{"report_id":"d21387a0-11a4-46a5-b3dc-0b7a89f2fd83","version":6,"status":"done","tags":[],"date":"2026-05-13T23:56:37Z","url":{"schema":"http","addr":"028365vip.vip/","fqdn":"028365vip.vip","domain":"028365vip.vip","tld":"vip"},"ip":{"addr":"38.162.126.120","port":0,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"dbet365a.com/","fqdn":"dbet365a.com","domain":"dbet365a.com","tld":"com"},"title":"dbet365a.com/","dom":{"size":2834,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2140)","md5":"32a4f844132b75eb9d44a1508be760c4","sha1":"4a7f1ab2406ff2ca2435253a47b76271bfb671d6","sha256":"b9ed6c535245885c73a23d6fe0c803355a7507610be77ce68ab10cc5957cd1ae","sha512":"50d87cb0dff99a89c933ae726772df1406c63ee1d007ac7d0c6e4adaf23823f2f079b716935b4188caa484a85cf06f0bc81870fa9749efb6e451d5915cce65dc","ssdeep":"","tlshash":"6a518421b970b83a27f11f93ca2f65c9e1de14a5a616a8c1818ef5441eec60cee5fd34","dom_hash":"domhashfec57eaa62f18c7a8377abdb323be973","first_seen":"2026-05-13T23:56:44.061535Z","last_seen":"2026-05-13T23:56:44.061535Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"028365vip.vip/","fqdn":"028365vip.vip","domain":"028365vip.vip","tld":"vip"},"ip":{"addr":"38.162.126.120","port":0,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-17T23:56:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"028365vip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"028365vip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"028365vip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"028365vip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"028365vip.vip","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-05-02","domain_rank":0,"first_seen":"2026-05-13T23:56:38.155199Z","last_seen":"2026-05-13T23:56:38.155199Z","alert_count":8,"request_count":2,"received_data":555,"sent_data":880,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xxfqtz.mx0123.com","ip":{"addr":"155.102.44.30","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"domain_registered":"2013-04-08","domain_rank":0,"first_seen":"2026-02-04T15:18:01.771333Z","last_seen":"2026-05-07T19:55:59.741819Z","alert_count":0,"request_count":1,"received_data":3130,"sent_data":546,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dbet365a.com","ip":{"addr":"103.233.10.191","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":6,"received_data":63243,"sent_data":4663,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dbet365a.com/","fqdn":"dbet365a.com","domain":"dbet365a.com","tld":"com"},"ip":{"addr":"103.233.10.191","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-13T14:27:12.53899Z","times_seen":237651,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"028365vip.vip/","fqdn":"028365vip.vip","domain":"028365vip.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"22061b06abbfd398d1e4bcb38818e9af","sha1":"0d1c10d406977e4276aa719b6ce2857bf214072e","sha256":"d239910d750153c6bf1903b34423571674b1581b6353d9e4022d28812c7c0e08","sha512":"e8987e8da24c75edca192eb1146f341bf0ee8b86df2d9c81b42d781f8e41f8ecd75448c2ca6beea68a9a140046938b552a2c18b12fa8c97920c5dd744d9dfa3c","ssdeep":"","tlshash":"cde086f72451453059fa225beb1777953d2250c72e52700641181c51a11cf8fc63dea9","size":319,"data":"","first_seen":"2026-02-04T15:18:20.10816Z","last_seen