{"report_id":"a197a7c4-2fef-43f6-a09b-96a902b03c17","version":0,"status":"done","tags":[],"date":"2026-06-17T14:17:28Z","url":{"schema":"http","addr":"3tbetoi.com","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"3tbetoi.com/","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"title":"3TBET - Plataforma Oficial -3TBET.com","dom":{"size":54697,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1127)","md5":"252d9245a18fc9e770de7943baa3307d","sha1":"ef230a9312044ec7c60a85cb820a74b930fad1d4","sha256":"cc44ea121892907908cf5316dbcfea8e7fe3447fee76318e8ec940aa1f3773e7","sha512":"527aa1389ed78616521912e45553e91ec0c0577e602404e381e8c973a2247d6fa8ed88dd1ea27a637d5bb4096707cfab4e4b44146b0d45e596bd4e48cd06c990","ssdeep":"768:UhOO6gMFzJpqpZ+Je/32zQPDc97QcxlSBl0JoqtH71gojhRzetOppnLFllQwp2m0:MOOdMlqP2KaS2Z1z/qo56wpxuXAQ","tlshash":"a633e9358ce5221302a313c137c2a647ae94d103b61ac956f6fe47895fcee91d63bb2d","dom_hash":"domhash1c2705fe0b72c5dfa0d73b9f09c996a5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"3tbetoi.com","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-22T14:17:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"3tbetoi.com","ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":100,"request_count":20,"received_data":1293684,"sent_data":10156,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"node93.aizhantj.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-29","domain_rank":2930956,"first_seen":"2025-06-07T21:55:48.499212Z","last_seen":"2026-06-10T23:15:39.087917Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":471,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"3tbetoi.com/","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528b9f55948409fff157cdcc225b28a3","sha1":"aa40797c47c2f8ff660c93b352ef15ca1b297f6a","sha256":"fdd1993b015ca9785b7c1d3f26c8170c73ef16a561f8e7dad62561381449d7a6","sha512":"f5890f886e6bd307d2ad91c290b16f89c5d114e13c96fbfccea73dad276702241bcfd51d74ee2f2e5bc0b15ab292ec0f714a33e81a26cd709bfd2304e97824cb","ssdeep":"","tlshash":"efd0a7ab364419b6d78a00b80d7ed69eb561513668afc41188cdc5ea8a20dd8489dacd","size":241,"data":"","first_seen":"2026-06-07T14:30:24.131566Z","last_seen":"2026-06-20T19:12:08.39382Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/syfup6ej/script.js","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"98c719ed1872d12b4c2dac206d91c145","sha1":"9131b8220ff48f6eb25ae3951df0dadea9d7d4dd","sha256":"6d9906e313c70233ff233a9b2b55eeb0fe8c7ecdb63ae7cbf1d0f4960da8f20e","sha512":"25a4e7823e5c39ff0a7b79dd81e1bbaaef529d435d7e7d1fac1798e659f8528993e8bf209d3bcdbc0ab5cb88a2d217d183583b3d73348a60180f9f1de319a240","ssdeep":"","tlshash":"dc118c7a3052357580bf34b593cb84e03d10a0cbbc5790a3754cce892f41aa56877de7","size":874,"data":"","first_seen":"2026-02-27T10:01:55.118793Z","last_seen":"2026-06-18T00:35:57.979961Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"3tbetoi.com/static/syfup6ej/big_1zu42cy.jpg","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:54.408Z","timestamp":1781705814408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/syfup6ej/big_1zu42cy.jpg HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:54 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 21 May 2026 11:38:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0eeec5-34dfb\"\r\nexpires: Fri, 17 Jul 2026 00:24:58 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 49916\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cdhnJsWVIKJsXUWToPqvdQRBeMQoVovgWIKPWtj5DCgVleyiyxkYIcpqWrZepv25IpTs1eRDWxso3CwGUKozDWH5ZTBzvxHa7pN4kxoRV9vWg4lFfpgQZIG7tTvtHQ%3D%3D\"}]}\r\ncf-ray: a0d2acbc0efc783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216571,"size_decoded":217399,"mime_type":"image/jpeg","magic":"PNG image data, 403 x 240, 8-bit/color