{"report_id":"c93ef3b4-3318-404a-9fa9-7068b435bad7","version":0,"status":"done","tags":[],"date":"2026-06-12T04:54:14Z","url":{"schema":"https","addr":"www.808bola253.com/","fqdn":"www.808bola253.com","domain":"808bola253.com","tld":"com"},"ip":{"addr":"172.67.136.155","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.808bola253.com/","fqdn":"www.808bola253.com","domain":"808bola253.com","tld":"com"},"title":"808Bola - Live Streaming Sepak Bola \u0026 Bola Basket | Skor Sepak Bola, Skor Bola Basket \u0026 Skor Langsung Hari Ini","dom":{"size":156536,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (20233)","md5":"40f4705715a68148bdd7ac3b6c817e51","sha1":"5891d0cb29773234a8edc4e2d938fc2175c44ef4","sha256":"ead77bdbb079bc4efcfd02449f370ec4d21da777644b18950745fb4bbedd7339","sha512":"37e8864548bd95b16866a45b382c1b43b1ca1046654ad74531121e29f11d2719e0d7d0d044f304cc98aa4bbf177134948f0102e56981a0f9f7ac36d1e73ac157","ssdeep":"1536:CIiIvtYay/Bnd/BFD/Bzm/BOq/Bvs/BUW/BzP/BT2/BL9L/BTo/BR+maz1NuY1mr:5WkJefRWTd8p","tlshash":"66e3a8a2600851b506b3cbe9e4663f967c93f35fca8e46929bec06685fd3cf67c04491","dom_hash":"domhashad07c88086bf678d106b6373e7c1deaf","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.808bola253.com/","fqdn":"www.808bola253.com","domain":"808bola253.com","tld":"com"},"ip":{"addr":"172.67.136.155","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-17T04:54:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"newsapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"newsapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-07T22:29:27.813409Z","alert_count":0,"request_count":4,"received_data":1909293,"sent_data":1959,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dapiab.aifvfjuf56juh.cfd","ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-22","domain_rank":0,"first_seen":"2026-02-28T14:54:02.740806Z","last_seen":"2026-06-07T04:36:18.113878Z","alert_count":22,"request_count":11,"received_data":482274,"sent_data":5975,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.808bola253.com","ip":{"addr":"104.21.86.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-25","domain_rank":0,"first_seen":"2026-06-05T05:34:14.09108Z","last_seen":"2026-06-05T05:34:14.091081Z","alert_count":0,"request_count":3,"received_data":194197,"sent_data":1470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"newsapi.aifvfjuf56juh.cfd","ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-22","domain_rank":0,"first_seen":"2026-03-07T14:21:06.421636Z","last_seen":"2026-06-07T04:36:18.149951Z","alert_count":4,"request_count":2,"received_data":4096,"sent_data":1072,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cfapi.aifvfjuf56juh.cfd","ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-22","domain_rank":0,"first_seen":"2026-02-28T14:54:02.732969Z","last_seen":"2026-06-07T04:36:17.157532Z","alert_count":24,"request_count":12,"received_data":13222,"sent_data":6846,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"accounts.score808cc.com","ip":{"addr":"104.21.54.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-30","domain_rank":1363864,"first_seen":"2023-10-12T19:19:08Z","last_seen":"2026-06-07T04:36:16.869693Z","alert_count":0,"request_count":1,"received_data":99760,"sent_data":586,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cfcdn.aifvfjuf56juh.cfd","ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-22","domain_rank":0,"first_seen":"2026-02-16T03:06:10.056643Z","last_seen":"2026-06-11T05:15:39.415483Z","alert_count":70,"request_count":35,"received_data":2484014,"sent_data":20711,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cfstatic.aifvfjuf56juh.cfd","ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-22","domain_rank":0,"first_seen":"2026-02-16T03:06:10.073301Z","last_seen":"2026-06-05T05:34:14.790575Z","alert_count":94,"request_count":47,"received_data":6341377,"sent_data":25478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/f022e4e5.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e2f9f06b306a0eaf989a77a856a5fcf","sha1":"f40a07f6d548af1aac7fbfe3f5340329472b7f87","sha256":"f3aa8559e8a3e8e36f3b93172770cf5554856416dc4f1747bbcf85895bd45feb","sha512":"088a01ebdeaf5379496a88e7e14bc6793332764dfdee8090f4f5b2acecfdcc9b952a17e029a945865000e8148b75589b23c60ce8dec3972adf7c01bd510b275a","ssdeep":"192:y/4VqThHuqfZKrSu++/HU3iRfUDU73IktQ7aoGgfRR+cBKUoTvPrlmLqr5xZD6sN:9VkF9IGuLVRfqU73I3aURRMUoLPx/nBR","tlshash":"ac2275c3b3d1f56912af5b3bb21760c5f43d28bbb9ab8c9ac514fca0b960711e190671","size":10068,"data":"","first_seen":"2026-06-12T04:54:28.708767Z","last_seen":"2026-06-12T08:40:50.078409Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/bb8914fase5.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"616c3032b3826f8bed95a15866a63c32","sha1":"b655c868a36aca278137923cd5d19493a753c2fd","sha256":"0f0c0275aa299e9539355d7b7cae93cb2711f5f1eacc3a39a1988d2c43a8547b","sha512":"9c50289e062a3eb248421526e90d914a48f9922cb9d51d229c7c73a82e35e2fa6b06e9e8a94f53cdfd34b1576b664904d9e974a0bd1e8a7e080df1c3fa1b843a","ssdeep":"1536:0rbof0vhI96FCGJyFuXGbf6xJw6cgVFXZhKdg0UkxgYOvlmE7m0ODRucwuB70QsV:0rbof0vhI9rFuXG2xJw6sBYQsyPdKPWS","tlshash":"c483a540b3e0748cc2ab8fb6b73bb0eaf46f399a3dd4584bc111fd906964919d6e1931","size":87319,"data":"","first_seen":"2026-06-03T13:57:16.046467Z","last_seen":"2026-06-12T08:40:50.133161Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/a8bbf821se39.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7efa51066d1d25320252ba2886854bd","sha1":"b7fcacc6318c9f2bbe3c51b1d627a1691697929a","sha256":"f77ad727b9f8f764572fe932e6f324f73fe98ebff7915b3253f4a0795889dbc2","sha512":"24fa6513d88f1f437599eccf0b1fbfdd3fea49e540d4ea363ee805d66c8ae9c0329429dac8d2db9bab48273a36c8b9e8e3357ee8b761fa7359a7f30fee9dd18c","ssdeep":"3072:C5DHoD0hgVPwjucrfUvEsB74PYVxyhaxyh0HQEDDV8k5M2X+OlSAYV:C5DHo2gVPwjuSfUvEsBkPYXV83AI","tlshash":"f1f3f820b3d1f5fc8fd757f1a137b2e8e96b2ba6348c6856d021fc9021a0729d6e8435","size":172378,"data":"","first_seen":"2026-06-12T04:54:28.725066Z","last_seen":"2026-06-12T08:40:50.129691Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/261503c7se4.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35bdd908514c31e38d2cecb6bd10db43","sha1":"34a5e8c74f803a94e09a98fab64bee40ae7f8411","sha256":"26fdc892a8f4f9fffa79bd09e991108933a64efe39925893edaf86fdf1a892fc","sha512":"a0dc54139dfcb067adf8db411c943adbaabc99049a46145dff6f31c472dfcf2c0d57d12747aefef3d28672552fabc26bd01adf7fb11fa169816ca5b6f14407bd","ssdeep":"6144:/K39K5JO+RphcExq6u8TidX3uyvm28e6LA2zwFxY2UPxGF/C4vi8CSgCt/iEPI6I:VphcEnmdX3uye2wLA2mxY2UPQF/C4viB","tlshash":"0534b702b3d034e89bd78ba7b72ab0d1f4bb04673d44586ee121bd519af9618d3dd8b0","size":233252,"data":"","first_seen":"2026-06-05T05:34:21.079619Z","last_seen":"2026-06-12T08:40:50.134633Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/e1ce9af6se1.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9f80de0d3d5d9096f2c5602fa3f27a5","sha1":"8a651b7f1b5bd2057ea37efb1100ba1ce8b6bc2c","sha256":"5e1abf59b3c6a7977f570643290e97db27cedc08497a58c585bc33cfcf98bf48","sha512":"d59beaabc2b5e5ea9c31877184461f470602336bdf4cb546911f4f52e5788f48aad26ede74ec6b76f5a035d92c4085b69d0bff3ffcf4a3c4fd978274ed3e0a87","ssdeep":"192:09bL1eJFIQcTR5TawcchshJM74rOQvSIkK/IK4KQbsIgj2sdp46PzfT7n7JA/YRx:e1eJFjcTR5TawHGC7OvbEKJQjgKsTjPL","tlshash":"58329700b390f8a807e397b5c537f0cdf91f1a1a7944b467d526be80bea5728c5b5835","size":10987,"data":"","first_seen":"2026-06-03T13:57:16.032486Z","last_seen":"2026-06-12T08:40:50.149687Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/7cd510d7se2.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e020151dbcf06606f5ae5f3927f8dad0","sha1":"6f30143e61487e657a704213d7f104d92ee51437","sha256":"3d0678435fb6361a708ee0ceedb4d7738eb330344f5477463ee0e2d63e46f2ab","sha512":"96c12127a04e9698f231e3c91bfcd68cda6f730e99b034221a01d3199f53121206edaecd85c386b336f114a472763575694dc1faa3d689683706341e368650dc","ssdeep":"","tlshash":"d911c068a1a4f5b6964753f00a3773f8d02b07aa38496462c33cf864393152b9a54e3c","size":1066,"data":"","first_seen":"2026-06-03T13:57:16.131483Z","last_seen":"2026-06-12T08:40:50.084943Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/d9b08bd3se11.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c61f34b1c2564de0e33028eb670ef966","sha1":"e5bdd49c442fc3aaa68b39a24a187394fb046670","sha256":"e34b46f6aa1066da8236f00031a676a9f2955417c753ec25382edf7716f1bc72","sha512":"801d5d3f0a7c215bb00e5ce010a8977c50bd2aca43cdb8fa14dc6e958e623c1a19f2d503a409a49d99d15136dee74aa5cadc7dc06c1a2f80de3049122d515bca","ssdeep":"12288:c4j36aXNJAxWG7KPMdmKFaOKLkizyZyThNPEk7l+DZIx:7MdmKFaOKGZyTstIx","tlshash":"78b49340b3d078a906d79bb1b32fb0e9f46f19ab3c54089bd111fde02eb5618dae5934","size":534078,"data":"","first_seen":"2026-06-03T13:57:16.107184Z","last_seen":"2026-06-12T08:40:50.09954Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/1b308370se10.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3c480c6007dea01ceb96ea0663d56dd","sha1":"5d0fe51e4dd310fe9a6e58d5ffb158e386a54c94","sha256":"ea907e54e04f388e52e3bc172cb647e05918c4cb250cc20dd81f7d91288a9d1f","sha512":"8bb84403c08fff128aa08d88af138e300e6ff2a39fdeb099e7a5cd42bc6e611bc68c4c3c7d3b14ba9c97d3ee9d4e64446f931959327df7245a11e956f799b1d9","ssdeep":"49152:e/dpsco74WcP31NZb9TGw1Lj1BzpTt34iPlKx7XjYLCyDzbIHkndMrAie4U5zt:QtP3db","tlshash":"75852b91e280a2bc46478fb3a23a76cce5674fa576847cc1e2d9ed8874f470ce1b5970","size":1718563,"data":"","first_seen":"2026-06-03T13:57:16.14704Z","last_seen":"2026-06-12T08:40:50.155857Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.808bola253.com/","fqdn":"www.808bola253.com","domain":"808bola253.com","tld":"com"},"ip":{"addr":"104.21.86.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6a3aa9e9653c76810160268fdefaf4ca","sha1":"318fe4e47ddd7f1ecc5d9195a962fc39c757af47","sha256":"15674bd64f881b0911eb98129eab57ea258087f235fc7a9c0bf71985ac4f221f","sha512":"857827129adaacaec7d1e3a5da2a62b756169605d653d18352512a0755567be08700d5d61a95e21ffdfbb0d14c9ac786043ccd8887ddc82ba1f17eb9ebe48812","ssdeep":"","tlshash":"0f90029534c210249557295401179ab4343414b0145448409480ada138a1220531555c","size":49,"data":"","first_seen":"2023-04-15T00:18:54Z","last_seen":"2026-06-17T17:33:52.914108Z","times_seen":623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.score808cc.com/sso/check.html?_v=v1043","fqdn":"accounts.score808cc.com","domain":"score808cc.com","tld":"com"},"ip":{"addr":"104.21.54.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47821275bd20107db3e956bf9404ab25","sha1":"2df38a5f5bb01ea137d019e78cc9b6c2a32a4212","sha256":"3a461e7d5176a4e921a9ca36980e7817255ef4ce4d13f5672bc73ce543b8573a","sha512":"b3cc71eae86f97d14cff0c696268939ab98bc199b949d6dbf45919e609b38580a162deaa1b1bf340200e58c47b3f321f1f5f86d0abd18d4a96996d1f167c4790","ssdeep":"1536:0AUeP5BHXLlaQNbnlZtfRC9S5drQNhseAiYb:hUeP5BxVNbl7w9wdr26","tlshash":"dca39488b6d5b05a07a374b0002f540bf1bbaa68b49d8894f365d4d5bcb988ed077f7c","size":98702,"data":"","first_seen":"2026-06-11T20:04:49.83012Z","last_seen":"2026-06-17T17:33:52.907194Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-K9964NME8Q\u0026cx=c\u0026gtm=4e66a1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cd2abef1ce3366b869eaefe7ce88708","sha1":"635e4dd000282e3c19518fdf86a0f7e9e4b59288","sha256":"7163c40740405b5d89c3048d3c28e0f16e2aef2a0d381c7aaf776a265d2b526e","sha512":"a854e959179afb809c29832d43df8d0fab492b206b62ef9f5fc5de65f19965eb2edcd260e5ded84f52ca46dcde68bacd8520c49249dfcdaee94a8b383114f6bc","ssdeep":"6144:peLbRknTI8s5XtjLEEQT1TpqBEzVTI1Ce8G3h7Y1MD9f:UanTsEZXysu","tlshash":"48a4e9ceb3d674225296f478903f01cba57b29e2b448c899f189cce42e7469a4177f7c","size":483541,"data":"","first_seen":"2026-06-12T04:54:28.711911Z","last_seen":"2026-06-12T04:54:28.711911Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-XMZWSVMSEN\u0026cx=c\u0026gtm=4e66a1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f73f401268ea3c8c546c4acb88c4b827","sha1":"b5817e6a01ef6198d3cf1b2817ac810447ee0a7a","sha256":"bbca972087d82d90585ce5a96e1f4fe1be7c485551d0a8b9cf6d5f66c09ae0e3","sha512":"31b2f49553fac1e1869c2a91872edce7bdffa0647f97970fa4d821f14288a098f9a86cfc466b1364c94517911b3d5fe9f9a2b40e47ede3222b5220445fec8f63","ssdeep":"6144:VaZbRknTI8s5XtjLEEQT1TpqBEzVTI1Ce8G3h7Y1KDpf:MknTsEZXysU","tlshash":"77b4e9ceb3d674225296f478903f01cba57b24e2b458c8aaf189cce42e7459a4177f7c","size":494420,"data":"","first_seen":"2026-06-12T04:54:28.773066Z","last_seen":"2026-06-12T04:54:28.773066Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.808bola253.com/","fqdn":"www.808bola253.com","domain":"808bola253.com","tld":"com"},"ip":{"addr":"104.21.86.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"14379ebed7bfbd0b37770780ad096cf4","sha1":"74c986b45783764481698bb35690ce7166daecbf","sha256":"731f2746ade5516f5c9ae085033caee2adbac7c112d49799b3c99cfe76117b5b","sha512":"8988b9b850e4fdd7df9e5a67d56a6b7d589fa4b487f5672bb7b750490006ee06b7af2343f7bba303d5a58bfc3bed50aec0c1508038f5c150d9085946312c5e0b","ssdeep":"","tlshash":"c8e02b5b34965814274a0dfd23b2a21d30e33365b6571c21d9bdec6c29a2edb4551d8c","size":296,"data":"","first_seen":"2024-06-17T18:48:38Z","last_seen":"2026-06-17T17:33:52.901897Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.808bola253.com/","fqdn":"www.808bola253.com","domain":"808bola253.com","tld":"com"},"ip":{"addr":"104.21.86.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e387457aca08430b6299f63520fc10b7","sha1":"8e13053193ff3b8ab75e2add561257d42bdc6aab","sha256":"d50f4a1c498c89b6edb98e4ba106f8f815feb8c6bce4beb154595492fc226f27","sha512":"330069180b3e080f4c7e84368a5a25f7a9049fe31a84bad3fff1ee00bbe338bda8ac956f74009dafafac08964435786652bac60f707ed485d3b712f7713d4141","ssdeep":"384:wDiE7YeqKSaJ2xzJ2DwB0neEJKwohUTdw3Yg8blJV:+7NpRJ+J+wB0eEbTd8Yg8blJV","tlshash":"37620bf7102427b5dccec979a0b5aa9ada500ffacc64534e8d9c9fad108a44cff89450","size":15195,"data":"","first_seen":"2026-06-12T04:54:28.813129Z","last_seen":"2026-06-12T04:55:11.492203Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/67fca86cse3.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10392572379a30ee615f3444490a04a1","sha1":"53b12893f9ecd1b991452e25b9f81f640bf55cb7","sha256":"5220baca2fd2621c3529444e44d408bee57c1530150dc573ff6ea3a704aee867","sha512":"7509add644fdd1634eb8a5afd17bf700b0b7d457b353cea39a24e1dd71ec9a732c07a35058dc2013cbee79039040666b7c2a739c0a85f8a2bd86b11603a29cd0","ssdeep":"","tlshash":"be3100547282a9b52fdb1738123eb0dec83b0018350ceca1e1b7783467e5b24e929b79","size":1507,"data":"","first_seen":"2026-06-03T13:57:16.126419Z","last_seen":"2026-06-12T08:40:50.063119Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/05af493fse7.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"20a6e8fd7edfbb0a972cf57be35119e8","sha1":"2c76bfaa622dd16fb289b9dfd08e7c53302bf1d0","sha256":"ebff34f0f26710b506df21c90089c4057fe0ff29900688b58cad4ddb588d09f0","sha512":"b5ffc6cb379af5120297245f14da37892da24f9159795bca0dd065afa785ff68a7ae1c7ef24165a3ff6dfd58218dee70670bfbe6a5b6d6d282f83432bc7e4f27","ssdeep":"384:bIs9e7Ya1Yy+pz8fruelTBklG7BSUCIyzd4pQEL7fb0kD:0s9e7OBifSelTBc8pQEvbdD","tlshash":"0072d738f2a0b1a68f5b8ef82633f0dce51f11aaf68c7806e3127d9934b6215d5b0574","size":16021,"data":"","first_seen":"2026-06-03T13:57:16.123288Z","last_seen":"2026-06-12T08:40:50.075656Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/5e569a92se0.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"358514ec1d2b2b9aa119e62a2acd59eb","sha1":"a5f80a09ce7fa5d2ec8d9b374c7ce82e17483f4a","sha256":"e775b48976d6299f3d5aa096f420c6efb3ee433d1f5696ba6b9c897fca7f8737","sha512":"7a5beb05d9400707d5f9cc4c6574e9a9fc4b7e4d3acc961355292feb4e57f3ee9528072f0b2c2ca354df9c52e8af53cf84093ec6786510e779a039ae4d01c345","ssdeep":"","tlshash":"a2410fa8718064644eef9375e33772dcd42f10693b151466c122bc70e768b29ea99f74","size":1904,"data":"","first_seen":"2026-06-03T13:57:16.119319Z","last_seen":"2026-06-12T08:40:50.096422Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/87558eddse34.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"be148906a1e5a1255791ffa1db0d2708","sha1":"bad168f2a45354d98360051ff24ec3091416658c","sha256":"b636dc239e146c930ec61e4c965ec398dfbf4cef3b58cc21bf0a6891059dbbc4","sha512":"1809aa9d24fa5e16c005467a181dd803fc7e95d2fd1537d44c7dac5f86c6fc5f4d74ccf98e67de94c609a9abb2836050357ac3683ed9f48e95c0373429954369","ssdeep":"12288:pktNzyOoOCy9cgHPNZ1z9vkzgIiTXKsvAVlzeulbzx58iFa4WbZMZddZ9FuFvKjN:W2+9viEIVlzeGzx5ebZMpZ9FuFvKjN","tlshash":"0f25c940b3d0749946d78bb2b23bb0d9f52f09ab388c1c5be111fdd16af5a08d6e9970","size":1022315,"data":"","first_seen":"2026-06-03T13:57:16.018937Z","last_seen":"2026-06-12T08:40:50.125291Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-XMZWSVMSEN","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"921c53beec8d0f4f389ede6aca05a684","sha1":"58db9ba9d0781a462fde5de1858531206749d9cd","sha256":"360f4a6fa2ae159a23eb82200a9eb5bec27245c910376361b7c59f08d0f3332b","sha512":"14d7e28c952526949245d8ae132c70eeaa7ad903902f7f67189b7c405577d83870d2981dd787f5a9a8f8c821f830d426d8ea05467c29fff1c6a1d84db80b4154","ssdeep":"6144:VIZbRknTI8s5XtjLEEQT1TpqBEzVTI1Ce8G3h7Y1KDpf:2knTsEZXysU","tlshash":"cbb4e9ceb3d674225296f478903f01cba57b24e2b458c8aaf189cce42e7459a4177f7c","size":494389,"data":"","first_seen":"2026-06-12T04:54:28.717378Z","last_seen":"2026-06-12T04:54:28.717378Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.808bola253.com/","fqdn":"www.808bola253.com","domain":"808bola253.com","tld":"com"},"ip":{"addr":"104.21.86.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"14379ebed7bfbd0b37770780ad096cf4","sha1":"74c986b45783764481698bb35690ce7166daecbf","sha256":"731f2746ade5516f5c9ae085033caee2adbac7c112d49799b3c99cfe76117b5b","sha512":"8988b9b850e4fdd7df9e5a67d56a6b7d589fa4b487f5672bb7b750490006ee06b7af2343f7bba303d5a58bfc3bed50aec0c1508038f5c150d9085946312c5e0b","ssdeep":"","tlshash":"c8e02b5b34965814274a0dfd23b2a21d30e33365b6571c21d9bdec6c29a2edb4551d8c","size":296,"data":"","first_seen":"2024-06-17T18:48:38Z","last_seen":"2026-06-17T17:33:52.901897Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.808bola253.com/","fqdn":"www.808bola253.com","domain":"808bola253.com","tld":"com"},"ip":{"addr":"104.21.86.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e387457aca08430b6299f63520fc10b7","sha1":"8e13053193ff3b8ab75e2add561257d42bdc6aab","sha256":"d50f4a1c498c89b6edb98e4ba106f8f815feb8c6bce4beb154595492fc226f27","sha512":"330069180b3e080f4c7e84368a5a25f7a9049fe31a84bad3fff1ee00bbe338bda8ac956f74009dafafac08964435786652bac60f707ed485d3b712f7713d4141","ssdeep":"384:wDiE7YeqKSaJ2xzJ2DwB0neEJKwohUTdw3Yg8blJV:+7NpRJ+J+wB0eEbTd8Yg8blJV","tlshash":"37620bf7102427b5dccec979a0b5aa9ada500ffacc64534e8d9c9fad108a44cff89450","size":15195,"data":"","first_seen":"2026-06-12T04:54:28.813129Z","last_seen":"2026-06-12T04:55:11.492203Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/7c7ac50bse23.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6641603394843906a659910315c723f1","sha1":"1b6fe507e6859373436192e9b7c89c193f48b792","sha256":"f3d45f392e05e33d762f3cd44ff1ccfe4c1c76d324d7f8502d68b1bfd7a00b59","sha512":"8839cdc736f57bb3aad623f44d2cac3b25a10e3facd0bcdce743cfbe531ee524549cd40f99d30a4e6237395a60ef294cb77be1e428cd9c2cd3bc31d3934e1ed6","ssdeep":"1536:wLVtrGZaQhzOJehtBH/Ev/2xi3aUSuZaU2h/uYEfkCKOEUuOVKl+fTurf4pgzm:wLCGv/hSh/uYukCUoLuL4pgzm","tlshash":"c814c570f240f5fdda97ca612d3ab2acd43717adb09c2c66c139bc156aa062cd9dd078","size":194166,"data":"","first_seen":"2026-06-03T13:57:16.011818Z","last_seen":"2026-06-12T08:40:50.153999Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.808bola253.com/js/a.d58a70389e24c5652b8a.ssobridge.js","fqdn":"www.808bola253.com","domain":"808bola253.com","tld":"com"},"ip":{"addr":"104.21.86.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27509dcce3a16552ecf3aa581a2286f9","sha1":"830042fc70cf2b041e388dbd9ed1a6708fb29446","sha256":"53db589759093da5689b0c3f87d8b556c5b1567eadcc03ed2bcb74b265c92727","sha512":"de35c35fc0d4fe337a4dd39b39fd628b9a055f73e0eda0e5647941f11b52190f81f39e62fb4f3a83887ce97542d619dad48c8e1db94fc29ad7074712aa13d163","ssdeep":"1536:0c6xT+wzk62VlD8bSJtfrj9SPBrQfhg8gzR:l6xT+ZnD8bSLH9CBrwIR","tlshash":"8ba3b488b6d2b05a07a374b0002f540bf1b7aa58b49d8894f765d4d5bcb988ee077f7c","size":101973,"data":"","first_seen":"2026-02-16T03:06:18.701541Z","last_seen":"2026-06-17T17:33:52.737732Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5LC2JCFG","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d8d97376460716f2f6cb1924070cea4","sha1":"f303b2f0ca52116486ebcc35346c5c4eb37b38f5","sha256":"c3cac2a4613f241d004932ee1e1611b0ab894f5685301606b329bdc06c9dc35a","sha512":"8f706c37b9658205d72d4aec72f8ceb19ef552ad434faa6f90aad67be7b5c794f96b050b10a8064e055f3da092f2dbb71584ab3f267541fd456e6b8416e88541","ssdeep":"6144:LpwbRP8s5XtjMzQt1TpqBEzVTIFGLFBHf:LpVoDZN","tlshash":"3e9409cdb3d974728396a575803f058ba57e24e3b44ca885f189ccd42e705aa2237f7e","size":434541,"data":"","first_seen":"2026-06-12T04:54:28.741228Z","last_seen":"2026-06-12T04:54:28.741228Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/zqwin007/Image/team/images/9959/1grzybp3442f.png?v=1","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.624Z","timestamp":1781240029624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /zqwin007/Image/team/images/9959/1grzybp3442f.png?v=1 HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=5,i\r\nlast-modified: Sat, 11 Feb 2023 09:54:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63e765d9-40d9\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpires: Mon, 15 Sep 2025 15:36:11 GMT\r\ncontent-encoding: br\r\nx-cache: zqwin007:/zqwin007/Image/team/images/9959/1grzybp3442f.png|30d|HIT\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a641092b7c5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16601,"size_decoded":17429,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"a8d9fa9c7da5bd98b9d8e846b9928ee8","sha1":"68781988d8b55dca78da483a4adc0c6e426ad430","sha256":"b47f0eeb481f8dcdc3777fff3900ad9f1c7543798928e892e153da0e99b90146","sha512":"87f95b2a7cecae518b94c69de8e4619151935f1a3cc38336e986773063bc4af629df4da40fc69fc411d524495e294344bde27fdf6b8089a6920d442106f1b55a","ssdeep":"384:vej1J8MgTO3+v2w1zL6qk0z9B76xY5A3u0RO4ehHxhCO44yg:ve5qLTLv2wJL6qk0Bd6BPRGhRhCO44yg","tlshash":"0f72d0697d278f6f81e7d5077448bae1164ee7049a0b010e177290486cf9f78a878c3f","first_seen":"2026-02-28T06:30:13.283668Z","last_seen":"2026-06-12T08:40:50.083411Z","times_seen":12,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/87558eddse34.