":"2026-07-08T22:37:56.615292Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dbet365a.com/","fqdn":"dbet365a.com","domain":"dbet365a.com","tld":"com"},"ip":{"addr":"103.233.10.191","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"introduction_type":"eventHandler","is_inline":false,"md5":"4dd536363bf9249a0ae332ea7984df76","sha1":"d2420a1cbbc1208bc063ce065d63d9ba61e8b8f6","sha256":"e27fb2297f16d1a0c9243bcc3bbe775394dacaf1e9439bd06e4224d381b9b862","sha512":"cd94a52f623dfbc62a784adb8a268e0a162710ad63654b20ff811a81e261096830c31ee0db9a79f58a2051cb697be0a482ad2f4f2f026607b4f4cd23d1dca24a","ssdeep":"","tlshash":"c1500000c300000000000c000c0c003000000330000c00000c00c3000000c0000c00c3","size":9,"data":"","first_seen":"2024-10-04T16:11:05Z","last_seen":"2026-07-19T20:15:23.306806Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dbet365a.com/js/smoke.js","fqdn":"dbet365a.com","domain":"dbet365a.com","tld":"com"},"ip":{"addr":"103.233.10.191","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa09f8e50fd2f8d43c66e2caac55ed86","sha1":"3f798c7c3946d8720a917b0c32449f7364ef5968","sha256":"5fbebeca9f23c2abd6c5c4c145a65b970ea80a310acc371b1112cfd5be154f69","sha512":"628a0324290d13c163b2743bfd6359e6a59d11d9da86f3b636133f356608fbc42d2fbc721f58dd41ab9d096bc4ccb9a352060ce36f57cdf56d03acaf82392fbc","ssdeep":"96:B8C+Iltf0+G5Cy/njtKpq43ACgOPOdsRe9GxaZHfs3FaGWs:+C+IldReT9GxaZHfs3FaHs","tlshash":"12e187aee58a7a610ad772a3621b471b3353d1117e8a0221ae50c6f0cebfc093577f55","size":6791,"data":"","first_seen":"2023-03-07T16:36:50Z","last_seen":"2026-07-19T20:15:23.299246Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dbet365a.com/","fqdn":"dbet365a.com","domain":"dbet365a.com","tld":"com"},"ip":{"addr":"103.233.10.191","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"465afa344d772bea64804fa6c4373166","sha1":"01fb5856de4fdac1d50dbfb14108463d45fafc81","sha256":"9b2c7b9d1d660becdb960c7479a630c03e485102a188253753b53c95ca4fff5c","sha512":"c442882875826af57fa6bd63fc67a214ad9934099026e0748612b1aeded1577723e1791a65f5747f53825a23607c28003b6a347da631ba6d21977d326d6d8bec","ssdeep":"","tlshash":"13411054b6b0783d36f15f63ca1f64c9e0ad14b1a615a8c6814ef5501eac20cff9ee74","size":2142,"data":"","first_seen":"2025-08-14T22:48:44.636948Z","last_seen":"2026-05-13T23:56:44.080045Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dbet365a.com/js/core.js?t=17","fqdn":"dbet365a.com","domain":"dbet365a.com","tld":"com"},"ip":{"addr":"156.240.108.179","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"46cdf8071505ca4c5ba040390e8cc583","sha1":"86bbcc2eb5ae1cc0753532d7fbd33e4e12e42d5d","sha256":"54cb21538ab21bb977c73b477bb45bf9e40d7c57976a23889ede6cac3b06bf23","sha512":"6b5266bf673685a538858758521c10e5a21a0aa54ac410017042482770cc77735a5ee348a02c17fce4c60f8129d64d0bc48a3f15dbcc95980f435a4a4e32ee21","ssdeep":"768:zdmEwvKVBNfXzmP13+/XtcUl+5BCzCk3cuyl+lRCj1Q3w8zdTtWaqlBxHdhJNK/I:Qgdc1otPZleRSJzB2qA","tlshash":"3d23e8cdb6d2f06243a771b4406f200bf23aa925a44d8454f225e8e67cb855e932bf7d","size":49444,"data":"","first_seen":"2024-10-04T16:11:06Z","last_seen":"2026-07-19T20:15:23.300586Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dbet365a.com/","fqdn":"dbet365a.com","domain":"dbet365a.com","tld":"com"},"ip":{"addr":"103.233.10.191","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-13T14:51:08.053048Z","times_seen":742838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"028365vip.vip/","fqdn":"028365vip.vip","domain":"028365vip.