{"report_id":"9a21dabd-1b51-46a8-a14e-9bc4f228e057","version":6,"status":"done","tags":[],"date":"2026-05-25T23:14:01Z","url":{"schema":"https","addr":"main-bet365.com.cn/","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"main-bet365.com.cn/","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"title":"Bet365官网:尽享无与伦比的在线博彩体验-Bet365中国","dom":{"size":52988,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5205)","md5":"a0b999d3aa66313a35c22ebc3aaff2be","sha1":"4ffbe16bb372e2bd62a317a3ed031ad138413dfa","sha256":"cd721e6a29d5efe241e2fed9b73d834f7583e266a9f9ed67579dcb7d44714f7a","sha512":"2009e350942f644ac846a9a64713538a6a0cec6ef664cdd5ab398493f216335aa8c45fe44fca260f1a40caeba61e65c85bdafb7400213ca079b5953649ea0396","ssdeep":"768:pwbbLvD/0x/X/IF83Y5oEKxqt3kfgxWiJcv7urWMIviuxcahq6u7U1+Na:2j/YIyYkox3YIWMCiicYqPYEa","tlshash":"4d337dba0372aaad0c1340e8db84a11d354c47cfb13f8b44bfae9959bfddea54145682","dom_hash":"domhash8f20b5f57c20ba5aacf3ae3fd8101314","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"main-bet365.com.cn/","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-29T23:14:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"yukuuz.com","ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-04-21","domain_rank":0,"first_seen":"2026-05-22T17:17:10.969269Z","last_seen":"2026-05-22T17:17:10.969269Z","alert_count":0,"request_count":18,"received_data":1758043,"sent_data":8198,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.matomo.cloud","ip":{"addr":"65.9.46.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-09-08","domain_rank":124973,"first_seen":"2019-09-27T14:00:38Z","last_seen":"2026-05-21T09:50:45.132483Z","alert_count":0,"request_count":1,"received_data":155649,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"main-bet365.com.cn","ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-16","domain_rank":0,"first_seen":"2026-05-25T23:14:05.222469Z","last_seen":"2026-05-25T23:14:05.222469Z","alert_count":88,"request_count":22,"received_data":1112042,"sent_data":11404,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-24T22:42:04.857446Z","alert_count":0,"request_count":1,"received_data":234026,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"node91.aizhantj.com","ip":{"addr":"43.174.27.154","port":21233,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2024-07-29","domain_rank":4549453,"first_seen":"2025-05-08T02:39:02.894071Z","last_seen":"2026-05-24T05:33:47.072506Z","alert_count":0,"request_count":2,"received_data":36504,"sent_data":1143,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"9170.matomo.cloud","ip":{"addr":"18.195.235.189","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2017-09-08","domain_rank":0,"first_seen":"2024-10-18T01:02:04.432395Z","last_seen":"2026-05-16T10:37:58.929626Z","alert_count":0,"request_count":1,"received_data":230,"sent_data":940,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-24T22:26:02.229202Z","alert_count":0,"request_count":1,"received_data":326064,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"main-bet365.com.cn/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-22T09:18:23.040863Z","times_seen":403325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/js/bootstrap.bundle.min.js","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","size":80821,"data":"","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-07-22T02:31:29.07742Z","times_seen":2714,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/js/swiper-bundle.min.js","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"21b78ba7133b3d67cf8b09cd6a26d386","sha1":"ea59f37b232db6dee2694078bf21e153a09bacdd","sha256":"6f9df49fe12f77b66daba876cb33b7090b2443f570a2a4b9541cddd705440aa5","sha512":"dc48bb38f168f37930ddc3db0cb78b867fd817cb5907b56cf2c7e58b407f2847a4bab78be5ea2c0deb216052020afb782bc8b4c948a5fe52b77128a27365a392","ssdeep":"1536:TIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVuZ:0JCN+TXD2BkQZFU9tp8Mj0k95h5cpnv","tlshash":"02d3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","size":140562,"data":"","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-07-22T08:55:45.135427Z","times_seen":5466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b96d49915b8d1766de1ebd3385890c4","sha1":"39ad906d90e05595fa63d487431da59115db5fd3","sha256":"d2f74c10d99ad76d94d7bb7a880683baafa4833381d66af826976bbcc71dd008","sha512":"213de6c1557d284a22ce72d74225e340bbf4b15395ee46677f33e52c1e575d4142f69562cf3025a11376f7aaba748eed8032020e059c009e1b1be8ae1d0ad0fe","ssdeep":"","tlshash":"16f041b33c89013dc36202613333b2493036253e340abc22f50d186b2a90e5a106b50c","size":587,"data":"","first_seen":"2026-05-20T07:25:49.902479Z","last_seen":"2026-06-07T01:46:45.308139Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/?agentCode=16pMv6h2","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"45688764c4bf7fd16b629d6372f6f9a5","sha1":"f77031721b1d843eca820d4e3851c9a0a670f6b7","sha256":"bc681631e1dabe44541dc71f1d91b81efef49e39c3d38ec046912abe8d6ebf5d","sha512":"a3733b87a4ac723ab60696151a43f59c8dd9bf54645af481bebb219dc2118b7b57f2eefd62162630cb29d0d55063d1284d36c9a9aa2d1710e91d0704d8218939","ssdeep":"","tlshash":"06117d8c0543a26723726155ab4ab2d41176008f2409e854bd0d4f40afd8e2fc597fd2","size":1106,"data":"","first_seen":"2025-11-05T08:51:06.295199Z","last_seen":"2026-06-07T01:46:45.304773Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/js/tailwind.js","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c193259f53fb33856681902d899d0b04","sha1":"539d13d4016170493357b58e7efe676b700d31ba","sha256":"78f70dbdf61859c3a382c96c27880fa5737216af6d491fedf73a3356ccab05bc","sha512":"69ab3a80f97b0965712cec07246ccd9542ff3c6f8d1152047494395240ac99170748e90979ccecb8c90f3ab801cfffdfae075f42a987b457535b14f5d03d2cae","ssdeep":"6144:mr00+lSrr7p2CDj4cUlFLa6kLwSKJXimTqAcUm:08kfelFLa6kLwSKdW1f","tlshash":"00743baa7396753243eb91e950ae1142f37d5a38500c44acf79cd8da3da4e4850fbf3a","size":363693,"data":"","first_seen":"2023-10-25T18:01:37Z","last_seen":"2026-07-15T02:11:50.433765Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/jquery-1.8.3.min.js","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"69ecd99e201c97170d8b1735877c5c6f","sha1":"acbbbf3197c7ae19982ce6ef9ff6932593ea85d8","sha256":"ef45c2b4676161897f63a84bddd4a8d7e33e98d5477e8bda3ca8173b222b8a9c","sha512":"3d97dca1cf3e459586b63a2cf49d9bafd54ff56001bc44d3963f2bf2ae1fc0ffbd260aea09986e37ebb00e969f4b95502f37f654fd97a49a40ae0a97a720ecb9","ssdeep":"1536:ln6I5cEDlV0YjGaWQb6u6xvkT4ys33lt4WXgVInEG0vd007pNTbyT+SAy+uu49Jg:Z/Yi6Jnys3PN+RwFj2ShosS9","tlshash":"9293f7edb3c6717243ab31a910af650ff2366869284d8410f138e8f4bc75a499277e7d","size":94213,"data":"","first_seen":"2023-03-07T01:06:41Z","last_seen":"2026-07-19T23:45:57.872701Z","times_seen":1377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/swiper-bundle.min.js","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5363dba1dc13856b5d7bdbbf1b5b765d","sha1":"4efa3269598dead6df770ef3ab0e8c4129324c23","sha256":"3938213301426c8e6003facc81cd920028e41ce355f2c66b1df23a8c597eb131","sha512":"fc90fb192a2b8d306db2a0952667523f9d9c729089a677239de516913ae07acfcb9db8ac12d0c1a49139f2b559404a8ff4856bc6e1382799a5876ddd12617e6f","ssdeep":"1536:pKJqLfGmNQ2X8NFbauBE+UjF3jrMtOBlxvHlik3+ckNkeyGCjmFiBnyOlV/TDUr/:EJebsNQ9ik3GKBnR/TDU9chHdN+ui","tlshash":"6fe3e789a221b67646e3169b93e4c211b3b54540b80ac4f470bd4c9f597ec9c13feefa","size":154087,"data":"","first_seen":"2025-05-23T16:19:11.217273Z","last_seen":"2026-07-22T08:54:37.501516Z","times_seen":1469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/js/home.js","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16c93ef01acd14ec64c07020d638253e","sha1":"9c7b9d1a61977675c7f128bf2e27093d3cfe37f6","sha256":"f0795e9620ff382d585e15e40f303b394863fc5fa3dbdecd140adcbc4e51ffd2","sha512":"218d41ff60e128ff13105f9d376cfac1b80401527884da7b6179bab1fe8e9aa9e5959873bc5385798c8a5c6fb7aedce8e68b17112833cc16c096e0dc214d35ea","ssdeep":"96:6P7fgtAVMsSMCM1vUrp8KtQJQ1l/2o3RV0uRC6v6qyS+KQkIF:6P7fg+VSVAvUr2KaG1Zd3YuRriqyDKQH","tlshash":"91c1551a62b42433447775bb97af57c477212087b8c6ec393dfcc6080f845aa59f1aea","size":5802,"data":"","first_seen":"2025-10-09T23:37:04.756251Z","last_seen":"2026-07-22T02:31:29.092465Z","times_seen":1301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/?agentCode=16pMv6h2","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e54f7d0a252bed03ff441ce8357a0eb","sha1":"0bd0c73338a1e7dbee1c0f6f6086fe6979be1851","sha256":"7ff0fa3de9fc16e03210fdf2c9c88ef376e53c96b3ebdbed5528f1fc2930a3f9","sha512":"b6b8b81def07a94ae7915e8e549f86d7fa27f00c65535c150e7bd180358cfeb46d9a31bfa80ae4d87dad9d4ef957832a135636cf6892c729a3efe08eb69f5b78","ssdeep":"","tlshash":"6fe02b1f0916ef3f223b22646db18f1eb6cf252d9b8480529687c0283455d9941aa34c","size":408,"data":"","first_seen":"2025-11-05T08:51:06.298535Z","last_seen":"2026-07-15T02:11:50.473212Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-07-22T08:32:48.45787Z","times_seen":121739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node91.aizhantj.com:21233/tjjs/?k=47z438qeo6x","fqdn":"node91.