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.178Z","timestamp":1781240027178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/87558eddse34.js HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: EXPIRED || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/87558eddse34.js\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Thu, 11 Jun 2026 13:41:19 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640f9fe00b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1022315,"size_decoded":272892,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"be148906a1e5a1255791ffa1db0d2708","sha1":"bad168f2a45354d98360051ff24ec3091416658c","sha256":"b636dc239e146c930ec61e4c965ec398dfbf4cef3b58cc21bf0a6891059dbbc4","sha512":"1809aa9d24fa5e16c005467a181dd803fc7e95d2fd1537d44c7dac5f86c6fc5f4d74ccf98e67de94c609a9abb2836050357ac3683ed9f48e95c0373429954369","ssdeep":"12288:pktNzyOoOCy9cgHPNZ1z9vkzgIiTXKsvAVlzeulbzx58iFa4WbZMZddZ9FuFvKjN:W2+9viEIVlzeGzx5ebZMpZ9FuFvKjN","tlshash":"0f25c940b3d0749946d78bb2b23bb0d9f52f09ab388c1c5be111fdd16af5a08d6e9970","first_seen":"2026-06-03T13:57:16.018937Z","last_seen":"2026-06-12T08:40:50.125291Z","times_seen":6,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":8,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/css/f3717900.css","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.194Z","timestamp":1781240027194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/css/f3717900.css HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/css/f3717900.css\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Tue, 26 May 2026 10:50:49 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640f9fe0bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40124,"size_decoded":5557,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (40124), with no line terminators","md5":"88dabeb49f4d89255e4e1779c083a5de","sha1":"27228c01fcadcfe2fa4c437a1f13035bd70af724","sha256":"de934692210cc464dafcb2ea2f45d96557f24d5b4e87dfed14fdce261007a9a1","sha512":"d237e4527a06c0a3659cb7d8ed8dfdd5e0a70d7f067b840c503ab2e0c39a054b9ab6371ee9b9e067f69e95a28da8aee784849a7a83c93043e423e8a259db0283","ssdeep":"384:5C6f1TbnA3KM8cz/kj3yRhM/RthCaIF+5Uli3V0Jm:hbn0e","tlshash":"4803ff3694286b1b3b16ecb4578c39806d1ecbb2c646dac8517c152e87cb3d513b6d3e","first_seen":"2026-05-30T12:52:55.37461Z","last_seen":"2026-06-17T17:33:52.866184Z","times_seen":10,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/7cd510d7se2.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.208Z","timestamp":1781240027208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/7cd510d7se2.js HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/7cd510d7se2.js\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Tue, 26 May 2026 10:51:23 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640fa0e45b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1066,"size_decoded":1346,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1066), with no line terminators","md5":"e020151dbcf06606f5ae5f3927f8dad0","sha1":"6f30143e61487e657a704213d7f104d92ee51437","sha256":"3d0678435fb6361a708ee0ceedb4d7738eb330344f5477463ee0e2d63e46f2ab","sha512":"96c12127a04e9698f231e3c91bfcd68cda6f730e99b034221a01d3199f53121206edaecd85c386b336f114a472763575694dc1faa3d689683706341e368650dc","ssdeep":"","tlshash":"d911c068a1a4f5b6964753f00a3773f8d02b07aa38496462c33cf864393152b9a54e3c","first_seen":"2026-06-03T13:57:16.131483Z","last_seen":"2026-06-12T08:40:50.084943Z","times_seen":7,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/site/icon_logo_8sl2.png","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.608Z","timestamp":1781240027608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/site/icon_logo_8sl2.png HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cfstatic.aifvfjuf56juh.cfd/_nuxt/css/ec448d1a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/img/site/icon_logo_8sl2.png\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Wed, 10 Jun 2026 20:54:40 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640fc8c4f5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8197,"size_decoded":8798,"mime_type":"image/png","magic":"PNG image data, 500 x 160, 8-bit/color RGBA, non-interlaced","md5":"4579bcf512ec6de1658258d34ecec9b1","sha1":"c9d21e065edf4ed2e911744a038b3dcbc62498ea","sha256":"e7df0247e33036d5730b489b66b324bf1f7394ccc8789dc4759176a958aeadde","sha512":"9973dd809ec0722fe2c32496b0d024718ecb268ae6d3073a50fdff995a897fa5026ca699c53b6dd1b299009ba3ce654c4fed80febab50233323422ac786e6f5c","ssdeep":"192:RbFHBjJSm2U5vtXmunUH16ZkEVr6Q7fAjrLrO:RRNb2cvBnUHALVrb7fAjrLrO","tlshash":"8a029e4397cb1c686c734113d8c0c805a87bdf26b939d5b7d0686e33b18d626cb59717","first_seen":"2026-06-12T04:54:28.702725Z","last_seen":"2026-06-12T04:55:11.478083Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/comm/5e3c3f50-6182-4514-ae6a-0e9faaaa8df1.jpg","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.314Z","timestamp":1781240029314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/comm/5e3c3f50-6182-4514-ae6a-0e9faaaa8df1.jpg HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 11 Jun 2026 10:14:12 GMT\r\netag: W/\"1dcf98b0c81b936\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|MISS|/svimg/comm/5e3c3f50-6182-4514-ae6a-0e9faaaa8df1.jpg\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a641073a975696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133942,"size_decoded":113622,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2026:06:11 18:04:52], progressive, precision 8, 1536x848, components 3","md5":"081dfc45378deb3473e42b3e978d7092","sha1":"2acbc361a794275de0c070697393fc1dac32c46b","sha256":"7f22e211564a5f0274c4dcb99e5bf8677f8143908570c1a94fce2116234b0a9c","sha512":"4ef915b924c9ed24c1d69a9d624acdc961c90a2842f11515b18718ed825e3188c9096f609e28b3891a5b62f641ea6370051a791e7fea2d56cfcbedb78c23b58c","ssdeep":"3072:fCVCO3PMKS9mPaRNXtzY4YHVXJz5tqv29DU:awsvS9mC/VY1Q9","tlshash":"f3d3f16ebb374f24f5e1aab480e3ef5557626c048b330190b1eddb15b761a42cd8e2c6","first_seen":"2026-06-12T04:54:28.703818Z","last_seen":"2026-06-12T08:40:50.119009Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/zqwin007/Image/team/images/10590/1gwbdv1r9x2w.PNG?v=1","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.625Z","timestamp":1781240029625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /zqwin007/Image/team/images/10590/1gwbdv1r9x2w.PNG?v=1 HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=5,i\r\nlast-modified: Sat, 25 Mar 2023 03:43:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"641e6df5-362e\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpires: Tue, 16 Sep 2025 01:56:16 GMT\r\ncontent-encoding: br\r\nx-cache: zqwin007:/zqwin007/Image/team/images/10590/1gwbdv1r9x2w.PNG|30d|HIT\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a641092b7e5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13870,"size_decoded":14672,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"f3fcafddddbe71f86787e5ddc0e08253","sha1":"fdd20ed6bfcbb8261ac6589079073e415720ea08","sha256":"1d43219e373b783891ac193b2455b424f5aff5b4ad8a7aaf7f5f59557752a2bd","sha512":"1fb4d0a01b04a2ca1f5f7016f2b44531a19356fbb3cc2ec44d4dbf53de9348a7831f588286569e77e6de41f46b7ad0f55447a4ebe5819feaaf68f63e80f86284","ssdeep":"192:TrZjy4jCfaIM+J1mXsKn4irXW+TP1tVelM7wrvCqLy9QeXvs1cXnoyY5i:TOfa6JWsKC+BtVe+wraqQXvsaRn","tlshash":"bd52c0b9bf75f06edb1a5253ea1d830214832d39e53a1d975960f2334901abc6d26278","first_seen":"2025-09-22T04:42:30.915138Z","last_seen":"2026-06-12T08:40:50.109998Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/1st/apple-touch-icon.png","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.001Z","timestamp":1781240028001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/1st/apple-touch-icon.png HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/1st/apple-touch-icon.png\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Sun, 07 Jun 2026 09:28:35 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640fefd8e5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1993,"size_decoded":2799,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"c03aefbb58a680d79c309ec96616c303","sha1":"c33c5f27841ecdd91bd42d4e88b559a02d2299a3","sha256":"3b66c1248ca0f0ba1315d895537ffd78811303adc97bc1e223f5af9224117960","sha512":"e4f555c46f67e9cfe9423e093a77f766e263032d522ffd0bdf3130a29560f539725624550974cd0402922954301b520a58c9d18493c5b21b0cb646e0978d1632","ssdeep":"","tlshash":"de412cebc931f9e9c31326a3c472560ea37ae4a762c1a0ded6e2d57d6c246769004532","first_seen":"2024-12-13T19:54:42.803021Z","last_seen":"2026-06-17T17:33:52.740925Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfapi.aifvfjuf56juh.cfd/gateb0938a9b4b6afaf3_b0938a9b4b6afaf3_fbb688ed687d27f299914b932b/api/merge/changes","fqdn":"cfapi.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:54.815Z","timestamp":1781240034815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /gateb0938a9b4b6afaf3_b0938a9b4b6afaf3_fbb688ed687d27f299914b932b/api/merge/changes HTTP/1.1\r\nHost: cfapi.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 17\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\netag: \"/mnIXWaDR5Gw5A9rq3IaHGgVq5CefEYNiUS4NF6+Vo0=\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cfapi-cache: MISS || 60s2 || /gateb0938a9b4b6afaf3_b0938a9b4b6afaf3_fbb688ed687d27f299914b932b/api/merge/changes\r\ncache-control: public, max-age=60\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a64129984376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17,"size_decoded":868,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f73a72e9fc2875e3d313370d0a31d6da","sha1":"9d0e0415fb4ed6a369e98c97fe7e864826409927","sha256":"c0926d73b6ca2e1dde2aed9d6294fd8b5eebb3035e8f92f3dff894d5f6da75fd","sha512":"0ed927e79d76d2fb795706a7acc9c5bfa2f7408a854fd00bb289d29e0f923149019c1960e9e6543755c0b9f91d46c14ea6a72bb7f73aa6e9826842f0d73458e8","ssdeep":"","tlshash":"be6000000008000222c8002ba02a0000082800c082288020020828e222000800808800","first_seen":"2023-04-12T06:56:23Z","last_seen":"2026-06-17T17:33:52.849935Z","times_seen":64,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfapi.aifvfjuf56juh.cfd/gate5ed7c8d0d81ef176c6232dc553/api/merge/getMatchChannels?d=www.808bola253.com","fqdn":"cfapi.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:54.817Z","timestamp":1781240034817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /gate5ed7c8d0d81ef176c6232dc553/api/merge/getMatchChannels?d=www.808bola253.com HTTP/1.1\r\nHost: cfapi.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\netag: \"nFoBtk/bliCCw1E+JlAR6uN93DP4LFxf7jgFGZ0HXZs=\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cfapi-cache: MISS || 60s2 || /gate5ed7c8d0d81ef176c6232dc553/api/merge/getMatchChannels?d=www.808bola253.com\r\ncache-control: public, max-age=60\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a64129984776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":848,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-06-18T02:30:33.444839Z","times_seen":294613,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/f022e4e5.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.172Z","timestamp":1781240027172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/f022e4e5.js HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/f022e4e5.js\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Fri, 12 Jun 2026 01:51:34 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640f9fe0cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10068,"size_decoded":4193,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10068), with no line terminators","md5":"9e2f9f06b306a0eaf989a77a856a5fcf","sha1":"f40a07f6d548af1aac7fbfe3f5340329472b7f87","sha256":"f3aa8559e8a3e8e36f3b93172770cf5554856416dc4f1747bbcf85895bd45feb","sha512":"088a01ebdeaf5379496a88e7e14bc6793332764dfdee8090f4f5b2acecfdcc9b952a17e029a945865000e8148b75589b23c60ce8dec3972adf7c01bd510b275a","ssdeep":"192:y/4VqThHuqfZKrSu++/HU3iRfUDU73IktQ7aoGgfRR+cBKUoTvPrlmLqr5xZD6sN:9VkF9IGuLVRfqU73I3aURRMUoLPx/nBR","tlshash":"ac2275c3b3d1f56912af5b3bb21760c5f43d28bbb9ab8c9ac514fca0b960711e190671","first_seen":"2026-06-12T04:54:28.708767Z","last_seen":"2026-06-12T08:40:50.078409Z","times_seen":3,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":10,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/b5e93021-bd9f-4fd1-bd46-24e6b31a8579.gif","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.951Z","timestamp":1781240028951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/b5e93021-bd9f-4fd1-bd46-24e6b31a8579.gif HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 18 May 2026 09:29:04 GMT\r\netag: W/\"1dce6a8c481966e\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|MISS|/svimg/b5e93021-bd9f-4fd1-bd46-24e6b31a8579.gif\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a6410589b55696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9838,"size_decoded":10020,"mime_type":"image/gif","magic":"GIF image data, version 89a, 120 x 36","md5":"d874e1929c4928db1bb1d588f1f63c6a","sha1":"280232c07a386b32a70b5cf6ab0079e245fd797b","sha256":"28f0055214f3e844c6f2825d22816d1970b1967a4da6ad20afba6bd440fb22f0","sha512":"2d737e81320f495f16a00ef404ea559caee4fb97f53049bb2d6e397713f78c44abfd1869926137f7bd0c1f94365ef153f561cc52c6bc2ab55015909705bfb333","ssdeep":"192:+b0BLbwqwfOM0dYuJsE3ycCiS0FfLKyMTlqh73QX/65X/oR:C0BLbwv0dYk3O0FfeyBhs/sgR","tlshash":"34125a2acf0d411e0d7ba873336b1fac49a928b47d690545046c75c8f0968fcfe665a1","first_seen":"2026-06-12T04:54:28.70971Z","last_seen":"2026-06-12T04:55:11.455822Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfapi.aifvfjuf56juh.cfd/gateb0938a9b4b6afaf3_b0938a9b4b6afaf3_fbb688ed687d27f299914b932b/api/merge/changes?_t=1781240029121","fqdn":"cfapi.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.128Z","timestamp":1781240029128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /gateb0938a9b4b6afaf3_b0938a9b4b6afaf3_fbb688ed687d27f299914b932b/api/merge/changes?_t=1781240029121 HTTP/1.1\r\nHost: cfapi.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 17\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\netag: \"/mnIXWaDR5Gw5A9rq3IaHGgVq5CefEYNiUS4NF6+Vo0=\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cfapi-cache: MISS || 60s2 || /gateb0938a9b4b6afaf3_b0938a9b4b6afaf3_fbb688ed687d27f299914b932b/api/merge/changes\r\ncache-control: public, max-age=60\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a641060d1876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17,"size_decoded":868,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f73a72e9fc2875e3d313370d0a31d6da","sha1":"9d0e0415fb4ed6a369e98c97fe7e864826409927","sha256":"c0926d73b6ca2e1dde2aed9d6294fd8b5eebb3035e8f92f3dff894d5f6da75fd","sha512":"0ed927e79d76d2fb795706a7acc9c5bfa2f7408a854fd00bb289d29e0f923149019c1960e9e6543755c0b9f91d46c14ea6a72bb7f73aa6e9826842f0d73458e8","ssdeep":"","tlshash":"be6000000008000222c8002ba02a0000082800c082288020020828e222000800808800","first_seen":"2023-04-12T06:56:23Z","last_seen":"2026-06-17T17:33:52.849935Z","times_seen":64,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":3,"dns":3,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_arrow_right.svg","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.484Z","timestamp":1781240029484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/3rd/icon_arrow_right.svg HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_arrow_right.svg\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Thu, 11 Jun 2026 18:03:06 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-ray: a0a641084b1e5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":277,"size_decoded":978,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f72d76d09775890dd61c708fc6eca4bf","sha1":"23f661dde3e9db43834ef0a1a04b05e18597cb6a","sha256":"dabbafcb2d35564a7d7afcbfff107c9819f335aa91ab298912239bbfdfdf01fc","sha512":"60c185486619fb749c1b8951de0a1a8b1a13327060acf7efe43a84fe782dc6b38fbf0509ec8d09c3ad60093a39fe8b7001d0d39c81a991a779d919624e0ff11e","ssdeep":"","tlshash":"c9d02bff2018ee60613dcd30af2c18fd14563cac628d80d85be09014f540592d8081a5","first_seen":"2025-04-08T13:29:57.588146Z","last_seen":"2026-06-12T08:40:50.128012Z","times_seen":28,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/css/bd007114.css","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.184Z","timestamp":1781240027184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/css/bd007114.css HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/css/bd007114.css\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Sat, 30 May 2026 06:54:14 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640f9fe02b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":486358,"size_decoded":48505,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c553e2676dee9a24a2a7de65275c5b2a","sha1":"325fccdcdcdc198ac4f771b1306a70044c666691","sha256":"d0e050c23313781b505da9ec10b54c28cb10126c10cbabad1c3fea925abf23e5","sha512":"6629788f8d187d667d1cfa2ace378409f6d60d625f54dd3f97a698f730911a9cca9c203f332176183414de1b542d1556f7e78333d9b7048f2d7c684541ce2392","ssdeep":"768:7T74GVb0UHNa1dhBYuf56CJkn0/o0ogoGs9nUXGQe3X5e5PDABABmBFBKVChP2Zs:7fHb00mdhB5xZaAY2rJP6qnb6X","tlshash":"03a40f36641c5b172a27ecb4578c79806e0ee7b3c5429ac85179182e8fcb7932377d2e","first_seen":"2026-06-03T13:57:16.095291Z","last_seen":"2026-06-12T08:40:50.13413Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-K9964NME8Q\u0026cx=c\u0026gtm=4e66a1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.153Z","timestamp":1781240028153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:26 GMT","end":"Mon, 17 Aug 2026 08:36:25 GMT"},"fingerprint":{"sha1":"B1:69:2D:8A:87:48:5C:47:05:41:5B:52:3B:0E:2C:E9:BD:CC:03:75","sha256":"91:1E:26:69:78:6C:F7:F4:05:E8:B1:07:F4:04:FB:66:B9:20:6A:EB:43:9D:02:70:C8:AF:60:8C:BB:58:30:4F"}}},"request":{"raw":"GET /gtag/js?id=G-K9964NME8Q\u0026cx=c\u0026gtm=4e66a1h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\nexpires: Fri, 12 Jun 2026 04:53:48 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 163799\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":483541,"size_decoded":164383,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"2cd2abef1ce3366b869eaefe7ce88708","sha1":"635e4dd000282e3c19518fdf86a0f7e9e4b59288","sha256":"7163c40740405b5d89c3048d3c28e0f16e2aef2a0d381c7aaf776a265d2b526e","sha512":"a854e959179afb809c29832d43df8d0fab492b206b62ef9f5fc5de65f19965eb2edcd260e5ded84f52ca46dcde68bacd8520c49249dfcdaee94a8b383114f6bc","ssdeep":"6144:peLbRknTI8s5XtjLEEQT1TpqBEzVTI1Ce8G3h7Y1MD9f:UanTsEZXysu","tlshash":"48a4e9ceb3d674225296f478903f01cba57b29e2b448c899f189cce42e7469a4177f7c","first_seen":"2026-06-12T04:54:28.711911Z","last_seen":"2026-06-12T04:54:28.711911Z","times_seen":1,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/zqwin007/Image/team/images/10013/1hx0r83dgcw.png?v=1","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.622Z","timestamp":1781240029622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /zqwin007/Image/team/images/10013/1hx0r83dgcw.png?v=1 HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=5,i\r\nlast-modified: Sat, 04 May 2024 02:52:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6635a2d4-5b5d\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpires: Fri, 26 Sep 2025 17:15:38 GMT\r\ncontent-encoding: br\r\nx-cache: zqwin007:/zqwin007/Image/team/images/10013/1hx0r83dgcw.png|30d|HIT\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a641091b7a5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23389,"size_decoded":24217,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"e21c58f241cb62bc860512af100b4f79","sha1":"2b4c71243e1e7a4ce0b00eec80da11082c2258ad","sha256":"12ea88be62bcda847b2b956c1f85d424dc2ca28548f1f0a404680ffd5b0d3887","sha512":"196a0d5fc20e66e328e796a99e7991265d47f45a32bb7b019487ae801d27ef915f067a0df40535cb268f9d25638cc8e3477474b14f8d95daac1dde177ad587ba","ssdeep":"384:HIS4Y20OCjOE4BrhlyKMBtYrnFKXwMXQhc2trpMPR6KB2HfXI9KBs4lBgLv:T2NCjOjFKtknqwMXic2tK6a2HfI9Lvv","tlshash":"afb2e2c5fed2a135c360a6fd4a4bf48cffa1414ea627e4b42b31783842941f66059fad","first_seen":"2026-04-18T09:42:28.500131Z","last_seen":"2026-06-12T08:40:50.128577Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/zqwin007/Image/team/images/201332443258.jpg?v=1","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.628Z","timestamp":1781240029628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /zqwin007/Image/team/images/201332443258.jpg?v=1 HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\npriority: u=5,i\r\nlast-modified: Wed, 03 Apr 2013 07:02:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"515bd3ea-1bec\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpires: Tue, 16 Sep 2025 00:36:37 GMT\r\ncontent-encoding: br\r\nx-cache: zqwin007:/zqwin007/Image/team/images/201332443258.jpg|30d|HIT\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a641092b805696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7148,"size_decoded":7767,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 160x160, components 3","md5":"ca05afbaabdbd9ebf0293d0856eddd30","sha1":"7e402b97bc720b06cc6a5df46273ffaa90129624","sha256":"49b269e3f5a52dca68464c37a1ba962044416906998b92b20e83ab44e051810e","sha512":"803214b3f72b29ccd0f89234783992750f290c4b631365b672f4165db180d72ee8bb28b56e3b01c3f07593156f00e4b1299feb4b5a2c96ccf3826327318efa4b","ssdeep":"192:miySo5kIcgD196BNe8zd32fMYr1YUIQhfxMvUrYEKD78ZXkLa:tQ54gDLsBzdmhY6nMvUrjKD72","tlshash":"9ce19ec3df5485b2df3f917620559867ca524c09faa08db58da3017afc60d710c8d5d8","first_seen":"2024-06-20T08:46:07Z","last_seen":"2026-06-12T08:40:50.106268Z","times_seen":8,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfapi.aifvfjuf56juh.cfd/gateb0938a9b4b6afaf3_b0938a9b4b6afaf3_fbb688ed687d27f299914b932b/api/merge/changes","fqdn":"cfapi.