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-13T23:56:15.657Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 028365vip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T14:51:47.486746Z","times_seen":17872751,"resource_available":true,"data":null}},"time_used":1472,"timings":{"blocked":1472,"dns":0,"connect":300,"send":0,"wait":0,"receive":0,"ssl":906},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"028365vip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"028365vip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"028365vip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"028365vip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"028365vip.vip/","fqdn":"028365vip.vip","domain":"028365vip.vip","tld":"vip"},"ip":{"addr":"38.162.126.120","port":80,"asn":140224,"as":"STARCLOUD GLOBAL PTE., LTD.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-13T23:56:18.344Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 028365vip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: close\r\nCache-Control: max-age=259200\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 425\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":425,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (425), with no line terminators","md5":"05a0028f4ceadb180ac72fa043764c2f","sha1":"7cb71f7e76de43ab4d116be4f8a8ab5c8951a3f8","sha256":"8a4419cdd4095bde0ae2d0ab0da91e453752c5f1d1fc7acead985648ea562a64","sha512":"4aedd2d044126a017c630a9eab08012ec7eeeeebd90afab2d0361c07bee3a21f93a81d8756525f54661249eac266a81f607dd5f6a671807ed39bf0ac7fce54b1","ssdeep":"","tlshash":"0ce0ecf72891853069f53287db53bb952d1251c72f02b40541445895a51cf8ec639e99","first_seen":"2026-02-04T15:18:20.104257Z","last_seen":"2026-06-05T17:55:08.402485Z","times_seen":30,"resource_available":true,"data":null}},"time_used":905,"timings":{"blocked":302,"dns":1,"connect":301,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"028365vip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"028365vip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"028365vip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"028365vip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxfqtz.mx0123.com/?u=http://028365vip.vip/\u0026p=/","fqdn":"xxfqtz.mx0123.com","domain":"mx0123.com","tld":"com"},"ip":{"addr":"155.102.44.30","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-13T23:56:19.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxfqtz.mx0123.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Wed, 04 Feb 2026 09:41:45 GMT","end":"Sat, 06 Mar 2027 09:41:44 GMT"},"fingerprint":{"sha1":"F0:A3:9D:47:9F:CE:2E:6E:5D:9E:74:B0:0B:8E:BA:70:1B:B6:DD:7F","sha256":"A9:E2:CB:DC:B3:0E:6D:06:7D:FD:7D:A6:71:0E:11:AD:7F:04:80:E1:4C:E0:D6:96:39:2F:EF:57:E9:44:F5:E2"}}},"request":{"raw":"GET /?u=http://028365vip.vip/\u0026p=/ HTTP/1.1\r\nHost: xxfqtz.mx0123.