69b50c91a9eeb09e24ec9833512dba94f3b81182bf2181d96f14418eab","ssdeep":"","tlshash":"2ac04c5e15e04928e5f683ce6d4abe3709ea4a106256091da6cca7987f410dce141127","first_seen":"2026-06-08T02:45:34.701587Z","last_seen":"2026-09-02T13:31:50.673067Z","times_seen":43,"resource_available":false,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":171,"send":0,"wait":310,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/js/jquery/jquery.validate.js?202605","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.194Z","timestamp":1788355868194,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-cn.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"ED:14:2F:4F:7D:32:46:7B:F5:03:5B:E8:4E:81:9D:E4:22:37:56:4B","sha256":"20:32:58:7D:65:C2:04:76:B6:E1:06:D0:86:3A:26:79:16:59:62:35:25:C7:A3:B0:3B:40:A3:9F:03:4F:4D:0D"}}},"request":{"raw":"GET /js/jquery/jquery.validate.js?202605 HTTP/1.1\r\nHost: static-content-cn.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:09 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 25 May 2026 02:14:29 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a13b085-d041\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:09 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 35ff90eb27437d533c9831f04f0bb1b8\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53313,"size_decoded":14902,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (582)","md5":"58f7023d6b4ac8f1b6313c0b3b481c1d","sha1":"be7f4dc28e63386ec28836130d133d98974e1373","sha256":"211ef6fcc71e550b70e54a5ded9e90d45122409d81090c67430c2437a58f0693","sha512":"846981b3af1a2806b0df8c4a73f8fbbc3c69b8c6e1b4200ec98447145f1bde450941e1d5c822b70b2c4e044a01844d340c6c18b31c962d818bb3d7f17f1b6f9f","ssdeep":"1536:HQTb/8QTZI/Vrl/KKb4/cUAK89OyjA1QKs1zjXaALx84kI9YOBmGnTQ0XiAOSe3l:wTAQT8bLBKsIAL+4ku3XX/dK1","tlshash":"18337288fbde005a8a6931eeac4e51cd76fd80729500a87ebcdd14a415e4cbc12f9f79","first_seen":"2026-05-25T13:03:04.989106Z","last_seen":"2026-09-02T13:31:50.673582Z","times_seen":84,"resource_available":true,"data":null}},"time_used":1350,"timings":{"blocked":1120,"dns":0,"connect":0,"send":0,"wait":214,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/home/luban_icon.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.199Z","timestamp":1788355868199,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/home/luban_icon.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 26796\r\nConnection: keep-alive\r\nLast-Modified: Mon, 02 Mar 2026 04:06:08 GMT\r\nETag: \"69a50cb0-68ac\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 60ea2125781504ee07d51de574d1964b\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26796,"size_decoded":27238,"mime_type":"image/png","magic":"PNG image data, 123 x 283, 8-bit/color RGBA, non-interlaced","md5":"ffe365267ca41a6ac449bb20980c1a72","sha1":"9dd11a3d5d7d1137204f64adee91f9e62e163b10","sha256":"0bb459461e38692ac9fc1b915e789bc78d8ce139ae408431a603dd4caa1e0359","sha512":"74bf777500baaf8233a03196f0f1e4f63983c0667f421b274945be89a3dcfd98efb1688dcf4bd9a786d4643a7e1e70274609bc87f7194e114004b28999f97ebf","ssdeep":"768:kFM2rFV5sLBBPeVOnQ8Tzxvq5SOHScfqM:Mbz2LBBPd9Tzxy5SOtL","tlshash":"50c2f1dd5c68dfe0ca6cd505b8d8097537fdf80998b516e091f87802e8bb72428e913e","first_seen":"2026-03-02T07:28:25.817676Z","last_seen":"2026-09-02T13:31:50.674137Z","times_seen":244,"resource_available":false,"data":null}},"time_used":15418,"timings":{"blocked":15202,"dns":0,"connect":0,"send":0,"wait":209,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/icons_login.png?2","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.453Z","timestamp":1788355875453,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/icons_login.png?2 HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 4053\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nETag: \"62d84dd9-fd5\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 596c80c26222f63e07fb14e0dfb95c84\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":4053,"size_decoded":4493,"mime_type":"image/png","magic":"PNG image data, 26 x 330, 8-bit/color RGBA, non-interlaced","md5":"405c7bc8638bddb314e549e4eebec2e3","sha1":"75f6a3b0b6ffdeed31bff28f8ae1f1a3e481260c","sha256":"cd98cf8ee2f82e9903fb28490a4fc9f318fb60f0f8f0c1f080cee3dce0d6c9b9","sha512":"3a1991dfba0851c6d1d212102ab1fa3585b5970358f75488770ffaaa0467e4cbb755e07dc9db44e102da13fd7510e6b14506e2a2e4188c6461ba652e9fcaa69e","ssdeep":"","tlshash":"3d814c4bbcd228093058e4c372f9822bd946c2d5d6b0557396ce88bb15a8879490c2ce","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.674669Z","times_seen":968,"resource_available":false,"data":null}},"time_used":8159,"timings":{"blocked":7945,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/nav/sponsor2.png?2","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.168Z","timestamp":1788355868168,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/nav/sponsor2.png?2 HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 12015\r\nConnection: keep-alive\r\nLast-Modified: Fri, 23 Jan 2026 04:32:15 GMT\r\nETag: \"6972f9cf-2eef\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 43e22292f9e8783853f1f4a64daafdd9\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":12015,"size_decoded":12457,"mime_type":"image/png","magic":"PNG image data, 292 x 80, 8-bit/color RGBA, non-interlaced","md5":"08b1808e2230fd8765775aacaecc6048","sha1":"6938cf4392f65962c360813abd5cbcac71933b18","sha256":"632ef4b8179994b1fc9e014cbe796825cd3d4f287b0cde2073a032727325c073","sha512":"6a735a9ae1b419fe1426c3ed7614f7517a7d38000a5892aaf7f1a951922bd952a247e2f64a69dc46b8ca9040171c41f4667c0f256f738f9d3207794d17e00f33","ssdeep":"192:lXG8twMBmByAXFdhrX+gz8DjOKuywLb8GautaA5+JKKgYW/G8pTjgPQ7kXSN7aJk:BG8TBurdhaE8DQZNalJKKKjjgPQqS9a6","tlshash":"d342afb5dbbbcc7a4c0c6f8944a5ffb025304baa5d55b4b79eb7390ce7681a02a42610","first_seen":"2026-01-23T05:01:52.483819Z","last_seen":"2026-09-02T13:31:50.675197Z","times_seen":289,"resource_available":false,"data":null}},"time_used":7378,"timings":{"blocked":7162,"dns":0,"connect":0,"send":0,"wait":215,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.f4bzyrz92us3.com/E2/logo.js","fqdn":"www.f4bzyrz92us3.com","domain":"f4bzyrz92us3.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.394Z","timestamp":1788355875394,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.f4bzyrz92us3.