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:54:00.306Z","timestamp":1781240040306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /gateb0938a9b4b6afaf3_b0938a9b4b6afaf3_fbb688ed687d27f299914b932b/api/merge/changes HTTP/1.1\r\nHost: cfapi.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:54:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 17\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\netag: \"/mnIXWaDR5Gw5A9rq3IaHGgVq5CefEYNiUS4NF6+Vo0=\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cfapi-cache: MISS || 60s2 || /gateb0938a9b4b6afaf3_b0938a9b4b6afaf3_fbb688ed687d27f299914b932b/api/merge/changes\r\ncache-control: public, max-age=60\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a6414bef3576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":868,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f73a72e9fc2875e3d313370d0a31d6da","sha1":"9d0e0415fb4ed6a369e98c97fe7e864826409927","sha256":"c0926d73b6ca2e1dde2aed9d6294fd8b5eebb3035e8f92f3dff894d5f6da75fd","sha512":"0ed927e79d76d2fb795706a7acc9c5bfa2f7408a854fd00bb289d29e0f923149019c1960e9e6543755c0b9f91d46c14ea6a72bb7f73aa6e9826842f0d73458e8","ssdeep":"","tlshash":"be6000000008000222c8002ba02a0000082800c082288020020828e222000800808800","first_seen":"2023-04-12T06:56:23Z","last_seen":"2026-06-17T17:33:52.849935Z","times_seen":64,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfapi.aifvfjuf56juh.cfd/gate853efea861931dd3_b0938a9b4b6afaf3_fbb688ed687d27f299914b932b/api/merge/changes?_t=1781240049481","fqdn":"cfapi.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:54:09.489Z","timestamp":1781240049489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /gate853efea861931dd3_b0938a9b4b6afaf3_fbb688ed687d27f299914b932b/api/merge/changes?_t=1781240049481 HTTP/1.1\r\nHost: cfapi.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:54:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 17\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\netag: \"/mnIXWaDR5Gw5A9rq3IaHGgVq5CefEYNiUS4NF6+Vo0=\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cfapi-cache: MISS || 60s2 || /gate853efea861931dd3_b0938a9b4b6afaf3_fbb688ed687d27f299914b932b/api/merge/changes\r\ncache-control: public, max-age=60\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a641854adc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":868,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f73a72e9fc2875e3d313370d0a31d6da","sha1":"9d0e0415fb4ed6a369e98c97fe7e864826409927","sha256":"c0926d73b6ca2e1dde2aed9d6294fd8b5eebb3035e8f92f3dff894d5f6da75fd","sha512":"0ed927e79d76d2fb795706a7acc9c5bfa2f7408a854fd00bb289d29e0f923149019c1960e9e6543755c0b9f91d46c14ea6a72bb7f73aa6e9826842f0d73458e8","ssdeep":"","tlshash":"be6000000008000222c8002ba02a0000082800c082288020020828e222000800808800","first_seen":"2023-04-12T06:56:23Z","last_seen":"2026-06-17T17:33:52.849935Z","times_seen":64,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/css/9be33bca.css","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.180Z","timestamp":1781240027180,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/css/9be33bca.css HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/css/9be33bca.css\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Tue, 26 May 2026 10:50:49 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640f9fe0eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":655758,"size_decoded":56402,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6d097bb36d38bc4320b3d16e2654ac52","sha1":"111a255f7cdd8f85e788a5b5ddfacea0816be65d","sha256":"4fe559f033754b0e51d12da770d81642c659660120a693462cf2e482f56f0e3a","sha512":"98576ea8ad8ddb155959da2bbb71988ccf4d00e6abb6301630d25b76aa650285617ceabf5598e25ce71b46f030f040f397d8f70db995037205db856017fa1e3b","ssdeep":"12288:4ErolTVSjcIGDeeQD7EC/gDyNhD3tMaUV9bV:E","tlshash":"ecd41036a02c271b3a27dc74979c7a40691ed7b3c642e7dc5178351a4bcb39222b6d3e","first_seen":"2026-05-30T12:52:55.326574Z","last_seen":"2026-06-17T17:33:52.796171Z","times_seen":10,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":9,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/bb8914fase5.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.188Z","timestamp":1781240027188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/bb8914fase5.js HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/bb8914fase5.js\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Fri, 05 Jun 2026 05:33:39 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640f9fe06b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87319,"size_decoded":28679,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"616c3032b3826f8bed95a15866a63c32","sha1":"b655c868a36aca278137923cd5d19493a753c2fd","sha256":"0f0c0275aa299e9539355d7b7cae93cb2711f5f1eacc3a39a1988d2c43a8547b","sha512":"9c50289e062a3eb248421526e90d914a48f9922cb9d51d229c7c73a82e35e2fa6b06e9e8a94f53cdfd34b1576b664904d9e974a0bd1e8a7e080df1c3fa1b843a","ssdeep":"1536:0rbof0vhI96FCGJyFuXGbf6xJw6cgVFXZhKdg0UkxgYOvlmE7m0ODRucwuB70QsV:0rbof0vhI9rFuXG2xJw6sBYQsyPdKPWS","tlshash":"c483a540b3e0748cc2ab8fb6b73bb0eaf46f399a3dd4584bc111fd906964919d6e1931","first_seen":"2026-06-03T13:57:16.046467Z","last_seen":"2026-06-12T08:40:50.133161Z","times_seen":7,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/zqwin007/Image/league_match/images/1j5w0b66k318.png?v=1","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.241Z","timestamp":1781240029241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /zqwin007/Image/league_match/images/1j5w0b66k318.png?v=1 HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i\r\nlast-modified: Thu, 22 Aug 2024 02:58:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66c6a95e-1f84\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpires: Mon, 15 Sep 2025 15:25:20 GMT\r\ncontent-encoding: br\r\nx-cache: zqwin007:/zqwin007/Image/league_match/images/1j5w0b66k318.png|30d|HIT\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a64106ba675696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8068,"size_decoded":8899,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGB, non-interlaced","md5":"577ffddd88c8f33171c8eacc824be872","sha1":"0396fb9c5701a8185bbe7db57c621a77bafb0fe6","sha256":"a94b11a4b8cf9404ae2be051e6ed634be50252b6397d7558cc78c3b49d9f6a4a","sha512":"30aacf3b52c6ce0e20ee14bea48863d4bbd069b9e4970322f243b51711e8a1ed6be35aa9f5170772f9162a4b1f732319ed94bbcef342b4eb7291c42c0d4159cb","ssdeep":"192:Esr+VG6FaUOnq2DvWlvLTGgtqUqd2pexPao8UlnxpRYua:EsrMXF/2rGLTGnUqd8exCo8UZxpLa","tlshash":"37f18c9adc74cde85c387d68c570d828bf2221777c989570ee843607ae201059b7f77a","first_seen":"2025-08-01T10:43:12.844967Z","last_seen":"2026-06-16T16:39:07.514021Z","times_seen":223,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-XMZWSVMSEN","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.098Z","timestamp":1781240028098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:26 GMT","end":"Mon, 17 Aug 2026 08:36:25 GMT"},"fingerprint":{"sha1":"B1:69:2D:8A:87:48:5C:47:05:41:5B:52:3B:0E:2C:E9:BD:CC:03:75","sha256":"91:1E:26:69:78:6C:F7:F4:05:E8:B1:07:F4:04:FB:66:B9:20:6A:EB:43:9D:02:70:C8:AF:60:8C:BB:58:30:4F"}}},"request":{"raw":"GET /gtag/js?id=G-XMZWSVMSEN HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\nexpires: Fri, 12 Jun 2026 04:53:48 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 166268\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":494389,"size_decoded":166852,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"921c53beec8d0f4f389ede6aca05a684","sha1":"58db9ba9d0781a462fde5de1858531206749d9cd","sha256":"360f4a6fa2ae159a23eb82200a9eb5bec27245c910376361b7c59f08d0f3332b","sha512":"14d7e28c952526949245d8ae132c70eeaa7ad903902f7f67189b7c405577d83870d2981dd787f5a9a8f8c821f830d426d8ea05467c29fff1c6a1d84db80b4154","ssdeep":"6144:VIZbRknTI8s5XtjLEEQT1TpqBEzVTI1Ce8G3h7Y1KDpf:2knTsEZXysU","tlshash":"cbb4e9ceb3d674225296f478903f01cba57b24e2b458c8aaf189cce42e7459a4177f7c","first_seen":"2026-06-12T04:54:28.717378Z","last_seen":"2026-06-12T04:54:28.717378Z","times_seen":1,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_league_arrow.png","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.578Z","timestamp":1781240029578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/3rd/icon_league_arrow.png HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 237\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_league_arrow.png\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Sat, 30 May 2026 10:42:09 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a64108db4a5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237,"size_decoded":1026,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"09b3fa1ef575ee9ff06c808c02e12dc5","sha1":"bfdfeb98e8efe055753cbea2ec4511d397b29818","sha256":"e91eef659ad61aaf637b844f239e168eb8f30682a26f5c52a45138aaf03c3259","sha512":"a0f27e18adf391e8e80bd0b1b64e73a140bd73c94dc1beb17dce378b9da4ec99207e631c7f55429c47560a8e13abd3e2764516c61f836551df1b4a650d3ed9e5","ssdeep":"","tlshash":"3cd097df63204dbeb41903f700620294da3a2299001608099c886628240d800a208310","first_seen":"2023-05-10T01:17:07Z","last_seen":"2026-06-12T08:40:50.088326Z","times_seen":33,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/bf1a8764-d4d8-45ae-8eed-8c3d76437326.gif","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.582Z","timestamp":1781240029582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/bf1a8764-d4d8-45ae-8eed-8c3d76437326.gif HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 25 Feb 2026 14:32:03 GMT\r\netag: W/\"1dca66382299b0b\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|HIT|/svimg/bf1a8764-d4d8-45ae-8eed-8c3d76437326.gif\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a64108db4e5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59531,"size_decoded":59488,"mime_type":"image/gif","magic":"GIF image data, version 89a, 720 x 90","md5":"72bb997c7f62a56a23b67e02a86b3dc5","sha1":"b62e631c76682fa54a4e053fbaf272556d144c4e","sha256":"86c990e5895a54011f42f739c35f83f1b679ac3dbee87e22e8e9f53ff65daa7d","sha512":"605cd7791993ca11e8249d45614d088c495b917c56cdd614cf06989ca654d113070ee4bda089ee184d5e4c7fb133a3b4264393f1542b47cc70ca6b1c8483e934","ssdeep":"1536:W9Kfc9cwB5LOLNAJgldke2rMqbwf4wku5CA:WLcwBROLuJglN2Q/D15P","tlshash":"6e43028d94a165d53a412cd504980e1e3d141ac62bb8fff4ee29c1272b3ba1d0ff697e","first_seen":"2026-01-19T19:14:50.223523Z","last_seen":"2026-06-12T08:40:50.093886Z","times_seen":5,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_collect_inactive.png","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.598Z","timestamp":1781240029598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/3rd/icon_collect_inactive.png HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cfstatic.aifvfjuf56juh.cfd/_nuxt/css/ec448d1a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 684\r\nserver: cloudflare\r\npriority: u=4,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_collect_inactive.png\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Fri, 05 Jun 2026 08:34:54 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a64108fb675696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":684,"size_decoded":1477,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f524ce6847f8729accd97b450b4997a8","sha1":"4747959e051fa04f997fa350ec426c3073fb4849","sha256":"aacb2e338817de8071a50e9048823757b7e44b2b6a649f25667a1a572f506dd2","sha512":"3eaffe54391529dabd44ff942f27db3d21aa2232c4418dc5b83cad8cb95b451b97c2f1885c2e8a7c6bd40c82274b05b2c0d048527b48f2bb0000614936cdd1a3","ssdeep":"","tlshash":"f40123c69064b9beeb16817e9482416a935f878f073584b05eaa96cc103a5c1359a3af","first_seen":"2023-05-09T20:54:48Z","last_seen":"2026-06-12T08:40:50.09038Z","times_seen":86,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapiab.aifvfjuf56juh.cfd/api/vc?reqs=102\u0026reqs=301\u0026reqs=303\u0026d=www.808bola253.com","fqdn":"dapiab.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:54:04.775Z","timestamp":1781240044775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /api/vc?reqs=102\u0026reqs=301\u0026reqs=303\u0026d=www.808bola253.com HTTP/1.1\r\nHost: dapiab.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:54:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nx-frame-options: SAMEORIGIN\r\nx-dapi-cache: EXPIRED || 2s || /api/vc?reqs=102\u0026reqs=301\u0026reqs=303\u0026d=www.808bola253.com\r\ncache-control: public, max-age=3\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\netag: W/\"oiWht4NVlDCn696heHD49apS2NaFahdMTO6SV08V7qc=\"\r\ncontent-encoding: gzip\r\ncf-ray: a0a64167dced76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110,"size_decoded":909,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d8199323dc5755ff7cf9d9e8341c6e32","sha1":"5c8a051e33ad9ff5239b72d26b43ac141cecec71","sha256":"28366ed7f101e90da50118be4153f39eb43a78ff0a2c9f55ad92cb208ddf1b64","sha512":"cba4f24636d70fbfdc6257133c4c4ff5405e3c9079d9c05dd529124190021cd292a2c6f26513635f9bd2059c2b6f5fb265600627f280b78fddc88f280570eca5","ssdeep":"","tlshash":"f5b0921ca606315e057358a93b8668b516aaa66a88919805846151410fb692808a6da0","first_seen":"2026-06-12T04:54:28.720163Z","last_seen":"2026-06-12T04:54:28.720163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/css/91aca2cd.css","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.210Z","timestamp":1781240027210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/css/91aca2cd.css HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/css/91aca2cd.css\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Wed, 03 Jun 2026 13:56:29 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640fa0e47b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39673,"size_decoded":5428,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (39673), with no line terminators","md5":"c52ed9f78dcca0b690a3d192716c33da","sha1":"b9375acc250ea9629d5ee84f5caf1acbd9c6b6b5","sha256":"20da3f3cccb15d21b8157f0f21a1ed3f36e3f9a971984fa4cd459f43860933fb","sha512":"9c0a1479491a3b9a1b09120f50e2903cf39b84e9c243b50ef5963efb9e96d3f6ee6b4810e9722fb4af8f2b4db94810382245a22264c15180a599be9cd6ed7c9e","ssdeep":"384:5C6f1TbnA3KM8cz/kj3yRhM/RthCaIF+5Uli3V0JJ:hbn0x","tlshash":"8b03ee3694286b1b3b16ecb4578c39806d1ecbb2c646dac8517c152e87cb3d513b6d3e","first_seen":"2026-05-30T12:52:55.319807Z","last_seen":"2026-06-17T17:33:52.718123Z","times_seen":10,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/3ce148e5-d2d8-437e-95a7-4906bd0fd206.gif","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.950Z","timestamp":1781240028950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/3ce148e5-d2d8-437e-95a7-4906bd0fd206.gif HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 19 Dec 2025 11:53:15 GMT\r\netag: W/\"1dc70de0ef02edc\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|HIT|/svimg/3ce148e5-d2d8-437e-95a7-4906bd0fd206.gif\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a6410589b45696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76124,"size_decoded":60945,"mime_type":"image/gif","magic":"GIF image data, version 89a, 120 x 36","md5":"261041f70072e539e5a5f8e733f986ad","sha1":"7211aba76e97178cef70ca2cb8f2416a64f5bf54","sha256":"944c058b1766fc9199896f329a5dde78082738b41ddbae6aa533c82ccbaf0687","sha512":"4973f361cd37c7412961692d272c270359960b35bc6584a5e3baef7d8e33662df902076dcebfb2d95fc717026dbc9d29ff3818ade97e53bd40b81790035dbb58","ssdeep":"1536:LTiL4Mm55fXsxNFjLLK7j9nvT8JvcX7b416dVc:fYGf8VL4j9b326dS","tlshash":"f473e163103e94da773eec7ef45d0bf6137c08d484289239d84079daad16ad8e89e5f1","first_seen":"2026-06-12T04:54:28.722336Z","last_seen":"2026-06-12T04:55:11.480806Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapiab.aifvfjuf56juh.cfd/api/vc?reqs=102\u0026reqs=301\u0026reqs=303\u0026d=www.808bola253.com","fqdn":"dapiab.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:59.627Z","timestamp":1781240039627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /api/vc?reqs=102\u0026reqs=301\u0026reqs=303\u0026d=www.808bola253.com HTTP/1.1\r\nHost: dapiab.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:54:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nx-frame-options: SAMEORIGIN\r\nx-dapi-cache: EXPIRED || 2s || /api/vc?reqs=102\u0026reqs=301\u0026reqs=303\u0026d=www.808bola253.com\r\ncache-control: public, max-age=3\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\netag: W/\"xjxmeVauBUCXLUt0giTwwcIPRIX9B+1SO6woHSAzsds=\"\r\ncontent-encoding: gzip\r\ncf-ray: a0a64147ade776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110,"size_decoded":902,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bc81938ee8d0ba2715a162ae1498ae3f","sha1":"a3fe1212658ead3f7dfd3af02b95c5ec62c6ef03","sha256":"86f7bd03bb255fa66b0f9312a7b522db26f81fa92624bbb4b70c1867b74f1df0","sha512":"98d102e0121fb2f7e270cd2ced66c75c229ab24eb2a0eef0f2940d3c5c6fd29dc5a285a1d88cd45305ddc3f7555ff6047278fab20fd6930356418aa20860eb41","ssdeep":"","tlshash":"7fb0922cb20a315e0523446a3b8398b50ae8a65b4cc08c54857551810f7692d0862da0","first_seen":"2026-06-12T04:54:28.72332Z","last_seen":"2026-06-12T04:54:28.72332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/css/ec448d1a.css","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.203Z","timestamp":1781240027203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/css/ec448d1a.css HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/css/ec448d1a.css\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Thu, 11 Jun 2026 06:31:06 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640f9fe20b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":754276,"size_decoded":73476,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"76813560a62c685d86b3a6bcf56dd84f","sha1":"ebca4c75ded74487f13860cd124ecc242f97b2e3","sha256":"3b9face2d524e2a209ed309b1dab60095aa6b29e3d1bf4a74d18723f6bc713bf","sha512":"6120dcb581ae490aa053b3e9568b949ae2885ae4c5d6eee90e00b303999eacda5683f6bee3d1eab4b8732b43c7cea3267c791a6b61bddc4ed7f4db9a40d446e3","ssdeep":"6144:f5I3ZnexTd9yw3ezviSET//WiIFWLjrWWbGTo3w:f5I3ZnexTd9yw3ezviSETGIWWbGTo3w","tlshash":"23f41e36601c2b172a73ed745b8c39846d19e7b3c646dac91179182e8f8b3d63372d2e","first_seen":"2026-06-11T20:04:49.737796Z","last_seen":"2026-06-12T08:40:50.069341Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/a8bbf821se39.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.205Z","timestamp":1781240027205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/a8bbf821se39.js HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/a8bbf821se39.js\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Fri, 12 Jun 2026 01:51:34 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640fa0e2ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172378,"size_decoded":41722,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"e7efa51066d1d25320252ba2886854bd","sha1":"b7fcacc6318c9f2bbe3c51b1d627a1691697929a","sha256":"f77ad727b9f8f764572fe932e6f324f73fe98ebff7915b3253f4a0795889dbc2","sha512":"24fa6513d88f1f437599eccf0b1fbfdd3fea49e540d4ea363ee805d66c8ae9c0329429dac8d2db9bab48273a36c8b9e8e3357ee8b761fa7359a7f30fee9dd18c","ssdeep":"3072:C5DHoD0hgVPwjucrfUvEsB74PYVxyhaxyh0HQEDDV8k5M2X+OlSAYV:C5DHo2gVPwjuSfUvEsBkPYXV83AI","tlshash":"f1f3f820b3d1f5fc8fd757f1a137b2e8e96b2ba6348c6856d021fc9021a0729d6e8435","first_seen":"2026-06-12T04:54:28.725066Z","last_seen":"2026-06-12T08:40:50.129691Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.score808cc.com/sso/check.html?_v=v1043","fqdn":"accounts.score808cc.com","domain":"score808cc.com","tld":"com"},"ip":{"addr":"104.21.54.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.996Z","timestamp":1781240027996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"score808cc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 05:41:12 GMT","end":"Mon, 03 Aug 2026 06:39:57 GMT"},"fingerprint":{"sha1":"BC:B6:43:B1:0E:D4:C3:2B:27:B2:72:B3:29:FE:07:B5:DC:2F:29:C4","sha256":"09:42:1A:17:45:90:3E:E0:F3:84:C6:DF:40:65:AD:5F:E8:76:ED:BE:FB:9A:36:56:73:CA:03:AC:AA:79:A1:12"}}},"request":{"raw":"GET /sso/check.html?