RGBA, non-interlaced","md5":"9b8e68acb99bdc8c1570a2181c13da2d","sha1":"6846305e38f80d9609fd3f3affdf96dc58166c91","sha256":"40878ee53ca36d22acda9279ba7db9ec57386d4e1ff12b6e73bac1968aa73481","sha512":"f3db6a2881849181b7da7f336a164f1a402a826c1a7445cdd8cb884765e3f77030de4b1545a811ae58abd22a934511b4d186cbaba13b033a4c4e5a92c1506af7","ssdeep":"6144:INbJc6OgijlJ8D24r1LPCHR3tJiizIkpNCrfOg5ij:ILcf4r1O9oizDpy9O","tlshash":"b22423e4e4e9a541ddbfd8821e0be70d23c6f5d15e8f8092c15ca6be098c2497118ffa","first_seen":"2026-06-17T14:17:34.367684Z","last_seen":"2026-06-17T14:17:34.367684Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/syfup6ej/index.css","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:54.382Z","timestamp":1781705814382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/syfup6ej/index.css HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 May 2026 11:38:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a0eeec4-2612\"\r\nexpires: Thu, 18 Jun 2026 02:16:54 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLB1gwOI9xRFM%2B%2F6YikuRmJneVgxOIqpEibtaWPzzUHBNu7tbswb3n2uW1OTwbaW67Z0jF%2FEyVgR8ydM6OgZMw2XM5qvKFGA2XWWVZqqtDckYOSaNgd3hQLg1YlpDA%3D%3D\"}]}\r\ncf-ray: a0d2acbbeeef783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9746,"size_decoded":3775,"mime_type":"text/css","magic":"ASCII text, with very long lines (9743), with no line terminators","md5":"7889263097e43c3e757365f4ce161733","sha1":"5e2890766ca887cd8a0808f1b4e1687708483d00","sha256":"483fbf80e13e2038c58a77df2e363505af52f1521b5691f6a0328b2fb193f900","sha512":"1baf9ee542aa80fe67ced4989bbabf6c15f62f1b8685a29893202683302c56f2a133185d0cb54de1c331e4012e9be5175d55e5def8fcf06cfde9f31b7565fd12","ssdeep":"192:tWhNWwy8Nd+ZGAdKUSgeG3sSKIbXoudvkxRBlBPlIL5:esleuRERBlBW","tlshash":"491292e1f21170796cdf886ea195fceb87658407ce190a99f04332a8f7ca6d30a527c8","first_seen":"2025-06-20T23:14:43.216099Z","last_seen":"2026-06-18T00:35:57.986789Z","times_seen":17,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/syfup6ej/css2.css","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:54.386Z","timestamp":1781705814386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/syfup6ej/css2.css HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 May 2026 11:38:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a0eeec4-52eb\"\r\nexpires: Thu, 18 Jun 2026 02:16:56 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SN3JUtNDSTQnl3%2BY0eO1kIxdFaEajPV9XKV24br0cspxHUx73jz8ELZtuadKDP%2FBor0mRr9K11pFabnWayzIwZBgFN9FgQ9X6lXYsfnNDaFiCk7L25jYgfGGJaONYg%3D%3D\"}]}\r\ncf-ray: a0d2acbbeef2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21227,"size_decoded":2674,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"b4b5c1dc7566deb6c78b9254e7ea888c","sha1":"ec752b80c4b064bb415ffddac2458feb823faf32","sha256":"4a6296caddfb8fd67a4cd936e02b8c7a005b63bb57161544e20bd4e1982bbbb1","sha512":"433b9ab10493575693c7b0c70e2d572416be2a2771c019517832b76698f064692ba0211d765a7813b77f6e9affa2899fbfc9062bcda916611cc3ad025729ac4b","ssdeep":"384:VflY/bys/qY4ygAVfUR6Oyd/qY4XZ5mfjCp9yu/qY4IqKgfp8j3yI/qY4uEkq:tcHxNWUoG","tlshash":"dd92fb90041710019b839ce223cebf75fe1e92407145d0b6abfd572badcfda652a93ad","first_seen":"2025-07-08T02:37:06.289248Z","last_seen":"2026-06-17T14:17:34.371563Z","times_seen":26,"resource_available":false,"data":null}},"time_used":2601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/syfup6ej/logo.jpg","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:54.399Z","timestamp":1781705814399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/syfup6ej/logo.jpg HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:54 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 21 May 2026 11:38:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0eeec5-640c\"\r\nexpires: Fri, 17 Jul 2026 00:24:58 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 49916\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2BdBEpYzbMTHSQGZnOPVMC%2FrN1Ft2LZRJJxXRjf9sxIbk9A370nUMnFQxGa%2FGaXP5RYxT51H07xPwOXAXRAhOVCo7%2B3BeEM15Y8ZsYh2vUSFC8lexG4dSCsjq239Ew%3D%3D\"}]}\r\ncf-ray: a0d2acbbfef4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25612,"size_decoded":26049,"mime_type":"image/jpeg","magic":"PNG image data, 600 x 150, 8-bit/color RGBA, non-interlaced","md5":"03c1d3d8b4692be109258a2b8f73564e","sha1":"3a6302fec7d0af59bb1e0f7f3e3bac73f12325cd","sha256":"802447385bef3cd80c360f2e6a9e784287e50e5fae471473edcd30df571af41a","sha512":"246283068a0818052bdb2b16c3dae9c9444ee91fc1ad6a82d58f7848be684f57c97dc2d8012fef334771fe1813abc104ee884c33de577fdae2bd8846a097b7b5","ssdeep":"768:waBdBTessn+qDBx8NN1EB+Qx/8oPJH79DY3IT0:wa3BHsNBx8NjI+o/8UH79pw","tlshash":"b5b2d197c49d941d8d1e622cede62fec1c5935b78662b4e017dae8b2849bfe07d08807","first_seen":"2026-06-17T14:17:34.376145Z","last_seen":"2026-06-17T14:17:34.376145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/syfup6ej/big_gbym9n7.jpg","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:54.403Z","timestamp":1781705814403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/syfup6ej/big_gbym9n7.jpg HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:54 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 21 May 2026 11:38:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0eeec4-2f676\"\r\nexpires: Fri, 17 Jul 2026 00:24:58 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 49916\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pNcAbOozCpd3Vr5UHFLt6fZS8fFotct8YfT2ChZhweWXBu2SOB%2BWze05uyPD3VAZY2A2dy5m1bsuM9sX9DBaBNLuMQif0MM4v9%2FmyLcvbRUA5Uan753Lq%2F9IJlEyAQ%3D%3D\"}]}\r\ncf-ray: a0d2acbc0ef8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194166,"size_decoded":194990,"mime_type":"image/jpeg","magic":"PNG image data, 380 x 234, 8-bit/color RGBA, non-interlaced","md5":"f8301f1c9d8d6006e4fe7dcac87bf523","sha1":"84cd894f61351ea93e4f4e5a9a4cda09c8c4a283","sha256":"ab38d735b86e1857598e10829d700d9e6c232477d4e1d1cf493ecaa8129cdbee","sha512":"802c0a31493cab7f35883b7b3051323f5ae25402b255c4567251f2933f96359333a6b99f843596998ae2cbbcca2591b7ebc01f0176606963b47a84e1f869b5ab","ssdeep":"3072:CixG0A5pPmm5Qjz75g+1QgPaTUPRwa/mhxIKnOgieWKkuLnuQTs30TWBpTeVAF:CF5p15+zFp1QhwFqxt/WKn7uQTGtQAF","tlshash":"1514234c813ea513554f7ee09839a05c2c395ae8324efaafc51f66c96cdbc40e38ae45","first_seen":"2026-06-17T14:17:34.380451Z","last_seen":"2026-06-17T14:17:34.380451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/syfup6ej/big_8n5cibe.jpg","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:54.407Z","timestamp":1781705814407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/syfup6ej/big_8n5cibe.jpg HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:54 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 21 May 2026 11:38:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0eeec5-2d65b\"\r\nexpires: Fri, 17 Jul 2026 14:16:54 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CrDcrU5qHiT5TyXpqZojmCLC%2B5gHkgshJ7zBMrx4xZsHxzq%2BygZ2l0QdRpyjHAmE0LCkDu3U3KUijCxXcnVg5o7C5eex8cT7pI8lMjS%2FPj9j2WNT%2BogHOmlJuAJXrQ%3D%3D\"}]}\r\ncf-ray: a0d2acbc0efb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185947,"size_decoded":186762,"mime_type":"image/jpeg","magic":"PNG image data, 344 x 234, 8-bit/color RGBA, non-interlaced","md5":"8e5c856c996ccad325efec69e24940c4","sha1":"08726fd8ece6f613e9e2f3b571df4853ca6f4432","sha256":"794e8c6fb655f2e31e14633981535a042fabe6bb90cdfaf56cf7d944b8d6d404","sha512":"42277e83e8ba287b0e90250378a2cc1ac92b7bccd6f68f8fe402aa8328b79979869baf4335d89eeac68e21820b8adab10c90884d24611c11f8b4662cb300f9ab","ssdeep":"3072:HYXYAURK+d6NVVMHinJbJaBqUF25i7vCJqJB9x1baYENACLkTzxI+jjrNno/Ukr:HYoAURK+oNVbnJda4UU5i7vCJqRx1GYW","tlshash":"d304130e71810abf13fb26b484e2eac55b97123a99d076f9df0091c2719f49867e13d7","first_seen":"2026-06-17T14:17:34.384533Z","last_seen":"2026-06-17T14:17:34.384533Z","times_seen":1,"resource_available":false,"data":null}},"time_used":917,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":535,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/font/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:57.064Z","timestamp":1781705817064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/font/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/static/syfup6ej/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:57 