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 03 Aug 2026 00:00:00 GMT","end":"Wed, 17 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AE:50:6A:D9:D7:44:10:41:9A:50:33:47:E1:51:5E:D3:99:30:42:A5","sha256":"D0:59:00:19:8D:59:44:D9:6D:65:0F:51:56:99:25:DE:48:B8:E0:93:18:DA:14:2C:E7:58:19:DA:0C:E5:2B:A6"}}},"request":{"raw":"GET /E2/logo.js HTTP/1.1\r\nHost: www.f4bzyrz92us3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nCookie: E2Token=6137c994-e8ad-4ff4-834d-66f775280487; AWSALB=Gq4GPxml6RXRp3nesLlsLlF3g+P1G0ne25KtP5Gf5sZC0byy83EExy9XLjyj+GbBCMTOqfYfJK+yFJ9xYQZO5F+MtY5QJkCWMdqwcmhC7nVGZPT1IBXy6iY2rw/K\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: AWSALB=lCZ/C6AdTjcfkE2ceNZkRZvNf3vQ/78pPm+1s2Zcze1ZNdFoOR7ypc6/FZcTzAqLz0Ty178jzbZ3oMKL/ua+HRMch1aWdLIpDn2vgc6d+Q84oto/pK23i+Fc+knO; Expires=Wed, 09 Sep 2026 13:31:15 GMT; Path=/\nAWSALBCORS=lCZ/C6AdTjcfkE2ceNZkRZvNf3vQ/78pPm+1s2Zcze1ZNdFoOR7ypc6/FZcTzAqLz0Ty178jzbZ3oMKL/ua+HRMch1aWdLIpDn2vgc6d+Q84oto/pK23i+Fc+knO; Expires=Wed, 09 Sep 2026 13:31:15 GMT; Path=/; SameSite=None\r\nCache-Control: max-age=86400\r\nContent-Encoding: br\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nVary: Accept-Encoding\r\nX-Rate-Limit-Limit: 1d\r\nX-Rate-Limit-Remaining: 1294\r\nX-Rate-Limit-Reset: 2026-09-03T00:24:24.1867180Z\r\nX-Content-Type-Options: nosniff\r\nServer: gocache\r\nc-Type: st\r\nrid: 8c2ea23d1f3473f5cb2fb316462756f1\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":[{"name":"AWSALB","value":"lCZ/C6AdTjcfkE2ceNZkRZvNf3vQ/78pPm+1s2Zcze1ZNdFoOR7ypc6/FZcTzAqLz0Ty178jzbZ3oMKL/ua+HRMch1aWdLIpDn2vgc6d+Q84oto/pK23i+Fc+knO","quoted":false,"path":"/","expires":"2026-09-09T13:31:15Z","raw_expires":"Wed, 09 Sep 2026 13:31:15 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"AWSALB=lCZ/C6AdTjcfkE2ceNZkRZvNf3vQ/78pPm+1s2Zcze1ZNdFoOR7ypc6/FZcTzAqLz0Ty178jzbZ3oMKL/ua+HRMch1aWdLIpDn2vgc6d+Q84oto/pK23i+Fc+knO; Expires=Wed, 09 Sep 2026 13:31:15 GMT; Path=/"},{"name":"AWSALBCORS","value":"lCZ/C6AdTjcfkE2ceNZkRZvNf3vQ/78pPm+1s2Zcze1ZNdFoOR7ypc6/FZcTzAqLz0Ty178jzbZ3oMKL/ua+HRMch1aWdLIpDn2vgc6d+Q84oto/pK23i+Fc+knO","quoted":false,"path":"/","expires":"2026-09-09T13:31:15Z","raw_expires":"Wed, 09 Sep 2026 13:31:15 GMT","secure":false,"http_only":false,"same_site":"None","partitioned":false,"raw":"AWSALBCORS=lCZ/C6AdTjcfkE2ceNZkRZvNf3vQ/78pPm+1s2Zcze1ZNdFoOR7ypc6/FZcTzAqLz0Ty178jzbZ3oMKL/ua+HRMch1aWdLIpDn2vgc6d+Q84oto/pK23i+Fc+knO; Expires=Wed, 09 Sep 2026 13:31:15 GMT; Path=/; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":98,"size_decoded":1058,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"6cbf98fbb50c1b755857d45656c62af7","sha1":"eed4c8d2ad5fe5a6d0dc37e92e36c886c29b816f","sha256":"dc5cbd772e91b2a6ed8a6619b45de05610270a82d15136df3684e17ace342fd8","sha512":"27a8fa9754cc994dffba4b8d344e2f81def89b2d0d551716eb181b792b4234027bb3598c7c5d92900d0c5d331b023e9bb4dc9ef62651ab370cd649beb3aff37e","ssdeep":"","tlshash":"b5b0124859086005f0311aff94d0900489280c350907e1931490293372cc09a9db830f","first_seen":"2026-09-02T13:31:50.675754Z","last_seen":"2026-09-02T13:31:50.675754Z","times_seen":1,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/register/icon_eye.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.461Z","timestamp":1788355875461,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/register/icon_eye.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 388\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nETag: \"62d84dd9-184\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: bfd589dc19e080f0ea987f34622505d1\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":388,"size_decoded":827,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"25caaed99359f8457952ec929497c610","sha1":"d79b842381cc35b013b72e8eee86aaff32cc68b1","sha256":"ae84f234ff196c67c9d72336ace3a039460ef08dbd54bf288de428d8dfd4365e","sha512":"626735e0ad18bf56854307da6e5a63b269f014ff6b915ca132c17f951e882beef470b275b664693b25a6be6853ae0c0677e6696f3d4678b3eaa4a612dff2de5c","ssdeep":"","tlshash":"6fe0c0d31b1dbd30cf5801373e9157143962b2846283b108b7845102d8c63593cf7fa8","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.677007Z","times_seen":938,"resource_available":false,"data":null}},"time_used":7933,"timings":{"blocked":7725,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/footer_football.png?5","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.465Z","timestamp":1788355875465,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/footer_football.png?5 HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 20588\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nETag: \"62d84dd9-506c\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 7c736c23d96db7bf6140e0090b34dff0\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20588,"size_decoded":21030,"mime_type":"image/png","magic":"PNG image data, 23 x 1057, 8-bit/color RGBA, non-interlaced","md5":"1070cd5b06840cf7f154e66c09ac305e","sha1":"8864ddecf4ae0db0790bb5c901da76bc0b31c84a","sha256":"c76aa339cc81f581354af830b7ac9984cafbd3836e2f1e53762b7baa720cb43e","sha512":"cf434b41eca22162d4aa5377e62103bb0966b4dd4974599bc19f45ddf801e84aca49fd57a2d2a756b7edbd36e5fbf49195c5bc593100cc69e6b8caaa3f6733c3","ssdeep":"384:JEgvqB07FQV4hlkvWknpVtQCdWUKxk76w27R/9ThToBdAm/:JExBu2gb29nKqc7R/vMH/","tlshash":"df92d046d332f232e578f5229567c5de221f2d07099b0f1a489df013ace56bae189e0f","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.677567Z","times_seen":942,"resource_available":false,"data":null}},"time_used":7725,"timings":{"blocked":7514,"dns":0,"connect":0,"send":0,"wait":209,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/favicon.ico","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/","date":"2026-09-02T13:31:06.875Z","timestamp":1788355866875,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbet.tv","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:EA:E8:BD:56:80:50:46:DE:82:01:DF:AB:3C:EE:D1:E9:FD:FD:3B","sha256":"2D:C3:6C:DF:B4:22:76:B8:FA:87:AC:DC:E9:50:CA:C1:AB:79:E1:85:2F:F0:D9:00:C9:1C:D5:34:FD:33:A8:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: manbet.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nCookie: PHPSESSID=8nabcd5c0rr1k9pbsio8fvre03; _first=false\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 02 Sep 2026 13:31:07 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nETag: W/\"5d650431-bf\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\nServer: gocache\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191,"size_decoded":539,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"879e97919a993283dff3a8d1abb8447e","sha1":"412c7a4d3182c45cccc39227c0a54c8f99f9be29","sha256":"a8eecb4cd99792b7902d1141c6309e6760ca3576e668b8e0ed177f3044a48848","sha512":"7b3e61090e2a7a1e5a373079e98a1dc848e6825d578a78dcc317f59c5f75ea21744687e3fd6068bd1bcf8190b36e276edc67248c85aa99c0d436736f84012ada","ssdeep":"","tlshash":"0ec022c7cd00c44a01f60a05c8b7f45ce0a380a48900c80088f28c7122e8bcf861fec2","first_seen":"2023-04-07T00:43:11Z","last_seen":"2026-09-02T13:31:50.678172Z","times_seen":466,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":0,"dns":0,"connect":170,"send":0,"wait":226,"receive":0,"ssl":176},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/util/all.js?20231116","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.189Z","timestamp":1788355868189,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-cn.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"ED:14:2F:4F:7D:32:46:7B:F5:03:5B:E8:4E:81:9D:E4:22:37:56:4B","sha256":"20:32:58:7D:65:C2:04:76:B6:E1:06:D0:86:3A:26:79:16:59:62:35:25:C7:A3:B0:3B:40:A3:9F:03:4F:4D:0D"}}},"request":{"raw":"GET /util/all.js?20231116 HTTP/1.1\r\nHost: static-content-cn.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:09 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 13 Sep 2023 03:06:14 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65012726-13044\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:09 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: cf377111ce98419000be18b0c4d5c4b7\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":77892,"size_decoded":23390,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5480)","md5":"f5aa16a242596257e153e33c5b8fb232","sha1":"804252d4387c4fda0141e9bf4fd2a05bb3c7068a","sha256":"c21ffeeff6782e69216ce2fdf3fd54289af1d7b4a8bc2af9b83c0679c5969782","sha512":"1ae9de5c195af57a93c2bbc30c0597c8f7f2e96e98af1c1a514d21d170b54c4bafc882689096e117cd36f25570474bd059edfb8bf9023571ff7531ace1491c59","ssdeep":"1536:rfee/RrYiHhJ9Q0f16d9zeDN5qW4wTW3Jny+aSsG+Kjbd2m43ftShEhJ+7Rh0Om:rfD/miHhJ9Q0fd5B8jYhi0t","tlshash":"6273f88c7591306a4aef31b7782b224f73769a69500e5068f0b8d4e53ebce857167f38","first_seen":"2023-09-15T15:49:20Z","last_seen":"2026-09-02T13:31:50.678755Z","times_seen":1077,"resource_available":true,"data":null}},"time_used":943,"timings":{"blocked":707,"dns":0,"connect":0,"send":0,"wait":221,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/d11_images/icon_mobile.