_v=v1043 HTTP/1.1\r\nHost: accounts.score808cc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 07 Mar 2026 03:16:02 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PCWVu%2BrWCC9fIA3WMcJ9nMl7SgdzEjD01z3Cq2BOj%2FoOl%2Bqhqw4mVtM6pdceW6YrOgJYrWpo3P9WEN%2BZbSSIL%2Fs5ugqOnZiawNHl5GQJ5VJWLKo9qABgk8pIDQJ8XsqG2KCpE7v0xY7lmA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nage: 4850\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0a640ff1ad2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99019,"size_decoded":34004,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62718), with LF, NEL line terminators","md5":"c24768de1d49ac1259f369db6e905a80","sha1":"dd866d8aec678504dc2d952c9bf72d20fb5a8f88","sha256":"a0fd3bc45be5d0ab42f799c0d1ecce02adbdec3e83c72b89fe1bc68179c21205","sha512":"bc7084eadc62365b3fa6b4373dadfae0845a0f9a41ab3bd9218ec145c0c6f77407187a582c3c093a080806c3250b13117bf5605bbc3a28c6634895e2dd3eeb5b","ssdeep":"1536:OAUeP5BHXLlaQNbnlZtfRC9S5drQNhseAiYQ:bUeP5BxVNbl7w9wdr21","tlshash":"06a39388b6d5b05a07a374b0002f540bf1bbaa68b49d8894f365d4d5bcb988ed077f7c","first_seen":"2026-02-16T03:06:18.662564Z","last_seen":"2026-06-17T17:33:52.847391Z","times_seen":21,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":7,"connect":13,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/be00b3bf-7683-4ba7-bc08-c59c14257c6a.gif","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.948Z","timestamp":1781240028948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/be00b3bf-7683-4ba7-bc08-c59c14257c6a.gif HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 23 Sep 2025 09:31:50 GMT\r\netag: W/\"1dc2c6ce38d97bb\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|HIT|/svimg/be00b3bf-7683-4ba7-bc08-c59c14257c6a.gif\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a6410589ba5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69819,"size_decoded":70442,"mime_type":"image/gif","magic":"GIF image data, version 89a, 750 x 80","md5":"5e26e472a410c22f1eace593708bff17","sha1":"648793d2642d9e3f4042d246d18934fddef6425e","sha256":"17bc3f71e6a363fac907d1a7f3e3a173a47f1b463e32c9594df1f2d4d6113171","sha512":"d1a9e3cca0ed58530571d79f1cb0d3661818acfa378cf89a65333e669f4c9d8441491b07332198e1ffe6381dd48429fa615c6a31eb861cec3edc87ee6d86802e","ssdeep":"1536:CwWxXkW+i1h1/4bNPu7pO92KKLVwiOY47XvXefrAuX8UynvEsS26FZ:CwWxXf+i/t88LVwLrvXUmvmV","tlshash":"906302e2481ad9313c68e13d8eff604e7b64aca71463a7e85a7a1d2b453857c84c788d","first_seen":"2026-06-12T04:54:28.726647Z","last_seen":"2026-06-12T08:40:50.089382Z","times_seen":3,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":94,"dns":58,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/f4af2e53-a979-4eaf-b516-eca2cb23dcfa.png","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.954Z","timestamp":1781240028954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/f4af2e53-a979-4eaf-b516-eca2cb23dcfa.png HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 23 May 2026 03:50:42 GMT\r\netag: W/\"1dcea6753a3089a\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|MISS|/svimg/f4af2e53-a979-4eaf-b516-eca2cb23dcfa.png\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a6410589b95696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7578,"size_decoded":7738,"mime_type":"image/png","magic":"PNG image data, 120 x 36, 8-bit/color RGBA, non-interlaced","md5":"4e9ad42e86c8563333a04dfee6c30257","sha1":"ec35c2a600ca6a45e84850a21c4a1a73ee861e0a","sha256":"67cf396cbc0d6d5518e1d3e08ce198cbc543498927c18b22bfb92b7c442dab89","sha512":"e21f463c21c3e911d504c05222358cc1b5a5b4f88b087a52106bb67d6fa60d66ad1305411eff4927865fadb9a752c7eac7d8b8bb3bec216be9ec196373ae51a6","ssdeep":"192:rSnknUuNnB7Vwj0yO0TQj8LjPqm18pyWm099nZDeVN:eknUqnBJyvTQwLjPqm18p+09HDe/","tlshash":"18f19e19fa304841c65fd921bc9c23934f3b5743aa22d891bb8cdd430a5753eda1e6c6","first_seen":"2026-06-12T04:54:28.727666Z","last_seen":"2026-06-12T08:40:50.077759Z","times_seen":3,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/a45a94c4-f6f2-4c89-937b-d8ba8ca707af.jpg","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.488Z","timestamp":1781240029488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/a45a94c4-f6f2-4c89-937b-d8ba8ca707af.jpg HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 11 Jun 2026 23:31:42 GMT\r\netag: W/\"1dcf9fa7557e056\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|MISS|/svimg/a45a94c4-f6f2-4c89-937b-d8ba8ca707af.jpg\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a641084b215696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107350,"size_decoded":89281,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2026:06:12 07:31:36], progressive, precision 8, 742x412, components 3","md5":"fc0a5d9dbac411442d80c7e88645a792","sha1":"7d9ab655b26070539934e95f38ae7e57356da6bd","sha256":"466590d90d3f7a456ae64116b08581ef5532c38bd59d4269174bdb8f3a9d1abe","sha512":"1fdc19eb5096e2cc42d09035fdec487048b7718e574a00f3959b5a3a8b819fbd645f4ac1f989397300853fe4848b3a05350f9fe60a6811435717834807546678","ssdeep":"1536:u0WqmL0WqmQs3zHkb46JQj/orH29QklO0MQ+2onFzmUjBz4DZ36sMDZmcs3HGU4b:u0WqmL0Wqm/t6MX6Xrhj9nMhiR","tlshash":"d4a3e012a2045a62e6e8b238d0fde656d3f32de48d72145b37cdae412f21e49addc1c3","first_seen":"2026-06-12T04:54:28.728603Z","last_seen":"2026-06-12T08:40:50.10538Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/zqwin007/Image/team/images/41217/1hvthn9vwf4.PNG?v=1","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.631Z","timestamp":1781240029631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /zqwin007/Image/team/images/41217/1hvthn9vwf4.PNG?v=1 HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i\r\nlast-modified: Fri, 19 Apr 2024 06:45:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6622131c-3baf\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpires: Fri, 26 Sep 2025 03:07:30 GMT\r\ncontent-encoding: br\r\nx-cache: zqwin007:/zqwin007/Image/team/images/41217/1hvthn9vwf4.PNG|30d|HIT\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a641092b835696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15279,"size_decoded":16107,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"776dbb397f1d4cb89e484f8c2278e7cf","sha1":"7307bff75154e32f3da93957cd70a94255b188e8","sha256":"0b5ae3e4f92f3c768424b01c32708b319f22641994f8637750da20bd567209ce","sha512":"f65c1babcc21279e48e6e3ab393affcddf1ba1dc6c56501c2f8414d53149062d7c7d0a112cc14b4d00b1561a092c64beb2d9a2ed1fcefc3251214de107553411","ssdeep":"384:jrCrl6/2QS1m6XaDhsZAYVjTdVbI1VJn+kkrhd7pSc8i6Y/pKJ:jMlTjmivZLVj5VbIBPQr70c8i3KJ","tlshash":"de62d030451dad0405ee0b45a7310db7c5d61fae70a638e23ad9a0cc0bf039e1690e4f","first_seen":"2026-03-08T10:36:46.230785Z","last_seen":"2026-06-12T12:43:29.749963Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfapi.aifvfjuf56juh.cfd/gate5ed7c8d0d81ef176c6232dc553/api/merge/getMatchChannels?d=www.808bola253.com","fqdn":"cfapi.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:54:00.310Z","timestamp":1781240040310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /gate5ed7c8d0d81ef176c6232dc553/api/merge/getMatchChannels?d=www.808bola253.com HTTP/1.1\r\nHost: cfapi.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:54:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\netag: \"nFoBtk/bliCCw1E+JlAR6uN93DP4LFxf7jgFGZ0HXZs=\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cfapi-cache: MISS || 60s2 || /gate5ed7c8d0d81ef176c6232dc553/api/merge/getMatchChannels?d=www.808bola253.com\r\ncache-control: public, max-age=60\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a6414bef4076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":848,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-06-18T02:30:33.444839Z","times_seen":294613,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/css/9b4d37b4.css","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.206Z","timestamp":1781240027206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/css/9b4d37b4.css HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/css/9b4d37b4.css\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Thu, 28 May 2026 00:29:44 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640fa0e31b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39575,"size_decoded":5386,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (39575), with no line terminators","md5":"ad0a8218ed91033ab86ca7335a16eb4c","sha1":"f44a4d45dcdd45d7e1541a9648aaa657bec99ab9","sha256":"8a508830e414e08c9bb73224f88e17841260005f6eb44e5c0ae5cb0d89438daf","sha512":"04eb4c3987cbf255f0cd901a6a107264ff2a307fc8992ad029af267eeffa12e0e3a813c34dbc7fd19ecd66755ccac64a62cedf05f1f26170e578b4e5d5274656","ssdeep":"384:5C6f1TbnA3KM8cz/kj3yRhM/RthCaIF+5Uli3V0Jt:hbn0F","tlshash":"d903de3694286b1b3b16ecb8578c39806d1ecbb2c646dac8517c152e87cb3d513b6d3e","first_seen":"2026-05-30T12:52:55.351313Z","last_seen":"2026-06-17T17:33:52.811737Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/zqwin007/Image/league_match/images/1jx44n35b42j.png?v=1","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.236Z","timestamp":1781240029236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /zqwin007/Image/league_match/images/1jx44n35b42j.png?v=1 HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=5,i\r\nlast-modified: Sat, 07 Jun 2025 02:48:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6843a896-786\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpires: Mon, 22 Sep 2025 15:27:56 GMT\r\ncontent-encoding: gzip\r\nx-cache: zqwin007:/zqwin007/Image/league_match/images/1jx44n35b42j.png|30d|HIT\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a64106ba605696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1926,"size_decoded":2776,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"591977dde47e681b46849366d5d34b01","sha1":"f98c2a89d8f92bea5ebe6f301e5dba3ea2a8aa87","sha256":"e2d964f332c9af1109908570a98b38208cac97778ae6bb75d4c621f05d2fa3e9","sha512":"140357442c0a129d2288dc7dcf3c1349a08aafe4a9039d0f27fe3107f85d0aa00acf0e9c56dc175c1d0f19cec1ff66c811d4db617b8e8b3c5d338dfdd66eeabc","ssdeep":"","tlshash":"1341ead25db8e398e54e063536a5d60447de426918260f0418617e6fd5fed8e235370b","first_seen":"2025-02-06T12:17:22.777793Z","last_seen":"2026-06-16T16:39:07.216457Z","times_seen":260,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.808bola253.com/js/a.d58a70389e24c5652b8a.ssobridge.js","fqdn":"www.808bola253.com","domain":"808bola253.com","tld":"com"},"ip":{"addr":"104.21.86.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.170Z","timestamp":1781240027170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"808bola253.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 09:47:09 GMT","end":"Fri, 21 Aug 2026 09:47:08 GMT"},"fingerprint":{"sha1":"8D:99:B4:00:60:95:E4:FF:53:58:E0:36:48:13:4F:F5:76:45:3B:36","sha256":"46:72:88:73:B2:4A:BF:69:9C:CC:12:A1:F7:F2:EC:9A:4A:18:C4:E9:B2:F0:1D:A7:0E:D5:7F:50:B5:EA:B6:55"}}},"request":{"raw":"GET /js/a.d58a70389e24c5652b8a.ssobridge.js HTTP/1.1\r\nHost: www.808bola253.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.808bola253.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || www.808bola253.com/js/a.d58a70389e24c5652b8a.ssobridge.js\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 12 Jun 2026 04:53:47 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5wRwWtp%2B9GlKxar7utsg7xeTgfTxzAJyh%2BSE4upqjlKfbFlmj8lHi1cfIj25u3TwZQ0OkqOCYGG05nudi5un86NRR7JUHgs6XxEOfErRGAi7dQjrvPDHJGGojNT%2F%2FVNR8RI1P7c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0a640f9cd5749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101973,"size_decoded":33512,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64998), with NEL line terminators","md5":"27509dcce3a16552ecf3aa581a2286f9","sha1":"830042fc70cf2b041e388dbd9ed1a6708fb29446","sha256":"53db589759093da5689b0c3f87d8b556c5b1567eadcc03ed2bcb74b265c92727","sha512":"de35c35fc0d4fe337a4dd39b39fd628b9a055f73e0eda0e5647941f11b52190f81f39e62fb4f3a83887ce97542d619dad48c8e1db94fc29ad7074712aa13d163","ssdeep":"1536:0c6xT+wzk62VlD8bSJtfrj9SPBrQfhg8gzR:l6xT+ZnD8bSLH9CBrwIR","tlshash":"8ba3b488b6d2b05a07a374b0002f540bf1b7aa58b49d8894f765d4d5bcb988ee077f7c","first_seen":"2026-02-16T03:06:18.701541Z","last_seen":"2026-06-17T17:33:52.737732Z","times_seen":21,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/67fca86cse3.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.198Z","timestamp":1781240027198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/67fca86cse3.js HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/67fca86cse3.js\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Sun, 07 Jun 2026 09:03:08 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640f9fe11b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1507,"size_decoded":1495,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1507), with no line terminators","md5":"10392572379a30ee615f3444490a04a1","sha1":"53b12893f9ecd1b991452e25b9f81f640bf55cb7","sha256":"5220baca2fd2621c3529444e44d408bee57c1530150dc573ff6ea3a704aee867","sha512":"7509add644fdd1634eb8a5afd17bf700b0b7d457b353cea39a24e1dd71ec9a732c07a35058dc2013cbee79039040666b7c2a739c0a85f8a2bd86b11603a29cd0","ssdeep":"","tlshash":"be3100547282a9b52fdb1738123eb0dec83b0018350ceca1e1b7783467e5b24e929b79","first_seen":"2026-06-03T13:57:16.126419Z","last_seen":"2026-06-12T08:40:50.063119Z","times_seen":7,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5LC2JCFG","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.599Z","timestamp":1781240027599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:26 GMT","end":"Mon, 17 Aug 2026 08:36:25 GMT"},"fingerprint":{"sha1":"B1:69:2D:8A:87:48:5C:47:05:41:5B:52:3B:0E:2C:E9:BD:CC:03:75","sha256":"91:1E:26:69:78:6C:F7:F4:05:E8:B1:07:F4:04:FB:66:B9:20:6A:EB:43:9D:02:70:C8:AF:60:8C:BB:58:30:4F"}}},"request":{"raw":"GET /gtm.js?id=GTM-5LC2JCFG HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\nexpires: Fri, 12 Jun 2026 04:53:47 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 12 Jun 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 134111\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434541,"size_decoded":134761,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (48043)","md5":"7d8d97376460716f2f6cb1924070cea4","sha1":"f303b2f0ca52116486ebcc35346c5c4eb37b38f5","sha256":"c3cac2a4613f241d004932ee1e1611b0ab894f5685301606b329bdc06c9dc35a","sha512":"8f706c37b9658205d72d4aec72f8ceb19ef552ad434faa6f90aad67be7b5c794f96b050b10a8064e055f3da092f2dbb71584ab3f267541fd456e6b8416e88541","ssdeep":"6144:LpwbRP8s5XtjMzQt1TpqBEzVTIFGLFBHf:LpVoDZN","tlshash":"3e9409cdb3d974728396a575803f058ba57e24e3b44ca885f189ccd42e705aa2237f7e","first_seen":"2026-06-12T04:54:28.741228Z","last_seen":"2026-06-12T04:54:28.741228Z","times_seen":1,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":2,"connect":17,"send":0,"wait":48,"receive":52,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/icon-ad.png","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.925Z","timestamp":1781240028925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/icon-ad.png HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cfstatic.aifvfjuf56juh.cfd/_nuxt/css/ec448d1a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/icon-ad.png\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Fri, 12 Jun 2026 03:06:03 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a64104c9545696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1880,"size_decoded":2377,"mime_type":"image/png","magic":"PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced","md5":"6d454e309f2e637ca20b77001d9cb85a","sha1":"d0e3404e0c0976b5f7f4b1de5ca7592b66a627bd","sha256":"5af845fe97fe8dd1e8c44b188b6ef514a5dc3472286467c26c0dc74a9bc8e101","sha512":"57de7d6fd37f34afa5f9c86b6a1cf607ae03819c2c923cbdcbfe3292ed67e6e053e63384efbdd5016be5b996a2e9c6e48d306cb52e1690a86db650f5b4ec7366","ssdeep":"","tlshash":"1c41d705fb90fd3199c1908015fbd30b633941908ad4e8a6b6cfc41757e96b589274c7","first_seen":"2026-06-11T20:04:49.728852Z","last_seen":"2026-06-12T08:40:50.144804Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/icon_close.svg","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.957Z","timestamp":1781240028957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/icon_close.svg HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/icon_close.svg\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Thu, 11 Jun 2026 19:11:19 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-ray: a0a64104f9725696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":318,"size_decoded":966,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6fbf78cc71991e65853a77493d9af92b","sha1":"22989b76ed65d93dd805611b1403bcb2f67363c3","sha256":"dfbd69413c37718582998c65c557c24382c9bb3fbb5c714e06b56f913c9319b5","sha512":"b4462ec10a7c2d415fda4d9967b8845e1db31ec4680567c8d80295999a4f1a8de1c2886e57fce11bfcb644c2d03928e612747f9d00b51c056a3eec28357d3bef","ssdeep":"","tlshash":"d1e086de5accc808750f40105c6d572dc42ac07a3e1c4487f79459f9f0c1b8350e1f18","first_seen":"2026-04-30T12:16:48.546526Z","last_seen":"2026-06-12T04:55:11.466698Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_footer_telegram.svg","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.890Z","timestamp":1781240028890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/3rd/icon_footer_telegram.svg HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_footer_telegram.svg\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Sat, 30 May 2026 06:54:18 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-ray: a0a64104892a5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1132,"size_decoded":1376,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"888882fd0c3f572b50ad465e2cbf2fca","sha1":"496dc096a2b281dca01c642e1e89f1ffda33d16d","sha256":"385cee7787252056ce8694e48d8491c01d2161b26e3c982d4b5a18aafba741cf","sha512":"8667d5c6a38651fe52594b46c00f974500e8ef5df92a6b0da95c378181061ea34c8ff40abe53c2c628b545fd38238147ce8137547eff10c97f04e5aaa6dc2f36","ssdeep":"","tlshash":"2d21dde651d8a2c48003db64cc1d6410aa666cfabe1443a99a84bb1867664b6ac9edc8","first_seen":"2025-04-08T13:29:57.667216Z","last_seen":"2026-06-12T08:40:50.114513Z","times_seen":87,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/site/region/102-flag-small.png","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.617Z","timestamp":1781240029617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/site/region/102-flag-small.png HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 218\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/site/region/102-flag-small.png\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Wed, 10 Jun 2026 19:25:21 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a641091b775696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218,"size_decoded":1012,"mime_type":"image/png","magic":"PNG image data, 48 x 32, 4-bit colormap, non-interlaced","md5":"62ebafd7a6b8edef111dfdd773762af9","sha1":"ddb41bea902b4da3c11294cac16041d4d00ddc11","sha256":"2d6b1d0a40717d3091ae421cc8cc440535f4ff4fa4462853b41a76d869723e36","sha512":"c57cec5d6d3422015d756f46949c9046913c5d4f4b3c9abfb6289f2639959258bda08d70651797928b67f6e528ed4eb862ce2e93c606f46476183a3b2695433a","ssdeep":"","tlshash":"0dd023d753605c34da946053849d0485d691063d9212d852d4520f593b10f25d05f002","first_seen":"2026-03-19T06:31:14.439695Z","last_seen":"2026-06-12T08:40:50.140545Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapiab.aifvfjuf56juh.cfd/api/score/schedules?lang=1\u0026d=www.808bola253.com\u0026date=2026-06-12\u0026timezone=0\u0026_t=1781240049481","fqdn":"dapiab.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:54:09.487Z","timestamp":1781240049487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /api/score/schedules?lang=1\u0026d=www.808bola253.com\u0026date=2026-06-12\u0026timezone=0\u0026_t=1781240049481 HTTP/1.1\r\nHost: dapiab.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:54:09 GMT\r\ncontent-type: application/x-msgpack\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"46D6752DB7EDABB190D27675DFD511F9\"\r\nx-frame-options: SAMEORIGIN\r\nx-dapi-cache: MISS || 5s || /api/score/schedules?lang=1\u0026d=www.808bola253.com\u0026date=2026-06-12\u0026timezone=0\r\ncache-control: public, max-age=10\r\nx-time: 1|0.004\u003e-\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-ray: a0a641854ad676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192976,"size_decoded":31965,"mime_type":"application/x-msgpack","magic":"data","md5":"5718e034967cc57e743e7e0d40c408ee","sha1":"d808acce9ccd7f6ac21f9a069baab6db1c67c902","sha256":"b0db97e4dd8408f943229a8449d7c7a9d2e88afca5c17c36124366f0907d56b0","sha512":"0ca7d8c2e14d7c2725c4746ab45cfba3fec37f45951f83b177b5c519116b585ab94ff205eb075a9bb266caa7c6cbe85f41be5987e615291f311c17bc7b72ba3e","ssdeep":"1536:v0iNy8alb1kCSqoRQ+4Ssb4LNG1jY/8WDH:3y3l1fXD4Ls1jY/80","tlshash":"cf1462ba57ce0de7ad8e9035b4ae4e2adc72df877100e586ae92cc51f560bc2e135740","first_seen":"2026-06-12T04:54:28.74645Z","last_seen":"2026-06-12T04:54:28.74645Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/1b308370se10.