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"43.174.27.154","port":21233,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"21b05ff8c235bb912dbd67f3bf7b08f3","sha1":"2dbf6d166a998ee5b923960c0f44ba7d8f30b662","sha256":"9056e3a1397086612c2551da66e3f80b939836dc2a27fff2e0be8c86975398bf","sha512":"beb535b539d0803d9ed0a8b7696e375ba0e5027d5e28639748bc92c8c072cdffec303915b13b0c562d4db69a315fa727dfcda6a4a71d9c83140fae073a5dc69b","ssdeep":"768:3kS5kuNczE4rDE93/wrWpWdk2pByX5R0N:0SOyczE4rDE93/mg+Bk5R2","tlshash":"e2f2e7d532ce2536a27670a9d95ff50cf8b9aa1437d9ac44590cc0c46d208ba83ff9bd","size":35463,"data":"","first_seen":"2026-05-25T23:14:09.506915Z","last_seen":"2026-05-25T23:14:09.506915Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/?agentCode=16pMv6h2","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f114b17a5daa81b18169b2088322c8c","sha1":"34440ded92dfcff5167acd9f0056fbbad3e1cdde","sha256":"808abf6d686788b8a31f5fc551e7f7a370d545e0db8e884ddaa53c47c8503596","sha512":"1255695bc30baa65ae501ebc3501a5bbf69bd591402b5fd1c4465fa594f8c502aecd4ccd83f3e336c2a6d9ebdd71b52c3c8003e7b7983f1d423106d31bbf1329","ssdeep":"","tlshash":"e0f0f18f75da14342d4b90375b3c8e243112325ab1844033bcfc88353f582ee0966bf8","size":493,"data":"","first_seen":"2025-11-05T08:51:06.296202Z","last_seen":"2026-07-15T02:11:50.467843Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/?agentCode=16pMv6h2","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"82dfc9b9fa007527dd943b6f0fecc8f3","sha1":"b38695f79d95bac460656d4895dea88ee8828af9","sha256":"8a2e4321a6c0b5c90c1ea9c627c555d8967a02fd7f6e4a6ae181d2748de7751e","sha512":"95f1bcea87807603286a14a39f38c569284a6b05b43af691de00cb8ae5994b200ec81018912cc7a6ec6cd1a12c7acd460deb291ae8744502fa3090d57752de1d","ssdeep":"","tlshash":"2a11f18e1073d06e1bb322a56b5f7318712311d73208c894be1c9b00afa973f96637da","size":901,"data":"","first_seen":"2026-05-25T23:14:09.530615Z","last_seen":"2026-05-25T23:14:09.530615Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/?agentCode=16pMv6h2","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa62bfced589c8b384b01b6c48eab4af","sha1":"974e769522696dd6c397704abddf3d68d45abf0d","sha256":"060858016708de48bcdb7d11c2fed7e1dfd7841bb8abda0a8e8d7bb45b381a0b","sha512":"216d261712c2e12db79e58220d5b0ed4e576738892489e8ac0e96c80f4d8abc21ea4eb2368d27ecff54bc7b922f657a63faa487cff942f017b2851976a63679c","ssdeep":"","tlshash":"2d31c55958f363a2ce63f1b987ab610c75a5d14b3904d5543c4c63a08f2873ce7a3bc9","size":1458,"data":"","first_seen":"2025-11-14T12:52:43.513003Z","last_seen":"2026-06-05T00:23:08.429406Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/?agentCode=16pMv6h2","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"61545b06e8445c0945c431557f3d9bf9","sha1":"fe68ca7b92a7d3abe6147fe7e5fbde85165ce975","sha256":"2bd59deba42847114aee5beaa7c7a06918b3ec58307a2f15433166f669911de6","sha512":"5a85d8490ee5131183709e4f31742915d488299e1b8955e51e224c91f77377a14a814d27c7b8152946c71bb65702a462bf1c2fb252791b38f00097c5a5dc7b9b","ssdeep":"","tlshash":"94e05b44217550615a139c20056e5242953011476977bc79798d8a85ef1e32c82b7ed6","size":393,"data":"","first_seen":"2025-11-05T08:51:06.301947Z","last_seen":"2026-06-07T01:46:45.308608Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/qrcode.min.js","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","size":19927,"data":"","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-07-22T08:54:24.917864Z","times_seen":65513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-07-22T08:32:48.45787Z","times_seen":121739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/fun.js","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5994db0ce9ca9fc02ab9a236dc3c5867","sha1":"037803b5f1e9f86a73d71f5ef5501c36d62d4edd","sha256":"b98f7499cd119658a1a38209b1c159c284f996dbef537e3929d61ce237e8598a","sha512":"4dac064f1d11b630cf840087ded8f7c113347397c125368c9120f5f3491caf14466952b10c29e4fe2b3f39dbfe326e6b1825f21ea7036ffb6b4a2c4b7c6f1a51","ssdeep":"","tlshash":"aa2142395893a83942328464b6a7c3483075d025fb47ca066aaeafd44c85f7488bbcdc","size":1278,"data":"","first_seen":"2026-05-22T17:17:17.21442Z","last_seen":"2026-05-25T23:14:09.5233Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/js/main.js","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"758f026db1bd5e1c8aca671476665f05","sha1":"5a408c21f971c0ef5c2f75b0acea353370556661","sha256":"0ffddbb071a1f28fefc96300cb3f4bf173fcdb571f823e4ad161bbdb570bbc0f","sha512":"a1c58b5671584a5140063e91ca8bc00495b12a26aeb484529bc34066bdf26e91d71ee94c5b3e09845d3a49c2369e99daf9b4b702bb6c6ed22d3d1a926987e499","ssdeep":"96:hyKUgZKCk0LsVhXK7H2WK4bKbuqlQ0af6nUymKHFKeQfWKRMk0E16Ln0:hyKU4u0w3X9W1b4uqlQ0afUUymOFEWgv","tlshash":"d6a1613e11b510b48137a051e7de6b49763a019b3004d995bd3d8a4d3fc0ee929f1af2","size":4760,"data":"","first_seen":"2026-05-20T07:25:49.897038Z","last_seen":"2026-07-20T14:08:05.220896Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-543HN88B","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e56da6ffd5ed79aebed4862095376ef9","sha1":"6c2d67fbae9a7a7fdbf283ea96dea9c5f3981f99","sha256":"6593c7263b2d9b566c30bde727caeefe3ea1f78ba35218cbbfd4e2ee8b55181b","sha512":"3961269ed9c74dd30a0214ec7e1dd16748710df247458caab4aa84ad160506583359aac38a203632f8ed8d49b4c105dd590bdd895029ea9390dd8735ce50bd64","ssdeep":"6144:fDpDlqcCcAnCa5qjxndXRFqGFCWUBWrDP:f1CcAd5a+BQP","tlshash":"3464e8cdb3d6b4624393a878903f114ba23a79d2f84cc898f186d8d42e746694277f7d","size":325414,"data":"","first_seen":"2026-05-25T23:14:09.519408Z","last_seen":"2026-05-25T23:14:09.519408Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.matomo.cloud/9170.matomo.cloud/matomo.js","fqdn":"cdn.matomo.cloud","domain":"matomo.cloud","tld":"cloud"},"ip":{"addr":"65.9.46.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bc993f46088bad8457441079ec1f93e","sha1":"7d04ba6473d6b79a7337daef63e1f3b66ec27fa4","sha256":"af0145825a50ccdf0e95b0fba01d3e9694132465259130d9c0e06b7c0f471797","sha512":"866e7eec70fe832f760568cc8b4591c393e42c181303d6ac4ebaca72bf9157c9d19dc8c500fc86bdbd604553017c0c66421e736b1e611146ea4e031e59197eca","ssdeep":"3072:AT+Z2fucXYy1PGJ9d1QkNw0CN1Iy/Bi4jZdV50tqv:ASUucfBGrd1HOmoBi4jZdV50tqv","tlshash":"59e3f88a72c2753a86eb60b5543f210b737a9daa2448c0b4f625c4f53d78e1e513bf78","size":154949,"data":"","first_seen":"2026-05-18T13:11:50.243772Z","last_seen":"2026-06-09T19:56:27.161292Z","times_seen":690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-07-22T08:32:48.45787Z","times_seen":121739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"364a691add557b9c35a9c9ce6e1eeb5d","sha1":"ea7396a5bdda521f35dc0dcc5c3b049b3f109fda","sha256":"57263c32b4be1720e2942064f47f2c52a29ec0d923fba8630698460f861d9647","sha512":"78ec0b88a45aa51320aeda40c18a3855e5ed1ac8e858bb414a4096798ca59e0a1af996cf5423b71de49580c1f43671efb439fedb6bc3a50841c9b98fc5b3fd6a","ssdeep":"","tlshash":"45c0c0731016a44c0d20c07030b8094c41014914f703d5b03de13d5110cc0f905d46d9","size":179,"data":"","first_seen":"2026-05-22T17:17:17.237411Z","last_seen":"2026-05-25T23:14:09.533197Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0a3a0b592b9c285e050805307cee87c2","sha1":"125a168e24b2bd38aadb84cbb5f87f316b073c41","sha256":"aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23","sha512":"4097f05a9ce819914160aeba71fa11524f6b291a39b7c948509d756318b600934f1d195980df66bc7731e327979135bfcbe0e9ff3758d779a72481ed623cd3a5","ssdeep":"","tlshash":"a34000000000000000000000003000000000c000000000000000000000c0000cc00000","size":6,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-07-16T08:24:57.881334Z","times_seen":242448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"78ac2aa5ccc29c90a345c90aab40b442","sha1":"cac604932faa4add2955602b41de8a8bff362ebd","sha256":"53db339b0b80637f13dfc63813d7366c899cebe0db896602886ece619163d82e","sha512":"5c76abfa8f4091277643f4dad57c37d9eb71d33c9691f0e85bc82ac5f303d4e3da4937cbc2354e4d5c5d0022746d7c06f975f209067df2cefa55bd3827d892a7","ssdeep":"","tlshash":"31b01242d0575c0e0170c236ec485418474d4a7d9fa708010dc6ab5c0c99f1405e549c","size":103,"data":"","first_seen":"2023-03-07T01:06:53Z","last_seen":"2026-06-07T08:03:11.676707Z","times_seen":13596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"50484e4da7f4f3b9dfeb1bb38c8a5e0f","sha1":"cdb1227b7bf7dfd6921322cf909efc82df479bf1","sha256":"37a1d07ee3837021c9924f90ae09d6b768732d87912f02ef5fcbf3cbd3b55690","sha512":"1e14f73371d92930a7a8d764e1460e942a4c496631cbb7bb34e57f0c828598275200241a401e56b244bc36108047060b1633cb10f8ffe01ee6c2968f9eb5f723","ssdeep":"","tlshash":"4ea01275086394346034895030429a9c610580204315090456263820406810650610e0","size":77,"data":"","first_seen":"2023-03-08T15:51:34Z","last_seen":"2026-06-07T06:22:09.10427Z","times_seen":1089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"374ff9457908b59bd93f3cabab31d8a7","sha1":"a2ebbbe5cae2c2833ca869397ed833ba31a9c6b9","sha256":"5486d8649f3c21c69012528522270f1d016c2fb56b6e090077a2501af48975cf","sha512":"9a0038c79b917a648fa99656872a057c1adb42e901a510bf4c274d839ae5d9d1e9d9a386b0f86a1152c6eed4aefb5dea6af7aace401b0fab9db2e4cee99aa4ae","ssdeep":"","tlshash":"83b01270c45af474d132f0429540cb8f26b8510af7bb5f0d453879e2908e5482cfd6c5","size":99,"data":"","first_seen":"2023-03-11T16:14:26Z","last_seen":"2026-06-07T02:11:50.33563Z","times_seen":3522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"yukuuz.com/swiper-bundle.min.js","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:30.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"GET /swiper-bundle.min.js HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/?agentCode=16pMv6h2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 08 Nov 2025 03:25:03 GMT\r\netag: W/\"690eb80f-259e7\"\r\nexpires: Tue, 26 May 2026 02:13:30 GMT\r\ncache-control: max-age=10800\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154087,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65283)","md5":"5363dba1dc13856b5d7bdbbf1b5b765d","sha1":"4efa3269598dead6df770ef3ab0e8c4129324c23","sha256":"3938213301426c8e6003facc81cd920028e41ce355f2c66b1df23a8c597eb131","sha512":"fc90fb192a2b8d306db2a0952667523f9d9c729089a677239de516913ae07acfcb9db8ac12d0c1a49139f2b559404a8ff4856bc6e1382799a5876ddd12617e6f","ssdeep":"1536:pKJqLfGmNQ2X8NFbauBE+UjF3jrMtOBlxvHlik3+ckNkeyGCjmFiBnyOlV/TDUr/:EJebsNQ9ik3GKBnR/TDU9chHdN+ui","tlshash":"6fe3e789a221b67646e3169b93e4c211b3b54540b80ac4f470bd4c9f597ec9c13feefa","first_seen":"2025-05-23T16:19:11.217273Z","last_seen":"2026-07-22T08:54:37.501516Z","times_seen":1469,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.matomo.cloud/9170.matomo.cloud/matomo.js","fqdn":"cdn.matomo.cloud","domain":"matomo.cloud","tld":"cloud"},"ip":{"addr":"65.9.46.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:31.