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.435Z","timestamp":1788355875435,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /d11_images/icon_mobile.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 300\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:45:39 GMT\r\nETag: \"62d84d53-12c\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 04f1b454996c7833df283889fdbddf91\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":300,"size_decoded":739,"mime_type":"image/png","magic":"PNG image data, 15 x 18, 8-bit/color RGBA, non-interlaced","md5":"87b9952aa4def5ac2d4dce81528ecae3","sha1":"e34496b167df036229e923d8686858c0a306c1e2","sha256":"7aa81a942fe7f67e5b132b047c4db23993d6ffff8eaafd3692a6824236e11def","sha512":"0fbb21285e5fe2e16acb97529fe973d055261ea7e787fdfc0d4f381f9fd2c00a981dd5861a08a4d1ee0b62d0f145044678b8cc87297e62af85d5f758a826a508","ssdeep":"","tlshash":"c9e0eb4323a20d3ac3c85633a11b13308c304248b484a50d5e442a30cc8a34c2ebd623","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.679347Z","times_seen":974,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/d11_images/register/form_bg.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.459Z","timestamp":1788355875459,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /d11_images/register/form_bg.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 20040\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:45:39 GMT\r\nETag: \"62d84d53-4e48\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: f53e3c34666ef4a6d6cc9523d7fce141\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20040,"size_decoded":20482,"mime_type":"image/png","magic":"PNG image data, 410 x 800, 8-bit/color RGBA, non-interlaced","md5":"86baccc2262d17c30a1554f6b346b1c8","sha1":"696ce785c5c17611fecb6dd78d9662c141deffd4","sha256":"dfe93dfcc0d88efa36f759f6b0e758a0b37bd91aa65bfa7936763eda17ea6f9f","sha512":"858d5d94817390043018ef671701f57776bbf7f566ded8fe30966a65fcadb9feade8d3c1677f677b9c69b59eaa4d5e818af5e39ec08cccc9281c1dc4517a18d0","ssdeep":"384:ApJHP0rldn8i5UqqXdb3WGGNBIUbj43bXDrzctPOmWRh:Ap90rlddaqqXdM/IUHIr4VOmWRh","tlshash":"53928e946c68e9c1c97a840e246b1f7555a0f1c8edf2f3f06b93e0595c0b868ae90ded","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.679877Z","times_seen":937,"resource_available":false,"data":null}},"time_used":7939,"timings":{"blocked":7727,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dingxiang-inc.com/ctu-group/captcha-ui/index.js?_=1788355875365","fqdn":"cdn.dingxiang-inc.com","domain":"dingxiang-inc.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.529Z","timestamp":1788355875529,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ctu-group/captcha-ui/index.js?_=1788355875365 HTTP/1.1\r\nHost: cdn.dingxiang-inc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/style/swiper.min.css","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.153Z","timestamp":1788355868153,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /style/swiper.min.css HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:08 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"62d84dd9-5635\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:08 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 514297792c5bc1d3bf4861491482d845\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22069,"size_decoded":3612,"mime_type":"text/css","magic":"ASCII text, with very long lines (1470)","md5":"77a6bc86b924fdf5d42455175b71334f","sha1":"504ce5539221bb286a6c1d9de45c20e8c14a0570","sha256":"863825968c107afb96e45aeb4d5725605ca9b39da49425501ded16b00f649684","sha512":"311f291da2cc74044b0645c36b715cdb0ee9b7e484d7d9ae302c79e9ab7870deac8e17d91c32b81ecfae68328953e1cacd9197fce8e4d8ef3c7e439c6d70ccab","ssdeep":"192:4DtXHyAQJuOb91AQJumj4atahQkiA/dhTtSStY+7JrtYaPtYqDXuHBVtS+wjvqXk:4D70amqhQkiAvsc+h0Q0FOMF7svBdZ6","tlshash":"56a2455c17131842aa364d0d47da5b349768c8835e03dcee73c1ea48ef6f5a8329fb66","first_seen":"2026-07-21T11:23:55.469818Z","last_seen":"2026-09-02T13:31:50.680447Z","times_seen":24,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":-1,"dns":97,"connect":2,"send":0,"wait":210,"receive":0,"ssl":427},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/nav/sponsor3.png?3","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.169Z","timestamp":1788355868169,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/nav/sponsor3.png?3 HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 10466\r\nConnection: keep-alive\r\nLast-Modified: Fri, 23 Jan 2026 04:32:15 GMT\r\nETag: \"6972f9cf-28e2\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 267d4bf4b85f57c4002ad887269d0531\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10466,"size_decoded":10908,"mime_type":"image/png","magic":"PNG image data, 292 x 80, 8-bit/color RGBA, non-interlaced","md5":"4ac6040378c52082239823adc971fe93","sha1":"f5e1c0385b576f11d3a18aba66f36abd7e895055","sha256":"3a1689108f773fc9d3a86757ce359ebe90f4543680be838bb9d82bd359e3986e","sha512":"f8ab3f0e33f548141655d8a6b1e7792835511ccef503434db65b5844d0e4c51b7667fec661294d453316b2b394a371980973c49fa144f1f707bc6f77191ff375","ssdeep":"192:M3I4RzpFzXCPwiIjmqoG+Hw66/VcNMOVejNfd++tTfanWgSO3dY:MYOzpFze9Ijmw+Ht6/CFVwNDtTfanWgs","tlshash":"d922bff15ec9a29bf8add03794362f05b6d73f8ac4ac71576724f893e48c4512c228e9","first_seen":"2026-01-23T05:01:52.443661Z","last_seen":"2026-09-02T13:31:50.681321Z","times_seen":288,"resource_available":false,"data":null}},"time_used":7820,"timings":{"blocked":7161,"dns":0,"connect":1,"send":0,"wait":213,"receive":0,"ssl":445},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/nav/promo_keno.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.174Z","timestamp":1788355868174,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/nav/promo_keno.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 21322\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nETag: \"62d84dd9-534a\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: d6021951390380026a8a64321d7cb7d4\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":21322,"size_decoded":21764,"mime_type":"image/png","magic":"PNG image data, 200 x 100, 8-bit/color RGBA, non-interlaced","md5":"f3d3231964cd6c0b98aceaa07e9626b6","sha1":"2fdcca8cdf610057e37e86e9c679f87d959a1821","sha256":"3075e79d3c7ef852ed0a95aa56324509b499446a6d8a454fed94f1fdd102fd90","sha512":"78837a1effb6ae7ef05256cac78af4982ceb76f36f77362f29caf29fff7f2ae6ec01d11c89ec4c87c7ffb2a9ec9ad7a6d2ccab97b5b0145c649672baf097858c","ssdeep":"384:yW63kJiUaadwYIM4oZt3zpqdyaNJQMqr3t5LwR2hD83hZTf2xL:96UJNlwSVtqdyPtZwW83HqxL","tlshash":"20a2e1c5ded60df36e6a639225e06525854ccbc29ebdd24a00e2b3d83a903c773dd3a5","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.681961Z","times_seen":944,"resource_available":false,"data":null}},"time_used":7392,"timings":{"blocked":7161,"dns":0,"connect":0,"send":0,"wait":217,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/fimg/i202506274933fa50064c8d94db51e297e3b319.png","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.177Z","timestamp":1788355868177,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbet.tv","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:EA:E8:BD:56:80:50:46:DE:82:01:DF:AB:3C:EE:D1:E9:FD:FD:3B","sha256":"2D:C3:6C:DF:B4:22:76:B8:FA:87:AC:DC:E9:50:CA:C1:AB:79:E1:85:2F:F0:D9:00:C9:1C:D5:34:FD:33:A8:B0"}}},"request":{"raw":"GET /fimg/i202506274933fa50064c8d94db51e297e3b319.png HTTP/1.1\r\nHost: manbet.