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.182Z","timestamp":1781240027182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/1b308370se10.js HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/1b308370se10.js\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Thu, 11 Jun 2026 13:41:19 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640f9fe0fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1718563,"size_decoded":407308,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b0a6a130fe0f3522e231124a8d41bd7d","sha1":"2e20024b9f94ad1b437096786cd211dac07fef45","sha256":"a72e970e3b5e46aaca4fc106d862487d97a04147cebbe9f4dd469ae992ad4bac","sha512":"7052467544bddb389daef0a28c6ad6ce72d39c11b1a7c8277e5b41b21667387761d833bbc00a8e8bac29714f5cdf58c41f6df2695e453b452968b997e547fb38","ssdeep":"24576:GL/dpsco7IV7WcP31NZvT9TGw1LKS1V1o:e/dpsco74WcP31NZb9TGw1Lj1o","tlshash":"46451bd6928452ac15478f93e269bb8cfa968fa5b7447cc0e6cddd8874f470ce0b1a70","first_seen":"2026-06-12T04:54:28.747531Z","last_seen":"2026-06-12T08:40:50.081482Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":1,"connect":3,"send":0,"wait":9,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/logo.png","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.345Z","timestamp":1781240027345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/logo.png\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Thu, 11 Jun 2026 06:30:58 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640faeb5c5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5165,"size_decoded":5963,"mime_type":"image/png","magic":"PNG image data, 252 x 56, 8-bit/color RGBA, non-interlaced","md5":"2a2d657ed5772ca9c77f591eb42697ad","sha1":"e25befc4e2cff5e1b5f8294f4aff22242d9596a9","sha256":"317a5d049953f1b046e4825bbd1976b413a6f86eab62d192a7a1144a2a0d8bdc","sha512":"68aea99d3e8981f1addec9300d705eb30716aaf90ba99fa37ac04f33a69602df1cab32d049cb12b4ba71e18756a23df4dcf7af3b66e7bfa3b8320eb78ed79ae5","ssdeep":"96:zBDJCks/dGZ610tKLZ6TmR5RhYT/wSczPTl2dBiKOfNMNLdMmuIJgh1fXy7ylIA9:z/s1i9MZFR5ET/wB7lkBhOfNMFdM1Igj","tlshash":"fcb19f3f6624e228aa4b99fec0e754773f6486f5a359425ce14ed0530d4238b8353bf8","first_seen":"2024-12-13T19:54:42.811704Z","last_seen":"2026-06-17T17:33:52.862709Z","times_seen":10,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.808bola253.com/img/3rd/worldcup.png","fqdn":"www.808bola253.com","domain":"808bola253.com","tld":"com"},"ip":{"addr":"104.21.86.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.349Z","timestamp":1781240027349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"808bola253.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 09:47:09 GMT","end":"Fri, 21 Aug 2026 09:47:08 GMT"},"fingerprint":{"sha1":"8D:99:B4:00:60:95:E4:FF:53:58:E0:36:48:13:4F:F5:76:45:3B:36","sha256":"46:72:88:73:B2:4A:BF:69:9C:CC:12:A1:F7:F2:EC:9A:4A:18:C4:E9:B2:F0:1D:A7:0E:D5:7F:50:B5:EA:B6:55"}}},"request":{"raw":"GET /img/3rd/worldcup.png HTTP/1.1\r\nHost: www.808bola253.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.808bola253.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || www.808bola253.com/img/3rd/worldcup.png\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 12 Jun 2026 04:53:47 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qt6CL9uPrBOq344wY8cOEE2Qdtrl7lKhtKnsUJtdvIwsTSX64dgO1EQGh%2FRhiCwHY7CZj%2BVRFE3eakHoMwVuYUKnQmqRl7GJUJVXc1BmIveUCgdGyIy0nZQfAvVwzQoWR0ubacM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0a640faed9f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8889,"size_decoded":9761,"mime_type":"image/png","magic":"PNG image data, 111 x 108, 8-bit/color RGBA, non-interlaced","md5":"040490c12e214f17441e2314c7a4e2bd","sha1":"8ef33069682f270b1642b66278f305821a3b3b5b","sha256":"12b2d5a2b9288ed399a1b39cdfe661817b3ecd182b8238c6bdada97df4a5c6f4","sha512":"36bfb21d581f8abf06cb739183950e55118295f2ba93af2f1ca15989856234326714b04cc9ad830e205cfc6697fe49f5d764f11516cd05eb8165f0949d3db05c","ssdeep":"192:Wi/4yIZr317Kmu2iimepIZWE0icmxb2L/iD5e+VHMRJuDrZLAI1E9UeQG8:WS4Ad2nB+WENxb2A5eusRJSkEEmx","tlshash":"8602aeb799b5af5612c83d05797cc00e8ebfcdf82841c73f0172b669b97b154462605b","first_seen":"2026-03-28T00:41:50.041596Z","last_seen":"2026-06-12T08:40:50.100549Z","times_seen":11,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/site/region/52-flag-small.png","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.619Z","timestamp":1781240029619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/site/region/52-flag-small.png HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/site/region/52-flag-small.png\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Thu, 11 Jun 2026 10:46:59 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a641091b785696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1069,"size_decoded":1892,"mime_type":"image/png","magic":"PNG image data, 48 x 32, 8-bit/color RGBA, non-interlaced","md5":"f90d959281e6f57d59db83ddab9cf140","sha1":"91d0d5cb5e093bd6c60cedd094580587cda68719","sha256":"c310183232fc5b9bf334c6db1bd812063bc843f4930e87be81f2030d5f18b516","sha512":"dedbd45d23d5624156ad748a487d5842c9dbba7cd7576533a5ecf59d076ee335752ff9dc1a656e2f1870b88e18506abd22164cc191cf9ff2fc069b3432a936da","ssdeep":"","tlshash":"de11d88357c5d5f9839a1b4a5687329b353f30221fa31d857976f412f41b744111bac6","first_seen":"2025-05-12T19:39:36.737018Z","last_seen":"2026-06-12T04:55:11.424202Z","times_seen":14,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/site/region/193-flag-small.png","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.621Z","timestamp":1781240029621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/site/region/193-flag-small.png HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/img/site/region/193-flag-small.png\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Tue, 09 Jun 2026 08:40:56 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a641091b795696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1805,"size_decoded":2446,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 48x32, components 3","md5":"d65d844b2cb3de00a1fe71bafc5166e2","sha1":"8d20fd3f4081e2ed8f3d0fec8cebf44652b21cc6","sha256":"826733833d3feb3786b394732a70fc7b69397ff32e1c26f4f910cd91ad61c3b0","sha512":"cf4f7c813e6f4c785de064b3232c109082b19c559c49e019cb6eca930834cce68dd985336cec930a6db2be1e063f50ab38d5f3f2051e42b53a25c80d72f99afd","ssdeep":"","tlshash":"6731083646553d71fec212fd70c2c09ae3cc69a0238b1b0122f61db1b2229d86488ef8","first_seen":"2026-06-12T04:54:28.750917Z","last_seen":"2026-06-12T04:55:11.458797Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/zqwin007/Image/team/images/40187/1htrkdrb9y21.png?v=1","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.638Z","timestamp":1781240029638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /zqwin007/Image/team/images/40187/1htrkdrb9y21.png?v=1 HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i\r\nlast-modified: Sat, 06 Apr 2024 02:22:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6610b1e3-3faf\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpires: Thu, 18 Sep 2025 05:24:28 GMT\r\ncontent-encoding: br\r\nx-cache: zqwin007:/zqwin007/Image/team/images/40187/1htrkdrb9y21.png|30d|STALE\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a641093b875696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16303,"size_decoded":17134,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"20348640ec0a3c3712cbd2f6e786c9c9","sha1":"6a3d9bc24155358570e4379177ffcff45309e81f","sha256":"0eca1e736e50cb13ba673eee591d54222875cc887c63ec610ff20fa05568d098","sha512":"980620a73b287b1f2c32b84e775dc7526ef6ed49945e74d925ef9897ec27fca61671ace41df0e79e28754c61aae459358e00faa85234c16658d0c1f776bb8196","ssdeep":"384:NJDgxa1h+Un7/Ha9wrgDCMI0OEUFct83VWbN8nx0vj:vAaj+oprgDLIhFFcW3VC4x0vj","tlshash":"7a72e0762f64703042f5517064ad09752afe0f2db96be830fd889b45b3a9a3a4e0f194","first_seen":"2026-06-12T04:54:28.752152Z","last_seen":"2026-06-12T13:27:53.529837Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/865af128-c279-4f48-a0d3-181aaa1a5d28.jpg","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.481Z","timestamp":1781240029481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/865af128-c279-4f48-a0d3-181aaa1a5d28.jpg HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 11 Jun 2026 23:29:29 GMT\r\netag: W/\"1dcf9fa2611c960\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|MISS|/svimg/865af128-c279-4f48-a0d3-181aaa1a5d28.jpg\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a641083b1b5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121824,"size_decoded":102899,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2026:06:12 07:29:19], progressive, precision 8, 742x412, components 3","md5":"193938ac22df21edecc2eb9dbeb7cb48","sha1":"b910d8348f277618b757d7e4fe12e54c5591341c","sha256":"4b02536e64a5a5cea2ef98767383c56179d6f076ea1c579bfb9ca4a7769aef83","sha512":"0184180080b72e5abb0f00f2e9e18bb3779e5cc8c12732dfb85ca5e7431051153e37877bd75fdfab02b8e218d6fb69f13e56f34b3d9479eb32be7f1690b5f6e8","ssdeep":"1536:z3K3TsznzwFVs2gEPgeiqkumkYSl09fSDBzYRdS7TjEi4bEX8nJQ0wjSfg:z3K30E83e1QSPDBzYRd9i4bEseig","tlshash":"9fc3ef0cbb549e42c8d8b57880fceb92d7e35ec45e230a4e73dde8056f61a958dca093","first_seen":"2026-06-12T04:54:28.753213Z","last_seen":"2026-06-12T08:40:50.116045Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/6d5b54c9-0ae0-4ceb-8be7-a4c659ea498b.gif","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.583Z","timestamp":1781240029583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/6d5b54c9-0ae0-4ceb-8be7-a4c659ea498b.gif HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 25 Feb 2026 14:30:47 GMT\r\netag: W/\"1dca66354dc00c6\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|MISS|/svimg/6d5b54c9-0ae0-4ceb-8be7-a4c659ea498b.gif\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a64108eb505696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50502,"size_decoded":50556,"mime_type":"image/gif","magic":"GIF image data, version 89a, 728 x 90","md5":"2fe7219dc94dcebc0a1ac4ba6ca9574a","sha1":"5bcacbd2320eb537a5daa8afe6fb5d38518a5739","sha256":"265077194b5c58f22e9d137ebebb4a93e49b864c28b19e045766f6c1586e6642","sha512":"f91bb489b4036453d6f487b39bff1e20168a40d90b93bf830d5e76b9193faebe0ee7f1e8c81ca13cee909380a1b2fce9a38e6983b6a5e990226c93d0f0a074c2","ssdeep":"1536:vTX+4ciobQSSi2IWuxosRqX1t48jjnurtld9Z6f:z+4ciobn2IFoCqlt48jen4","tlshash":"2c33020d2d036c818a949eca8ea6650f411c0ae414f1bc396be69c2175ceefeb95370f","first_seen":"2026-06-12T04:54:28.754158Z","last_seen":"2026-06-12T04:55:11.48386Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/9a60d41a-9fcd-4c88-a19a-fe98daa2a5a6.gif","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.585Z","timestamp":1781240029585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/9a60d41a-9fcd-4c88-a19a-fe98daa2a5a6.gif HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 25 Feb 2026 13:35:28 GMT\r\netag: W/\"1dca65b9a94d0b2\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|MISS|/svimg/9a60d41a-9fcd-4c88-a19a-fe98daa2a5a6.gif\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-ray: a0a64108eb545696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82098,"size_decoded":82598,"mime_type":"image/gif","magic":"GIF image data, version 89a, 720 x 90","md5":"12521a2e5a6a6c312e2aac60c252ef28","sha1":"30939e33d4ca6e1e37a6d6b0b8e80517d1c2a63a","sha256":"81b396b406c5cf0227579158af6985bf27026152c55ac0064a86307c59c308b6","sha512":"1670c407f1145afacfff98ec1c071f6b597c33600e74e9a4a5f9d322757dae38e4dc31a5dee05ceb9bcb1b0ef75e0cb2aca21e6589970a15c271c3466e52b715","ssdeep":"1536:BaOSaqzNSx3XwGce2Ba7OszD12/6AV/4hbCPNpAqn8:PSaqzNS5XwGchcqseQhb4NS88","tlshash":"1a83028a745a1d82b8705a2fdf01110168259f173d0f736b7bb89fe25de9378298174e","first_seen":"2026-06-12T04:54:28.754991Z","last_seen":"2026-06-12T04:55:11.46773Z","times_seen":2,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/3rd/livex12.png","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.600Z","timestamp":1781240029600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/3rd/livex12.png HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cfstatic.aifvfjuf56juh.cfd/_nuxt/css/ec448d1a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 649\r\nserver: cloudflare\r\npriority: u=4,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/3rd/livex12.png\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Fri, 05 Jun 2026 10:58:53 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a64108fb695696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":649,"size_decoded":1428,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"ebf2e7caccc1fbf4d833803dda748c5e","sha1":"8bd1b37d03a4e4afb159b23a03c88401ee67efd7","sha256":"19afe7e45ff6dafab4d999be24319d3a625b5ac4c50fc03aca75147c9c2f8710","sha512":"2d6c58a674361265b38ae50f7b3fe932bf1a979c98950b0160056434f25b91d51ef9c366b9c2b38492d26e04ebf16df36eb951586bdd1a5679134e15523477c4","ssdeep":"","tlshash":"edf0c8cb37e44af0973f4437a2fbd485f652bc00c90317ab683528b07c970098d82621","first_seen":"2025-10-24T13:03:15.516114Z","last_seen":"2026-06-12T08:40:50.072689Z","times_seen":23,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/3230ee15-c1eb-4cb5-8afb-2d7fb919bb8d.jpg","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.956Z","timestamp":1781240028956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/3230ee15-c1eb-4cb5-8afb-2d7fb919bb8d.jpg HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 14 May 2026 08:30:41 GMT\r\netag: W/\"1dce37bf2e14fe6\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|MISS|/svimg/3230ee15-c1eb-4cb5-8afb-2d7fb919bb8d.jpg\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-ray: a0a6410589bd5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":393574,"size_decoded":393388,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 800x400, components 3","md5":"e8cea855b38d8655d715fe3fe241254f","sha1":"4683b25137631756af2dfb7944a36d8153ff7e18","sha256":"8c2201ebf269c3ce55fa5934b1b71394a14e156d308217c190080dfa1d4e612a","sha512":"bba88ec739c6e61e6bf87bc901604f8072e1bb2b1344ee209d99b61893b046d022d0164fe39f53367c983e60c15acf8d5b45bc865e1a2831d0ee1937193d185e","ssdeep":"12288:NrjKaUnbNqRqbHSK5M86KvW1NsHAapFw1aIJ:NQZQiHSSUKe12RyJ","tlshash":"488423ddebbeed9dca6e24ba7373869282593366116f526939003c68003d373373615d","first_seen":"2026-06-12T04:54:28.760074Z","last_seen":"2026-06-12T04:55:11.421289Z","times_seen":2,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":238,"receive":424,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_hot_live.svg","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.483Z","timestamp":1781240029483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/3rd/icon_hot_live.svg HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_hot_live.svg\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Wed, 03 Jun 2026 16:24:41 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-ray: a0a641083b1d5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":959,"size_decoded":1260,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6365e71e7efee552875b4eab9eec6223","sha1":"e2188b33765977e827d150b486f8b811cef4ecbf","sha256":"a5e798641a2bf8ff443b4a553cfe2a2cb881f86bb3085904e13fddeab5f375a5","sha512":"7110d3165b88ec4799424bc7fee63cc0f3dcc38c9b251bcede354e9ebd03226546d1d4406e64a245da8b3f6b03acb06817df5e181f81489f8aad7815559f070a","ssdeep":"","tlshash":"b71144badbfe23c0b50503108d12c331abbf30f7f2888fe115542b90f2130ca445885a","first_seen":"2025-04-08T13:29:57.657444Z","last_seen":"2026-06-12T08:40:50.066922Z","times_seen":28,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/zqwin007/Image/team/images/1gw9fr48t12y.png?v=1","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.635Z","timestamp":1781240029635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /zqwin007/Image/team/images/1gw9fr48t12y.png?v=1 HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i\r\nlast-modified: Fri, 24 Mar 2023 09:38:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"641d6fa2-19c2\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpires: Sat, 27 Sep 2025 11:50:10 GMT\r\ncontent-encoding: br\r\nx-cache: zqwin007:/zqwin007/Image/team/images/1gw9fr48t12y.png|30d|STALE\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a641093b865696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6594,"size_decoded":7305,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGB, non-interlaced","md5":"32e57b35d4927566cdc81ad7cb794762","sha1":"1b2a92a5a4f4bec3828e388f8578640aca5e59ba","sha256":"6e1e6261876312273e9878eeacab6471bf2e8e0deffddb9c18ae4f130224809b","sha512":"888c3d8e87a2e931afa09c7ddd6a1fa43ec047029d4dcdbcae96c5c744991f851d22a2a157b8261243e36b54dd9102c85284a351d3ce8ca043582749cd0f6fd8","ssdeep":"192:ctiB9FrWm2vCskGKggRFiOAhN5BY1/8lQljR8u2Y:r/NWmCkqgbiNrQ0l0jRV","tlshash":"0bd18d653e348b75246efcf0f6b92c4efb40aa5584a16738933be65c722c05d78c048d","first_seen":"2025-09-04T09:13:42.515499Z","last_seen":"2026-06-12T04:55:11.465695Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapiab.aifvfjuf56juh.cfd/api/cdnservertimes?_t=1781240028671","fqdn":"dapiab.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.681Z","timestamp":1781240028681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /api/cdnservertimes?_t=1781240028671 HTTP/1.1\r\nHost: dapiab.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\ncache-control: public, max-age=90\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\naccept-ranges: bytes\r\nlast-modified: Fri, 12 Jun 2026 04:53:48 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncdnservertimes: 1781240028\r\ncf-ray: a0a641033ee476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":706,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-06-18T02:32:38.196157Z","times_seen":327522,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/a583ac9d-ac65-4796-acef-f80ab2a353fa.jpg","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.486Z","timestamp":1781240029486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/a583ac9d-ac65-4796-acef-f80ab2a353fa.jpg HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 11 Jun 2026 23:30:40 GMT\r\netag: W/\"1dcf9fa50600375\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|MISS|/svimg/a583ac9d-ac65-4796-acef-f80ab2a353fa.jpg\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a641084b205696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119669,"size_decoded":101060,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2026:06:12 07:30:34], progressive, precision 8, 742x412, components 3","md5":"0b65a0173b1132400c51d9c6475e9f3b","sha1":"025866993a64dcf5c194a676aa774a452d2928ac","sha256":"b8b71e064f5e65c94e1154eebd0fa10e44c65269c45d6f3c3c2da06c78c153ae","sha512":"a75b6dc5668b6c83373bef8b2785aa518b2e95612f461bcd4e1284cad760b5df601de3a0bb9cc35a1c61235901fa1907660dac95f1382299d71022d527592fa1","ssdeep":"1536:s0m0dshZHAKUbVAnz39Qb4wI/zgohYkSYrCFd6tFbdTCPLIXnoHYvpNRw6gE9hUn:svzgK6WCcLgLsCFgtLXoHcRoEvW3","tlshash":"d9c3d048b7564e50e49976bcd0fdda61d3f35ec81d235a0f37ccaa086f9298a4cd6283","first_seen":"2026-06-12T04:54:28.770316Z","last_seen":"2026-06-12T08:40:50.102511Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapiab.aifvfjuf56juh.cfd/api/config/getv3?d=www.808bola253.com","fqdn":"dapiab.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.106Z","timestamp":1781240028106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /api/config/getv3?d=www.808bola253.com HTTP/1.1\r\nHost: dapiab.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"ksbPLhb6ARFkWKoDiGKkEPI2qh0C1LDH7AGNdBNsQM0=\"\r\nx-frame-options: SAMEORIGIN\r\nx-dapi-cache: EXPIRED || 60s || /api/config/getv3?d=www.808bola253.com\r\ncache-control: public, max-age=120\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-ray: a0a640ffbf8276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51625,"size_decoded":9402,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (51625), with no line terminators","md5":"a3cb8d7d23b87f0198a2f439487bc984","sha1":"54723ccb6fdba774bbe19d138b82c6566affa976","sha256":"843b165cccb7ff981c2e53740fe98ca97c11b6d9080bcbb5a4c034d70c0f1768","sha512":"aba0f752a7cf59cae7619e282b4c1760bb85010b73c288a9b10c9be3319e5011067ff3c7ba891d6bd7b4d3458c268474d1dee6b3b91c1ade08b415d85e433c55","ssdeep":"384:48BmYqgyBK24gyBKTBK2p+ci1nzmRmOl3v8wHFr2HtJt6Pe3MMlj+GX798jWfP2W:43onynERtgmKKeX2","tlshash":"d93354c958f81344f48f6182a512fd07fa6bf4ac587aee3d983a4d74e44c348baf1994","first_seen":"2026-06-12T04:54:28.771723Z","last_seen":"2026-06-12T04:55:11.460005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":5,"connect":8,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-XMZWSVMSEN\u0026cx=c\u0026gtm=4e66a1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.183Z","timestamp":1781240028183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:26 GMT","end":"Mon, 17 Aug 2026 08:36:25 GMT"},"fingerprint":{"sha1":"B1:69:2D:8A:87:48:5C:47:05:41:5B:52:3B:0E:2C:E9:BD:CC:03:75","sha256":"91:1E:26:69:78:6C:F7:F4:05:E8:B1:07:F4:04:FB:66:B9:20:6A:EB:43:9D:02:70:C8:AF:60:8C:BB:58:30:4F"}}},"request":{"raw":"GET /gtag/js?id=G-XMZWSVMSEN\u0026cx=c\u0026gtm=4e66a1h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\nexpires: Fri, 12 Jun 2026 04:53:48 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 166265\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":494420,"size_decoded":166849,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"f73f401268ea3c8c546c4acb88c4b827","sha1":"b5817e6a01ef6198d3cf1b2817ac810447ee0a7a","sha256":"bbca972087d82d90585ce5a96e1f4fe1be7c485551d0a8b9cf6d5f66c09ae0e3","sha512":"31b2f49553fac1e1869c2a91872edce7bdffa0647f97970fa4d821f14288a098f9a86cfc466b1364c94517911b3d5fe9f9a2b40e47ede3222b5220445fec8f63","ssdeep":"6144:VaZbRknTI8s5XtjLEEQT1TpqBEzVTI1Ce8G3h7Y1KDpf:MknTsEZXysU","tlshash":"77b4e9ceb3d674225296f478903f01cba57b24e2b458c8aaf189cce42e7459a4177f7c","first_seen":"2026-06-12T04:54:28.773066Z","last_seen":"2026-06-12T04:54:28.773066Z","times_seen":1,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfapi.aifvfjuf56juh.cfd/gate5ed7c8d0d81ef176c6232dc553/api/merge/getMatchChannels?d=www.808bola253.com\u0026_t=1781240029121","fqdn":"cfapi.