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.matomo.cloud","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7B:9E:B2:8F:2C:21:F3:D8:CC:C3:78:9E:88:F2:FC:72:0C:FB:68:3A","sha256":"D7:E0:95:8B:B8:35:19:48:30:B8:87:D2:5F:82:0D:1D:DF:65:27:5C:9A:83:C6:2B:1B:9B:3F:9C:32:70:25:3C"}}},"request":{"raw":"GET /9170.matomo.cloud/matomo.js HTTP/1.1\r\nHost: cdn.matomo.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 25 May 2026 19:07:32 GMT\r\nlast-modified: Mon, 18 May 2026 14:00:20 GMT\r\ncache-control: max-age=691200\r\nx-amz-version-id: wMlg7eg5Zs.09i_ssWakMYkvBsft7WTX\r\ncontent-encoding: br\r\netag: W/\"2bc993f46088bad8457441079ec1f93e\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4b86aafda657c1acfe85a28da19a76fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: sSzD_IUnd99xd33GfnZR12d9Stsv09ONfCZf6CUErn5owL88xXGuZw==\r\nage: 14760\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":154949,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2923)","md5":"2bc993f46088bad8457441079ec1f93e","sha1":"7d04ba6473d6b79a7337daef63e1f3b66ec27fa4","sha256":"af0145825a50ccdf0e95b0fba01d3e9694132465259130d9c0e06b7c0f471797","sha512":"866e7eec70fe832f760568cc8b4591c393e42c181303d6ac4ebaca72bf9157c9d19dc8c500fc86bdbd604553017c0c66421e736b1e611146ea4e031e59197eca","ssdeep":"3072:AT+Z2fucXYy1PGJ9d1QkNw0CN1Iy/Bi4jZdV50tqv:ASUucfBGrd1HOmoBi4jZdV50tqv","tlshash":"59e3f88a72c2753a86eb60b5543f210b737a9daa2448c0b4f625c4f53d78e1e513bf78","first_seen":"2026-05-18T13:11:50.243772Z","last_seen":"2026-06-09T19:56:27.161292Z","times_seen":690,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":43,"dns":14,"connect":12,"send":0,"wait":14,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/logo/logo.png","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /logo/logo.png HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 16 May 2026 13:50:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a08761b-12268\"\r\nexpires: Wed, 24 Jun 2026 23:13:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g46i18LLV6Zy6g6%2B2Kt2puvkYE0iY%2B3RzNKZt4QHDSI832hz451w1%2BX8YBMmsqIzzLPBpywRqVbixtR9JYq2CQOv8LWD1csi9E8Q6rCJX6wmGzAiRH26%2FK%2B7A7%2FUja647zGEXaE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0183b1a6d2f56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"344508c028d11c4b8b04083767154332","sha1":"8939102f8e4f5b4a6344c54b70b33918c19cdb4f","sha256":"ebcbba85259a38c3bb15008323bc699497ec21e2d585c2a71a67f05f39649203","sha512":"9cf991b458192f02df5c36b90b65522bf114c984e53064d6012fe1f515c906339623921505fb032bb43c4eb945a8496d98965b104a1fd03160a2bd978fada35e","ssdeep":"1536:N2Z30FGWbueAUWeO1ZmKplOJdWH4tDbR9G+/Ohdv3Db:YZEFZZmhxpoWUDa+/aDb","tlshash":"4d730208b70ce777b526c327686e80b77360328f6572ddc281649229249eb896673f5b","first_seen":"2026-05-25T23:14:09.491381Z","last_seen":"2026-07-01T04:41:00.885388Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":951,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/images/bet365-yule.webp","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /images/bet365-yule.webp HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45548\r\nlast-modified: Sat, 16 May 2026 13:50:19 GMT\r\netag: \"6a08761b-b1ec\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=otoXls120fLdE6pVQU3Sfp%2BCPjdOJWJi6PyAD9651%2F1riaFu5V4pxBt9jmgrJOqQ6mBN7svcuQksTucDKDl1HJblWZRllVTA1L2yrTHloYosCbbGQBhld7ZY928%2FZ1Xrl0XwOMc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a0183b1a6d3056ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 860x745, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"660187d5a8fb11064576f2cbb8e4d721","sha1":"d5155cf7633e6e09b02abfc007425e431aaa139c","sha256":"508728e669fdd350fa348b611a6ef9627100a2b714dc3f30e25581ee89fb0a26","sha512":"15174364d2b4e61187d1d2087066622a35b3c9dc10faf95694c1f870cd30a76aad9144bc2efa3168e2771ed1612a767e5e2cb3ea21d065e6bf06eb92cbee4826","ssdeep":"768:7/yjLjuc+hhqlNrS3UCrlV8xTJLdaFXmruUVewnNwlTkO4MkIGmO6bmma003jR9Q:7aWc+/qlc3hvqTJJaFWe+KlTv4+O6Smf","tlshash":"071302bc1071515ec25fb64576ff62dcfd5218e5479834aa833ee2bf50c4aaa2c720e1","first_seen":"2026-05-25T23:14:09.492386Z","last_seen":"2026-05-25T23:14:09.492386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":703,"receive":453,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/images/bet365-quanzhan.webp","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /images/bet365-quanzhan.webp HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83858\r\nlast-modified: Sat, 16 May 2026 13:50:19 GMT\r\netag: \"6a08761b-14792\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DZlXifzJ3OWAGFv1khXpQ59waG8VhPrMu6N4hUprXkfugLcsW8NYn1OrpZc%2BPqZR%2FB57oaHJQT2oxXITrOnu%2F3vgF%2B9LcOIQnJHynXETnp0a%2FuUwUX7jwr1ntJ5NOCS7Z7xE%2Fwc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a0183b1a6d3156ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83858,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1000x748, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d192954b57200f59ce49f1789a07845a","sha1":"084fc0b32827ba568ad71c3f3890ffb2922623f4","sha256":"aaae54d0364c99e22e5a2ca371d973dc9db3489439ad3751ce7a6dec49c4ae39","sha512":"4db55047b7eae30e908d4771d910c47aa00700ba70b549ae42aaf0df2381524a455d9df414badb7852816aa51f97a7954ebeb20d9a50306ce11a957f01799338","ssdeep":"1536:5DSazBVsz3/ALf1qpZ8WmczIqIgkM9LeAPGsmaKuYUHKhhjHfH:hVszPyQI1cjkMDPzYkKhhTfH","tlshash":"458301a1f2a45e023e63b902cb42b9697fe33500eab07bb7751ceda869d4650954323d","first_seen":"2026-05-25T23:14:09.493287Z","last_seen":"2026-05-25T23:14:09.493287Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":463,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/images/pgmajianghulexiazairukouluanlexiaobaojiemailanglangjiancanmohuomianrong6911.jpg","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /images/pgmajianghulexiazairukouluanlexiaobaojiemailanglangjiancanmohuomianrong6911.jpg HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 25 May 2026 20:36:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a14b2e0-38cf\"\r\nexpires: Wed, 24 Jun 2026 23:13:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JIKGMFP4l2Za8vXDiwnSQNgmfJViDgOZ0crIoPi7foxbFT6rTf9zRafb5RRU1F84KEcNsuE7Vd2sT5wEsnnOOsIaL%2FU95lj5bM%2FrM6xPh7WhaOSEVXT9HTJAkpaEFRyv8jRqh1E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0183b1a7d3b56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14543,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 303x209, components 3","md5":"1537841fec6e311af1295bf1c3c840ae","sha1":"a089e48331f6e7a7e385a784b2e72e29b0398b33","sha256":"e911d5cb1429f4ff929bdbe27530afa08dc0c7961538b71259e3532289e52203","sha512":"fdf71483e6fcd63b3b9cd97ed27576ba6629412d57e2e027e124e80a9af0d329fa4da7222035f1c4fe1465dcaa3935337c27f051e08a1567f0fe516fe6ad8274","ssdeep":"384:LRZOfcHAPY1xD3X5EI746Cezrd1NKTvoHsdYc/JOTVpPdLKYq+khtlP8:6fWLLN5zZnKTvoHsPROT312nnhs","tlshash":"3862d02abea09bbba9933f545944cd224af856506f3842d51cb0f0d1367acdda0b49bc","first_seen":"2026-05-25T23:14:09.494559Z","last_seen":"2026-05-25T23:14:09.494559Z","times_seen":1,"resource_available":false,"data":null}},"time_used":910,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":910,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Wed, 27 May 2026 23:13:28 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FrBiTRkYyN3H%2BvUrcClURg3FghkV8I5jDfWGtOqAJ5XH35T7TXg4q7mL8D8GufsHDzjKmDj7dvCueDuqq%2BunvDEEwzCD0keslS8xck8RoMD9QYQMVqZKKnGBj54tL6JzSq5Plcs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:28 GMT\r\ncf-ray: a0183b1a7d3e56ae-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-22T09:18:23.040863Z","times_seen":403325,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/js/swiper-bundle.min.js","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /js/swiper-bundle.min.js HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 16 May 2026 13:50:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a08761b-22512\"\r\nexpires: Wed, 24 Jun 2026 23:13:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M8kKIfB8pOTngcX1uWCQJ6Wp9fAlm3WziOuwQaLfZmG%2FI5UhcUfinAO3noUpzGigCkypHloTdz51cG4druOVvYHqOk3O1yAFMclGYwZhMth12iIVU4pI7Wlio3OEwYv6aQNY9ow%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0183b1a8d3f56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140562,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65283)","md5":"21b78ba7133b3d67cf8b09cd6a26d386","sha1":"ea59f37b232db6dee2694078bf21e153a09bacdd","sha256":"6f9df49fe12f77b66daba876cb33b7090b2443f570a2a4b9541cddd705440aa5","sha512":"dc48bb38f168f37930ddc3db0cb78b867fd817cb5907b56cf2c7e58b407f2847a4bab78be5ea2c0deb216052020afb782bc8b4c948a5fe52b77128a27365a392","ssdeep":"1536:TIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVuZ:0JCN+TXD2BkQZFU9tp8Mj0k95h5cpnv","tlshash":"02d3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-07-22T08:55:45.135427Z","times_seen":5466,"resource_available":true,"data":null}},"time_used":1163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":936,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/assets/8.webp","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:30.