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/home/register\r\nCookie: PHPSESSID=8nabcd5c0rr1k9pbsio8fvre03; _first=false\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 591\r\nConnection: keep-alive\r\nLast-Modified: Sun, 15 Jun 2025 05:27:25 GMT\r\nETag: \"684e59bd-24f\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 1372869f558cdd4664891483896a3966\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":591,"size_decoded":1092,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 1-bit colormap, non-interlaced","md5":"d390244b30c22d100a24ac05d9e4e979","sha1":"978cd2d10293408b8ad2b62d647ba17ce7f1b07f","sha256":"38d18e132913c6fc5636d430c1226ecdbc29ad80b55faa4a7aad46cd084c44ea","sha512":"27e7300242911590b438a1f533420319984bf694f46a03cf96a5af250d4f74b46e78180a18f7adeda216e95e11b305f65317e604c2aa7fa7a1619a2379e4ef67","ssdeep":"","tlshash":"96f062d55151be10901011012d46e893807030eeebf30b1d450b413270b824ee7296e2","first_seen":"2025-08-07T15:42:17.327108Z","last_seen":"2026-09-02T13:31:50.682576Z","times_seen":700,"resource_available":false,"data":null}},"time_used":7332,"timings":{"blocked":7161,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/js/game/Game.js?20251217","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.188Z","timestamp":1788355868188,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-cn.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"ED:14:2F:4F:7D:32:46:7B:F5:03:5B:E8:4E:81:9D:E4:22:37:56:4B","sha256":"20:32:58:7D:65:C2:04:76:B6:E1:06:D0:86:3A:26:79:16:59:62:35:25:C7:A3:B0:3B:40:A3:9F:03:4F:4D:0D"}}},"request":{"raw":"GET /js/game/Game.js?20251217 HTTP/1.1\r\nHost: static-content-cn.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:09 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 07 Apr 2026 04:41:28 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"69d48af8-f558\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:09 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 27e611479f883e16be65dc7357025f85\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62808,"size_decoded":8471,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"fb6fcdbaea66ee468067eeec6170d505","sha1":"e93110e937a3b13ea40a000f196ccc74f955b8cc","sha256":"77f4e4a925e65acf024ad936e0c7cb87ce827a2d02a20ba7af6da8a0272fb5d8","sha512":"55ee175cb807a2fd3bfa724552b97456c193248b1ed3efa1832fb93850005a10f4542987cf37c47b5db0ca222e7cbb0d89e995eec55586ebd010f291c00f075b","ssdeep":"384:AURoUtVbztM3nigTG7SG4lznSVs5Lq/vtQEttGsOSVD:AURoU3ztwJou50QEttGsO2","tlshash":"6253154caea318e35a3654348b7f31956d5166032508dd1c3e0cd3a3df9a0be66b1efa","first_seen":"2026-04-08T20:50:32.513767Z","last_seen":"2026-09-02T13:31:50.683136Z","times_seen":179,"resource_available":true,"data":null}},"time_used":908,"timings":{"blocked":693,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/fimg/i2022109557596bf60a4a37a8fd6570231b8312.png","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.200Z","timestamp":1788355868200,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbet.tv","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:EA:E8:BD:56:80:50:46:DE:82:01:DF:AB:3C:EE:D1:E9:FD:FD:3B","sha256":"2D:C3:6C:DF:B4:22:76:B8:FA:87:AC:DC:E9:50:CA:C1:AB:79:E1:85:2F:F0:D9:00:C9:1C:D5:34:FD:33:A8:B0"}}},"request":{"raw":"GET /fimg/i2022109557596bf60a4a37a8fd6570231b8312.png HTTP/1.1\r\nHost: manbet.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/home/register\r\nCookie: PHPSESSID=8nabcd5c0rr1k9pbsio8fvre03; _first=false\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 228056\r\nConnection: keep-alive\r\nLast-Modified: Tue, 11 Oct 2022 03:07:34 GMT\r\nETag: \"6344ddf6-37ad8\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 5dcd2bdc2404746a0398ed20b05d7473\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":228056,"size_decoded":228562,"mime_type":"image/png","magic":"PNG image data, 838 x 572, 8-bit/color RGBA, non-interlaced","md5":"ad437106303315b23ca37c00fac9b9a7","sha1":"f503a3d13adaba3b253e4adb493181f86c50bb6f","sha256":"9624ab5cf4b378ccbf9525a00dfbc12c923cb62d887e8bd6a69c4d140c6a8133","sha512":"36cf78c0da7bd3530167e12f2bd3a0f75c38a745f337075d0b493eb41d6e035a2e7fe461df7a771e94eb42e69f419eb3af283b220bb211a2b652d8f55d47558a","ssdeep":"6144:/LkBXH85hsNRgjSxVQldvROEZ7dhzZA6x/qQ:QqnsNRKOVwdvgEE6IQ","tlshash":"122412ecb69b980fef3d1147925c0db4e0f820043b1c9277a155e9b7e8d21a939b5acc","first_seen":"2023-05-05T17:23:57Z","last_seen":"2026-09-02T13:31:50.685425Z","times_seen":862,"resource_available":false,"data":null}},"time_used":8172,"timings":{"blocked":7140,"dns":0,"connect":169,"send":0,"wait":172,"receive":511,"ssl":179},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/icons_login.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.452Z","timestamp":1788355875452,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/icons_login.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 4053\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nETag: \"62d84dd9-fd5\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 8455a8e707a0453b72054376fc8bb8ca\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4053,"size_decoded":4493,"mime_type":"image/png","magic":"PNG image data, 26 x 330, 8-bit/color RGBA, non-interlaced","md5":"405c7bc8638bddb314e549e4eebec2e3","sha1":"75f6a3b0b6ffdeed31bff28f8ae1f1a3e481260c","sha256":"cd98cf8ee2f82e9903fb28490a4fc9f318fb60f0f8f0c1f080cee3dce0d6c9b9","sha512":"3a1991dfba0851c6d1d212102ab1fa3585b5970358f75488770ffaaa0467e4cbb755e07dc9db44e102da13fd7510e6b14506e2a2e4188c6461ba652e9fcaa69e","ssdeep":"","tlshash":"3d814c4bbcd228093058e4c372f9822bd946c2d5d6b0557396ce88bb15a8879490c2ce","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.674669Z","times_seen":968,"resource_available":false,"data":null}},"time_used":8155,"timings":{"blocked":7943,"dns":0,"connect":0,"send":0,"wait":211,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/d11_images/favicon.ico","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:19.172Z","timestamp":1788355879172,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /d11_images/favicon.ico HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/x-icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Wed, 20 Jul 2022 18:45:39 GMT\r\nETag: W/\"62d84d53-47e\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 10c4c59e7e06b3904d3ca3a68fbf5eec\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":1150,"size_decoded":1084,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"a970762d135e06a1d0a982e92627eea2","sha1":"c75f6962b7e717dea8761c63a6fc7bbd47f8bd0a","sha256":"93b5d76d0e220077f0df098dab49acd243597dc5574a22fe0a4bf0d9568202ba","sha512":"390122f4d979bd913b2885ad383d0a4604306fd98628fbc3192ce39933f633fce48026bb557088f8657c799f7cb3a22e79ccb09a0a2806e5467996a1d33b75a5","ssdeep":"","tlshash":"4721afeb5a08ccc7e658873960bf5f55c0ebbc2656712b48a254f4f10ff2693020b401","first_seen":"2023-05-15T15:49:03Z","last_seen":"2026-09-02T13:31:50.686435Z","times_seen":603,"resource_available":false,"data":null}},"time_used":4232,"timings":{"blocked":4022,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/js/newlivechat.js?20260126","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.156Z","timestamp":1788355868156,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-cn.