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.130Z","timestamp":1781240029130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /gate5ed7c8d0d81ef176c6232dc553/api/merge/getMatchChannels?d=www.808bola253.com\u0026_t=1781240029121 HTTP/1.1\r\nHost: cfapi.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\netag: \"nFoBtk/bliCCw1E+JlAR6uN93DP4LFxf7jgFGZ0HXZs=\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cfapi-cache: MISS || 60s2 || /gate5ed7c8d0d81ef176c6232dc553/api/merge/getMatchChannels?d=www.808bola253.com\r\ncache-control: public, max-age=60\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-ray: a0a641060d1976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":848,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-06-18T02:30:33.444839Z","times_seen":294613,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/zqwin007/Image/league_match/images/1k2xdqpwxv2x.png?v=1","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.238Z","timestamp":1781240029238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /zqwin007/Image/league_match/images/1k2xdqpwxv2x.png?v=1 HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i\r\nlast-modified: Mon, 18 Aug 2025 01:47:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2861b-4cf7\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpires: Thu, 18 Sep 2025 07:00:51 GMT\r\ncontent-encoding: br\r\nx-cache: zqwin007:/zqwin007/Image/league_match/images/1k2xdqpwxv2x.png|30d|HIT\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a64106ba625696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19703,"size_decoded":20505,"mime_type":"image/png","magic":"PNG image data, 192 x 200, 8-bit/color RGBA, non-interlaced","md5":"cef9651e3c5cdf28c0979e7763128b10","sha1":"838e9116f61e72295d5f9fabbaf61c6e10ac47fa","sha256":"da8bbb167bbb13e8ec8662a26064e30e0d0a5ff05ee625d653c82c5381d3f77a","sha512":"125ac92659abbb4e496a8609b545301508aeed603872bc18f635356cf999f23c3748075f4c993e6d2605a6958f1b3fd55efa3d4694cd65f20648231603379b62","ssdeep":"384:k8JAmqUCpVt/fe6XQ2zP1kLT4OxrK7rU00+rEjfAJ+U6vZXDDfNq6fRm/:kmcZ5QLLJKHU00+rexUwnfNq6ZU","tlshash":"ed92d09ac4c729de702e39b05f51b16a4df28b6a5325070afcc304c21a5d66ca5efd2f","first_seen":"2025-11-27T12:04:14.630103Z","last_seen":"2026-06-12T08:40:50.113955Z","times_seen":15,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/zqwin007/Image/league_match/images/166674813339.png?v=1","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.243Z","timestamp":1781240029243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /zqwin007/Image/league_match/images/166674813339.png?v=1 HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i\r\nlast-modified: Wed, 26 Oct 2022 01:35:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63588ee5-ec6\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpires: Sat, 20 Sep 2025 14:43:12 GMT\r\ncontent-encoding: br\r\nx-cache: zqwin007:/zqwin007/Image/league_match/images/166674813339.png|30d|HIT\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a64106ca6a5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3782,"size_decoded":4610,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"fca7b873b0e61d65e07b1129fd104deb","sha1":"25c28d58fbbd190ca89a2be63b2f1b2f550ce3e4","sha256":"c5e6c3d44108aa1f3591a297baed7421de57c21f6b0e564c0582c07fb6bad45c","sha512":"1b8286d058063ea852cb60bb92d8cf560bc3a039bf1c9a6b5a05d88db80fe922aa692048967396759a7f05a858d7228828b031355d4fd87fc551c9f222a78b44","ssdeep":"","tlshash":"8e713cbf6aa80b0884affb45a907871ea934339392233345e07657ff451da44985c1fb","first_seen":"2025-05-12T19:39:36.663091Z","last_seen":"2026-06-16T16:39:07.533546Z","times_seen":253,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/css/8a23af71.css","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.190Z","timestamp":1781240027190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/css/8a23af71.css HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/css/8a23af71.css\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Sun, 07 Jun 2026 09:03:08 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640f9fe08b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47865,"size_decoded":5785,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (47865), with no line terminators","md5":"24de1d4e956e68d36590214d62dd0376","sha1":"e9348849e9a13acd10f4b48b858914554a2bfb07","sha256":"7f5593b169bd2ff87ae7e5fda5e4386610eae56cb87f99646163fa442c16579a","sha512":"0a70ce9acba14420e4afaf49f0e237f2cc5dacba385e20e58c76e1729af0f6540dfdfb00b1aee48a9da3c4a6127f5fa7ab9e71c6e99afb3171d0a7bbd8956a45","ssdeep":"384:ITww0uSbNb1OEZt8oNolSPfaZsr4LiVgOoz+G0CU+3rGo0pZOfnhsuG3vAjFdlNJ:ITTJoNEp+G0XcRCi","tlshash":"a2238976742c17072e37d87416ac75407e0fa7b7c706caea1178141e4beb3926ba2d2e","first_seen":"2026-06-03T13:57:16.040091Z","last_seen":"2026-06-17T17:33:52.867351Z","times_seen":8,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/zqwin007/Image/league_match/images/164577482086.png?v=1","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.233Z","timestamp":1781240029233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /zqwin007/Image/league_match/images/164577482086.png?v=1 HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=5,i\r\nlast-modified: Fri, 25 Feb 2022 07:40:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"621887e4-295a\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpires: Mon, 15 Sep 2025 15:51:04 GMT\r\ncontent-encoding: br\r\nx-cache: zqwin007:/zqwin007/Image/league_match/images/164577482086.png|30d|HIT\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a64106ba5f5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10586,"size_decoded":11262,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"279c4111bf43a7c1c9fb4a33265ab496","sha1":"0013a37ed119272f2a83e0105b6a37de255aecd0","sha256":"1e018a0f3880b944ec574df43722f660ef23710de2d28041a85fef6b15cb3ec2","sha512":"df8ed8a26e8da4f553b76799747aa29d5e1bdbcd0585ac9f4e09b0e7e678c732944d731494f1a3a921ae66c57be0278c54915628655b1a9d48ef91ec4aa4e7bb","ssdeep":"192:yOStxt3ro4Qq3DLKaO/hCmAsVl1brnjC6FU0pmkS4sH2U0PTUfeGgEFH9Qe:ynNro4DDLnshCavb3C6W0pmkS4c2LYXl","tlshash":"0e22c0768d95472fa1dc15eac52a642dbc5f9d182b2e6b00ad0134e1d973a02d0df2d6","first_seen":"2025-05-12T19:39:36.754922Z","last_seen":"2026-06-16T16:39:07.139142Z","times_seen":261,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/d9b08bd3se11.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.174Z","timestamp":1781240027174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/d9b08bd3se11.js HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/d9b08bd3se11.js\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Sat, 30 May 2026 06:54:14 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640fb4b865696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":534078,"size_decoded":155055,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c61f34b1c2564de0e33028eb670ef966","sha1":"e5bdd49c442fc3aaa68b39a24a187394fb046670","sha256":"e34b46f6aa1066da8236f00031a676a9f2955417c753ec25382edf7716f1bc72","sha512":"801d5d3f0a7c215bb00e5ce010a8977c50bd2aca43cdb8fa14dc6e958e623c1a19f2d503a409a49d99d15136dee74aa5cadc7dc06c1a2f80de3049122d515bca","ssdeep":"12288:c4j36aXNJAxWG7KPMdmKFaOKLkizyZyThNPEk7l+DZIx:7MdmKFaOKGZyTstIx","tlshash":"78b49340b3d078a906d79bb1b32fb0e9f46f19ab3c54089bd111fde02eb5618dae5934","first_seen":"2026-06-03T13:57:16.107184Z","last_seen":"2026-06-12T08:40:50.09954Z","times_seen":7,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":1,"connect":2,"send":0,"wait":8,"receive":7,"ssl":225},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/css/fa6f7131.css","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.199Z","timestamp":1781240027199,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/css/fa6f7131.css HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/css/fa6f7131.css\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Tue, 09 Jun 2026 08:40:31 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640f9fe16b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94248,"size_decoded":9951,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"57cf05a3e357da4119cc8d2cca9c0660","sha1":"e2d5addad3f1d823b8d317df7e4404c6f31216b1","sha256":"88c2da6a21037a894d298ca745ad04efae3100fd2d786144803b9219af371a6f","sha512":"33763f5e038c300c98cf6fcd5eb373b370e1019afb9139bf540a6d8d26dab3521de4efd6342ce5de7cf6ae5f5e60f9cdb17f3ba4018320e35404a34b71ba8ded","ssdeep":"1536:Fsm7rSYTg+VneUiy15tlccpTVkyMkyg7lI7TAQQCknU0FGzfopAdHpZ6P4dj/GVW:Fsm7rSYTg+VneUiy15tlccpTVkyMkygA","tlshash":"7e93ab36741e2f173e23ecb4179c3d446a09a7b3d516dadc25b9342b4e8b3d12262e2d","first_seen":"2026-05-30T12:52:55.378036Z","last_seen":"2026-06-17T17:33:52.770172Z","times_seen":10,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/3rd/contact.png","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.926Z","timestamp":1781240028926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/3rd/contact.png HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cfstatic.aifvfjuf56juh.cfd/_nuxt/css/ec448d1a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 156\r\nserver: cloudflare\r\npriority: u=4,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/3rd/contact.png\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Tue, 19 May 2026 06:12:02 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a64104c9565696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156,"size_decoded":935,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 4-bit colormap, non-interlaced","md5":"f904169b48384244c1d2373791fa73cc","sha1":"53a85d643c68756121f59b4e938866efb71e25af","sha256":"8f1eaa388d2fcdc2e3b94d8c8a55a82ebb22e74623a5a408dd4ed87b0de2b42e","sha512":"0e16c41e677772ad1d358d81f4ebeb690704759b65ebd1a40ceff715cb8bf1eb8c5ed1a8c6973139cf76d7e47fa6f403f4a16e985c9d515daddeee51b463ee6b","ssdeep":"","tlshash":"f0c08c82f5a03da04489489a104a00828c22dc0c3990010b88c1b02e2372808c4cca82","first_seen":"2023-05-10T01:17:07Z","last_seen":"2026-06-12T08:40:50.063695Z","times_seen":69,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/6e0121da-141f-416a-b085-cf18b8d4bf64.gif","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.958Z","timestamp":1781240028958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/6e0121da-141f-416a-b085-cf18b8d4bf64.gif HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 14 May 2026 07:41:15 GMT\r\netag: W/\"1dce3750b0cd419\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|MISS|/svimg/6e0121da-141f-416a-b085-cf18b8d4bf64.gif\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a6410589be5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":740249,"size_decoded":732676,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1000 x 106","md5":"d9f0d007c44967f8f9fc9e0c72f95c7d","sha1":"4370b005c27bb693a24312870973989113ee5d92","sha256":"0c828c8e27eb92dd6fc9b41729e3e6e2e7ec517ef261a4eae220dd66ea469226","sha512":"e2d03ae5d125f26fe81d79e6a24fb5d1703418ac598f95f96b0f0a0e04462df7a6e8f6b9677a286e42cb64ecea2b7a54eb42facda4cca83963336911a278edaf","ssdeep":"12288:7uEgZ67c0r2N1AO+t12QQQmAbuG1pCGI/qCW8gLbRR42pnLt3PgAIdC:7uZ67c0r2q8QQQfbfCGLscbR+2pZPx","tlshash":"29f433d3f10641d9a2fd365ead075cde8c1626d30ca5ae706ca07a02db59bcd73e1a38","first_seen":"2026-06-12T04:54:28.783723Z","last_seen":"2026-06-12T08:40:50.086427Z","times_seen":3,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":10,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfapi.aifvfjuf56juh.cfd/gatec356b46252baa38aa36586941e/api/getFocusMatch?category=-1\u0026lang=1","fqdn":"cfapi.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.463Z","timestamp":1781240029463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /gatec356b46252baa38aa36586941e/api/getFocusMatch?category=-1\u0026lang=1 HTTP/1.1\r\nHost: cfapi.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"+/cBafacHCus6hs6uJ5/9VccQHMyquvuTgsaCUXFXis=\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cfapi-cache: MISS || 60s2 || /gatec356b46252baa38aa36586941e/api/getFocusMatch?category=-1\u0026lang=1\r\ncache-control: public, max-age=60\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a64108297676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1479,"size_decoded":1398,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0cac5ba2eda7e7b1fbf5ff3d7fad9432","sha1":"6b113970140eacfae7f360fecc6a0ec157f0bbcd","sha256":"22fe2c525a93ad9d27655466459e6a50af14e4393b2b0a38c313c3f682bab167","sha512":"1a3d96462c9691fbaa5a9374fd472a477a27f883353031866ff61d267a7f1318b0d930aece42329d47307d42311bbcd94ef7b3c7ed2080d6c39dff2d7cb0f29c","ssdeep":"","tlshash":"0931ca68c24248ef8b1a35f466ef2d5ad8372a5390c4fd82ed8aec1dc86a746b01c741","first_seen":"2026-06-12T04:54:28.784759Z","last_seen":"2026-06-12T04:55:11.346012Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/zqwin007/Image/team/images/1kag2h69q91v.png?v=1","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.629Z","timestamp":1781240029629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /zqwin007/Image/team/images/1kag2h69q91v.png?v=1 HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=5,i\r\nlast-modified: Thu, 20 Nov 2025 07:26:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691ec2b6-9d5d\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpires: Mon, 24 Nov 2025 05:31:07 GMT\r\ncontent-encoding: br\r\nx-cache: zqwin007:/zqwin007/Image/team/images/1kag2h69q91v.png|30d|HIT\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a641092b825696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40285,"size_decoded":41107,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"7bb9a2c62841b5e492267ee1216bb40f","sha1":"0cbd2cde35f1e0f04e0daa358cbcb02a299fe732","sha256":"7db6954090ca058d52a0ca97dcbbb8305223daf4c6a31b9ce1babc170a777adf","sha512":"d8eaca5cfdae6f3062c29eb127fcaee49b0b528813cc75ecce48a2a141d089236808e33339b983d97caf1c68abdb47b9bb1cee02a9f05946f9f3b30ba79de9cc","ssdeep":"768:NCvc5chDSvxdFBKYGeZM0MzoSa7E0leTCIl1dMbJTAFY3f6IHSs5BPp:NDy28Yh20MDag0oTn1dMlA63CIHJPp","tlshash":"cd03f1e49d8c043788f17d6ea06c509b0bf93c894f15596d70c42843a56befb8e992f8","first_seen":"2026-04-04T12:46:37.476224Z","last_seen":"2026-06-12T12:43:29.972577Z","times_seen":8,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/zqwin007/Image/team/images/16406826247.png?v=1","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.639Z","timestamp":1781240029639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /zqwin007/Image/team/images/16406826247.png?v=1 HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i\r\nlast-modified: Tue, 28 Dec 2021 09:10:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61cad480-127b\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpires: Fri, 19 Sep 2025 06:43:28 GMT\r\ncontent-encoding: br\r\nx-cache: zqwin007:/zqwin007/Image/team/images/16406826247.png|30d|STALE\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a641093b895696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4731,"size_decoded":5373,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 120x120, components 3","md5":"1f848b884b85aea230dd0686efcf78db","sha1":"367c125e90c99539a7f95b6c2554c0ae0849e795","sha256":"f1b1f9e4c5385c5a9c296452b9bab6984b6e71c010394d48a41b59df1f30dd52","sha512":"86b74ec6922a7a2c7b4f436a14f704e89d1af9ff4d3e420ce52c3d811c01f12b4ae3d8c668fffa35a857fa1cb7c49ed0225075a1e47fc7404694f3e377dcfd2f","ssdeep":"96:ghyEyuAxuWvjAUuuFeuDcl9nOxNv7cmPy18UB27XdsrSeY05Vo63/:my1xu2ANxuDcl9O3Vqx2jdsrho+","tlshash":"f8a17d25731edb92af262de51b0c154040da7b8db4e0d9391df3c51bda90cf9620249e","first_seen":"2026-02-04T13:11:19.802368Z","last_seen":"2026-06-12T13:27:53.498167Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newsapi.aifvfjuf56juh.cfd/news/article/match/list?page=1\u0026pageSize=2\u0026sub=1","fqdn":"newsapi.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.898Z","timestamp":1781240028898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /news/article/match/list?page=1\u0026pageSize=2\u0026sub=1 HTTP/1.1\r\nHost: newsapi.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-newsapi-cache: STALE || 20s || /news/article/match/list?page=1\u0026pageSize=2\u0026sub=1\r\ncache-control: public, max-age=30\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Fri, 12 Jun 2026 04:53:49 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a6410499c776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1231,"size_decoded":1346,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9e2ca77258180674f23ef55915cb92a5","sha1":"425361f704e4602a7dc497190d923209272066e9","sha256":"cb4d6a7bb2ef264da994d9bece9552e28534d09e074dc279a7fc7d685f0d046f","sha512":"ed11f3401d39ac2bf87d57e2f87420a256c5e6b46cb20755133beeb43d84e65ffd0828fc98969c0f4e5d2e4430e7c8be6dd2f8757738afbfe5632666b70ca3f0","ssdeep":"","tlshash":"cb21e27145c1449dc8a150cfadeffe085adb293256d0cf65d913ca0ae5a2607512f321","first_seen":"2026-06-12T04:54:28.787838Z","last_seen":"2026-06-12T04:55:11.313471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":2,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"newsapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"newsapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/zqwin007/Image/team/images/1gw64wg5tv2c.png?v=1","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.632Z","timestamp":1781240029632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /zqwin007/Image/team/images/1gw64wg5tv2c.png?v=1 HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i\r\nlast-modified: Thu, 23 Mar 2023 02:31:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"641bb9eb-c24\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpires: Mon, 15 Sep 2025 14:14:55 GMT\r\ncontent-encoding: br\r\nx-cache: zqwin007:/zqwin007/Image/team/images/1gw64wg5tv2c.png|30d|HIT\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a641092b845696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3108,"size_decoded":3458,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGB, non-interlaced","md5":"27e78af19c49bf62f871690296c1b1a0","sha1":"f716e44e5339876f4a5919a336d51b40f05c029b","sha256":"e196df18cea6f8b51d3c964e28f9314a865293364d0ca60412c096c7938933f8","sha512":"920339f9d990094dd9345ff66b7ba1ffcc5e596f744b500c9d09d4117d7ecfced6229d3913d291ec7ffb03b632daf2a45808ed0592951295ae0b7a0460a02ba2","ssdeep":"","tlshash":"ca511994523389e919b69ff6a1b4b4e3ab10f69f5e904b5c2b59ddd01b004a3bd8ce80","first_seen":"2026-01-20T07:52:17.799769Z","last_seen":"2026-06-12T04:55:11.488921Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfapi.aifvfjuf56juh.cfd/gate5ed7c8d0d81ef176c6232dc553/api/merge/getMatchChannels?d=www.808bola253.com\u0026_t=1781240049481","fqdn":"cfapi.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:54:09.493Z","timestamp":1781240049493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /gate5ed7c8d0d81ef176c6232dc553/api/merge/getMatchChannels?d=www.808bola253.com\u0026_t=1781240049481 HTTP/1.1\r\nHost: cfapi.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:54:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\netag: \"Qd8OVLIxsfeIpHUsy9oS9um3esWV5P24mQEy70XnG9M=\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cfapi-cache: MISS || 60s2 || /gate5ed7c8d0d81ef176c6232dc553/api/merge/getMatchChannels?d=www.808bola253.com\r\ncache-control: public, max-age=60\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-ray: a0a641855ae776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":848,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-06-18T02:30:33.444839Z","times_seen":294613,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/1st/favicon-16x16.png","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.002Z","timestamp":1781240028002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/1st/favicon-16x16.png HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 522\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/img/1st/favicon-16x16.png\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Thu, 11 Jun 2026 20:12:39 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640ff0d935696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":522,"size_decoded":1311,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 4-bit colormap, non-interlaced","md5":"f6b85d81c11a22bfbebef3a7f4339f17","sha1":"56fcbf7977d92845fab4f90582b9da84be1650b0","sha256":"c5cf4c498409eae2acaccd0bd633dc90ab08f958baa1138a628146dabc4f21f2","sha512":"e88f94f66bccb5cc42633eb5f0fb5ac084a48d395514bfa19137794710f87173f39279ed9b9dc20583a740e1a142c4bac40beb022976236a12df881e3e847deb","ssdeep":"","tlshash":"9df005dbd439857ac30b1552d25b1344e5bfc61732c24c05adb5d7045c24fc166d4e92","first_seen":"2023-05-09T20:54:48Z","last_seen":"2026-06-17T17:33:52.760737Z","times_seen":117,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapiab.aifvfjuf56juh.cfd/api/standing/list?lang=1\u0026d=www.808bola253.com","fqdn":"dapiab.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.900Z","timestamp":1781240028900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /api/standing/list?lang=1\u0026d=www.808bola253.com HTTP/1.1\r\nHost: dapiab.