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"GET /assets/8.webp HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/?agentCode=16pMv6h2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 282376\r\nlast-modified: Sat, 08 Nov 2025 03:25:03 GMT\r\netag: \"690eb80f-44f08\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":282376,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"943a7e99c88707a4f5b265b4068e03d5","sha1":"f760cda5ed352bcc0ce05d49f3ade41200f043cc","sha256":"8028608c103516e4e9b94b631ea1b819b30200eca5d455174f8d9f295cea9e58","sha512":"0e8a12dcf41644aab2040033a82974b4c05676bf1728f915427b906aaa29f2ffa407f4df653af71f066efd094fb789c1f3a7ce75678d23e264f564dacc28b23b","ssdeep":"6144:zza/wqWNH3KHGGo9fk9N/4/tBQQkxg2gyhbWf3LDT:zzMwlUBs04lWayh6PL/","tlshash":"2e5412ff85653292f83c20c8150aadfaccb047ba7955015e2a8548b7727c743bc6d6bb","first_seen":"2025-11-14T12:52:43.478308Z","last_seen":"2026-06-05T00:23:08.394085Z","times_seen":12,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":399,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 23:13:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 33205\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.0\r\nx-jsd-version-type: version\r\netag: W/\"38dd2-sjFlHg/Wi72HWBifvTZCxGLTT6Y\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220046-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 1110308\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i3LdLpyyw0Kt5l040n3QAdauuRjqrk8GMZLxlErS0L57CDTyU2hj82EAGtMfcoWyPU%2FHRBqeiW%2Fy%2FHlHPoDkKR9z%2B%2B1Y%2Bcm%2F1syh81VYRi386tVNMHim4RM00scR6QBiv0I%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0183b1a4921b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232914,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"fe7fdfec700d100dc745dc64d3600cb2","sha1":"b231651e0fd68bbd8758189fbd3642c462d34fa6","sha256":"7f1d37f0d90b6385354c2ac10e2bb91563c46bd7a266ed351222ebcac8496c2a","sha512":"b7819649564ed5e0bc04cdf7f5777b529870e6cd7b6bcead219223f2a4718672ae6fa5a8ca19ebc5e08831e02a04f81d646942706d8fad98cc73e5abefcfb95e","ssdeep":"1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r","tlshash":"383481d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-07-22T09:23:56.078214Z","times_seen":24942,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":5,"receive":2,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/images/bet365-gongju.webp","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /images/bet365-gongju.webp HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25450\r\nlast-modified: Sat, 16 May 2026 13:50:19 GMT\r\netag: \"6a08761b-636a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SbSpJ8%2FDPU4i%2FDXOG6GOfSwNDV9T1tsf1ZWjX0VVI5VCh0fj9VRXwM82d5PElk3YYBqpVPFqV%2FYlIn1MW1c7f2kiXB3bsDFPjXUmPOPCjYDsR3V8Uu3lesc9gLJPpAHITh3AkKw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a0183b1a6d3356ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25450,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf41d28c4c2a563e2390784da680736a","sha1":"e03c6d11f20a87165199999b228753a20810746b","sha256":"bb1f51dfacbf016bc9c7b47b45a9017b0573a93e608c675cd9fdbe4b1cf33642","sha512":"5faa77e631a6bde9454ffef3a7769aec94f10a612076a7ad2afa7ab2a285b338572f4a67ab12d0fb2f09f70b79e48816b466ba4e9944ed75f12040bf47b12ad3","ssdeep":"768:J0R+ZwPCbZLqC9Wg9N1GCREA+84nnQ7m:y+GPCZ19/VEF8/","tlshash":"8bb2e1faf94a452fc1f4c5f054c61bf7d74af81388003940aef58501a2a3ada44eeed6","first_seen":"2026-05-25T23:14:09.498535Z","last_seen":"2026-05-25T23:14:09.498535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":710,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/images/bet365-fuwu.webp","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /images/bet365-fuwu.webp HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66490\r\nlast-modified: Sat, 16 May 2026 13:50:19 GMT\r\netag: \"6a08761b-103ba\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MLqKfBNDGvXpSaCCdVb20tTFK%2F1wB%2F9Z6KIflhjV4B1EvWTYaUUA%2BM3bYM6Ocuo9Lv%2FNFwjYV2O3hs7zILsg8CDXeP3gnCfBoZsxRiOjq%2FFjbzb56eDWEPI%2F4DfYuklZuDO9FTI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a0183b1a7d3756ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66490,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 937x752, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8257cb6cd3162d13e02c865f5cce398d","sha1":"5050a8faf0c61d1c3b8ed392f13a2cdc7552bc84","sha256":"c02ce754c0915c9a9c40bd70e8312451896fad12ab167247e12d97692d1c77a9","sha512":"c231c7da6ef2f0d6fa295b0c087b901fec60bf29434b6910fb9e39dfa4c3fafffbd8ebefac7cf3a601a8c1559e8914bccf06e5e8cbf3c6ba374817d9a6c96116","ssdeep":"1536:D4B/uBpH5rx4ZuEFvo3+7Ww0dGFvjOfxl8wlAU98u05Ir:D4B/uBfrx4ZmO7Wdu7IPBWO","tlshash":"5353025e7f5acb5891c36754ff3222b21a184b09c3f068eece55868bc21d07c291e9cb","first_seen":"2026-05-25T23:14:09.500488Z","last_seen":"2026-05-25T23:14:09.500488Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":468,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/images/bet365-pingtai.webp","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /images/bet365-pingtai.webp HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 75434\r\nlast-modified: Sat, 16 May 2026 13:50:19 GMT\r\netag: \"6a08761b-126aa\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zie2wpwc4bUhCfxYGxkBDatTv%2FMrGyYjunuUIgyberl6NzJGdM97Xmy3ywPwhVlTMQCzVFNWG81ngsIHM9fKbg8%2FLOLxmUKL%2BuoMWpldv5Bv%2BxL74gBXvvGqHlCoYyIOH8I%2B%2BKM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a0183b1a7d3856ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75434,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 897x747, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a911fe471dca8f9a5589f84f12ebe3fa","sha1":"71abfcda5a1bd645aaafa45c1455027fc5e81c63","sha256":"83062df4a1a789d8fc09a915e0a42b1faf415462e5ff6be2912834004fed275f","sha512":"3c3962f1e0d58eb44f53eac377db4502bb5708646ef836ba4d006692278a2e6446294a44fa406e76ac68ad57cd3f7d85f751327d0601d3b24c098a71be7fee7e","ssdeep":"1536:Z6JLkdNtA264PTggrAPdE8kNkAoM7JTS6jEq+xu2NzrXb:QLkdNtA26PgrAPdEbNksRSswxhrXb","tlshash":"4f730267e4a824e16bcdbdb3bf3045f2d2f8530046e5a7b917e1ef11d02e888a95b513","first_seen":"2026-05-25T23:14:09.501774Z","last_seen":"2026-05-25T23:14:09.501774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":470,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/images/zuixinshuiguojiyouxijichangjiazuixinshuiguojiyouxijichangjiachuangxinyupinzhibin8642.jpg","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /images/zuixinshuiguojiyouxijichangjiazuixinshuiguojiyouxijichangjiachuangxinyupinzhibin8642.jpg HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 25 May 2026 20:36:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a14b2e0-ac87\"\r\nexpires: Wed, 24 Jun 2026 23:13:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LkrkzAXx%2BshQa7AkL3jbSqATKyA%2BkmmeS%2BEjPMwZHAtvJTlcwqgXDepl7nTpnshLmSP%2BFSuuHmxZr4yMAtE0e9AEmQo5IgFAyPHBrsDfMFFPJHBF41XmXonksYboxUEZrGAdkaM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0183b1a7d3a56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44167,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 598x519, components 3","md5":"0a2b8f5871e391c29dfbdbc1d435d97b","sha1":"8e94845578bf119535fd62b7f59042bfffb38b08","sha256":"d2b835d191853abf16cfd9d5329593c62709af3c692768b82418b70c73a98160","sha512":"b72c49c8d390ff29a5c7f5514ba0f3b0b1eac206a882a88b0436c9d5906cd689182dc60bd6fa3c9659e054897f4f994a2189738776b2d7ca8bb22afd55a35d5c","ssdeep":"768:w30AcZdaxGPqZm5Eoz7k1Owjs+4iCzuYFoHr72FAEPeGnFB4KfsaGvki1/xiJ3c:HAOdaGSOk1p4TBaH2SEGUFBovis","tlshash":"e413e00356ce0d174a9b98550d89308942c25de871bd6766cabf4e0accfe08b09e3def","first_seen":"2026-05-25T23:14:09.50262Z","last_seen":"2026-05-25T23:14:09.50262Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":919,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/js/bootstrap.bundle.min.js","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 16 May 2026 13:50:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a08761b-13bb5\"\r\nexpires: Wed, 24 Jun 2026 23:13:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XbB4eCXyJgS7EaRwPcBNMIUi4HmQu9EpFS9BofIfspcncbNVja8AWriJPF5JPyD%2FMaS5fklFZc4yg57bLi%2FQjPoM0P6hhn%2B%2FPq3Y7fiRo8S%2B8PqshYAz02fnmD6Dxq5qjXlUhqc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0183b1a8d4056ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80821,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"21d4551af5cc4ed4d818bdbdfea8c358","sha1":"df272a07ed30eaf8025b699c45736ba9d284e4d4","sha256":"35f4547d9364111aca4850347356bc5660a994f0d8b694d88f995098a7b547fa","sha512":"4dcd22faf4688265f834deedb8b6d07c1c5af0991f512031485573994df59d5747ca21c494f3f2d9c59f15a7260892b0d15aa8bebcca85d7764d24cc740c69da","ssdeep":"1536:/SwJiEbnTl6R2t49CFliFCIg/yWszSraJd5qUFH9tZwcE+iYZMgZdj:6wfs+SSO5q4tZwcEVYZFj","tlshash":"2383b5593244b8730ade85b68037430bf2265998b14b812cb57cadde2a7dcc67277f78","first_seen":"2025-06-18T01:20:12.005242Z","last_seen":"2026-07-22T02:31:29.07742Z","times_seen":2714,"resource_available":true,"data":null}},"time_used":913,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":908,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/logo/logo.png","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:30.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /logo/logo.png HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 16 May 2026 13:50:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a08761b-12268\"\r\nexpires: Wed, 24 Jun 2026 23:13:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HLVi2y1xdGohuftTmsvWyBTybuQNqDxGmI0T%2Fer%2F2eD%2BJYL%2BVJstiBrTYKZNEQKYfjrRsL5AjrdyIKxpWMRibHafXkYFXfPiv3Lb3y9ECJDEmRVzEg5z8wuvG7ffnQOTuLh%2BlzA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0183b236d6956ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"344508c028d11c4b8b04083767154332","sha1":"8939102f8e4f5b4a6344c54b70b33918c19cdb4f","sha256":"ebcbba85259a38c3bb15008323bc699497ec21e2d585c2a71a67f05f39649203","sha512":"9cf991b458192f02df5c36b90b65522bf114c984e53064d6012fe1f515c906339623921505fb032bb43c4eb945a8496d98965b104a1fd03160a2bd978fada35e","ssdeep":"1536:N2Z30FGWbueAUWeO1ZmKplOJdWH4tDbR9G+/Ohdv3Db:YZEFZZmhxpoWUDa+/aDb","tlshash":"4d730208b70ce777b526c327686e80b77360328f6572ddc281649229249eb896673f5b","first_seen":"2026-05-25T23:14:09.491381Z","last_seen":"2026-07-01T04:41:00.885388Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/assets/reg.webp","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:30.