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://028365vip.vip/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: ESA\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://dbet365a.com\r\nset-cookie: acw_tc=2ff632aa17787165796551017e84d83a9aeaa870fd2a7422ec46d83e9b;path=/;HttpOnly;Max-Age=3600\ncdn_sec_tc=2ff632aa17787165796551017e84d83a9aeaa870fd2a7422ec46d83e9b;path=/;HttpOnly;Max-Age=3600\nPHPSESSID=ac82055140062ae6fe07bb95b6ef582c; path=/; HttpOnly\r\ncache-control: no-cache\r\ndate: Wed, 13 May 2026 23:56:19 GMT\r\nvia: ens-cache8.l2us3[131,0,DP], ens-cache23.l2us5[133,0,DP], ens-cache22.fr4[221,0,DP], ens-cache22.fr4[226,0]\r\nx-site-cache-status: DYNAMIC\r\ntiming-allow-origin: *\r\neagleid: 2ff632aa17787165796551017e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":2471,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T14:51:47.486746Z","times_seen":17872751,"resource_available":true,"data":null}},"time_used":1484,"timings":{"blocked":611,"dns":417,"connect":26,"send":0,"wait":263,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dbet365a.com/css/smoke.css","fqdn":"dbet365a.com","domain":"dbet365a.com","tld":"com"},"ip":{"addr":"103.233.10.191","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dbet365a.com/","date":"2026-05-13T23:56:23.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dbet365a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 05:00:01 GMT","end":"Thu, 23 Jul 2026 05:00:00 GMT"},"fingerprint":{"sha1":"BE:21:75:65:BB:97:B6:C4:0B:9F:52:C5:EE:7E:52:7D:5C:E6:8C:0E","sha256":"57:ED:32:E7:F2:57:50:BA:BD:69:12:2E:E7:D5:4F:25:EB:96:60:E0:21:10:A5:1B:DD:BB:8F:02:32:BB:29:96"}}},"request":{"raw":"GET /css/smoke.css HTTP/1.1\r\nHost: dbet365a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dbet365a.com/\r\nCookie: uid=762427B5-b2684efb78a67c87; XSRF-TOKEN=eyJpdiI6ImRMSHhiZnRtNjhqT3Y5N0JJZ2cxS1E9PSIsInZhbHVlIjoiYnJJT3BNV2lqODRpU0VLT0hOYmxhRmI0dm0rOHR5blFlZWJNVmZ2dW1pU3JTbXB3UXJMT0FNMU5mV25tKzkxRGNtRE42Y1hCdWVwR1wvZTA5WlpKQmhBPT0iLCJtYWMiOiJmNjBmM2FmODJiNjU0ZmNlZmQ1ZjUwZjlkMGMxNjhmOTI2ZGMxMGUxOWI2NjNmYTdmMTJiN2VjNTVlYzhkMmMyIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\nContent-Encoding: gzip\r\nContent-Type: text/css\r\nDate: Wed, 13 May 2026 23:56:24 GMT\r\nEtag: W/\"69fad37f-74a\"\r\nLast-Modified: Wed, 06 May 2026 05:37:03 GMT\r\nServer: nginx\r\nContent-Length: 734\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1866,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1866), with no line terminators","md5":"75725f21e8a8384e8ee0f15eba4e47b2","sha1":"431cc515002a0fc6698c074ae6ea856fe6b62c04","sha256":"fa1e7030122279a093e41f94013122008a66ecf92a5a8e5c00ca9130a0718cf8","sha512":"121fe0c278a2082c243d750d906156ce6b14cf419532c95320a4062608b2839d48a46adfd0104391ccba2f0c6f79463d860ec00aad728748f178ca4d6aceb01f","ssdeep":"","tlshash":"7c313301c0a7182bf92bd2a2b8d11ea637556642f5a33bdfa512d560de871df32a7210","first_seen":"2024-10-04T16:11:06Z","last_seen":"2026-07-19T20:15:23.303566Z","times_seen":9,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dbet365a.com/js/smoke.js","fqdn":"dbet365a.com","domain":"dbet365a.com","tld":"com"},"ip":{"addr":"103.233.10.191","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dbet365a.com/","date":"2026-05-13T23:56:23.