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"ED:14:2F:4F:7D:32:46:7B:F5:03:5B:E8:4E:81:9D:E4:22:37:56:4B","sha256":"20:32:58:7D:65:C2:04:76:B6:E1:06:D0:86:3A:26:79:16:59:62:35:25:C7:A3:B0:3B:40:A3:9F:03:4F:4D:0D"}}},"request":{"raw":"GET /js/newlivechat.js?20260126 HTTP/1.1\r\nHost: static-content-cn.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:09 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Feb 2026 05:00:42 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"698eaffa-2dd\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:09 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 53e69103dc82596d8001324407e7ec3f\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":733,"size_decoded":904,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (668)","md5":"82236be894134d60c1165840a2f1f432","sha1":"299865c8584f72365c7f4d87d99e8702c4cfb68d","sha256":"ccc9ca0fdd0b8e6f3cf3145e5ad7b9730cdf9573d46631916fa5055e1f6f84bd","sha512":"8ba9b5c320cdab328fef9faf00a641ed97c0e36eafb46b330637f90cbbc8bf503e0ccea92c33e6a886f53f37502fea66f5ec4722787c2334f6ec41ca58bbe768","ssdeep":"","tlshash":"2801d089bc45b076ab56326c713bfa07516213156844683348ee87bbeb32e9b410358c","first_seen":"2026-03-04T07:05:29.810152Z","last_seen":"2026-09-02T13:31:50.687061Z","times_seen":242,"resource_available":true,"data":null}},"time_used":1096,"timings":{"blocked":-1,"dns":88,"connect":2,"send":0,"wait":210,"receive":0,"ssl":791},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/js/jquery-ui.js?20260516","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.185Z","timestamp":1788355868185,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /js/jquery-ui.js?20260516 HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:08 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 25 May 2026 02:14:32 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6a13b088-81307\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:08 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 02f014f47456fa354bb02284643c3bfe\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":529159,"size_decoded":127615,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1004)","md5":"cbc65ff85e08b21d7e0c0394fbf3a371","sha1":"0ebabcd2c6da47bde11fadf331a02c98845b0a8d","sha256":"c4b0fb9e123ad9f72c1192b6feff0bb0171be251bb76050b92e5e85c1fe3f757","sha512":"ca70d36e3179ad41ec5818f3ee7b258ebad25aa2d33c968e47349ee5a1821713a28116519b0334e72fa4b82b716a8092cd5181d4acb75de459b0385b48b7735d","ssdeep":"12288:mFemHFgymkplyHCcmM0/W/EEwKvQRgPrVhDdRlY:wlyHCcmM0/W/EEwKbhhDdRlY","tlshash":"20b4a6c9f39c265a857a32595c2e42cdb23c8075e60058bfbc5d59dc29a883c43bbf79","first_seen":"2023-03-07T14:44:55Z","last_seen":"2026-09-02T13:31:50.687669Z","times_seen":4296,"resource_available":true,"data":null}},"time_used":956,"timings":{"blocked":-1,"dns":65,"connect":2,"send":0,"wait":223,"receive":225,"ssl":441},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/icons.png?1","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.444Z","timestamp":1788355875444,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/icons.png?1 HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 3150\r\nConnection: keep-alive\r\nLast-Modified: Wed, 01 Feb 2023 01:02:20 GMT\r\nETag: \"63d9ba1c-c4e\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: d26193a2ab3579857ab2da6abb6af616\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3150,"size_decoded":3590,"mime_type":"image/png","magic":"PNG image data, 39 x 373, 8-bit/color RGBA, non-interlaced","md5":"a64222f0baf49b7b54175cb4b70c7772","sha1":"179e5f57fdd5dee04578274231a5445b76b83ae2","sha256":"382fcd4debce444b68de702fa69d2b8935ba546457f1a36d358d312baec1f35b","sha512":"13ef9e867c04188713a5812ed810ccd9f80771648acfed7ee5a3b7ffe0862f67233d1136de6440ade5854d2a14012fd6d7f1751c010a6f8dcc708d4c6d640291","ssdeep":"","tlshash":"ad514cc1185c2e117ffd4130cece1ff99c9e2da667e0a29d8639d1926da4310f4a5b8c","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.688349Z","times_seen":969,"resource_available":false,"data":null}},"time_used":7744,"timings":{"blocked":7531,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hfamr4v43k9n.com/ETBridge","fqdn":"www.hfamr4v43k9n.com","domain":"hfamr4v43k9n.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.563Z","timestamp":1788355875563,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hfamr4v43k9n.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 26 Sep 2025 00:00:00 GMT","end":"Sat, 26 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7C:D0:04:49:D8:1F:13:28:1E:DF:3A:23:A8:A2:7C:0B:EC:34:48:C1","sha256":"2E:B4:A5:3C:C0:D4:E1:56:9C:3F:FC:3E:EE:2A:DA:C4:2D:5C:AD:B6:84:2C:08:E4:96:1C:FD:71:BC:65:EF:92"}}},"request":{"raw":"GET /ETBridge HTTP/1.1\r\nHost: www.hfamr4v43k9n.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:16 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nc-Type: df\r\nrid: da2c0f5ad0428f4c93ed739574abce2b\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1159,"size_decoded":1005,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"4ad3d71fd9157d4ca20169b49bca6cca","sha1":"af79b818f96a2290e1de64292adbe380f335162c","sha256":"38846cf6a7acc153748f6dd5174282228e504d1ff6f02a6b5acd52d3f0396730","sha512":"401d4e5449d870498ec1be9b9da391546ca56e3e0245382abe03ced0a1da363caa96ea5f72c05661bfdb6801a00dad6c1e50243e7cf550ced1f2074c2dfbf9c1","ssdeep":"","tlshash":"b921aacfec29682e2973b3383f6a3919fa06516b9001e680bdccd9565f701e68450fce","first_seen":"2026-08-06T00:00:27.922407Z","last_seen":"2026-09-02T13:31:50.689064Z","times_seen":7,"resource_available":false,"data":null}},"time_used":911,"timings":{"blocked":74,"dns":125,"connect":1,"send":0,"wait":280,"receive":0,"ssl":431},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.vrfpshbc.com:2053/global-activity-entry/css/style.css","fqdn":"www.vrfpshbc.com","domain":"vrfpshbc.com","tld":"com"},"ip":{"addr":"172.67.186.168","port":2053,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.767Z","timestamp":1788355875767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrfpshbc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 06:30:20 GMT","end":"Wed, 28 Oct 2026 07:30:12 GMT"},"fingerprint":{"sha1":"56:FF:3D:5B:5C:5D:89:6A:22:07:46:41:9C:47:19:49:B8:B8:E3:D3","sha256":"3C:C3:1F:03:91:19:66:F6:2F:78:AE:D3:74:FB:98:56:E1:2D:EF:D5:5C:1A:8B:D2:FA:1E:99:54:AD:76:55:50"}}},"request":{"raw":"GET /global-activity-entry/css/style.css HTTP/1.1\r\nHost: www.vrfpshbc.com:2053\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 13:31:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 16 Jun 2021 18:06:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60ca3dbf-1099\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9m%2BzTmZdodTrAc4rFCpOJyrPi0eciV9OHiw%2FE0yJD6XORl09E0c2S0KJX1i2XTZ4lrXI8KWtkh%2BQuckOWCrrb6u7C6BQD9e6uyoJ7Lxb8iJD%2FR9Uy%2F6lFrsHsZ4WEKciGfi8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a34cdfe77858569f-OSL\r\nalt-svc: h3=\":2053\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4249,"size_decoded":1808,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"0c6d034e188bab046fdc5e2bf379985a","sha1":"2d488cf25911a2fc18a528d7cc379ccf0cfe81b9","sha256":"4d22d7a96ba44fa03ada1e71245b3ee64e1e91a1bbe9287957429ab8a1ab0f5d","sha512":"cb7466d46ac336aa2c569e1c8ff81e4576d7b4882259a8e7b278e89158345eaed5e71567878a6e78a3ec54fdf339e86857695fadd6c84194c0a54de40240dcb4","ssdeep":"48:FLYxjPtWs2MYEuZh/Vzlj2TTc4JnAWXorJfNlfUstDTj54JI74koECOH8WzurfYh:FLC2f1YYDO+h0HfYNsu+zjfrQ","tlshash":"9991cc7d4b0722044637d6587bd54b668638d063bb0729de7bd506ce0b91fdc02b1aab","first_seen":"2023-05-05T17:24:19Z","last_seen":"2026-09-02T13:31:50.689741Z","times_seen":705,"resource_available":false,"data":null}},"time_used":7213,"timings":{"blocked":0,"dns":4,"connect":1,"send":0,"wait":827,"receive":0,"ssl":6380},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/js/swiper.min.js","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.155Z","timestamp":1788355868155,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /js/swiper.min.js HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:08 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"62d84dd9-1df6e\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:08 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 1e409c97c1f9d08bd1b96b39e499e38e\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122734,"size_decoded":31850,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65275)","md5":"33b9d4a357523bff559c7db14d6327fe","sha1":"17e9e89057510d49e1d86750bce1eb209d8a5477","sha256":"51aadb3fec87c08df816d37956b3db189cb0c09c3c6efe14c7b39b486c8a0ff3","sha512":"904fa866e7dd872e44c70c4facc9e0180217130eead81df013e5ab327dfd85cd8f6367b812f202d9a442885f73274cdc1ecc0db7377474a2322faccc7c131e9f","ssdeep":"1536:OL2qg0G1fVLJW4bU98IA9SK8FDliAfKrGny55T1s53V7gZxj8rvHgZsUOUBDBWq1:1pbUAxSqBohgZu7HgZsUOUFBWqjxJ5","tlshash":"9dc3094eb390619510e36257529e9241a3b72849780ad0ac35b68cd7adbde4c13bfffc","first_seen":"2023-03-14T07:20:43Z","last_seen":"2026-09-02T13:31:50.690422Z","times_seen":77,"resource_available":true,"data":null}},"time_used":743,"timings":{"blocked":-1,"dns":95,"connect":2,"send":0,"wait":210,"receive":7,"ssl":427},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.f4bzyrz92us3.com/E2/EagleEye.js?1788355867","fqdn":"www.f4bzyrz92us3.com","domain":"f4bzyrz92us3.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.158Z","timestamp":1788355868158,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.f4bzyrz92us3.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 03 Aug 2026 00:00:00 GMT","end":"Wed, 17 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AE:50:6A:D9:D7:44:10:41:9A:50:33:47:E1:51:5E:D3:99:30:42:A5","sha256":"D0:59:00:19:8D:59:44:D9:6D:65:0F:51:56:99:25:DE:48:B8:E0:93:18:DA:14:2C:E7:58:19:DA:0C:E5:2B:A6"}}},"request":{"raw":"GET /E2/EagleEye.js?1788355867 HTTP/1.1\r\nHost: www.f4bzyrz92us3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:10 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: AWSALB=Gq4GPxml6RXRp3nesLlsLlF3g+P1G0ne25KtP5Gf5sZC0byy83EExy9XLjyj+GbBCMTOqfYfJK+yFJ9xYQZO5F+MtY5QJkCWMdqwcmhC7nVGZPT1IBXy6iY2rw/K; Expires=Wed, 09 Sep 2026 13:31:10 GMT; Path=/\nAWSALBCORS=Gq4GPxml6RXRp3nesLlsLlF3g+P1G0ne25KtP5Gf5sZC0byy83EExy9XLjyj+GbBCMTOqfYfJK+yFJ9xYQZO5F+MtY5QJkCWMdqwcmhC7nVGZPT1IBXy6iY2rw/K; Expires=Wed, 09 Sep 2026 13:31:10 GMT; Path=/; SameSite=None\nE2Token=6137c994-e8ad-4ff4-834d-66f775280487; expires=Tue, 02 Sep 2036 13:31:10 GMT; path= ; samesite = None; secure; httponly\r\nContent-Encoding: br\r\nVary: Accept-Encoding\r\nX-Rate-Limit-Limit: 1d\r\nX-Rate-Limit-Remaining: 1096\r\nX-Rate-Limit-Reset: 2026-09-02T23:10:26.5934553Z\r\nX-Content-Type-Options: nosniff\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:10 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 929166f6f764df41e24d92820ec04ce0\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":[{"name":"AWSALB","value":"Gq4GPxml6RXRp3nesLlsLlF3g+P1G0ne25KtP5Gf5sZC0byy83EExy9XLjyj+GbBCMTOqfYfJK+yFJ9xYQZO5F+MtY5QJkCWMdqwcmhC7nVGZPT1IBXy6iY2rw/K","quoted":false,"path":"/","expires":"2026-09-09T13:31:10Z","raw_expires":"Wed, 09 Sep 2026 13:31:10 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"AWSALB=Gq4GPxml6RXRp3nesLlsLlF3g+P1G0ne25KtP5Gf5sZC0byy83EExy9XLjyj+GbBCMTOqfYfJK+yFJ9xYQZO5F+MtY5QJkCWMdqwcmhC7nVGZPT1IBXy6iY2rw/K; Expires=Wed, 09 Sep 2026 13:31:10 GMT; Path=/"},{"name":"AWSALBCORS","value":"Gq4GPxml6RXRp3nesLlsLlF3g+P1G0ne25KtP5Gf5sZC0byy83EExy9XLjyj+GbBCMTOqfYfJK+yFJ9xYQZO5F+MtY5QJkCWMdqwcmhC7nVGZPT1IBXy6iY2rw/K","quoted":false,"path":"/","expires":"2026-09-09T13:31:10Z","raw_expires":"Wed, 09 Sep 2026 13:31:10 GMT","secure":false,"http_only":false,"same_site":"None","partitioned":false,"raw":"AWSALBCORS=Gq4GPxml6RXRp3nesLlsLlF3g+P1G0ne25KtP5Gf5sZC0byy83EExy9XLjyj+GbBCMTOqfYfJK+yFJ9xYQZO5F+MtY5QJkCWMdqwcmhC7nVGZPT1IBXy6iY2rw/K; Expires=Wed, 09 Sep 2026 13:31:10 GMT; Path=/; SameSite=None"},{"name":"E2Token","value":"6137c994-e8ad-4ff4-834d-66f775280487","quoted":false,"expires":"2036-09-02T13:31:10Z","raw_expires":"Tue, 02 Sep 2036 13:31:10 GMT","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"E2Token=6137c994-e8ad-4ff4-834d-66f775280487; expires=Tue, 02 Sep 2036 13:31:10 GMT; path= ; samesite = None; secure; httponly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":55510,"size_decoded":21467,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37140), with CRLF line terminators","md5":"f1ff13fa03320de9d9d03d897e089b0f","sha1":"a2e610b134b2e05a12d8a7b65dfa528c518187ca","sha256":"35c4ac6e78a42c9f55ec33854b4cc18c1f47d25707ca9e89550462d3cea2dd9f","sha512":"1ad9235447d3183bdafb86355eee5c1145c4c923105b2048faa5ded6c7f5176c901c7cb8003978897dcf027aebcf28170aed9ada5ca506784fb90545c4edbf53","ssdeep":"1536:tolk6G1j9Bk/k0q7Mfx5+2I7v7D71Ies9GUWfth7KBbTE21gAWIOuYyR4mr/qDAT:+GW/k0q7Mfx5+2I7v7D77FftlKBbTv1P","tlshash":"1c43e61ab2963539c56230775caf9148b33d85a61298505cab0fc5e4783987e83bfff8","first_seen":"2026-09-02T13:31:50.691193Z","last_seen":"2026-09-02T13:31:50.691193Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2737,"timings":{"blocked":-1,"dns":110,"connect":1,"send":0,"wait":420,"receive":179,"ssl":2026},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/d11_images/nav/promo_sponsor.png?1","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.176Z","timestamp":1788355868176,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /d11_images/nav/promo_sponsor.png?1 HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 45701\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:45:39 GMT\r\nETag: \"62d84d53-b285\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 1baaac1125e6bcb54ea1f7783cf670dc\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":45701,"size_decoded":46143,"mime_type":"image/png","magic":"PNG image data, 183 x 110, 8-bit/color RGBA, non-interlaced","md5":"4392b15e336dc870834d64c829f8c150","sha1":"af6de84ddea52908d6434951bd12c2bfbaff3b7e","sha256":"ff63b8ecd5b681b2e0a3d2cff1a1d327145839ae919ac0f7d025857d61656992","sha512":"1333809c4c3e8fc3270763dc4fbecb8f5f808ca657a9518428535a48639468581e05740782ee9af1e0b6db0ac359bf9e89a967cf941d919a94ad9be95a2dc071","ssdeep":"768:9PTkysWeomEy3WouE7U2vCRilIf/QODRMbZA0M3e3TZWeYEG6A6NAHL:9PTfPymLyARJhVAA0MO3TZXYBHL","tlshash":"ed23f12eaf46e09b6913de65cdf10081c417d6c7d49c2c35fc9e8c39a6355b4d8aab0e","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.696998Z","times_seen":930,"resource_available":false,"data":null}},"time_used":7384,"timings":{"blocked":7161,"dns":0,"connect":0,"send":0,"wait":212,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/js/member/captcha.js?20230919","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.196Z","timestamp":1788355868196,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbet.tv","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:EA:E8:BD:56:80:50:46:DE:82:01:DF:AB:3C:EE:D1:E9:FD:FD:3B","sha256":"2D:C3:6C:DF:B4:22:76:B8:FA:87:AC:DC:E9:50:CA:C1:AB:79:E1:85:2F:F0:D9:00:C9:1C:D5:34:FD:33:A8:B0"}}},"request":{"raw":"GET /js/member/captcha.js?20230919 HTTP/1.1\r\nHost: manbet.