{"report_id":"de740a19-e908-472a-8842-93e3933e28cc","version":6,"status":"done","tags":[],"date":"2026-03-12T06:13:11Z","url":{"schema":"http","addr":"888vndbet.com","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"104.21.54.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"888vndbet.com/","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"title":"888 vnd-888 vnd - Trang chủ cá cược trực tuyến uy tín 888vnd","dom":{"size":126848,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24986)","md5":"9bb32ae1e47895ad85fbee07c45f46be","sha1":"cc1e6399d1ab173836b0268f837af000e5eb6f09","sha256":"cc067a01df5550f5e26500ba563f06f44cfdc4d21f7c4264a8c35e37e0d6c8d7","sha512":"0e82a81255c1aa89725aa8c86015d7c94d48ad3ca6d9d651cb94d537a88d2a0a12da7b438161f8a6a7a0b6c6be7b114a0825b05c8ae86d423a1b9e347a74e4d1","ssdeep":"768:4btGAhnNbzQiR9ad+WbQAGYLzY1wtVaLmjJrBG/3MULYIDbrrFqsTn:WzhNbErGYZaLsJrgcUjTn","tlshash":"37c3f82451f1047b58a381e1f5e27b6eee99e743ca5bca99f2ec41156fc3ca24d83318","dom_hash":"domhashe793df56978c72f406d265b3750df400","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"888vndbet.com","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"104.21.54.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-16T06:13:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-08T22:33:42.678774Z","alert_count":0,"request_count":3,"received_data":285890,"sent_data":1343,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-03-09T04:57:05.445471Z","alert_count":0,"request_count":2,"received_data":815942,"sent_data":818,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"c3.maxcloudlink.com","ip":{"addr":"172.67.74.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-13","domain_rank":0,"first_seen":"2025-09-09T10:26:09.203311Z","last_seen":"2026-03-07T22:44:04.978346Z","alert_count":0,"request_count":1,"received_data":878,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"papi.maxcloudlink.com","ip":{"addr":"172.67.74.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-13","domain_rank":0,"first_seen":"2025-11-12T04:52:17.164013Z","last_seen":"2026-03-12T05:36:36.906728Z","alert_count":0,"request_count":1,"received_data":883,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"countany.top","ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-14","domain_rank":2137801,"first_seen":"2025-07-12T07:25:53.778824Z","last_seen":"2025-12-28T12:37:38.555573Z","alert_count":0,"request_count":26,"received_data":1750211,"sent_data":12237,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"888vndbet.com","ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":80,"request_count":16,"received_data":764683,"sent_data":7349,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"pv.analyti.top","ip":{"addr":"172.67.136.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-22","domain_rank":0,"first_seen":"2025-07-12T07:25:53.780543Z","last_seen":"2026-03-12T05:36:36.758799Z","alert_count":0,"request_count":4,"received_data":13331,"sent_data":1938,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"888vndbet.com/static/js/global.js","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc6a83584533ed11aed21e9da2eb282e","sha1":"d997b8606f84083592119ae85186e441ef4dfb54","sha256":"274818988b97ded017e0e437cd947ae05b82444b96e0592666b42d80c81b16c3","sha512":"fa7170fbf6f4a2f7730bd0bd05a82d2df8384f12f9676cf3b21ae9a0a00804fdcc55fb9a478c36a7ab2e8b30fdcabc7ae95e4fcce99d9abbe746388842b66534","ssdeep":"1536:2DkSwy/k1N53zY717nvnn/2NOi309gCAvmCbVjJRiW:GkSwy/k1r3a17nv6Oi30OC8bEW","tlshash":"7163c78c3b4a71e1967e35a32e1170a0eee5cc40fc4d5198eddcb86cb8a572dca77428","size":69266,"data":"","first_seen":"2025-12-25T02:50:15