GMT\r\ncontent-type: text/html\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FYAYkVcku1ZxF62vdlunIUvPRsojt%2FMr8CYu%2FDHa1eUqj%2FLXwzLEaXsk5xvRkpIj9Ey%2BuwOIY8SVBwyTBGqlcinNTMsp8%2FZakattp3AB80fdAfao5hkEjAZC1ov3HA%3D%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-ray: a0d2accca9cd783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1380,"size_decoded":1992,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"7b4ad69a373baec7f2fbdb2f327d19b7","sha1":"51a10839e406f202e7ce7e51a71c04cea661c058","sha256":"944eb8d70a4fc0df27bedb88dfa97a8eadb5f9efa49cba943655bafdcc3e5058","sha512":"6f35b0cc45e274bcc9922daeed1d6f633f56632ee55f6192ef080789821b1e5af5dd403fbe91d6f13ebce126fc40c5e9a33b1e45c3a4234915f23323bdd012d0","ssdeep":"","tlshash":"5321424aab430155e14784680fbae34872a5d11b8d87cc293cdeb3a2cf45a54d9f77cc","first_seen":"2026-06-17T14:17:34.386338Z","last_seen":"2026-06-17T14:17:34.386338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node93.aizhantj.com:21233/tjjs/?k=qtn7fufe2uo","fqdn":"node93.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:57.373Z","timestamp":1781705817373,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tjjs/?k=qtn7fufe2uo HTTP/1.1\r\nHost: node93.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T14:16:53.722Z","timestamp":1781705813722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:54 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 21 May 2026 11:38:45 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oxs3zkZ6Pz0ztDcOZm86bZzONyTVBkeHfjIY8zCXvWCEN%2FOUfQbQ3Gqb3VLhcKca6%2BwnRFY2LgcLbSK0lGsPxdzNxU3G6%2FoI%2FSgFZ5yg9LGbj5KAIkryXNzSZ3Rh1A%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a0d2acb80e23783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54621,"size_decoded":18585,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1127)","md5":"dc7366a9986e0ee64448dbb9840a3e46","sha1":"bb9c9252d2c4fcb49f0aab6b40ba304bb8bf9c45","sha256":"82e0883913126bf2811ad26468de885c8577e0429f1af3b7a1b9f2319bceeb10","sha512":"c6cbf1aa0c568ace82a8421a1e22a71ab97c8763e2409666af5ddb8306cf21b3df6665c92a8118a4147cdd613344ad76c981652785672afc9717d7d10839b834","ssdeep":"768:EOO6/MFzJpqpZ+Je/32zQPDc97QcxlSBl0JoqtH71gojhRzetOppnLFmYQwp2mmQ:EOOGMlqP2KaS2Z1z/qo5cwpxNXA4","tlshash":"8633e9358ce5221302a313c137c2a647ae94d103b61ac956f6fe47895fcee91d63bb2d","first_seen":"2026-06-17T14:17:34.390186Z","last_seen":"2026-06-17T14:17:34.390186Z","times_seen":1,"resource_available":true,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":10,"connect":24,"send":0,"wait":376,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/syfup6ej/big_3bm92r.jpg","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:54.404Z","timestamp":1781705814404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/syfup6ej/big_3bm92r.jpg HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:54 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 21 May 2026 11:38:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0eeec4-1e95f\"\r\nexpires: Fri, 17 Jul 2026 00:24:58 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 49916\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V90VD1pdIJWvxzx1jlY2Ttu0nxTm20029%2F9MGk2eDCDvb27hRX642liqSGG7RjpDqfYwLfPdtlQpDmD5gsULKxW7p%2F6PmoOR3Bja1xHZdXztRywywTjvBkLoXyYrAQ%3D%3D\"}]}\r\ncf-ray: a0d2acbc0ef9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125279,"size_decoded":126081,"mime_type":"image/jpeg","magic":"PNG image data, 378 x 234, 8-bit/color