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"GET /assets/reg.webp HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/?agentCode=16pMv6h2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11700\r\nlast-modified: Sat, 08 Nov 2025 03:25:03 GMT\r\netag: \"690eb80f-2db4\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11700,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3d95376098a757a1314835c1803b2b61","sha1":"40e1670e42dd9a82eb0bdd286d8a01f452dfb528","sha256":"d877cc48870f3d270cf31598d432e1e5a3fa41855727be300581de592946f6be","sha512":"3232c0c538ecc49f2cc4bb0dd7040d29f6549f00dae85c79caa91a17d1dc239e16498f5ce4f7a20c33ae2f3b954441d213a8428ced5a287ffb9d19a2decb774d","ssdeep":"192:A730JNo/rN4cN+JXS7iCVG+cco547wDvyThc3i8vwSsZP3gNSbrGjsG2w8:d8+JX6axcBsQEBwLWjD8","tlshash":"3e32c0abd5185f6788fab024f63bf8d67b13fe4e94f01a14596d80f416f056360a046f","first_seen":"2025-11-14T12:52:43.460305Z","last_seen":"2026-07-15T02:11:50.465601Z","times_seen":20,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/images/bet365-zaixian.webp","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /images/bet365-zaixian.webp HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 92682\r\nlast-modified: Sat, 16 May 2026 13:50:19 GMT\r\netag: \"6a08761b-16a0a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DjgiprTFWPTilwQH0n9nhuWdFryb6NUdtj%2FanfumoZnQ%2BTm35zm6FSo8gkYwrlLts0Z3unVtNoh0pl5et5mzybdR4QEtBo5Ff2yhBuEuz1cM6Gzm%2B6if5KWwvUdNkJT93b64WX4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a0183b1a6d3256ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92682,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1000x750, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"edb04415c5a8b63ea29ec05031c0b20a","sha1":"4a920767b39ef6060d8800924b3dafefa32e6338","sha256":"e48acb65e49e00c3f69f3f987244d703c4e93d13a9a66db7d324a19828c250d2","sha512":"f679c61a40bb34515b6871076c367238ecef063a3defe6ed854a05cc5090c9f0434911ad46f43fd6c1c81ac97d02b839ba34015453a5650dca41dbb2487c8586","ssdeep":"1536:dKCcqYa+X9IHhJUWJSA/tL4IjDWumyFVAZ2uYax3N3n+8Ay3zFqyl0m:dshX9IHvlSAFL4SDYyDAApaj3n+tMzoQ","tlshash":"389312c7b54b63a0d0b03fc954ba95fce933dd02db687569a81a2a043760a7895288db","first_seen":"2026-05-25T23:14:09.504992Z","last_seen":"2026-05-25T23:14:09.504992Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":655,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/js/main.js","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 16 May 2026 13:50:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a08761b-1298\"\r\nexpires: Wed, 24 Jun 2026 23:13:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=psx0spZeVDSQ3jTid6yJAWuBXPIXD%2FwA3jDcuOcMtt7goC0rLJwHF0z5nQtYuyYbw5XpI%2B%2FBsdweDVr0bxpk7RhBBkt6GbnZjJ66j%2Bxv%2BFSbWmXVT07Gjv9LLNO24bma9BMZjLA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0183b1a8d4156ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4760,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"758f026db1bd5e1c8aca671476665f05","sha1":"5a408c21f971c0ef5c2f75b0acea353370556661","sha256":"0ffddbb071a1f28fefc96300cb3f4bf173fcdb571f823e4ad161bbdb570bbc0f","sha512":"a1c58b5671584a5140063e91ca8bc00495b12a26aeb484529bc34066bdf26e91d71ee94c5b3e09845d3a49c2369e99daf9b4b702bb6c6ed22d3d1a926987e499","ssdeep":"96:hyKUgZKCk0LsVhXK7H2WK4bKbuqlQ0af6nUymKHFKeQfWKRMk0E16Ln0:hyKU4u0w3X9W1b4uqlQ0afUUymOFEWgv","tlshash":"d6a1613e11b510b48137a051e7de6b49763a019b3004d995bd3d8a4d3fc0ee929f1af2","first_seen":"2026-05-20T07:25:49.897038Z","last_seen":"2026-07-20T14:08:05.220896Z","times_seen":23,"resource_available":true,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node91.aizhantj.com:21233/tjjs/?k=47z438qeo6x","fqdn":"node91.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"43.174.27.154","port":21233,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:29.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aizhantj.com","organization":""},"issuer":{"commonName":"Leocert TLS Issuing RSA CA 1","organization":"Leocert LLC"},"validity":{"start":"Tue, 29 Jul 2025 07:48:12 GMT","end":"Sat, 29 Aug 2026 07:48:12 GMT"},"fingerprint":{"sha1":"08:E8:20:3E:64:D6:76:65:C3:01:5A:25:5B:CE:23:E1:04:FF:9D:3A","sha256":"ED:59:41:83:D6:B7:DC:EE:38:8B:4C:EC:A7:BB:DB:86:03:54:41:AF:C0:7D:3F:63:B3:8E:65:A6:75:6E:6C:1B"}}},"request":{"raw":"GET /tjjs/?k=47z438qeo6x HTTP/1.1\r\nHost: node91.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\neo-gtj: 1.0.15\r\nserver: nginx, Aztj(node90-1)\r\nage: 0\r\ncontent-encoding: gzip\r\ncache-control: max-age=1802\r\naccept-ranges: bytes\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\neo-log-uuid: 14703389483599507\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35463,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"21b05ff8c235bb912dbd67f3bf7b08f3","sha1":"2dbf6d166a998ee5b923960c0f44ba7d8f30b662","sha256":"9056e3a1397086612c2551da66e3f80b939836dc2a27fff2e0be8c86975398bf","sha512":"beb535b539d0803d9ed0a8b7696e375ba0e5027d5e28639748bc92c8c072cdffec303915b13b0c562d4db69a315fa727dfcda6a4a71d9c83140fae073a5dc69b","ssdeep":"768:3kS5kuNczE4rDE93/wrWpWdk2pByX5R0N:0SOyczE4rDE93/mg+Bk5R2","tlshash":"e2f2e7d532ce2536a27670a9d95ff50cf8b9aa1437d9ac44590cc0c46d208ba83ff9bd","first_seen":"2026-05-25T23:14:09.506915Z","last_seen":"2026-05-25T23:14:09.506915Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3140,"timings":{"blocked":1146,"dns":654,"connect":18,"send":0,"wait":848,"receive":0,"ssl":471},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/assets/logo.png?v=1","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:30.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"GET /assets/logo.png?v=1 HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/?agentCode=16pMv6h2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 52600\r\nlast-modified: Sat, 08 Nov 2025 03:25:03 GMT\r\netag: \"690eb80f-cd78\"\r\nexpires: Tue, 26 May 2026 02:13:30 GMT\r\ncache-control: max-age=10800\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52600,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 614 x 248, 8-bit colormap, non-interlaced","md5":"c28d89e2dc48d690f9599140f1c90d15","sha1":"aa91597e9f96f234bf67aa934a1508407337cc35","sha256":"451f47998d6e063d44843766ba2056b76130cb2ff4fe922ed465733e0b3f2e81","sha512":"0b5a30506986929428418358964a151a967b014e260918bbc2feb47f4ff80ecb4a36cd24bf8be33e119e1d28613ce2b26419bfca1fa616e3cf4e5ceda8c20dd2","ssdeep":"1536:w5olCyXh4dHAKXQcCKuEaQ/JGjyXSub+KRnHaX8LCjr:aoPh4dvQ9Q8mX9btGr","tlshash":"0533f103c684ffcdefb9c589a07a8b89e555911307e3580bcefa265c45c697ea063c92","first_seen":"2025-11-05T08:51:06.291464Z","last_seen":"2026-07-15T02:11:50.437429Z","times_seen":21,"resource_available":false,"data":null}},"time_used":709,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/assets/bg.webp","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:30.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"GET /assets/bg.webp HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/?agentCode=16pMv6h2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 89806\r\nlast-modified: Sat, 08 Nov 2025 03:25:03 GMT\r\netag: \"690eb80f-15ece\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89806,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4c2f93abc2f29add2cc3c01daef37dca","sha1":"0c8f75ef119082cb60c022794cfffb0ccdb025bd","sha256":"9cd27d1194ba728f55e11783d62effa6b17df8de7d64635e6c4aefa19fe7c176","sha512":"ba599acc11770eca246f632168cf098d8bbf4203da851279114f0c691f2bb7d149d000c2dfb332c5a5dbf02ec0ca6019ee91c41c03fd6cccfc2268183e13c40d","ssdeep":"1536:3+Sfykf5char8B5+xhLs+iIhmZlv5SrX7AYlkzycogzByBIrhSOkj48P3nbdD:ffdhcht+xy8mZlv5SrX4zB9yBMheMG3B","tlshash":"69930243d5b5dd02c21a969b0c01e8d3442f01568d439fbeae0b47e25dafa7fa8ed097","first_seen":"2025-11-14T12:52:43.465036Z","last_seen":"2026-06-05T00:23:08.389735Z","times_seen":12,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/jquery-1.8.3.min.js","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:30.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"GET /jquery-1.8.3.min.js HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/?agentCode=16pMv6h2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 08 Nov 2025 03:25:03 GMT\r\netag: W/\"690eb80f-17005\"\r\nexpires: Tue, 26 May 2026 02:13:30 GMT\r\ncache-control: max-age=10800\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94213,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65481), with CRLF line terminators","md5":"69ecd99e201c97170d8b1735877c5c6f","sha1":"acbbbf3197c7ae19982ce6ef9ff6932593ea85d8","sha256":"ef45c2b4676161897f63a84bddd4a8d7e33e98d5477e8bda3ca8173b222b8a9c","sha512":"3d97dca1cf3e459586b63a2cf49d9bafd54ff56001bc44d3963f2bf2ae1fc0ffbd260aea09986e37ebb00e969f4b95502f37f654fd97a49a40ae0a97a720ecb9","ssdeep":"1536:ln6I5cEDlV0YjGaWQb6u6xvkT4ys33lt4WXgVInEG0vd007pNTbyT+SAy+uu49Jg:Z/Yi6Jnys3PN+RwFj2ShosS9","tlshash":"9293f7edb3c6717243ab31a910af650ff2366869284d8410f138e8f4bc75a499277e7d","first_seen":"2023-03-07T01:06:41Z","last_seen":"2026-07-19T23:45:57.872701Z","times_seen":1377,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9170.matomo.cloud/matomo.php?action_name=%E5%B0%8A%E8%8D%A3%E4%B9%8B%E9%80%89%20%E8%BF%BD%E6%B1%82%E5%8D%93%E8%B6%8A\u0026idsite=5\u0026rec=1\u0026r=333689\u0026h=23\u0026m=13\u0026s=31\u0026url=https%3A%2F%2Fyukuuz.com%2F%3FagentCode%3D16pMv6h2\u0026urlref=https%3A%2F%2Fmain-bet365.com.cn%2F\u0026_id=48bbca07f80bdd0a\u0026_idn=1\u0026send_image=0\u0026_refts=1779750811\u0026_ref=https%3A%2F%2Fmain-bet365.com.cn%2F\u0026pv_id=dPr92u\u0026pf_net=388\u0026pf_srv=364\u0026pf_tfr=0\u0026pf_dm1=1028\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"9170.matomo.cloud","domain":"matomo.cloud","tld":"cloud"},"ip":{"addr":"18.195.235.189","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:31.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matomo.cloud","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 22 Mar 2026 00:00:00 GMT","end":"Mon, 05 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:64:A1:63:66:1D:FD:B1:E6:3E:8B:EC:86:33:74:14:B8:30:E7:01","sha256":"07:61:C1:17:4B:63:B2:8E:A4:EA:7C:77:0B:6D:1F:D9:60:74:07:25:5B:90:40:54:EE:F1:74:4C:5B:D2:50:3F"}}},"request":{"raw":"POST /matomo.php?action_name=%E5%B0%8A%E8%8D%A3%E4%B9%8B%E9%80%89%20%E8%BF%BD%E6%B1%82%E5%8D%93%E8%B6%8A\u0026idsite=5\u0026rec=1\u0026r=333689\u0026h=23\u0026m=13\u0026s=31\u0026url=https%3A%2F%2Fyukuuz.com%2F%3FagentCode%3D16pMv6h2\u0026urlref=https%3A%2F%2Fmain-bet365.com.cn%2F\u0026_id=48bbca07f80bdd0a\u0026_idn=1\u0026send_image=0\u0026_refts=1779750811\u0026_ref=https%3A%2F%2Fmain-bet365.com.cn%2F\u0026pv_id=dPr92u\u0026pf_net=388\u0026pf_srv=364\u0026pf_tfr=0\u0026pf_dm1=1028\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: 9170.matomo.