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/home/register\r\nCookie: PHPSESSID=8nabcd5c0rr1k9pbsio8fvre03; _first=false\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:08 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nLast-Modified: Mon, 25 Mar 2024 05:13:15 GMT\r\nETag: W/\"660107eb-d83\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:08 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 33dc367b72b435b51dc516ddf46d9575\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":3459,"size_decoded":1433,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"af5c80b7be75a99af8d3c1f9f9329718","sha1":"04cbc723e1eb8788a53197e191c70d1cdaf4bba4","sha256":"fe38dcb25afd6157d938da2bb21b229bb8660bdf2894a62341300998317ea1b2","sha512":"21c669b0cc023eba1b4158be72285261e85ded3790667447784871902eb10171faf60a6a5ce44de43dc8a64c7e499169e554e604f9637fdbe33bcc84dc022f1c","ssdeep":"","tlshash":"7561a929e4b241e13caf386b0a2f4d40e5618013b64eef667d1c46d0af859fa016bfdc","first_seen":"2026-03-04T13:33:41.511679Z","last_seen":"2026-09-02T13:31:50.697789Z","times_seen":52,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":169,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/icon_mobile.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.436Z","timestamp":1788355875436,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/icon_mobile.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 143\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nETag: \"62d84dd9-8f\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: c96f3cebc09bf3b21d3c8aabe4b78cb4\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143,"size_decoded":581,"mime_type":"image/png","magic":"PNG image data, 15 x 18, 8-bit gray+alpha, non-interlaced","md5":"9a413aaa3c056af34c80628bee9e4586","sha1":"a676a5b3e90762c8c4a9314985e9abf2bad95666","sha256":"5aa5f649a8a53a15e0b65385149db1ed4f7b6286ff043f5fd96445173fc8d6d3","sha512":"ce054b7ace97a2c6922c028af0a5501b442ce7c10110ae85e5df72a542355e9ae5cc0a51b5ec6d9d577517051b30378466cbc61d9830542d47fbe36b04c440c1","ssdeep":"","tlshash":"76c08ce12a204a28faa603a22a3811d0f820b2782929474800284837401212711ea6c7","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.698588Z","times_seen":970,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/icon_live_channel.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.442Z","timestamp":1788355875442,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/icon_live_channel.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static-content-t.mpdulhtmburd.com:9587/style/main.css?1788355867\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 2400\r\nConnection: keep-alive\r\nLast-Modified: Thu, 14 Nov 2024 05:04:35 GMT\r\nETag: \"673584e3-960\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 890f2cdd67aff668088db838f7ba7ab8\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":2400,"size_decoded":2840,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"da69e30e16cfe1ddbf85e3aa3642b21a","sha1":"8530f19327891df0e585355279ce85507e3ffda4","sha256":"c74d62e601ba04d4d92df4ef116934762c23316bca9f65dbd2c2b4b6e73fd431","sha512":"3bf68ecba7a87746a369e9e3d69422cdca616c6952716c27ae50528aaed987ce69a1a8d81b2d327be14914cd7f567dd0c2bef5075eff527cac9e9fd7cd091bfd","ssdeep":"","tlshash":"17411a95bbdb6a13120982a620fe6002ad210800d9f2bd6538db4c733ce07f21964fed","first_seen":"2024-12-13T19:22:27.987299Z","last_seen":"2026-09-02T13:31:50.699391Z","times_seen":722,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":118,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/fimg/i202210fdd1e22495f9404b8debf0afdaa416b1.jpg","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.458Z","timestamp":1788355875458,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbet.tv","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:EA:E8:BD:56:80:50:46:DE:82:01:DF:AB:3C:EE:D1:E9:FD:FD:3B","sha256":"2D:C3:6C:DF:B4:22:76:B8:FA:87:AC:DC:E9:50:CA:C1:AB:79:E1:85:2F:F0:D9:00:C9:1C:D5:34:FD:33:A8:B0"}}},"request":{"raw":"GET /fimg/i202210fdd1e22495f9404b8debf0afdaa416b1.jpg HTTP/1.1\r\nHost: manbet.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/home/register\r\nCookie: PHPSESSID=8nabcd5c0rr1k9pbsio8fvre03; _first=false\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 284018\r\nConnection: keep-alive\r\nLast-Modified: Tue, 11 Oct 2022 03:04:35 GMT\r\nETag: \"6344dd43-45572\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:15 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: d53031b2821186a683c13b715b4fcaaa\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":284018,"size_decoded":284525,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1920x1005, components 3","md5":"0b9750ad0104aa2243554d5b8007f99c","sha1":"a4fa7203acf5d89e0a8bcf976ed5d7eba62f30e4","sha256":"d234723f8ad984edd04a5dac23778f6832fdd954187461b8b09d46f542dd41e5","sha512":"6cfbf1045d4ca6a956f1bfdbbd39ab5fbbcc01a64612269dbc69b0d663f37ff8b289a657542ad0e00f54e8533e025306c5810ad6fff71782b65f4afeee65ca25","ssdeep":"6144:r+Ywcq6S74AwBaFtWcSnU0aOe+shTOMLO3jpT9a4:r+Ywcqp54aF8pU0cTOMLO3jR9a4","tlshash":"fc54223006e0e7531a7012f36f579fbb5e33a37d68a5da0c69ae168f4c4a35426f204e","first_seen":"2023-05-05T17:24:19Z","last_seen":"2026-09-02T13:31:50.700292Z","times_seen":893,"resource_available":false,"data":null}},"time_used":793,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":172,"receive":558,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/kz/gp/v1/halls?_=1788355875366","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:15.764Z","timestamp":1788355875764,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbet.tv","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:EA:E8:BD:56:80:50:46:DE:82:01:DF:AB:3C:EE:D1:E9:FD:FD:3B","sha256":"2D:C3:6C:DF:B4:22:76:B8:FA:87:AC:DC:E9:50:CA:C1:AB:79:E1:85:2F:F0:D9:00:C9:1C:D5:34:FD:33:A8:B0"}}},"request":{"raw":"GET /kz/gp/v1/halls?_=1788355875366 HTTP/1.1\r\nHost: manbet.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/home/register\r\nCookie: PHPSESSID=8nabcd5c0rr1k9pbsio8fvre03; _first=false; JSESSIONID=5221949BDB250AE96EBC7C32F9C784BF; _vcid=5221949BDB250AE96EBC7C32F9C784BF\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:16 GMT\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nX-Powered-By: Express\r\nETag: W/\"22ff-f8HAXx9d5QIuZtngbOHRYg\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nc-Type: df\r\nrid: e07cb40bcd2f58b9b95b6bdc1348e779\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8959,"size_decoded":2238,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7fc1c05f1f5de5022e66d9e06ce1d162","sha1":"a3a3f144d32ebc2c6feea7e4cea185ffb1ccfc96","sha256":"ded94a9403419642ebe3a4d35320ee22e0eef93af918e81ca05e1e243ebe7c13","sha512":"fdf39173ba2020f59e3eb92e74b71c58b976a801ae10c0ec736815f9f14a527fdb08f5aaed0f5a66f31d95ff8582171097b0fe6336bbeb749b62e9f9fab26e91","ssdeep":"192:elqdqzqBDqTOqJJqxqJGqzq/qKqjqKqz0qIqwtqSqAqDqbI1qlqhq1EqeqZ9qvqF:ebN8gCG","tlshash":"780254d81f47fc58ca5f5d212eab5ba927d97942f8cd2ec8c2cc4d2000946d2a30e73a","first_seen":"2026-08-23T03:57:23.482717Z","last_seen":"2026-09-02T13:31:50.701158Z","times_seen":5,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"manbet.tv/js/captcha/geetest.js","fqdn":"manbet.tv","domain":"manbet.tv","tld":"tv"},"ip":{"addr":"45.200.66.203","port":443,"asn":133847,"as":"Anpple Tech Enterprise","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.157Z","timestamp":1788355868157,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbet.tv","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"87:EA:E8:BD:56:80:50:46:DE:82:01:DF:AB:3C:EE:D1:E9:FD:FD:3B","sha256":"2D:C3:6C:DF:B4:22:76:B8:FA:87:AC:DC:E9:50:CA:C1:AB:79:E1:85:2F:F0:D9:00:C9:1C:D5:34:FD:33:A8:B0"}}},"request":{"raw":"GET /js/captcha/geetest.js HTTP/1.1\r\nHost: manbet.