RGBA, non-interlaced","md5":"b577eecc98d2c6c09ec8a064c5bedc3a","sha1":"4fc49041df2be2a00077e9fbf410dbfc0d6a4018","sha256":"7d81a4eba4c90af4a99c37ee392d9a9b7ad8db0990bf90d43c6824a7ff9b6dc0","sha512":"7bddfb217063ab827c53ff944733074d2853d5f962656f3a6eb6ad44e1875323bdbacbc06b3c49e5609e7b6d73d3ce2c25755b7f475cdd1618633a032cb54535","ssdeep":"3072:KC5LfcFlqPyfzINOh8LUDwFXzEHH3//aUKUJO:ZSIPLU4Xze/2UJO","tlshash":"7cc323de86411eabf5ef04fedc54759d15c0028967f5cf282ec85ea52a20974fc67e80","first_seen":"2026-06-17T14:17:34.393177Z","last_seen":"2026-06-17T14:17:34.393177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/font/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:57.055Z","timestamp":1781705817055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/font/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/static/syfup6ej/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:57 GMT\r\ncontent-type: text/html\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FP9zS9%2ByYMexjKhghzlo8N%2B097X1jEC1AssKdpOGW12Xrsp%2Bt4blWZWLQVNYWVUEmHjDWyTr5gQGYSIxRe7YDUiHWpqLlc4dJ5WzooSM9dC36bRa%2FjdkxCZZNblj6g%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-ray: a0d2accc99c9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1380,"size_decoded":1981,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"7b4ad69a373baec7f2fbdb2f327d19b7","sha1":"51a10839e406f202e7ce7e51a71c04cea661c058","sha256":"944eb8d70a4fc0df27bedb88dfa97a8eadb5f9efa49cba943655bafdcc3e5058","sha512":"6f35b0cc45e274bcc9922daeed1d6f633f56632ee55f6192ef080789821b1e5af5dd403fbe91d6f13ebce126fc40c5e9a33b1e45c3a4234915f23323bdd012d0","ssdeep":"","tlshash":"5321424aab430155e14784680fbae34872a5d11b8d87cc293cdeb3a2cf45a54d9f77cc","first_seen":"2026-06-17T14:17:34.386338Z","last_seen":"2026-06-17T14:17:34.386338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/font/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:57.061Z","timestamp":1781705817061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/font/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/static/syfup6ej/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:57 GMT\r\ncontent-type: text/html\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FbVtKtDVmC%2FadX8wfx1hCc5PlbOWyfqWV8sKP%2BEkwcQJMj7HdZZlrjwYMIjWAIiuuShm2k5dYfeKYmUmt53SRgLc129AscwIcvLOwD659prs5zqSWFR9LKTY93nJDQ%3D%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-ray: a0d2accca9cc783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1380,"size_decoded":1984,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"7b4ad69a373baec7f2fbdb2f327d19b7","sha1":"51a10839e406f202e7ce7e51a71c04cea661c058","sha256":"944eb8d70a4fc0df27bedb88dfa97a8eadb5f9efa49cba943655bafdcc3e5058","sha512":"6f35b0cc45e274bcc9922daeed1d6f633f56632ee55f6192ef080789821b1e5af5dd403fbe91d6f13ebce126fc40c5e9a33b1e45c3a4234915f23323bdd012d0","ssdeep":"","tlshash":"5321424aab430155e14784680fbae34872a5d11b8d87cc293cdeb3a2cf45a54d9f77cc","first_seen":"2026-06-17T14:17:34.386338Z","last_seen":"2026-06-17T14:17:34.386338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/font/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:57.067Z","timestamp":1781705817067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/font/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/static/syfup6ej/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:57 GMT\r\ncontent-type: text/html\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qjwf8ylLHHeGViQXaVKFbcGMHl9fdvPulnkp5GEUtCv2ISlVV6Eca8mPIJSEjZqDAB0ufsLtHAn4b7gR9Rq3jQLT%2BD8fJnEb3M7cDSNtvnDvfW5p%2BIc60lrvJE8n0Q%3D%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-ray: a0d2accca9ce783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1380,"size_decoded":1984,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"7b4ad69a373baec7f2fbdb2f327d19b7","sha1":"51a10839e406f202e7ce7e51a71c04cea661c058","sha256":"944eb8d70a4fc0df27bedb88dfa97a8eadb5f9efa49cba943655bafdcc3e5058","sha512":"6f35b0cc45e274bcc9922daeed1d6f633f56632ee55f6192ef080789821b1e5af5dd403fbe91d6f13ebce126fc40c5e9a33b1e45c3a4234915f23323bdd012d0","ssdeep":"","tlshash":"5321424aab430155e14784680fbae34872a5d11b8d87cc293cdeb3a2cf45a54d9f77cc","first_seen":"2026-06-17T14:17:34.386338Z","last_seen":"2026-06-17T14:17:34.386338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/syfup6ej/script.js","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:54.393Z","timestamp":1781705814393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/syfup6ej/script.js HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:54 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a0eeec4-36d\"\r\nlast-modified: Thu, 21 May 2026 11:38:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 18 Jun 2026 02:16:54 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tRuvgZ17%2FQjQd82FyQ8Zrh5Nos7k%2Fx39kbpY8JAAjqF1lZQ6VvDGowHJ462jE83jrFTsA8tay28x4H4BZczciwtJHZkXZUkH%2BPbs19kvpelcrSOudWfrbXP%2ByypJVA%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\ncf-ray: a0d2acbbfef3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":877,"size_decoded":1094,"mime_type":"application/javascript","magic":"ASCII text","md5":"98c719ed1872d12b4c2dac206d91c145","sha1":"9131b8220ff48f6eb25ae3951df0dadea9d7d4dd","sha256":"6d9906e313c70233ff233a9b2b55eeb0fe8c7ecdb63ae7cbf1d0f4960da8f20e","sha512":"25a4e7823e5c39ff0a7b79dd81e1bbaaef529d435d7e7d1fac1798e659f8528993e8bf209d3bcdbc0ab5cb88a2d217d183583b3d73348a60180f9f1de319a240","ssdeep":"","tlshash":"dc118c7a3052357580bf34b593cb84e03d10a0cbbc5790a3754cce892f41aa56877de7","first_seen":"2026-02-27T10:01:55.118793Z","last_seen":"2026-06-18T00:35:57.979961Z","times_seen":12,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/syfup6ej/logo.png","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:54.402Z","timestamp":1781705814402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/syfup6ej/logo.png HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 May 2026 11:38:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0eeec4-36c8f\"\r\nexpires: Fri, 17 Jul 2026 00:24:58 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 49916\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sH2ONxF75JyPjrtA3pbi8X12iCz%2FurTAYy%2BP5omAuhoUrXIaF%2Bc9vpmpYDWyqJof97ojaZi6KhyOa1UCcu48GcspZ%2BKqlD1jMqVlC6dJUZZMgLljwzry%2BJ5Q%2BTkx2Q%3D%3D\"}]}\r\ncf-ray: a0d2acbc0ef5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":224399,"size_decoded":224595,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"4808c1010b9e66a80c83b0180b7a5673","sha1":"b3896a79d50e97fc3d328375faa207e5b3eb5042","sha256":"74ace9960c9b4aa211feeae6f05eaa0a0892fd9a3175c8250158e5771eb90743","sha512":"0adb6b2c8c040ddbda4e95d64ae240f6a28ff6ca4671731bbebec00d62dcd368e0d7d0ae757af1ed908b6dc64bd7515ee45d3ffa356b84eda01c4890e519c396","ssdeep":"6144:6aMaXXAtz0uNiLJhG+yNeVgFqVHz7G7Dxz:AgRYifGDsVZT7M","tlshash":"12242293f523ccdb5cf61e06638bf0d4e504f634135063ad4e48bad822796d78baa19b","first_seen":"2026-06-17T14:17:34.398861Z","last_seen":"2026-06-17T14:17:34.398861Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/syfup6ej/big_3dg92f.jpg","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:54.405Z","timestamp":1781705814405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/syfup6ej/big_3dg92f.jpg HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:54 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 21 May 2026 11:38:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0eeec5-2dea6\"\r\nexpires: Fri, 17 Jul 2026 00:24:58 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 49916\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=btahdF%2BvtxSnNKmifWGVvz95ASlfMHY%2BuEVdN%2FvgJIwXFMdcSEL8Bcu3eJv%2BaXo7Hrtmh%2BFKNilihZ6woyvHnRzQY%2Fexed6v0DVSfaHfoG%2BfcBOKdk2m%2F9xEefYEPQ%3D%3D\"}]}\r\ncf-ray: a0d2acbc0efa783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188070,"size_decoded":188904,"mime_type":"image/jpeg","magic":"PNG