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://yukuuz.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 23:13:31 GMT\r\nserver: nginx\r\naccess-control-allow-origin: https://yukuuz.com\r\naccess-control-allow-credentials: true\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T09:23:56.696047Z","times_seen":17446383,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":75,"dns":4,"connect":22,"send":0,"wait":71,"receive":2,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/images/bet365-dengluqi.webp","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /images/bet365-dengluqi.webp HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17854\r\nlast-modified: Sat, 16 May 2026 13:50:19 GMT\r\netag: \"6a08761b-45be\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnYDkyzRoDadvTVXJyGZkOEVXjFhfYfQ7ZQV49YrJDp9OvAwWybL29HGz0h9htZMZwQ3UvPpYv8Ak8YHy3f6ySjLzdDq5byLFMunQcpLVjOiVoV0TO3sG%2FYZipm1LA29JxRyJXA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a0183b1a6d3456ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17854,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18bf1c38092951584de2f20a84dbbb87","sha1":"7f779d4417217e37d7735b0eb614837c091185b2","sha256":"8a0fbe536cd3169771c6c47c2bec339aab2cf61f2f73d6ed0d0708d2e56798dc","sha512":"506ef6c11f647fdef03ac7974f0634743119d210e422e841297c8e72c9147b62005ae5a271a027ee29bc2b654b9a1bf11a744eb45e4abd21f38d4d28af60cea5","ssdeep":"384:ewoAXARaRqYY/ynSP8ADjXDkCOU2PI6KI5:noAlRqr/yCxfCU2PX","tlshash":"8b82bf4363a7b1e4d099df703ff457249bac1bcdc01766071a694253cd2a462b2413c7","first_seen":"2026-05-25T23:14:09.510479Z","last_seen":"2026-05-25T23:14:09.510479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":901,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":683,"receive":218,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/images/bet365-manyi.webp","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /images/bet365-manyi.webp HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83686\r\nlast-modified: Sat, 16 May 2026 13:50:19 GMT\r\netag: \"6a08761b-146e6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ij3I1tOkudb6lenNqiElByBEGtTKr8%2BtwJWP5svnrff8auvHAeAyq162JspIfBZNHIGcaxwV6DVU3yCvzNp9dxuuzIO4vbAc1E8WIt8%2F7Xo2nD4AzRpf0u%2BBB8UcNROch%2BF%2BrFo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a0183b1a7d3956ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83686,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 945x757, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b93f2f258e2828f5e0ad1c52b8c1831e","sha1":"777c005067c632c229269a52037e385bddf23a5a","sha256":"f681f490d6d6fd3dc3b5adeabbcd048b06df516f382e23b4daaea5ce0d810c27","sha512":"ba3e141388c65bbe5050c4555954bf61228ccba0a5c1b1e6d0cac69b3c919b6a1de11553e7506faca2f82af0f02a285f7d426c3e4d2725d3943d906d437ccce4","ssdeep":"1536:qVn1Gf5RsDB3CCw/H1ljSEzzlEJZLZFsqYq3EIgMMx52w9oMnGrxrdi/aTyVH6H:Yn1pBBw/1lGYBErLZFsU3ENLn2pNx2aR","tlshash":"778302d0a9a7c9ad17774faf91acb42a85390637b74fed981c8a00f31e31ad1061716e","first_seen":"2026-05-25T23:14:09.511456Z","last_seen":"2026-05-25T23:14:09.511456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":710,"receive":501,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/css/style.css","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:30.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/?agentCode=16pMv6h2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 08 Nov 2025 03:25:03 GMT\r\netag: W/\"690eb80f-9d2\"\r\nexpires: Tue, 26 May 2026 02:13:30 GMT\r\ncache-control: max-age=10800\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2514,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"278f1da357c5b1e8507279d5e08f2e6c","sha1":"188064abaf6b66a7934ec82271a89edb3683c884","sha256":"5ecf42b16cd227f72d21bbb3043420c13a18d97f335c949f06115ee2449fcda3","sha512":"54948f1a707e6f17e4a8e96dc17ed888685f5d667f38cec5cd4f5fa2273f3d624f97ac85f5479a89d62f8f5a74da1b4643938d72567198a7ae06bf2d19779f95","ssdeep":"","tlshash":"1b51fd91099b1608760be4616bf62714522c8147d64fc4bc3fd673898fc72998af3bec","first_seen":"2025-11-14T12:52:43.486304Z","last_seen":"2026-06-05T00:23:08.398148Z","times_seen":12,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/assets/bg-2.webp","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:30.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"GET /assets/bg-2.webp HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/?agentCode=16pMv6h2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17788\r\nlast-modified: Sat, 08 Nov 2025 03:25:03 GMT\r\netag: \"690eb80f-457c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":17788,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5da152125de1d5f73edf0a42c27f7a39","sha1":"455cb0be2fe78986b231161bc6378fc54a90012a","sha256":"d3d499eb6d918a5d15e4faee4ff3f16d58cefa7f473d5481e5799caa79793689","sha512":"c92b9a5b9172956ca4b327bf78a033e5afbf94be22bf6d763f7411d3a6e7aa18d83cddf7ef1189c4f8186a34d4811be833d391ed32d75b7a10fccea286abb2cd","ssdeep":"384:dhUOe6n8tL59CZffJr6F/DtCLIrM0N3iGcbRh1i3mvX818ksA1:BDn8pCZffJ2F/RC8rMm4th1i3mG","tlshash":"7882d08b5b9c1ff2a9aef0c27ce04e7ab940324261c981549d0b779fed8c1f06905390","first_seen":"2025-11-14T12:52:43.467016Z","last_seen":"2026-07-15T02:11:50.446467Z","times_seen":20,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/assets/right.webp","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:30.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"GET /assets/right.webp HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/?agentCode=16pMv6h2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 265616\r\nlast-modified: Sat, 08 Nov 2025 03:25:03 GMT\r\netag: \"690eb80f-40d90\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":265616,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"28888f22269833db3a82f7a509c650ef","sha1":"a442c4c874bb6064a5a9c16faca314ae678ae38a","sha256":"73bcc72db425b3b2290a7f1b704506b44fd4e7560860e7ac1cc7ac1b90539d55","sha512":"09838743b8800263e1d7c87e4ac198653b3420aa1a49723063e349bf6351d3ce67adce3bd3ecd08d722d1f5681302ceb76a5f328aa37d97baf8f9840a993a673","ssdeep":"6144:piTAPbSG3M98BmCwOUKTAQxfM4wjb1uA/KB:pGkM9VCwbKTAKMZuB","tlshash":"294423461b84f059e5db2e7bd8d35e01b011fadea13cf199b9308ce132aa07952d5ebc","first_seen":"2025-11-14T12:52:43.445592Z","last_seen":"2026-06-05T00:23:08.391184Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1062,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":532,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/qrcode.min.js","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:30.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"GET /qrcode.min.js HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/?agentCode=16pMv6h2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 08 Nov 2025 03:25:03 GMT\r\netag: W/\"690eb80f-4dd7\"\r\nexpires: Tue, 26 May 2026 02:13:30 GMT\r\ncache-control: max-age=10800\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19927,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (19927), with no line terminators","md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-07-22T08:54:24.917864Z","times_seen":65513,"resource_available":true,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/api/init","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:31.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"POST /api/init HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://yukuuz.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/?agentCode=16pMv6h2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:31 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://yukuuz.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2693,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b4fddcc4cc83c809d0d5df056504a38e","sha1":"bcbd04cd75a108ff86aa4386f1c6c3bd9aae28f2","sha256":"813430bea59c64123f9796a6f85e4ba9fa1bedff0c3a80597277a243518049f8","sha512":"219dee6484d3f2f1f3feba2233e85c72cb59dfb24675b3eef5b429bc0d04b671be1ae8c0852d5488d5a0a3e5e9432f7cd60c9094e70ef26decd54b463b8db8a9","ssdeep":"","tlshash":"cd516472211b58720683e5cd13ccb908d4ad5b3789dddcaadc59ef2841e65fbf118248","first_seen":"2026-05-20T07:25:49.887681Z","last_seen":"2026-05-25T23:14:09.514657Z","times_seen":4,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/js/home.js","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /js/home.js HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 16 May 2026 13:50:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a08761b-16aa\"\r\nexpires: Wed, 24 Jun 2026 23:13:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yZ6GePM1hxsosLXr9ixVc3AD0OLkiyeQCi%2B%2BitPA5DkH6bNkQ7C3QYYgDie4apkUYxUIjoUXepXbkjFD%2BHbM79%2BoUwsmSs0RI88nzve9ASi4odVyW7l19Adqx37cw8DIPDg7d44%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0183b1a8d4256ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5802,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"16c93ef01acd14ec64c07020d638253e","sha1":"9c7b9d1a61977675c7f128bf2e27093d3cfe37f6","sha256":"f0795e9620ff382d585e15e40f303b394863fc5fa3dbdecd140adcbc4e51ffd2","sha512":"218d41ff60e128ff13105f9d376cfac1b80401527884da7b6179bab1fe8e9aa9e5959873bc5385798c8a5c6fb7aedce8e68b17112833cc16c096e0dc214d35ea","ssdeep":"96:6P7fgtAVMsSMCM1vUrp8KtQJQ1l/2o3RV0uRC6v6qyS+KQkIF:6P7fg+VSVAvUr2KaG1Zd3YuRriqyDKQH","tlshash":"91c1551a62b42433447775bb97af57c477212087b8c6ec393dfcc6080f845aa59f1aea","first_seen":"2025-10-09T23:37:04.756251Z","last_seen":"2026-07-22T02:31:29.092465Z","times_seen":1301,"resource_available":true,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":705,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/?agentCode=16pMv6h2","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:29.