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/home/register\r\nCookie: PHPSESSID=8nabcd5c0rr1k9pbsio8fvre03; _first=false\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:08 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nLast-Modified: Fri, 31 May 2024 03:04:38 GMT\r\nETag: W/\"66593e46-3428\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:08 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: f25d3e1ecd0a958945e029c5a6eee95e\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13352,"size_decoded":4096,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a7b340e01f62559af09e1e18798703de","sha1":"924f9233a48936eee0871498e0f5ed2bfd57c350","sha256":"999339952d10e2be3c416dccb51821a164038c2c871583d5a2feb20c6851021a","sha512":"050929fa90d7dd6757dc2114dd6137b71369492b8f93c547742e1a5ee1bf35e6a588346b03d4b0197e5993510a7f5ee63ba198daaf8574f34326c37307f994cd","ssdeep":"384:OcB6Y6+HiaWSXauU058DIml6yDwFJQqVqp:OcB6Y6+H9HII22zc","tlshash":"7552114d68f7609385a3b428ca9fa114b9788a57002ccd85bd4ce3589f9447c9bbbfdc","first_seen":"2026-01-06T02:22:39.991269Z","last_seen":"2026-09-02T13:31:50.702051Z","times_seen":59,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"manbet.tv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-content-cn.mpdulhtmburd.com:9587/js/jquery/jquery.carousel.js","fqdn":"static-content-cn.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.162Z","timestamp":1788355868162,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-cn.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"ED:14:2F:4F:7D:32:46:7B:F5:03:5B:E8:4E:81:9D:E4:22:37:56:4B","sha256":"20:32:58:7D:65:C2:04:76:B6:E1:06:D0:86:3A:26:79:16:59:62:35:25:C7:A3:B0:3B:40:A3:9F:03:4F:4D:0D"}}},"request":{"raw":"GET /js/jquery/jquery.carousel.js HTTP/1.1\r\nHost: static-content-cn.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:11 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:52 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"62d84dd8-5e3a\"\r\nContent-Encoding: gzip\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:11 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: a754d83a4ad2f683c4eb0790ee723728\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24122,"size_decoded":6378,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"1552106a3e80457c7c75722b7372d303","sha1":"32ba62ff7b3590d3325d159141aa50a1db5802aa","sha256":"52947c9e6ac3e2f45c2b2a19802a91eeb75dc70902bf4bd87419a6386300848c","sha512":"e6b3f5bcdb5cea57241c6ca4f3c235a8ec04fe3d4baf75e2e33d67fa1ae4e094c08072772e3bc6a87dafb81e94a6ab81f38c670394f4f2a533ca5090e5879630","ssdeep":"384:MnvnA+MrUQ5x1jcvHGmUYnkrVdINO4XmfFmKK2vif3UE:Mn4+MrUk1j0UwNO4XmfF7K2vAv","tlshash":"50b2941b31a32172597b72298b9f5109333190979208ee507cbf8b147f9527897f2fea","first_seen":"2023-03-07T13:00:36Z","last_seen":"2026-09-02T13:31:50.70288Z","times_seen":853,"resource_available":true,"data":null}},"time_used":3873,"timings":{"blocked":-1,"dns":82,"connect":2,"send":0,"wait":211,"receive":0,"ssl":3574},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/nav/sponsor1.png?1","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.167Z","timestamp":1788355868167,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/nav/sponsor1.png?1 HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 8439\r\nConnection: keep-alive\r\nLast-Modified: Fri, 23 Jan 2026 04:32:15 GMT\r\nETag: \"6972f9cf-20f7\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 002bdd43bcfefe165ed256ed0cea75ef\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8439,"size_decoded":8880,"mime_type":"image/png","magic":"PNG image data, 292 x 80, 8-bit/color RGBA, non-interlaced","md5":"65b6723769cef37e0c6e5850c7137bc8","sha1":"d5258baab5f5cdaa29b6853558f16dd6b6435d00","sha256":"161ead6af798bef1ea9b6091a24df2b0f741a0ee0415f2abc11a4d115e0fe874","sha512":"3eadd356a2de604911fbdb8559dc65c517403c7fb09996464d92ac568240a0ab4f4c64be689fdb42d00ef0e285668654504522f6f960c8619074b27cc3981314","ssdeep":"192:jrGlvpl6wAguuMUgTy7s135bVNZFPkk5Ne3AY8TBcnEq3zrGa:3GlpJKuMe7A39VDlkk5VY8TB6zaa","tlshash":"7f02afbd8888c53efc1e8d6c62b06347bc3a71ec84398133465ccae6516c3a4e509f6b","first_seen":"2026-01-23T05:01:52.476079Z","last_seen":"2026-09-02T13:31:50.703854Z","times_seen":288,"resource_available":false,"data":null}},"time_used":15231,"timings":{"blocked":15014,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-content-t.mpdulhtmburd.com:9587/images/nav/promo_08p.png","fqdn":"static-content-t.mpdulhtmburd.com","domain":"mpdulhtmburd.com","tld":"com"},"ip":{"addr":"172.65.201.65","port":9587,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbet.tv/home/register","date":"2026-09-02T13:31:08.172Z","timestamp":1788355868172,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-content-t.mpdulhtmburd.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Thu, 25 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"08:AF:00:CB:92:B6:BE:B5:40:F9:51:AD:68:2B:F9:92:67:27:D1:F2","sha256":"96:93:27:91:46:B3:25:E8:7D:0E:78:01:76:DA:B5:A3:F3:1E:D8:3C:8E:BB:26:92:FF:A9:DE:CE:7C:76:C5:92"}}},"request":{"raw":"GET /images/nav/promo_08p.png HTTP/1.1\r\nHost: static-content-t.mpdulhtmburd.com:9587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://manbet.tv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 13:31:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 14696\r\nConnection: keep-alive\r\nLast-Modified: Wed, 20 Jul 2022 18:47:53 GMT\r\nETag: \"62d84dd9-3968\"\r\nServer: gocache\r\nExpires: Thu, 03 Sep 2026 13:31:23 GMT\r\nCache-Control: max-age=86400\r\nc-Type: st\r\nrid: 6b214aa7e6f1d8b2143dc6ea0d27166e\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":14696,"size_decoded":15138,"mime_type":"image/png","magic":"PNG image data, 200 x 100, 8-bit/color RGBA, non-interlaced","md5":"ce8af7d88dfe5a8cc857666523c01fea","sha1":"370b5c460e31540ff1c8685fe2188adfc8fe3641","sha256":"7ba510715c55f7c648e19a82b9690f58ac0136c370be907bcce569c08bf03a74","sha512":"b9764ef8173289fa4b4214274745843e1cbcdfbbb7b1cbd5d1ee9e00beb3e0c0410b714bc466bf7f9bd3ba7515cb562460b1c175e03c25900418ea4bbfb68679","ssdeep":"384:XJXE05RJmFuDKsllhSHwRJ5GotcrxjYvFx:F35TmFuDKsRXurdI","tlshash":"1e62c0bb453095b578e6b81e0cf21a8b37b94fadf54e18665202f0ef60969c38e1852d","first_seen":"2023-05-05T14:06:31Z","last_seen":"2026-09-02T13:31:50.704789Z","times_seen":943,"resource_available":false,"data":null}},"time_used":15672,"timings":{"blocked":15440,"dns":0,"connect":0,"send":0,"wait":220,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}