image data, 432 x 243, 8-bit/color RGBA, non-interlaced","md5":"75dc7bd5589e3a46c4c7d03957ea98e9","sha1":"fda0936c4c67d8ea4b0da93cb3f0e3a164d93dfe","sha256":"8094e49ca61c4d20762c79cc4317e4fb52f77b4868c4adbf40bdc060836b85c3","sha512":"f227d6552815473c8f46b69889b2e6e309be9c551e3ef049f03863b13e60bf299c45df2e70aa7d8c37324c4146380454f347019ec3d28c4fb7ac46c56c4c6212","ssdeep":"3072:mCl9QsRTxmbw/LwBb4JkquJGS3Go/AkbkXcX9wj0qD7n0BlWN36tjlMpIMbXr7zB:mMQsHmbZF4qquJGSWovkXcX9A0qD7n0u","tlshash":"760413b6cdea0156ad8e6a6adbc1fcb04be41277ed33b204b51fdcc53cd96a12124742","first_seen":"2026-06-17T14:17:34.400672Z","last_seen":"2026-06-17T14:17:34.400672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/font/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:57.060Z","timestamp":1781705817060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/font/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/static/syfup6ej/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:57 GMT\r\ncontent-type: text/html\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zCG2lEnWXw%2BMcohzd%2B77yQIUt3ldzj675ZJr1A2JXb27pTr5pQzGjnzTRRF9%2FBwrY5%2BA3iIaS0j2q5SEOAsMH4ApQRn7qr6LI9h%2Bl9BiPtiGB0uyl147pTpBoXdklg%3D%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-ray: a0d2accca9cb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1380,"size_decoded":1990,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"7b4ad69a373baec7f2fbdb2f327d19b7","sha1":"51a10839e406f202e7ce7e51a71c04cea661c058","sha256":"944eb8d70a4fc0df27bedb88dfa97a8eadb5f9efa49cba943655bafdcc3e5058","sha512":"6f35b0cc45e274bcc9922daeed1d6f633f56632ee55f6192ef080789821b1e5af5dd403fbe91d6f13ebce126fc40c5e9a33b1e45c3a4234915f23323bdd012d0","ssdeep":"","tlshash":"5321424aab430155e14784680fbae34872a5d11b8d87cc293cdeb3a2cf45a54d9f77cc","first_seen":"2026-06-17T14:17:34.386338Z","last_seen":"2026-06-17T14:17:34.386338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/syfup6ej/styles.css","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:54.384Z","timestamp":1781705814384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/syfup6ej/styles.css HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 May 2026 11:38:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a0eeec4-521d\"\r\nexpires: Thu, 18 Jun 2026 02:16:55 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cFwbiOtmQ8gpdl8IU2xahJZRGMpzIXh%2BRjGSB0jh3wvDXRSmNlvKnu4oJ6drfuGRBfiGCWA3PZtvB41I1cfHfzD4hPS%2FlnOdGFsBP9riiaLPikwXS8uYWAkE1J6LwQ%3D%3D\"}]}\r\ncf-ray: a0d2acbbeef0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21021,"size_decoded":5492,"mime_type":"text/css","magic":"ASCII text","md5":"a085b64618ef75035dd168d136150d98","sha1":"1984a6f25ecccfc64868e48addfd10554e168b7a","sha256":"ef6cfe25a7bf5887d5a9275c8cc778275ca7db13c88e3aa992460dffbc65d06f","sha512":"a4a1f0937be93260f13aee513676d7585286f45b66be805b8161e455e4d3c2424435aa82f33e53583ac30c7f8fa8dd5a89fe31145f2e3124014b5dc33d6b0faa","ssdeep":"192:pFn9bEKv9iAkUcb+PmVzUaHbUUZElMMjyqSI93Xfs4GEam8Ja70Spodjz5DYz6gC:pUKiQjCJ97BdA4E1F0rp","tlshash":"c3920f025a6366716837921e6bdfab6d3768ac438e14dcdd3add52009fc83fbd111b88","first_seen":"2026-02-27T10:01:55.145545Z","last_seen":"2026-06-18T00:35:57.979405Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/font/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:57.057Z","timestamp":1781705817057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/font/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/static/syfup6ej/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:57 GMT\r\ncontent-type: text/html\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fHRi0E6YCYGtzlfPucRSz5rXuilOHkAzfJo6DGMHORuJ25fWdqhjoXjNNqxQpN0270jyEEt3icpgKVYL8Q%2BZWkGNZml2OmNidf1fNTpPDBX0GG2W69aNR9Y2YqfebA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-ray: a0d2accc99ca783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1380,"size_decoded":1978,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"7b4ad69a373baec7f2fbdb2f327d19b7","sha1":"51a10839e406f202e7ce7e51a71c04cea661c058","sha256":"944eb8d70a4fc0df27bedb88dfa97a8eadb5f9efa49cba943655bafdcc3e5058","sha512":"6f35b0cc45e274bcc9922daeed1d6f633f56632ee55f6192ef080789821b1e5af5dd403fbe91d6f13ebce126fc40c5e9a33b1e45c3a4234915f23323bdd012d0","ssdeep":"","tlshash":"5321424aab430155e14784680fbae34872a5d11b8d87cc293cdeb3a2cf45a54d9f77cc","first_seen":"2026-06-17T14:17:34.386338Z","last_seen":"2026-06-17T14:17:34.386338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/font/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:57.472Z","timestamp":1781705817472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/font/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2 HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/static/syfup6ej/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:57 GMT\r\ncontent-type: text/html\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jxJelpwFl13LzWO5DZdh%2BkDre0sUIA72WSmSxGLknrIAPUBhAhGMzN4RgZ8PxjbSNjr8e9nAGZbgKUOJf6yyeXyhx2WUYg4Jc5kp69VlPn5rLTpSj%2BaZELvSGAhzaQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-ray: a0d2accf3a47783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1380,"size_decoded":1980,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"7b4ad69a373baec7f2fbdb2f327d19b7","sha1":"51a10839e406f202e7ce7e51a71c04cea661c058","sha256":"944eb8d70a4fc0df27bedb88dfa97a8eadb5f9efa49cba943655bafdcc3e5058","sha512":"6f35b0cc45e274bcc9922daeed1d6f633f56632ee55f6192ef080789821b1e5af5dd403fbe91d6f13ebce126fc40c5e9a33b1e45c3a4234915f23323bdd012d0","ssdeep":"","tlshash":"5321424aab430155e14784680fbae34872a5d11b8d87cc293cdeb3a2cf45a54d9f77cc","first_seen":"2026-06-17T14:17:34.386338Z","last_seen":"2026-06-17T14:17:34.386338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3tbetoi.com/static/syfup6ej/favicon.ico","fqdn":"3tbetoi.com","domain":"3tbetoi.com","tld":"com"},"ip":{"addr":"104.21.88.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://3tbetoi.com/","date":"2026-06-17T14:16:57.671Z","timestamp":1781705817671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3tbetoi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 22:53:32 GMT","end":"Tue, 25 Aug 2026 23:53:08 GMT"},"fingerprint":{"sha1":"F4:E4:0F:A0:0C:F2:29:C3:C9:83:C1:1E:4B:2A:05:68:84:B9:49:3D","sha256":"06:B9:A2:E5:F9:7E:5E:93:C3:A0:25:A7:CF:3B:A2:3B:56:89:4F:C4:27:7F:3F:5A:F7:53:FD:5B:E9:FA:A9:1E"}}},"request":{"raw":"GET /static/syfup6ej/favicon.ico HTTP/1.1\r\nHost: 3tbetoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://3tbetoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 14:16:58 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a0eeec4-ae0\"\r\nlast-modified: Thu, 21 May 2026 11:38:44 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KRZFbGwbskbbbm1iC2wUP757obXhZDFePxoGw5nEWzyUAaLmgWJDfxjGpneIIAh3ioJg8wFaA%2BPoIgwUVglE6HfAnEv88NACPsZmPJ23c65mwNPQgJtfzGmHp58dXA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\ncf-ray: a0d2acd07a6c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2784,"size_decoded":3469,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"bbac6710b8c22114a0b8186a1ce0ec94","sha1":"a5934d9e4cf8128d60bedbbf55995747396957c4","sha256":"892a12c62ebc88a282cc8357728e5c619c0d0b1d6e21f67831deb20affb4135b","sha512":"bec9d47c72fcf2294ff99e793f39a742834730a9deabdf222b346a4e922ef06f1d2aa4902a299ea9e0ad95223aca8b4ae5ce812385d657ed219a7aa9c90fbe60","ssdeep":"","tlshash":"76516c5367709e848d732a4ce2bdfcfb13e63091562abebe323582c12c5d032224b024","first_seen":"2026-06-17T14:17:34.404058Z","last_seen":"2026-06-17T14:17:34.404058Z","times_seen":1,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"3tbetoi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"3tbetoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}