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"GET /?agentCode=16pMv6h2 HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 25 May 2026 02:10:19 GMT\r\netag: W/\"6a13af8b-aef3\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":44787,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (355)","md5":"44abc3c9c1ad982a4248598b1bcefaf5","sha1":"78c6111345698eb65ba9188410782b411b84115d","sha256":"9be821af89431958a856a8601155b0fe0b3478e2d4e3388c8e58dcba32368961","sha512":"240d5cca24e6541e5642192e5ec52e607b1bd1ad2373b94ee8a9e51d52676184473b456c201f630d491ab3a4679d79c624f98f109c6144a058b4c48a8a1b8542","ssdeep":"768:u6L917Y5oEKxqt3kfgxWiJcv7urWMIviuxcahq6u7Y:uSYkox3YIWMCiicYqPY","tlshash":"71136cbe03b7aaad041210d84748905e764c8b8f303f8b447fbe9a5d7fddeaa4505683","first_seen":"2026-05-25T23:14:09.516382Z","last_seen":"2026-05-25T23:14:09.516382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1136,"timings":{"blocked":387,"dns":11,"connect":176,"send":0,"wait":363,"receive":0,"ssl":195},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/js/tailwind.js","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:30.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"GET /js/tailwind.js HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/?agentCode=16pMv6h2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 08 Nov 2025 03:25:03 GMT\r\netag: W/\"690eb80f-58cad\"\r\nexpires: Tue, 26 May 2026 02:13:30 GMT\r\ncache-control: max-age=10800\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":363693,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50801)","md5":"c193259f53fb33856681902d899d0b04","sha1":"539d13d4016170493357b58e7efe676b700d31ba","sha256":"78f70dbdf61859c3a382c96c27880fa5737216af6d491fedf73a3356ccab05bc","sha512":"69ab3a80f97b0965712cec07246ccd9542ff3c6f8d1152047494395240ac99170748e90979ccecb8c90f3ab801cfffdfae075f42a987b457535b14f5d03d2cae","ssdeep":"6144:mr00+lSrr7p2CDj4cUlFLa6kLwSKJXimTqAcUm:08kfelFLa6kLwSKdW1f","tlshash":"00743baa7396753243eb91e950ae1142f37d5a38500c44acf79cd8da3da4e4850fbf3a","first_seen":"2023-10-25T18:01:37Z","last_seen":"2026-07-15T02:11:50.433765Z","times_seen":157,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/assets/down.webp","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:30.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"GET /assets/down.webp HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/?agentCode=16pMv6h2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10530\r\nlast-modified: Sat, 08 Nov 2025 03:25:03 GMT\r\netag: \"690eb80f-2922\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10530,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3e4f1631b3215a00240110026e6c993","sha1":"7c83130721d1001cddcfae0d2bcd4d8939e68fa2","sha256":"646f5c343b5061ae52644fb3e254586553f2717bfb523024251ee52935d700f5","sha512":"0f3df922fb14f4fbfd4396f1636e2e2b97cb232bc592a6f3a13014ea7eb8b3306f86be56a941e338f3a4216246ac05a4ec960d96e5cf60d66b56eafe00893557","ssdeep":"192:u730JNo/rN4WEX8fmHTmFKFR6JDCgQU1CFej07LfM7J66r3VS9+4yjawh66la53G:HLXSFKT6JDWkcg7Iy3V0+ljaela5dg","tlshash":"0322c059c4f8e7470db0b7f0497a2337189dfac0d80578729e27f57ca322c126a266d9","first_seen":"2025-11-14T12:52:43.480605Z","last_seen":"2026-07-15T02:11:50.435018Z","times_seen":20,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/assets/foot-banner.webp","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:30.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"GET /assets/foot-banner.webp HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/?agentCode=16pMv6h2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 169324\r\nlast-modified: Sat, 08 Nov 2025 03:25:03 GMT\r\netag: \"690eb80f-2956c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169324,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"35c8930c776f3665ba0df6f514869dfe","sha1":"9bc47370b826ef99f5c671533707f4bd4e908b0f","sha256":"0f0509dad98cb6c847229ec452f407743196b6526b9e6d4e9e8117c58eaff323","sha512":"d7095190494abc7e36df91693f54730c4667e67964a04847e4cc4f0fe28a34bc231937ef41f82627a7770791fda4e11876738b730eb555025936e188697019a0","ssdeep":"3072:lqRAZ7X5/kW5zI4DascgP6LHPXfCX8i8SsKyM2AIdQUi+T86fl1+QmjolXK:lqRAlJ/kWt1a1gP0HfUjpsc27dvi+Tzk","tlshash":"4af3128c8d1ee607efc4c6bc0eae7b444d31845bba5a425d35ab25cc964cd18f8eaf10","first_seen":"2025-11-14T12:52:43.488218Z","last_seen":"2026-07-15T02:11:50.454707Z","times_seen":20,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":705,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-543HN88B","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:30.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"E5:3F:1D:8A:67:60:A8:60:56:38:E4:E3:ED:A6:64:D9:7C:89:E1:E1","sha256":"39:E2:E8:B9:46:82:06:98:FA:92:0A:A2:4F:57:DF:DF:EF:00:44:4A:27:C0:C4:99:EC:A5:E3:D4:1A:A8:A5:D4"}}},"request":{"raw":"GET /gtm.js?id=GTM-543HN88B HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\nexpires: Mon, 25 May 2026 23:13:30 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 25 May 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 113928\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":325414,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4724)","md5":"e56da6ffd5ed79aebed4862095376ef9","sha1":"6c2d67fbae9a7a7fdbf283ea96dea9c5f3981f99","sha256":"6593c7263b2d9b566c30bde727caeefe3ea1f78ba35218cbbfd4e2ee8b55181b","sha512":"3961269ed9c74dd30a0214ec7e1dd16748710df247458caab4aa84ad160506583359aac38a203632f8ed8d49b4c105dd590bdd895029ea9390dd8735ce50bd64","ssdeep":"6144:fDpDlqcCcAnCa5qjxndXRFqGFCWUBWrDP:f1CcAd5a+BQP","tlshash":"3464e8cdb3d6b4624393a878903f114ba23a79d2f84cc898f186d8d42e746694277f7d","first_seen":"2026-05-25T23:14:09.519408Z","last_seen":"2026-05-25T23:14:09.519408Z","times_seen":1,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":84,"dns":2,"connect":8,"send":0,"wait":23,"receive":22,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/images/dafacaipiaogoucaidatingwelcomezaixiandangranxiamianshiyipianguanyudafacaipiaogou1440.jpg","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /images/dafacaipiaogoucaidatingwelcomezaixiandangranxiamianshiyipianguanyudafacaipiaogou1440.jpg HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 24 May 2026 20:32:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a136050-558d\"\r\nexpires: Wed, 24 Jun 2026 23:13:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l9f96giIPAhkI4UK%2F%2BPzf%2B91kPQDuJhNYSnfNEKB%2F7MvdMSNkub%2FHznn72iIEwfOggm6wv4mpYHVrjJ4OGZNfmsdbWF7%2BNoZ1Y1fPsrgw%2FdylHy%2BKwWyICBQTdm5X1LJz2JIv%2Bc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0183b1a7d3d56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21901,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 283x212, components 3","md5":"a0c417556c6943c11fe76ba74d2a4af6","sha1":"342f82323d547aa77ca6c8cad7fc65f85000405b","sha256":"280cec28781e679729c7daece440e0c410676706bf628be0ab3d7a828695cde1","sha512":"eb2e1b3fb43f15ecb0f3425a311a5ed9682d878209230b35c2c612fb2ce9d96a9d0387637add1b854e0377ac88a4b440682527f84566338eb54cd97bfadd38bd","ssdeep":"384:T/TK5/y1y8kTZvhWsLDdWHv3zS0F3ZPmuP6kpSLDXHf+o1e0GajS7ww6BVuAwT0r:T/25TZJWstsS23IqmDP+o1e0GWSEtVYM","tlshash":"bca2d186962cb7c9d7466d32bc635019ef217881361b701aa9bdf59c3bba9e0100b35d","first_seen":"2026-05-25T23:14:09.520702Z","last_seen":"2026-05-25T23:14:09.520702Z","times_seen":1,"resource_available":false,"data":null}},"time_used":929,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":928,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/swiper-bundle.min.css","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:30.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"GET /swiper-bundle.min.css HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/?agentCode=16pMv6h2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 08 Nov 2025 03:25:03 GMT\r\netag: W/\"690eb80f-4815\"\r\nexpires: Tue, 26 May 2026 02:13:30 GMT\r\ncache-control: max-age=10800\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":18453,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18200)","md5":"f2c0d44a69cbffca0be135cb4ba124d0","sha1":"33fad2528d85719461a9c720b0647b077a1f58e9","sha256":"02c3beb241dc71b12393416507df488d574e0482a15049a938adb2e736aa6cd8","sha512":"9171b17faae76189e5593a627880dfc48b3116ee0c4300885cb4f1be1aecf35a12abfbb710327acb041fbe96d3ad5da0774a17554485cc0f99f4cff306ee7652","ssdeep":"192:JZrmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxbw:JZqUbe5JndKW+Sa0ni24tnWfz4eNi","tlshash":"de8256a45350182753274f374bb1cbb9d97444c24f9389ae91c0ee58d7facb9132f2a9","first_seen":"2025-07-06T20:34:08.51017Z","last_seen":"2026-07-22T01:25:25.620879Z","times_seen":214,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/assets/foot-3.webp","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:30.