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dbet365a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 05:00:01 GMT","end":"Thu, 23 Jul 2026 05:00:00 GMT"},"fingerprint":{"sha1":"BE:21:75:65:BB:97:B6:C4:0B:9F:52:C5:EE:7E:52:7D:5C:E6:8C:0E","sha256":"57:ED:32:E7:F2:57:50:BA:BD:69:12:2E:E7:D5:4F:25:EB:96:60:E0:21:10:A5:1B:DD:BB:8F:02:32:BB:29:96"}}},"request":{"raw":"GET /js/smoke.js HTTP/1.1\r\nHost: dbet365a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dbet365a.com/\r\nCookie: uid=762427B5-b2684efb78a67c87; XSRF-TOKEN=eyJpdiI6ImRMSHhiZnRtNjhqT3Y5N0JJZ2cxS1E9PSIsInZhbHVlIjoiYnJJT3BNV2lqODRpU0VLT0hOYmxhRmI0dm0rOHR5blFlZWJNVmZ2dW1pU3JTbXB3UXJMT0FNMU5mV25tKzkxRGNtRE42Y1hCdWVwR1wvZTA5WlpKQmhBPT0iLCJtYWMiOiJmNjBmM2FmODJiNjU0ZmNlZmQ1ZjUwZjlkMGMxNjhmOTI2ZGMxMGUxOWI2NjNmYTdmMTJiN2VjNTVlYzhkMmMyIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\nContent-Length: 6791\r\nContent-Type: application/javascript\r\nDate: Wed, 13 May 2026 23:56:24 GMT\r\nEtag: \"69fad37f-1a87\"\r\nLast-Modified: Wed, 06 May 2026 05:37:03 GMT\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6791,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6790)","md5":"fa09f8e50fd2f8d43c66e2caac55ed86","sha1":"3f798c7c3946d8720a917b0c32449f7364ef5968","sha256":"5fbebeca9f23c2abd6c5c4c145a65b970ea80a310acc371b1112cfd5be154f69","sha512":"628a0324290d13c163b2743bfd6359e6a59d11d9da86f3b636133f356608fbc42d2fbc721f58dd41ab9d096bc4ccb9a352060ce36f57cdf56d03acaf82392fbc","ssdeep":"96:B8C+Iltf0+G5Cy/njtKpq43ACgOPOdsRe9GxaZHfs3FaGWs:+C+IldReT9GxaZHfs3FaHs","tlshash":"12e187aee58a7a610ad772a3621b471b3353d1117e8a0221ae50c6f0cebfc093577f55","first_seen":"2023-03-07T16:36:50Z","last_seen":"2026-07-19T20:15:23.299246Z","times_seen":22,"resource_available":true,"data":null}},"time_used":858,"timings":{"blocked":211,"dns":0,"connect":250,"send":314,"wait":315,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dbet365a.com/favicon.ico","fqdn":"dbet365a.com","domain":"dbet365a.com","tld":"com"},"ip":{"addr":"156.240.108.179","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dbet365a.com/","date":"2026-05-13T23:56:25.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dbet365a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 05:00:01 GMT","end":"Thu, 23 Jul 2026 05:00:00 GMT"},"fingerprint":{"sha1":"BE:21:75:65:BB:97:B6:C4:0B:9F:52:C5:EE:7E:52:7D:5C:E6:8C:0E","sha256":"57:ED:32:E7:F2:57:50:BA:BD:69:12:2E:E7:D5:4F:25:EB:96:60:E0:21:10:A5:1B:DD:BB:8F:02:32:BB:29:96"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dbet365a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dbet365a.com/\r\nCookie: uid=762427B5-b2684efb78a67c87; XSRF-TOKEN=eyJpdiI6ImRMSHhiZnRtNjhqT3Y5N0JJZ2cxS1E9PSIsInZhbHVlIjoiYnJJT3BNV2lqODRpU0VLT0hOYmxhRmI0dm0rOHR5blFlZWJNVmZ2dW1pU3JTbXB3UXJMT0FNMU5mV25tKzkxRGNtRE42Y1hCdWVwR1wvZTA5WlpKQmhBPT0iLCJtYWMiOiJmNjBmM2FmODJiNjU0ZmNlZmQ1ZjUwZjlkMGMxNjhmOTI2ZGMxMGUxOWI2NjNmYTdmMTJiN2VjNTVlYzhkMmMyIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\nContent-Length: 0\r\nContent-Type: image/x-icon\r\nDate: Wed, 13 May 2026 23:56:25 GMT\r\nEtag: \"69fad37f-0\"\r\nLast-Modified: Wed, 06 May 2026 05:37:03 GMT\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T14:51:47.486746Z","times_seen":17872751,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dbet365a.com/api/guest","fqdn":"dbet365a.com","domain":"dbet365a.com","tld":"com"},"ip":{"addr":"103.233.10.191","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dbet365a.com/","date":"2026-05-13T23:56:25.