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"Pl7U5if+5/mRCyy0xAaJy3pGy9Bx7zYcD9FzYKeRbeY=\"\r\nx-frame-options: SAMEORIGIN\r\nx-dapi-cache: MISS || 60s || /api/standing/list?lang=1\u0026d=www.808bola253.com\r\ncache-control: public, max-age=60\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-ray: a0a6410499c576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21100,"size_decoded":4626,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"15aa5e79c8178e820230487d1e52d1a6","sha1":"2b8274a9af8131dc8eff940b31423c8e66a9b187","sha256":"eadddd5d3efe89660d61ed2c20cadf45d4f7c97e587d0fed82693b6eb76e43ce","sha512":"177de4762ff1116bd7f365f4ee8d5d595c65af08d7b5a28c90c0212392f4b810bdb3b99b526eef5a532566f5430624345c5cb0f92fd36b526207438f238df5a5","ssdeep":"192:dqut0wJlFlZUoWAKVJmulVkyBFe4KYMYMSka9FovanZBQ61+Vrc2KG8A20DDgJFR:d97lFWAwJhR+ioQZy64VLKPWfnz+","tlshash":"07923999591b7c5fe472f9f624dfb85299fd11ab9bcccf404c9cee0834b0aa450324a6","first_seen":"2026-06-12T04:54:28.790009Z","last_seen":"2026-06-12T04:55:11.336626Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_setting.png","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.927Z","timestamp":1781240028927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/3rd/icon_setting.png HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cfstatic.aifvfjuf56juh.cfd/_nuxt/css/ec448d1a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 621\r\nserver: cloudflare\r\npriority: u=4,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_setting.png\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Thu, 11 Jun 2026 08:40:40 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a64104c9595696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":621,"size_decoded":1405,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"13b0b3cad4edd23cb950c818d46ae61a","sha1":"0ef127d9dec26ad629e566a97f0484e00e44bd80","sha256":"52ba45f2934c07abe3a7fcc30f1a67058b54e7623659bcbdb32ee63bcbc1bb99","sha512":"a04e2257828486a22f7e36e81c6301173bda4f32f10b6e8f3709830e6889a18ab22f102e89771ad859cda4b8608321c5db15e28800ddfaf1b2079e293e370893","ssdeep":"","tlshash":"8df002c6fa28b05e021a0865c11761b00e3d440465da6578ed9aa8fd24b3e0f8d0eb83","first_seen":"2023-05-10T01:17:08Z","last_seen":"2026-06-12T08:40:50.117887Z","times_seen":69,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_h_bookmark_website.svg","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.365Z","timestamp":1781240027365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/3rd/icon_h_bookmark_website.svg HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_h_bookmark_website.svg\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Thu, 11 Jun 2026 06:31:06 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-ray: a0a640fb0b6d5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1736,"size_decoded":1692,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22e0f77ea107a57da7318800e90858b9","sha1":"ca82af52b103e889e05b5384bbc2b47335b24e31","sha256":"1217fa2343f313ac832a08284223af5bd09800fd91e9d701b3a87e242dbca926","sha512":"3faeb6bc08b1019515523bf8243659d1a47a2d36ff74172bcbc5cc542d1e02cc84951fbcfc8095dccec95bb4107b0c1d755a576934ab6e66df236b900ebd3fe6","ssdeep":"","tlshash":"98312ff7a688e1f4d482e761e808e8b1fc5f32f96f9a12c99150dd58b52417e4c8cce4","first_seen":"2025-04-08T13:29:57.664949Z","last_seen":"2026-06-12T08:40:50.07896Z","times_seen":34,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/ca2f16a0-161d-4edd-82ca-c648a3292098.gif","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.588Z","timestamp":1781240029588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/ca2f16a0-161d-4edd-82ca-c648a3292098.gif HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 20 May 2026 02:23:36 GMT\r\netag: W/\"1dce7ffa975b2d4\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|MISS|/svimg/ca2f16a0-161d-4edd-82ca-c648a3292098.gif\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a64108eb5b5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14036,"size_decoded":14527,"mime_type":"image/gif","magic":"GIF image data, version 89a, 750 x 80","md5":"280ab3509a147986b05b1363e2f33e45","sha1":"dba5f603a7c3775d16557b0dbe669ea5ee8ad395","sha256":"670533fc74b4e428cdd6206cd55d20c43d21f065c618ae940956c5abb92f3bf7","sha512":"f78f0c7715094a67dfababfe66cfef6d7e34f5a78ce0b660ef9a515f2f12be7826b6113b896361673014b1ee1ba1fd6c7e54e26bf8e95229a176433bbea731cd","ssdeep":"192:+nRmHCWAIBKWa0oWPbu4Z25GAAUgNe3npw9nb7nacHf/eJA1CtNcqLHEWQQ:+nz3dWPb+VtgNe3np27a2f/PoBQQ","tlshash":"8852c0373b972909f507bc7e7e804935e60203c91fbe85f5b8ad7a5cd16e05aca50e48","first_seen":"2026-06-12T04:54:28.792054Z","last_seen":"2026-06-12T04:55:11.306499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/site/region/47-flag-small.png","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.616Z","timestamp":1781240029616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/site/region/47-flag-small.png HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 522\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/img/site/region/47-flag-small.png\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Thu, 11 Jun 2026 20:18:13 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a641091b755696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":1316,"mime_type":"image/png","magic":"PNG image data, 48 x 32, 8-bit colormap, non-interlaced","md5":"f0d9d3d5a54570f29e19754593b3647f","sha1":"3335bf72bd93f5e1c98ee422339ff14d61d84aae","sha256":"6f4811a0c7203125670858a11524a318270cb5792c917159d2c7c5e0f41e5881","sha512":"a386fc4fc5ab5df1a2a6119058d9da02cc1ff3292d2d797ca8b657bdf8c2181fe73662a7bc6787b8f4534e27bfb0b25ede5f5b48e0766a520f1eb1e75346de5c","ssdeep":"","tlshash":"e5f02023072ab884ae809d32d03697895d810afbd8b28a0e0589cc4b0675b38d00708d","first_seen":"2026-04-11T09:36:11.487879Z","last_seen":"2026-06-12T08:40:50.117318Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapiab.aifvfjuf56juh.cfd/api/vc?reqs=102\u0026reqs=301\u0026reqs=303\u0026d=www.808bola253.com","fqdn":"dapiab.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:54.591Z","timestamp":1781240034591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /api/vc?reqs=102\u0026reqs=301\u0026reqs=303\u0026d=www.808bola253.com HTTP/1.1\r\nHost: dapiab.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nx-frame-options: SAMEORIGIN\r\nx-dapi-cache: EXPIRED || 2s || /api/vc?reqs=102\u0026reqs=301\u0026reqs=303\u0026d=www.808bola253.com\r\ncache-control: public, max-age=3\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\netag: W/\"xjxmeVauBUCXLUt0giTwwcIPRIX9B+1SO6woHSAzsds=\"\r\ncontent-encoding: gzip\r\ncf-ray: a0a641282d2a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110,"size_decoded":902,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bc81938ee8d0ba2715a162ae1498ae3f","sha1":"a3fe1212658ead3f7dfd3af02b95c5ec62c6ef03","sha256":"86f7bd03bb255fa66b0f9312a7b522db26f81fa92624bbb4b70c1867b74f1df0","sha512":"98d102e0121fb2f7e270cd2ced66c75c229ab24eb2a0eef0f2940d3c5c6fd29dc5a285a1d88cd45305ddc3f7555ff6047278fab20fd6930356418aa20860eb41","ssdeep":"","tlshash":"7fb0922cb20a315e0523446a3b8398b50ae8a65b4cc08c54857551810f7692d0862da0","first_seen":"2026-06-12T04:54:28.72332Z","last_seen":"2026-06-12T04:54:28.72332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/e1ce9af6se1.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.192Z","timestamp":1781240027192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/e1ce9af6se1.js HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/e1ce9af6se1.js\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Wed, 03 Jun 2026 10:30:44 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640f9fe0ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10987,"size_decoded":4543,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10987), with no line terminators","md5":"a9f80de0d3d5d9096f2c5602fa3f27a5","sha1":"8a651b7f1b5bd2057ea37efb1100ba1ce8b6bc2c","sha256":"5e1abf59b3c6a7977f570643290e97db27cedc08497a58c585bc33cfcf98bf48","sha512":"d59beaabc2b5e5ea9c31877184461f470602336bdf4cb546911f4f52e5788f48aad26ede74ec6b76f5a035d92c4085b69d0bff3ffcf4a3c4fd978274ed3e0a87","ssdeep":"192:09bL1eJFIQcTR5TawcchshJM74rOQvSIkK/IK4KQbsIgj2sdp46PzfT7n7JA/YRx:e1eJFjcTR5TawHGC7OvbEKJQjgKsTjPL","tlshash":"58329700b390f8a807e397b5c537f0cdf91f1a1a7944b467d526be80bea5728c5b5835","first_seen":"2026-06-03T13:57:16.032486Z","last_seen":"2026-06-12T08:40:50.149687Z","times_seen":7,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_backtop.png","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.894Z","timestamp":1781240028894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/3rd/icon_backtop.png HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 740\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_backtop.png\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Tue, 09 Jun 2026 08:40:36 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a6410499345696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":1524,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"1ba0fb8001ddd54aab50f9568b75a97f","sha1":"39b1659c6a3d3cf5fe4582bb532a136fde858aeb","sha256":"ff7813b8a2a87cdb5686e874ef8f3a1f0f32cb6a2f5dd4b5a3386a20945335ff","sha512":"a02d6d05c2a1cdba34a23b9b40807a45d2377e1f457c68fcc0ac105da7dcd46a494a52569b2836ae0f4784b79f73474108f63f71a331d542c28a3f3018e59473","ssdeep":"","tlshash":"410199918d0da05dc2dc3f1b1616a473e8727ddde31d0923d147b56e187412454441fb","first_seen":"2023-05-09T20:54:48Z","last_seen":"2026-06-12T08:40:50.088859Z","times_seen":102,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfapi.aifvfjuf56juh.cfd/gate853efea861931dd3_b0938a9b4b6afaf3_fbb688ed687d27f299914b932b/api/merge/changes","fqdn":"cfapi.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:54:05.001Z","timestamp":1781240045001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /gate853efea861931dd3_b0938a9b4b6afaf3_fbb688ed687d27f299914b932b/api/merge/changes HTTP/1.1\r\nHost: cfapi.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:54:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 17\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\netag: \"/mnIXWaDR5Gw5A9rq3IaHGgVq5CefEYNiUS4NF6+Vo0=\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cfapi-cache: MISS || 60s2 || /gate853efea861931dd3_b0938a9b4b6afaf3_fbb688ed687d27f299914b932b/api/merge/changes\r\ncache-control: public, max-age=60\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a64169386776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":868,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f73a72e9fc2875e3d313370d0a31d6da","sha1":"9d0e0415fb4ed6a369e98c97fe7e864826409927","sha256":"c0926d73b6ca2e1dde2aed9d6294fd8b5eebb3035e8f92f3dff894d5f6da75fd","sha512":"0ed927e79d76d2fb795706a7acc9c5bfa2f7408a854fd00bb289d29e0f923149019c1960e9e6543755c0b9f91d46c14ea6a72bb7f73aa6e9826842f0d73458e8","ssdeep":"","tlshash":"be6000000008000222c8002ba02a0000082800c082288020020828e222000800808800","first_seen":"2023-04-12T06:56:23Z","last_seen":"2026-06-17T17:33:52.849935Z","times_seen":64,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/7c7ac50bse23.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.185Z","timestamp":1781240027185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/7c7ac50bse23.js HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/7c7ac50bse23.js\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Thu, 11 Jun 2026 18:03:57 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640f9fe04b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":194166,"size_decoded":51531,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65527), with no line terminators","md5":"6641603394843906a659910315c723f1","sha1":"1b6fe507e6859373436192e9b7c89c193f48b792","sha256":"f3d45f392e05e33d762f3cd44ff1ccfe4c1c76d324d7f8502d68b1bfd7a00b59","sha512":"8839cdc736f57bb3aad623f44d2cac3b25a10e3facd0bcdce743cfbe531ee524549cd40f99d30a4e6237395a60ef294cb77be1e428cd9c2cd3bc31d3934e1ed6","ssdeep":"1536:wLVtrGZaQhzOJehtBH/Ev/2xi3aUSuZaU2h/uYEfkCKOEUuOVKl+fTurf4pgzm:wLCGv/hSh/uYukCUoLuL4pgzm","tlshash":"c814c570f240f5fdda97ca612d3ab2acd43717adb09c2c66c139bc156aa062cd9dd078","first_seen":"2026-06-03T13:57:16.011818Z","last_seen":"2026-06-12T08:40:50.153999Z","times_seen":6,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/261503c7se4.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.970Z","timestamp":1781240027970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/261503c7se4.js HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/261503c7se4.js\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Fri, 05 Jun 2026 06:22:57 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640fedd7b5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":233252,"size_decoded":54468,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"35bdd908514c31e38d2cecb6bd10db43","sha1":"34a5e8c74f803a94e09a98fab64bee40ae7f8411","sha256":"26fdc892a8f4f9fffa79bd09e991108933a64efe39925893edaf86fdf1a892fc","sha512":"a0dc54139dfcb067adf8db411c943adbaabc99049a46145dff6f31c472dfcf2c0d57d12747aefef3d28672552fabc26bd01adf7fb11fa169816ca5b6f14407bd","ssdeep":"6144:/K39K5JO+RphcExq6u8TidX3uyvm28e6LA2zwFxY2UPxGF/C4vi8CSgCt/iEPI6I:VphcEnmdX3uye2wLA2mxY2UPQF/C4viB","tlshash":"0534b702b3d034e89bd78ba7b72ab0d1f4bb04673d44586ee121bd519af9618d3dd8b0","first_seen":"2026-06-05T05:34:21.079619Z","last_seen":"2026-06-12T08:40:50.134633Z","times_seen":6,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_footer_18v2.svg","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.886Z","timestamp":1781240028886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/3rd/icon_footer_18v2.svg HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_footer_18v2.svg\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Thu, 11 Jun 2026 02:35:35 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-ray: a0a64104891c5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1907,"size_decoded":1614,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fcd43f7f7dd9a487f219c4c5d909cd6e","sha1":"9f841f59c29d92143c53981efb62ed9d0d739eaa","sha256":"94d12bc5297875f6a1806b6bacbab0b3a16a27738a15a136df75a6198d45c8cb","sha512":"5598c31df05778d125944b0a174f8823b45c8bf82e496b7f5eec22d046ca985aac124608dd8ba94322029ca4018280eda0de74dc4fb3bd1a258500ef2ee933c6","ssdeep":"","tlshash":"b04101d7679c31d4a5c2c725ed14c62f645bbcb13b496e088608cefc63af45e8804c5c","first_seen":"2025-04-08T13:29:57.62883Z","last_seen":"2026-06-12T08:40:50.151295Z","times_seen":87,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.808bola253.com/","fqdn":"www.808bola253.com","domain":"808bola253.com","tld":"com"},"ip":{"addr":"104.21.86.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T04:53:46.515Z","timestamp":1781240026515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"808bola253.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 09:47:09 GMT","end":"Fri, 21 Aug 2026 09:47:08 GMT"},"fingerprint":{"sha1":"8D:99:B4:00:60:95:E4:FF:53:58:E0:36:48:13:4F:F5:76:45:3B:36","sha256":"46:72:88:73:B2:4A:BF:69:9C:CC:12:A1:F7:F2:EC:9A:4A:18:C4:E9:B2:F0:1D:A7:0E:D5:7F:50:B5:EA:B6:55"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.808bola253.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 12 Jun 2026 04:53:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5G4ssyMn8n1Ar4pHdGyqr%2F26GOv47C%2FgrGFWejSWY8TiptwLXlEDMOPbjaOU9PAAwnWvMfSE%2FSRYIv0Mljq1cI7kzQrF5h%2Fztn6T%2FHv8G0leDy%2B96ARWwfKhyszv9i1xUW7fuJ4%3D\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=66\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 3600s || www.808bola253.com/\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a0a640f5ed0a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80697,"size_decoded":31955,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (54499)","md5":"ed8f02b85ed7b10d72855d81abd90927","sha1":"98d73361fafbc0044c0374dc1d1cea3e83a4fbd3","sha256":"233aedee0b814270d1ae0cd0f4a3b992ef52ef42917c621b5cf3e0f3adbaa23d","sha512":"8091dd613d532e54bec685e4526f261df020c7b3d57c46d0a401f0f9ac3798293381adbb297e568a2c53f6f2968eeeed4482509f85f7d913a6e7f3074b003776","ssdeep":"1536:eIGX9Zevk61NU49C0OxNwK7xU6osLE7LWR0fTd8Ys:TYRWTd8z","tlshash":"1c733af63584a2e4a503dbf9e4337965f91a3aff6fc444d8c1984fa49a624f89e4cc40","first_seen":"2026-06-12T04:54:28.798496Z","last_seen":"2026-06-12T04:55:11.334271Z","times_seen":2,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":11,"connect":14,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/zqwin007/Image/league_match/images/166674997937.png?v=1","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.239Z","timestamp":1781240029239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /zqwin007/Image/league_match/images/166674997937.png?v=1 HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i\r\nlast-modified: Wed, 26 Oct 2022 02:06:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6358961b-d02\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpires: Mon, 15 Sep 2025 15:25:20 GMT\r\ncontent-encoding: br\r\nx-cache: zqwin007:/zqwin007/Image/league_match/images/166674997937.png|30d|HIT\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a64106ba635696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3330,"size_decoded":3942,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"9242f3ecf313a6aa7b72c1752a0cf0f7","sha1":"9d8a91a57a35bd991643559040a5d2558a609e5f","sha256":"bb93028d473fbf2db4bf39631ae573e8bae16cc737c599dca1dbb098aea9fd5b","sha512":"f92a653d819b78d5e00da2302c526575ef87dce777e0a790b1253cac1de865414d073f7e5888e6d5b0731d1143bf2e250ffc6551ec44ed1db85f7c29e9522313","ssdeep":"","tlshash":"b6613bc3335b7cf7826c1999708e283758d2e7599ec25673a064a2d53181a201ebf0d2","first_seen":"2025-08-01T10:43:12.80317Z","last_seen":"2026-06-16T16:39:07.460038Z","times_seen":242,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/css/99c43583.css","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.176Z","timestamp":1781240027176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/css/99c43583.css HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/css/99c43583.css\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Tue, 26 May 2026 10:50:49 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640fb4b855696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108592,"size_decoded":38978,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (63489)","md5":"12a7c2fe589d31f3242cd6bbc59df451","sha1":"ca1c02289edff6ada5dd33efe5dee4961da30895","sha256":"e6cee4ee267961895732d5651cf9f90c0d3c8dceb0f9f235a0dcd3c6a3746d46","sha512":"bdbfc6ecb82d8382c16795b5770debcb373b3ec5c6470f6df72cb86597d7aa1eec8d8c7762a186b4f96831bc632eef90d576fc17065b337378d653addf790392","ssdeep":"1536:wjQbFNJ+jqkiHcarx3WqyrtpqoSWEDZjIfG4b+:wQrxmNH9yDufG4b+","tlshash":"3ab3d8369848239e3727dc749bcc7684aa1ed272c5818ec8f179251d8fcb7851276e3e","first_seen":"2026-05-30T12:52:55.3059Z","last_seen":"2026-06-17T17:33:52.900606Z","times_seen":10,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":10,"receive":2,"ssl":225},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfapi.aifvfjuf56juh.cfd/gate5ed7c8d0d81ef176c6232dc553/api/merge/getMatchChannels?d=www.808bola253.com","fqdn":"cfapi.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:54:05.004Z","timestamp":1781240045004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /gate5ed7c8d0d81ef176c6232dc553/api/merge/getMatchChannels?d=www.808bola253.com HTTP/1.1\r\nHost: cfapi.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:54:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\netag: \"nFoBtk/bliCCw1E+JlAR6uN93DP4LFxf7jgFGZ0HXZs=\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cfapi-cache: MISS || 60s2 || /gate5ed7c8d0d81ef176c6232dc553/api/merge/getMatchChannels?d=www.808bola253.com\r\ncache-control: public, max-age=60\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a64169487476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":848,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-06-18T02:30:33.444839Z","times_seen":294613,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfapi.aifvfjuf56juh.cfd/gatec356b46252baa38aa36586941e/api/getFocusMatch?category=-1\u0026lang=1","fqdn":"cfapi.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:54:09.805Z","timestamp":1781240049805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /gatec356b46252baa38aa36586941e/api/getFocusMatch?category=-1\u0026lang=1 HTTP/1.1\r\nHost: cfapi.