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"GET /assets/foot-3.webp HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/?agentCode=16pMv6h2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38100\r\nlast-modified: Sat, 08 Nov 2025 03:25:03 GMT\r\netag: \"690eb80f-94d4\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":38100,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f246de12678aa0339ec4ccf31b923e3e","sha1":"0d176ff542b45747a7f9f6f45bda2f81f20b2692","sha256":"7f8c484b9e2c95e5a434767b3098eb9acba5275a7bb9514f77751c418262abd7","sha512":"c027d98c4abf22c985476345f6591384d6d43a9c9a02c2ed6284924eb0a4bc24043d24dc2ba2704f26e7f263d0ba7ac2ceb3cf38367ae7986ec136b2e8ad40e6","ssdeep":"768:ivRRAWRUVt5RZQFdAy7HMLfha+/hXS4zKyXxMAUHQFXaaZHPpVe6dc:ivaLx9OHMrhaqhi4zKyBMAUwHZhVJe","tlshash":"4703e021daa9d2637ed9ad49b71df5d71bb4a901c4a0ca0287b42d47d90eccb0e7f206","first_seen":"2025-11-14T12:52:43.449335Z","last_seen":"2026-07-15T02:11:50.449096Z","times_seen":20,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":702,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/fun.js","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /fun.js HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 May 2026 04:25:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0fdac9-4fe\"\r\nexpires: Wed, 24 Jun 2026 23:13:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3o5AxZ7S3PCe5LksoPPvGkYoBnw3JgR%2BLfse1OtMJs3IcEqus4f9qawsTFXXiFtfCkj%2FYi%2Bj90E2x2%2FHs0uyff4yZCLWlP7yEnkwZLpl3qVW2YUjhy4dsl0jDMrSBAjohAwmWlQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0183b1a6d2e56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1278,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5994db0ce9ca9fc02ab9a236dc3c5867","sha1":"037803b5f1e9f86a73d71f5ef5501c36d62d4edd","sha256":"b98f7499cd119658a1a38209b1c159c284f996dbef537e3929d61ce237e8598a","sha512":"4dac064f1d11b630cf840087ded8f7c113347397c125368c9120f5f3491caf14466952b10c29e4fe2b3f39dbfe326e6b1825f21ea7036ffb6b4a2c4b7c6f1a51","ssdeep":"","tlshash":"aa2142395893a83942328464b6a7c3483075d025fb47ca066aaeafd44c85f7488bbcdc","first_seen":"2026-05-22T17:17:17.21442Z","last_seen":"2026-05-25T23:14:09.5233Z","times_seen":2,"resource_available":true,"data":null}},"time_used":702,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":702,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/images/bet365-about.webp","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /images/bet365-about.webp HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 73724\r\nlast-modified: Sat, 16 May 2026 13:50:19 GMT\r\netag: \"6a08761b-11ffc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vag68CCgZ7lxyRak%2FFFhe%2BE8Iv76sfIGbqvp03HTxUQtikHSMAR9j%2B5vRXJKBKNfxeFy%2Ba48e7AiUsKkmPqrCwlNQDCdrl8IGvGPsh0JnjZPfXF9yVQ5DKxNbM6wJVfjEiwUnwQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a0183b1a6d3556ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73724,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1052x732, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2b43d09f0be9080ed921aa1acc1dd0f0","sha1":"16b3c43ceaec37447c970e86e76c11ef87b479a5","sha256":"54c463055a65ef1fdfc294fc153f961e2fa324d8fe54ab47d0b6bee3995b8dc1","sha512":"a4f9e87114d643d0f0bd9a0643954424c76615f5beae0681eaa0cb6ea1adb6b4bc3d19036f3fbb029de8470a55548cf5fe74f375a5cc374c1c9a55fbb6938639","ssdeep":"1536:rb3xr6yvaXnHQAP7nnZVNl9/VwyjKne6q/F5nQqFFfq5GDze:rb3x7SXnH7P7ZrV2gF5QqOM/e","tlshash":"4c730202667197504a13f785a84a0bda4b399846a36736c653f7fe43e67cc4347a03fd","first_seen":"2026-05-25T23:14:09.524048Z","last_seen":"2026-05-25T23:14:09.524048Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":695,"receive":449,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yukuuz.com/assets/12.webp","fqdn":"yukuuz.com","domain":"yukuuz.com","tld":"com"},"ip":{"addr":"182.16.49.92","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yukuuz.com/?agentCode=16pMv6h2","date":"2026-05-25T23:13:31.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yupevq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:45:00 GMT","end":"Mon, 20 Jul 2026 07:44:59 GMT"},"fingerprint":{"sha1":"D8:55:D1:34:B9:0F:A6:1C:01:AD:74:A9:B2:6D:00:A7:2B:D5:53:08","sha256":"78:E3:C7:4E:56:14:3A:42:D0:E0:63:80:30:88:13:46:40:45:3B:C4:23:63:A7:C7:CD:9D:F7:48:75:A9:BF:08"}}},"request":{"raw":"GET /assets/12.webp HTTP/1.1\r\nHost: yukuuz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yukuuz.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.2\r\ndate: Mon, 25 May 2026 23:13:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 114490\r\nlast-modified: Sat, 08 Nov 2025 03:25:03 GMT\r\netag: \"690eb80f-1bf3a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":114490,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x606, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"25d864a4c66a594011ac733cd0e3c95b","sha1":"61c09c820c752c7b419879a5272c2a74260e112c","sha256":"b1fc1db9c325e23384aef3e70fab490bc9a3cd5c7bf0d9b5ad4ee97c60519555","sha512":"a8fe561ff63011526c951424631c640ce0a015fdc03d6fec2a57c3a952436694208a852b78a137a85a22167fdd1f7d7c7ec55b8247dd1add748dae8877ac6d90","ssdeep":"3072:F6QiI0JFnk96jfXx0qM9lAC7/QUS4b+s1LC:F6QiI0JJG6jfXxKsQQUSKr1LC","tlshash":"65b312e4be4ed8826eed0f53685d7899e2d1dab91137a040efc8da7d6170940a8f4c22","first_seen":"2025-11-14T12:52:43.453128Z","last_seen":"2026-06-05T00:23:08.411554Z","times_seen":12,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node91.aizhantj.com:21233/tjpv/?cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=1280022525\u0026si=47z438qeo6x\u0026v=25.01.26\u0026lv=1\u0026api=0\u0026sn=16817\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fmain-bet365.com.cn%2F\u0026lvt=1779750812\u0026tf=1779750812\u0026ej=1","fqdn":"node91.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"43.174.27.154","port":21233,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:31.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aizhantj.com","organization":""},"issuer":{"commonName":"Leocert TLS Issuing RSA CA 1","organization":"Leocert LLC"},"validity":{"start":"Tue, 29 Jul 2025 07:48:12 GMT","end":"Sat, 29 Aug 2026 07:48:12 GMT"},"fingerprint":{"sha1":"08:E8:20:3E:64:D6:76:65:C3:01:5A:25:5B:CE:23:E1:04:FF:9D:3A","sha256":"ED:59:41:83:D6:B7:DC:EE:38:8B:4C:EC:A7:BB:DB:86:03:54:41:AF:C0:7D:3F:63:B3:8E:65:A6:75:6E:6C:1B"}}},"request":{"raw":"GET /tjpv/?cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=1280022525\u0026si=47z438qeo6x\u0026v=25.01.26\u0026lv=1\u0026api=0\u0026sn=16817\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fmain-bet365.com.cn%2F\u0026lvt=1779750812\u0026tf=1779750812\u0026ej=1 HTTP/1.1\r\nHost: node91.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://main-bet365.com.cn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS\r\nset-cookie: _aztj_sess=r4q3a4shrbj3raaavt2ntvnqld; expires=Mon, 08 Jun 2026 23:13:31 GMT; Max-Age=1209600; path=/; secure; SameSite=None\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nx-mtj-pc: 28\r\nx-mtj-ml: 1\r\nserver: nginx, Aztj(node90-1)\r\ncontent-encoding: gzip\r\nage: 0\r\ndate: Mon, 25 May 2026 23:13:31 GMT\r\neo-log-uuid: 15207418755893425506\r\neo-cache-status: MISS\r\ncache-control: max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-07-22T09:25:13.576979Z","times_seen":747144,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":42,"dns":1,"connect":17,"send":0,"wait":273,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-25T23:13:27.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 23:13:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XSN%2Fr23o7%2B%2BIB6WUwXLGGUpY9rc%2FzUlJrbMPvILMjNdpL%2BZ6%2BW7wXCIqhZa%2FmwxpY2YlqmS42ZHyNu%2FRa5XcEwpcql6lawFcCKylXCesdexX8u40OKtFKBZKsrjG4H%2FwtMPYY2o%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a0183b134fbc56c7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37594,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1399), with CRLF line terminators","md5":"05f911feb51c941d70126cfb53d6542a","sha1":"12cc5f93f38ae4b17fcf3b3ad4a6d3f7c0badcc4","sha256":"75496bcb7474b5b7bb28f3239aaea8c7ad18ba8f2446a0b69b0b17d92a93d4fd","sha512":"5d4332ef6d6bc319c43022790b23dbc813a291e113ff84ff13f3fac53d722ac66b75abef1833742549dc444339d51d44a8245ddb8ce5583c43533752040da92e","ssdeep":"384:exSzC0g45QA5IHJOMGChSySPYRtDKU+9ADPWfwTCRrFT99p8:exS2k5QA5igM7uPYRtuU1Pwxr99e","tlshash":"f0f2613220c469bb417382e9a7a46759fda59187ceb7861173ff1f8b0fb2d25880391d","first_seen":"2026-05-25T23:14:09.526336Z","last_seen":"2026-05-25T23:14:09.526336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1089,"timings":{"blocked":86,"dns":69,"connect":1,"send":0,"wait":914,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"main-bet365.com.cn/css/main.css","fqdn":"main-bet365.com.cn","domain":"main-bet365.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.27.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://main-bet365.com.cn/","date":"2026-05-25T23:13:28.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"main-bet365.com.cn","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:05:30 GMT","end":"Fri, 14 Aug 2026 09:05:29 GMT"},"fingerprint":{"sha1":"B4:3C:C5:B0:D8:E1:75:0D:AD:18:3A:7A:81:13:99:02:85:92:73:6A","sha256":"A0:EA:04:B1:17:CC:9E:D3:75:1F:B9:64:26:3B:BC:FC:5C:A2:8E:7D:A3:09:72:D8:E2:DC:DA:F2:F4:58:E6:CF"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: main-bet365.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://main-bet365.com.cn/\r\nCookie: server_name_session=7e872a41298acdd20ba71ec24b4dcffb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 23:13:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 16 May 2026 13:50:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a08761b-718c\"\r\nexpires: Wed, 24 Jun 2026 23:13:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x0s2VjjYuoGeo3aVIPQSfJZPzFUSVK%2BupNtg2Rui7hU%2BDVI8l6dJjyuuNshMSrnBPn11hIUVIB%2FG%2BeWMlRjrX0cG%2Bj1wz2wvYgZsbW0R2g4rdaa8uMRzdlZXHo9tG498aKKIJaU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0183b1a3d2d56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29068,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (338)","md5":"f1233a32839a606b3e2ec2670f41050c","sha1":"168ccf286cc54328a8cabace157ddf526afb8558","sha256":"b1f76f4a1089ad29f15a7a2809b3b1fdcfe2669efbe9857d015f5e653e52bb12","sha512":"b1937e7557ac157bcd792980a7c6397d1321909b0f140fb8e8ce70b36be2039413b811f29ffc2db9c6dfbf64034ed5b67fb124f359b67f8acbcd106103c36d58","ssdeep":"192:jjwcAaSIFFw2296L50UY8HwuaBBfJ9WU0qyCPcxLVZIQ/TgGCetMwuGwh2NamT45:jXFhN+CEFlF2huD1z5h","tlshash":"7bd202555ab31561b81bd19c2bfb9789233c9043dd4fcd6d7bce62448f892e860a2f8c","first_seen":"2026-05-20T07:25:49.892888Z","last_seen":"2026-07-10T22:14:18.939702Z","times_seen":15,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":720,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"main-bet365.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"main-bet365.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}