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dbet365a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 05:00:01 GMT","end":"Thu, 23 Jul 2026 05:00:00 GMT"},"fingerprint":{"sha1":"BE:21:75:65:BB:97:B6:C4:0B:9F:52:C5:EE:7E:52:7D:5C:E6:8C:0E","sha256":"57:ED:32:E7:F2:57:50:BA:BD:69:12:2E:E7:D5:4F:25:EB:96:60:E0:21:10:A5:1B:DD:BB:8F:02:32:BB:29:96"}}},"request":{"raw":"POST /api/guest HTTP/1.1\r\nHost: dbet365a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nstg: aDA5\r\nX-XSRF-TOKEN: eyJpdiI6ImRMSHhiZnRtNjhqT3Y5N0JJZ2cxS1E9PSIsInZhbHVlIjoiYnJJT3BNV2lqODRpU0VLT0hOYmxhRmI0dm0rOHR5blFlZWJNVmZ2dW1pU3JTbXB3UXJMT0FNMU5mV25tKzkxRGNtRE42Y1hCdWVwR1wvZTA5WlpKQmhBPT0iLCJtYWMiOiJmNjBmM2FmODJiNjU0ZmNlZmQ1ZjUwZjlkMGMxNjhmOTI2ZGMxMGUxOWI2NjNmYTdmMTJiN2VjNTVlYzhkMmMyIn0=\r\nContent-Length: 2\r\nOrigin: https://dbet365a.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dbet365a.com/\r\nCookie: uid=762427B5-b2684efb78a67c87; XSRF-TOKEN=eyJpdiI6ImRMSHhiZnRtNjhqT3Y5N0JJZ2cxS1E9PSIsInZhbHVlIjoiYnJJT3BNV2lqODRpU0VLT0hOYmxhRmI0dm0rOHR5blFlZWJNVmZ2dW1pU3JTbXB3UXJMT0FNMU5mV25tKzkxRGNtRE42Y1hCdWVwR1wvZTA5WlpKQmhBPT0iLCJtYWMiOiJmNjBmM2FmODJiNjU0ZmNlZmQ1ZjUwZjlkMGMxNjhmOTI2ZGMxMGUxOWI2NjNmYTdmMTJiN2VjNTVlYzhkMmMyIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\nAccess-Control-Allow-Origin: https://dbet365a.com\r\nCache-Control: no-cache, private\r\nContent-Encoding: gzip\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Wed, 13 May 2026 23:56:25 GMT\r\nServer: nginx\r\nContent-Length: 250\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":288,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"23ebe7082e9a0c8a8df97211735d9477","sha1":"ab608291fc6dd1980b05350b90a79a8f0c610418","sha256":"187ba897d907b1c64a36f3f7b3676d295246d057114d6cdc1400e13a95d3da0a","sha512":"b7ee660ba718f20bd21a16b4c1915b2867216e85f5f7981d23e8e072a75a633a57a9770ba6163a0d4f728bead947da19905e481dd6a7e04a3c2d7f18709e1ba7","ssdeep":"","tlshash":"41d0e77d343f4f22954845fa19c464581b47100fc801f0f1d04ce84aeb5275d7844536","first_seen":"2026-05-13T23:56:44.067844Z","last_seen":"2026-05-13T23:56:44.067844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dbet365a.com/","fqdn":"dbet365a.com","domain":"dbet365a.com","tld":"com"},"ip":{"addr":"103.233.10.191","port":443,"asn":133201,"as":"ABCDE GROUP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-13T23:56:19.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dbet365a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 05:00:01 GMT","end":"Thu, 23 Jul 2026 05:00:00 GMT"},"fingerprint":{"sha1":"BE:21:75:65:BB:97:B6:C4:0B:9F:52:C5:EE:7E:52:7D:5C:E6:8C:0E","sha256":"57:ED:32:E7:F2:57:50:BA:BD:69:12:2E:E7:D5:4F:25:EB:96:60:E0:21:10:A5:1B:DD:BB:8F:02:32:BB:29:96"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dbet365a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://028365vip.