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:54:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"+/cBafacHCus6hs6uJ5/9VccQHMyquvuTgsaCUXFXis=\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-cfapi-cache: MISS || 60s2 || /gatec356b46252baa38aa36586941e/api/getFocusMatch?category=-1\u0026lang=1\r\ncache-control: public, max-age=60\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-ray: a0a641874f6e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1479,"size_decoded":1396,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0cac5ba2eda7e7b1fbf5ff3d7fad9432","sha1":"6b113970140eacfae7f360fecc6a0ec157f0bbcd","sha256":"22fe2c525a93ad9d27655466459e6a50af14e4393b2b0a38c313c3f682bab167","sha512":"1a3d96462c9691fbaa5a9374fd472a477a27f883353031866ff61d267a7f1318b0d930aece42329d47307d42311bbcd94ef7b3c7ed2080d6c39dff2d7cb0f29c","ssdeep":"","tlshash":"0931ca68c24248ef8b1a35f466ef2d5ad8372a5390c4fd82ed8aec1dc86a746b01c741","first_seen":"2026-06-12T04:54:28.784759Z","last_seen":"2026-06-12T04:55:11.346012Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/user/icon_user_default_logo.svg","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.884Z","timestamp":1781240028884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/user/icon_user_default_logo.svg HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/user/icon_user_default_logo.svg\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Thu, 11 Jun 2026 06:31:01 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-ray: a0a6410489175696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485,"size_decoded":1091,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b74cbaa7552db6ed67b4531006f4eac3","sha1":"7e61bc66df10b2a0cb92fe8f0c96541f336c423b","sha256":"f02f3ef691e56a425abe48c11bfff7bc7443825971cf9e75a639be326bd5dca2","sha512":"bfb9cb9d59cada30a6e546a23a8d9bf248d16875b5caf81959c3b5f59ae4cd5bd34ff8b11d49f52f9cdbda9bf6701c58aee044f0814d1469b5d707db9ee24abd","ssdeep":"","tlshash":"98f09ed5123a0008d8c7517ecf9cdf14192bf8f63b6485c4e3b2152228453a37e56614","first_seen":"2025-04-08T13:29:57.593489Z","last_seen":"2026-06-17T17:33:52.728836Z","times_seen":73,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/07285e3a-ec18-4f55-93db-8ede453dbaa1.png","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.952Z","timestamp":1781240028952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/07285e3a-ec18-4f55-93db-8ede453dbaa1.png HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 23 May 2026 03:49:34 GMT\r\netag: W/\"1dcea672b1b0476\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|MISS|/svimg/07285e3a-ec18-4f55-93db-8ede453dbaa1.png\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a6410589b65696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8054,"size_decoded":8211,"mime_type":"image/png","magic":"PNG image data, 120 x 36, 8-bit/color RGBA, non-interlaced","md5":"0e4b7f43552dafcb2e300761987d9be5","sha1":"54c3d4b9c1ecd6c18f98527777b9f00f82447850","sha256":"0d99949a50291da86b2398b6cf6a4815f3835545c96ec49f0937d2d0376d1bb1","sha512":"0f47bc4ef16ecebd607c5f974cfc802e560388e55bbd193b9964d6393bd9a34264158b6129487c60e031aa2edb1d2da73350bb37f3efcecd9d3fe1d3a0a26478","ssdeep":"192:rSnkn4FWuT/fw0ebBpiI7H07SKn6u164dNJ8MrWo6gE+Vt+Kw:ekn4Ak/fw0/QiNnN6QNzrS0c","tlshash":"8af19e4a7715ea116b5cde5433e6bc934137af868ea30d87ac9daf064940bf5c82dcc2","first_seen":"2026-06-12T04:54:28.801828Z","last_seen":"2026-06-12T08:40:50.07628Z","times_seen":3,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapiab.aifvfjuf56juh.cfd/api/score/schedules?lang=1\u0026d=www.808bola253.com\u0026date=2026-06-12\u0026timezone=0\u0026_t=1781240029121","fqdn":"dapiab.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.126Z","timestamp":1781240029126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /api/score/schedules?lang=1\u0026d=www.808bola253.com\u0026date=2026-06-12\u0026timezone=0\u0026_t=1781240029121 HTTP/1.1\r\nHost: dapiab.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: application/x-msgpack\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"46D6752DB7EDABB190D27675DFD511F9\"\r\nx-frame-options: SAMEORIGIN\r\nx-dapi-cache: MISS || 5s || /api/score/schedules?lang=1\u0026d=www.808bola253.com\u0026date=2026-06-12\u0026timezone=0\r\ncache-control: public, max-age=10\r\nx-time: 1|0.004\u003e-\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-ray: a0a641060d0d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192976,"size_decoded":31963,"mime_type":"application/x-msgpack","magic":"data","md5":"5718e034967cc57e743e7e0d40c408ee","sha1":"d808acce9ccd7f6ac21f9a069baab6db1c67c902","sha256":"b0db97e4dd8408f943229a8449d7c7a9d2e88afca5c17c36124366f0907d56b0","sha512":"0ca7d8c2e14d7c2725c4746ab45cfba3fec37f45951f83b177b5c519116b585ab94ff205eb075a9bb266caa7c6cbe85f41be5987e615291f311c17bc7b72ba3e","ssdeep":"1536:v0iNy8alb1kCSqoRQ+4Ssb4LNG1jY/8WDH:3y3l1fXD4Ls1jY/80","tlshash":"cf1462ba57ce0de7ad8e9035b4ae4e2adc72df877100e586ae92cc51f560bc2e135740","first_seen":"2026-06-12T04:54:28.74645Z","last_seen":"2026-06-12T04:54:28.74645Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/zqwin007/Image/league_match/images/20130413112735.jpg?v=1","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.245Z","timestamp":1781240029245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /zqwin007/Image/league_match/images/20130413112735.jpg?v=1 HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\npriority: u=5,i\r\nlast-modified: Sat, 13 Apr 2013 03:27:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5168d0a7-837\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpires: Thu, 18 Sep 2025 20:04:35 GMT\r\ncontent-encoding: br\r\nx-cache: zqwin007:/zqwin007/Image/league_match/images/20130413112735.jpg|30d|HIT\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\ncf-ray: a0a64106ca6e5696-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2103,"size_decoded":2715,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 83x83, components 3","md5":"b848340a3c619c3f7e3088d2d107ac6b","sha1":"12e703b68a9c742dec6fa3023e094e1f081c7862","sha256":"8107a73919d4191061b24ddbfee691b1ca2315327359b58ca9305dd91c865504","sha512":"a06849401ac4cbd05d28b46a7235b9285a0630f69d1cc56a4003336557b6c2de39f0e7ac4d1a25e1c3c6bbbf6cbfdd9b3af3b82333357c36410d06eb2387a04c","ssdeep":"","tlshash":"e3411a6a0b8a56425f26c2b74c09129ad1c972025a21747969414e1afba0df8ac0a636","first_seen":"2024-08-19T17:48:19.179408Z","last_seen":"2026-06-12T08:40:50.070903Z","times_seen":31,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/site/region/49-flag-small.png","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.614Z","timestamp":1781240029614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/site/region/49-flag-small.png HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 389\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/site/region/49-flag-small.png\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Thu, 11 Jun 2026 18:57:08 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a641091b745696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":389,"size_decoded":1182,"mime_type":"image/png","magic":"PNG image data, 48 x 32, 8-bit colormap, non-interlaced","md5":"75a4898f0e3ff531ccd70d4a84e6b828","sha1":"ffa4b3d065c00d6c3bc1a227ad77e4cd24159921","sha256":"1530b135fbf19d8339875f9d38da2c98856b542db99cc3481683abe984cfd8f3","sha512":"cc65b647784429e37cd0a75f46074ac828861d26d273da03d86e61fca2cf64e7f850ab432d13e402d5a1b80efdb7793e0b5d7e43082371e8846a20da7d21c199","ssdeep":"","tlshash":"26e0814324ce8de563cc28b34f2b2b01d83bc330061b02285a06ed1395acc262014e50","first_seen":"2025-12-27T20:46:38.146042Z","last_seen":"2026-06-12T08:40:50.097411Z","times_seen":12,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/05af493fse7.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.201Z","timestamp":1781240027201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/05af493fse7.js HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: EXPIRED || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/05af493fse7.js\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Thu, 11 Jun 2026 18:03:57 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640f9fe18b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16021,"size_decoded":5278,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16021), with no line terminators","md5":"20a6e8fd7edfbb0a972cf57be35119e8","sha1":"2c76bfaa622dd16fb289b9dfd08e7c53302bf1d0","sha256":"ebff34f0f26710b506df21c90089c4057fe0ff29900688b58cad4ddb588d09f0","sha512":"b5ffc6cb379af5120297245f14da37892da24f9159795bca0dd065afa785ff68a7ae1c7ef24165a3ff6dfd58218dee70670bfbe6a5b6d6d282f83432bc7e4f27","ssdeep":"384:bIs9e7Ya1Yy+pz8fruelTBklG7BSUCIyzd4pQEL7fb0kD:0s9e7OBifSelTBc8pQEvbdD","tlshash":"0072d738f2a0b1a68f5b8ef82633f0dce51f11aaf68c7806e3127d9934b6215d5b0574","first_seen":"2026-06-03T13:57:16.123288Z","last_seen":"2026-06-12T08:40:50.075656Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/3rd/today.png","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.928Z","timestamp":1781240028928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/3rd/today.png HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cfstatic.aifvfjuf56juh.cfd/_nuxt/css/ec448d1a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 788\r\nserver: cloudflare\r\npriority: u=4,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/3rd/today.png\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Fri, 12 Jun 2026 02:05:24 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a64104c95a5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":788,"size_decoded":1565,"mime_type":"image/png","magic":"PNG image data, 51 x 51, 8-bit/color RGBA, non-interlaced","md5":"57cecac7da1a79b47b2a5a2702d0eb00","sha1":"14214f111a51540b0ff0d93cff87709b532d6bf3","sha256":"8b161c20908e5968c0003d97c00699a2a7ad7bc5a4d6158551ee7306504ef51a","sha512":"4680182b005b55b181ee8a7a187522e496eeb4c8a355600ee3da44ac87683ec99b333e85f15c204c670d9b9725ef13dc05f60e3154b6ac3d4d87f8d866ac8a31","ssdeep":"","tlshash":"26010a21c229c0dcda6bdeafc2a78068f93a140740042bcd0e14d703f013fc58494ed2","first_seen":"2025-10-11T19:43:00.771343Z","last_seen":"2026-06-12T08:40:50.127468Z","times_seen":25,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/b01a52cc-435b-482e-8098-dd0bf878e132.gif","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.955Z","timestamp":1781240028955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/b01a52cc-435b-482e-8098-dd0bf878e132.gif HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 15 Apr 2026 01:04:37 GMT\r\netag: W/\"1dccc73d4566361\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|HIT|/svimg/b01a52cc-435b-482e-8098-dd0bf878e132.gif\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a6410589bb5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9185,"size_decoded":9712,"mime_type":"image/gif","magic":"GIF image data, version 89a, 468 x 60","md5":"8be0ab799191c4c8a2e502a9b20870f0","sha1":"d3fe19288bf5939e1689851812b8b185ec143d83","sha256":"1cc85ba61157e06df36d6d6f21f1261924478b2e2ad5feeee358e87bcffcb605","sha512":"50c8a67bdd88d14a1073da5fd66b123288350b747fbb4bf385e2b86c7372eb0cc5e58f4b81c480899528adb14594a21341741fc17821c9f8c6fb84f20fe512c5","ssdeep":"192:NWXdSyNbwn0/qjMM6yUqM5zXRiQQZSrEnFpRltNSMB4kesJg1d9HfAb:NgsnRh0RiQySrKFp/SM6e+Ob","tlshash":"3712bf97e5d93aadd7700d335bcb2271e1eb2c066c5b078838b5bb1408bb8c51b554cb","first_seen":"2026-06-12T04:54:28.805095Z","last_seen":"2026-06-12T04:55:11.304345Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/comm/1f622ab9-314c-4474-9b19-cf5ec9739ff7.jpg","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.316Z","timestamp":1781240029316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/comm/1f622ab9-314c-4474-9b19-cf5ec9739ff7.jpg HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 11 Jun 2026 09:09:49 GMT\r\netag: W/\"1dcf9820dfec4fc\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|MISS|/svimg/comm/1f622ab9-314c-4474-9b19-cf5ec9739ff7.jpg\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a641073a995696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157820,"size_decoded":102972,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=1080, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=1920], progressive, precision 8, 1920x1080, components 3","md5":"c965f3d6b5f0497353aa6023ccfc85ca","sha1":"e8d27ff5549f3984a09875967d6cad89c2bd7830","sha256":"b68a5a1218a7082e2583f9d7f325886fd7f8b21a797646c57d153ec45bd124a4","sha512":"b04a6703c919d72098fe10719f64fee1cfed88a75e29c0d421a88ac8e18af33dd6c0ed3b98bb4161646689cd4c314a9bfb638fdac3a25d1ab76a719f46cdb2e7","ssdeep":"3072:mDtDmIJKRxbfbCns2BRqUlDmQt1n88h/7Kt4k94lDE00Awae0L9BM+C3/Jk:ClmHp2vmQt1n88h/7KtxqlC3e","tlshash":"a9f3bf85aa984424e5dc2275c0fdcb01cee35ee02e3294667afd1b86bf51d4f4e9c4a3","first_seen":"2026-06-12T04:54:28.806138Z","last_seen":"2026-06-12T08:40:50.080912Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfcdn.aifvfjuf56juh.cfd/prod/svimg/cd1ed859-ded2-4d6b-b54b-e014f2c452f9.gif","fqdn":"cfcdn.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:49.586Z","timestamp":1781240029586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /prod/svimg/cd1ed859-ded2-4d6b-b54b-e014f2c452f9.gif HTTP/1.1\r\nHost: cfcdn.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 16 Apr 2026 03:41:22 GMT\r\netag: W/\"1dccd52e490630e\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nx-cache: svimg/prod|30d|MISS|/svimg/cd1ed859-ded2-4d6b-b54b-e014f2c452f9.gif\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-ray: a0a64108eb585696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97806,"size_decoded":98291,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1500 x 160","md5":"0cee60b5a65b7a6df3c360d679a9b3f3","sha1":"4bf6f76d3c40a056091318769deebd1ecf3b107d","sha256":"92ebcb6a6984d119e7d3b3ba34f6c610d4c1da8c519643ab15fe0f3fd52b3aae","sha512":"576c23cb45012c41d1faeea8c59ba7b37ee7f1afece88c92524ba69d8e3e635991d85b8c30b406eba0d52254cc2db74e77d9d8a07a9179ae2884d4bc7983c63a","ssdeep":"1536:pJxeASnq2KE1dGVxFWO+PBr2avo/K0F9HhoEPQUMEYRAT8hBTPze7QHm6fRPU6ZN:pJxTSq2K4gxgV+SDE4iYRAT8hcQHm8pr","tlshash":"2ea312ae34d22555d7f23cfe391c9172279e3670ce78c12ca179d05d1a660e89a73a0e","first_seen":"2026-06-12T04:54:28.807052Z","last_seen":"2026-06-12T04:55:11.486005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfcdn.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newsapi.aifvfjuf56juh.cfd/news/article/match/list?page=1\u0026pageSize=2\u0026sub=1","fqdn":"newsapi.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.896Z","timestamp":1781240028896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /news/article/match/list?page=1\u0026pageSize=2\u0026sub=1 HTTP/1.1\r\nHost: newsapi.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN\r\nx-newsapi-cache: STALE || 20s || /news/article/match/list?page=1\u0026pageSize=2\u0026sub=1\r\ncache-control: public, max-age=30\r\nlast-modified: Fri, 12 Jun 2026 04:53:49 GMT\r\ncf-cache-status: EXPIRED\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-ray: a0a6410499c676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1231,"size_decoded":1350,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9e2ca77258180674f23ef55915cb92a5","sha1":"425361f704e4602a7dc497190d923209272066e9","sha256":"cb4d6a7bb2ef264da994d9bece9552e28534d09e074dc279a7fc7d685f0d046f","sha512":"ed11f3401d39ac2bf87d57e2f87420a256c5e6b46cb20755133beeb43d84e65ffd0828fc98969c0f4e5d2e4430e7c8be6dd2f8757738afbfe5632666b70ca3f0","ssdeep":"","tlshash":"cb21e27145c1449dc8a150cfadeffe085adb293256d0cf65d913ca0ae5a2607512f321","first_seen":"2026-06-12T04:54:28.787838Z","last_seen":"2026-06-12T04:55:11.313471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":5,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"newsapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"newsapi.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapiab.aifvfjuf56juh.cfd/api/vc?reqs=102\u0026reqs=301\u0026reqs=303\u0026d=www.808bola253.com","fqdn":"dapiab.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.902Z","timestamp":1781240028902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /api/vc?reqs=102\u0026reqs=301\u0026reqs=303\u0026d=www.808bola253.com HTTP/1.1\r\nHost: dapiab.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nx-frame-options: SAMEORIGIN\r\nx-dapi-cache: EXPIRED || 2s || /api/vc?reqs=102\u0026reqs=301\u0026reqs=303\u0026d=www.808bola253.com\r\ncache-control: public, max-age=3\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\netag: W/\"xjxmeVauBUCXLUt0giTwwcIPRIX9B+1SO6woHSAzsds=\"\r\ncontent-encoding: gzip\r\ncf-ray: a0a64104a9ca76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110,"size_decoded":902,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bc81938ee8d0ba2715a162ae1498ae3f","sha1":"a3fe1212658ead3f7dfd3af02b95c5ec62c6ef03","sha256":"86f7bd03bb255fa66b0f9312a7b522db26f81fa92624bbb4b70c1867b74f1df0","sha512":"98d102e0121fb2f7e270cd2ced66c75c229ab24eb2a0eef0f2940d3c5c6fd29dc5a285a1d88cd45305ddc3f7555ff6047278fab20fd6930356418aa20860eb41","ssdeep":"","tlshash":"7fb0922cb20a315e0523446a3b8398b50ae8a65b4cc08c54857551810f7692d0862da0","first_seen":"2026-06-12T04:54:28.72332Z","last_seen":"2026-06-12T04:54:28.72332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/_nuxt/5e569a92se0.js","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:47.212Z","timestamp":1781240027212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /_nuxt/5e569a92se0.js HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:53:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-cache: MISS || 30d || cfstatic.aifvfjuf56juh.cfd/_nuxt/5e569a92se0.js\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Sat, 30 May 2026 06:54:14 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncf-ray: a0a640fa1e4db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1904,"size_decoded":1681,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1904), with no line terminators","md5":"358514ec1d2b2b9aa119e62a2acd59eb","sha1":"a5f80a09ce7fa5d2ec8d9b374c7ce82e17483f4a","sha256":"e775b48976d6299f3d5aa096f420c6efb3ee433d1f5696ba6b9c897fca7f8737","sha512":"7a5beb05d9400707d5f9cc4c6574e9a9fc4b7e4d3acc961355292feb4e57f3ee9528072f0b2c2ca354df9c52e8af53cf84093ec6786510e779a039ae4d01c345","ssdeep":"","tlshash":"a2410fa8718064644eef9375e33772dcd42f10693b151466c122bc70e768b29ea99f74","first_seen":"2026-06-03T13:57:16.119319Z","last_seen":"2026-06-12T08:40:50.096422Z","times_seen":7,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapiab.aifvfjuf56juh.cfd/api/cdncheckin?_t=1781240028431","fqdn":"dapiab.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.440Z","timestamp":1781240028440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /api/cdncheckin?_t=1781240028431 HTTP/1.1\r\nHost: dapiab.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\ncache-control: public, max-age=90\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\naccept-ranges: bytes\r\nlast-modified: Fri, 12 Jun 2026 04:53:48 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\ncdncheckin: 195.64.118.152-NO-EU-Oslo-03-Oslo-50304\r\ncf-ray: a0a64101bbe276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":731,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-06-18T02:32:38.196157Z","times_seen":327522,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dapiab.aifvfjuf56juh.cfd/api/gg?hostname=www.808bola253.com\u0026countryCode=NO\u0026isVip=false","fqdn":"dapiab.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.48.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.686Z","timestamp":1781240028686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /api/gg?hostname=www.808bola253.com\u0026countryCode=NO\u0026isVip=false HTTP/1.1\r\nHost: dapiab.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.808bola253.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"035ckV+q3dOA8IM5+O0ij2wuhVjZWyqhVVtSpbQ3guU=\"\r\nx-frame-options: SAMEORIGIN\r\nx-dapi-cache: MISS || 2s || /api/gg?hostname=www.808bola253.com\u0026countryCode=NO\u0026isVip=false\r\ncache-control: public, max-age=60\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\ncf-ray: a0a641034f0076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14332,"size_decoded":3000,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c919f07fd3dd98ed037256758d7d4d38","sha1":"7e0a99ec5c1c63638b5eebf5ac780faa59541cf9","sha256":"af1ef38c4f52be2889b02e92ed0a085feed8f63ffa61c4438826eaa6dc52d242","sha512":"2a3b45888cd90791b3be51b8830a46ba21a8a1b38a55af6c2eb1e86b23dfefdae36b5ec0a2f7935e27f7534a4f1a0a4db75f7d65a52f3ed3a88351599a577cac","ssdeep":"192:yyai9xvXbybdDXQBU4hedM36egNAZyMKC5DhDUDfYMyKz1ZlmtXYUeQO3U5imKGf:NW0t6mL","tlshash":"9652d2694a79d8f48fa22396684e7f86df3db10b5cc24c75e76a8f1840f86398b05317","first_seen":"2026-06-12T04:54:28.808986Z","last_seen":"2026-06-12T04:55:11.454544Z","times_seen":2,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"dapiab.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_footer_android.svg","fqdn":"cfstatic.aifvfjuf56juh.cfd","domain":"aifvfjuf56juh.cfd","tld":"cfd"},"ip":{"addr":"104.18.50.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.808bola253.com/","date":"2026-06-12T04:53:48.892Z","timestamp":1781240028892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aifvfjuf56juh.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 21:08:38 GMT","end":"Sat, 18 Jul 2026 22:08:29 GMT"},"fingerprint":{"sha1":"32:88:98:47:A2:FD:DD:A1:63:31:19:30:CD:26:81:66:B1:95:94:0C","sha256":"44:19:7E:B0:42:B0:4B:01:70:B0:C4:E4:FF:CA:FF:3C:18:9C:57:92:A2:74:04:57:DA:5F:56:1E:E2:A3:F7:79"}}},"request":{"raw":"GET /img/3rd/icon_footer_android.svg HTTP/1.1\r\nHost: cfstatic.aifvfjuf56juh.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.808bola253.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 04:53:48 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=5,i\r\nx-frame-options: SAMEORIGIN\r\nx-cache: HIT || 30d || cfstatic.aifvfjuf56juh.cfd/img/3rd/icon_footer_android.svg\r\ncache-control: public, max-age=2592000\r\naccess-control-expose-headers: *,ip-src-city,ip-src,ip-src-asnum,cdnservertimes,cdncheckin\r\nlast-modified: Wed, 03 Jun 2026 21:48:34 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *,Content-Type,Authorization\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-ray: a0a64104892e5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1874,"size_decoded":1566,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"19f487f57b8be3b4c7c7aae5eba10e19","sha1":"f64e2f1e10d90406a7a31786216056188098ad7d","sha256":"a271d2aa008ca836288d577b1072e54e99f254ecc14d21d36c15bd6342715d49","sha512":"e2f6928174a3a300e97be6b9991d50c5e11516360ccd57a34b6d4863bc4de32a8d8e411d43f55549360f0dfe487eb484e3922661d2d44596d59889e492f897f0","ssdeep":"","tlshash":"363132e7dadcc0e4e9828b10fe076d3d1f862cf82f8385d94671ba66a1441a1c8cdf24","first_seen":"2025-04-08T13:29:57.650561Z","last_seen":"2026-06-12T08:40:50.111184Z","times_seen":87,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"cfstatic.aifvfjuf56juh.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}