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\nCache-Control: no-cache, private\r\nContent-Encoding: gzip\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Wed, 13 May 2026 23:56:23 GMT\r\nServer: nginx\r\nSet-Cookie: uid=762427B5-b2684efb78a67c87\nXSRF-TOKEN=eyJpdiI6ImRMSHhiZnRtNjhqT3Y5N0JJZ2cxS1E9PSIsInZhbHVlIjoiYnJJT3BNV2lqODRpU0VLT0hOYmxhRmI0dm0rOHR5blFlZWJNVmZ2dW1pU3JTbXB3UXJMT0FNMU5mV25tKzkxRGNtRE42Y1hCdWVwR1wvZTA5WlpKQmhBPT0iLCJtYWMiOiJmNjBmM2FmODJiNjU0ZmNlZmQ1ZjUwZjlkMGMxNjhmOTI2ZGMxMGUxOWI2NjNmYTdmMTJiN2VjNTVlYzhkMmMyIn0%3D; expires=Thu, 14-May-2026 01:56:23 GMT; Max-Age=7200; path=/\r\nContent-Length: 1223\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2471,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2140)","md5":"9cfd5fe2b1307ca5dea1f052b28727db","sha1":"62924be3ec4cf49f7d892bed1a930928eaa06ab6","sha256":"943082d3ef10723fd4cbf2c1620406383759774c9e7f538e1f9152facdd5d1ef","sha512":"22e3141e3b3a64a431d629eb0d5d29978dff3055f4f46cb8747549f1a9b457455b6efe4ea8e7c32d0445786aef92bdfbba0d19fc3917371e50f96f1a3549efb2","ssdeep":"","tlshash":"c45132557ab0b43a26f05f538e2f64c8e0ee14a1a61598c1818ef5541eac70cee9fe78","first_seen":"2024-10-04T16:11:06Z","last_seen":"2026-05-13T23:56:44.069215Z","times_seen":6,"resource_available":false,"data":null}},"time_used":4661,"timings":{"blocked":861,"dns":345,"connect":253,"send":0,"wait":2937,"receive":1,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dbet365a.com/js/core.js?t=17","fqdn":"dbet365a.com","domain":"dbet365a.com","tld":"com"},"ip":{"addr":"156.240.108.179","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dbet365a.com/","date":"2026-05-13T23:56:23.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dbet365a.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 05:00:01 GMT","end":"Thu, 23 Jul 2026 05:00:00 GMT"},"fingerprint":{"sha1":"BE:21:75:65:BB:97:B6:C4:0B:9F:52:C5:EE:7E:52:7D:5C:E6:8C:0E","sha256":"57:ED:32:E7:F2:57:50:BA:BD:69:12:2E:E7:D5:4F:25:EB:96:60:E0:21:10:A5:1B:DD:BB:8F:02:32:BB:29:96"}}},"request":{"raw":"GET /js/core.js?t=17 HTTP/1.1\r\nHost: dbet365a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dbet365a.com/\r\nCookie: uid=762427B5-b2684efb78a67c87; XSRF-TOKEN=eyJpdiI6ImRMSHhiZnRtNjhqT3Y5N0JJZ2cxS1E9PSIsInZhbHVlIjoiYnJJT3BNV2lqODRpU0VLT0hOYmxhRmI0dm0rOHR5blFlZWJNVmZ2dW1pU3JTbXB3UXJMT0FNMU5mV25tKzkxRGNtRE42Y1hCdWVwR1wvZTA5WlpKQmhBPT0iLCJtYWMiOiJmNjBmM2FmODJiNjU0ZmNlZmQ1ZjUwZjlkMGMxNjhmOTI2ZGMxMGUxOWI2NjNmYTdmMTJiN2VjNTVlYzhkMmMyIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\nContent-Length: 49444\r\nContent-Type: application/javascript\r\nDate: Wed, 13 May 2026 23:56:24 GMT\r\nEtag: \"69fad37f-c124\"\r\nLast-Modified: Wed, 06 May 2026 05:37:03 GMT\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49444,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40958)","md5":"46cdf8071505ca4c5ba040390e8cc583","sha1":"86bbcc2eb5ae1cc0753532d7fbd33e4e12e42d5d","sha256":"54cb21538ab21bb977c73b477bb45bf9e40d7c57976a23889ede6cac3b06bf23","sha512":"6b5266bf673685a538858758521c10e5a21a0aa54ac410017042482770cc77735a5ee348a02c17fce4c60f8129d64d0bc48a3f15dbcc95980f435a4a4e32ee21","ssdeep":"768:zdmEwvKVBNfXzmP13+/XtcUl+5BCzCk3cuyl+lRCj1Q3w8zdTtWaqlBxHdhJNK/I:Qgdc1otPZleRSJzB2qA","tlshash":"3d23e8cdb6d2f06243a771b4406f200bf23aa925a44d8454f225e8e67cb855e932bf7d","first_seen":"2024-10-04T16:11:06Z","last_seen":"2026-07-19T20:15:23.300586Z","times_seen":9,"resource_available":true,"data":null}},"time_used":1707,"timings":{"blocked":473,"dns":1,"connect":231,"send":0,"wait":353,"receive":403,"ssl":244},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}