.277686Z","last_seen":"2026-03-12T06:13:18.127474Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143706,"data":"","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-04-04T18:38:24.081417Z","times_seen":11133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a49bf3c791195df2ab640e0592db3f6","sha1":"a40be62766430900209734887ecdabc628f45e34","sha256":"8b9004e78ef3e35dc2134589bd334cf9f8e0b096fc3e9e3feb3f0f2aadbb5305","sha512":"039d3c4ee8095b51891ce72391e4a994f5b0c467089daa3b48b039ed73d82d8b1040bd559576781398331362c4b2b398f46437d25cdadcb691c0d164458ef58a","ssdeep":"","tlshash":"53d09b9d59b466334617a435468c4061f56ba1473c0d1c3f7e4c4101cf087565cfc39c","size":248,"data":"","first_seen":"2025-12-07T06:51:56.612747Z","last_seen":"2026-03-12T06:13:18.142495Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/static/js/888vndbet-comSwitchLanguage.js","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f251030052d691ddddff8afbf8b17f71","sha1":"71ad49c53f17324066dfd1e8ddc2f8cd6b9718b7","sha256":"355cc7152022cb7e133f94381fced6c8477f168e6a771065278bb58aa2289fc9","sha512":"a30f7a8d4959f38355c4f8982a64ac54a41244041341e3cac00207680daf504074c2dc6b6a3fe511550a8b58499f16ca120a15cbce988c6ed44c644aa9f9b31c","ssdeep":"384:u7KKMtYGoF7G1a00HbJKNOyhZej8MLuAfPuDuz:u7rMtYGoF7G1a00HszZej8Q","tlshash":"c47274b1c520e37cbb0ac8a2afbd9d05d2390b51b1896f94518dec58bbce54b992d1c8","size":17270,"data":"","first_seen":"2025-12-19T01:23:53.73002Z","last_seen":"2026-03-31T12:51:03.931484Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8902256479f52115830c36af15a6c245","sha1":"350af1022317bd14b55fad562035cd77944b3178","sha256":"eb2a45a87ceb83c8f07be6be4bf9296c500e293d66323f13fef76f5d099532c9","sha512":"c4d4898ad571ea083fba4ad530b73b5d0041049924aa75c1a5a57a65620b3badb50af36e067339a3493b086dca6a0be3e9e0f1acdfb00367356a86b8bbe3146b","ssdeep":"","tlshash":"28e0c25967b930726633fc35056eb205aa314043682facbdb58c4ac5ef5e22c81fae95","size":307,"data":"","first_seen":"2026-01-10T22:20:18.022528Z","last_seen":"2026-03-12T06:13:18.14369Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pv.analyti.top/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"pv.analyti.top","domain":"analyti.top","tld":"top"},"ip":{"addr":"172.67.136.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"516ca67380287bda42833b3c1acf9c74","sha1":"b632f77cd9bd89b2d0f985e7ed2c2ff8bb5174c9","sha256":"0b1682605117a65469d252ba0f32e8b9aded53dbd788197c904e139de463f992","sha512":"c11827343c93be623162470ede22c1439b2f5233d4be39b4d01abd3a29d947c87099fcf777f9b5a3f512354a77c1ebd6e18159c49d78fb8f57e860aafd3846e3","ssdeep":"96:YwMXvSyLfekD8eY8LFnICm4F3sA/S6Gg1lUzCs/:tMNDDPICn3sA2gzUzV","tlshash":"21b1a5de7a01b5b994b9953b962f3206723b2577680c04007435ddc52e2cfeb63b2d9e","size":5115,"data":"","first_seen":"2025-05-11T10:37:33.481295Z","last_seen":"2026-04-04T02:11:24.883564Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-04T18:47:49.540539Z","times_seen":28805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pv.analyti.top/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"pv.analyti.top","domain":"analyti.top","tld":"top"},"ip":{"addr":"172.67.136.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"516ca67380287bda42833b3c1acf9c74","sha1":"b632f77cd9bd89b2d0f985e7ed2c2ff8bb5174c9","sha256":"0b1682605117a65469d252ba0f32e8b9aded53dbd788197c904e139de463f992","sha512":"c11827343c93be623162470ede22c1439b2f5233d4be39b4d01abd3a29d947c87099fcf777f9b5a3f512354a77c1ebd6e18159c49d78fb8f57e860aafd3846e3","ssdeep":"96:YwMXvSyLfekD8eY8LFnICm4F3sA/S6Gg1lUzCs/:tMNDDPICn3sA2gzUzV","tlshash":"21b1a5de7a01b5b994b9953b962f3206723b2577680c04007435ddc52e2cfeb63b2d9e","size":5115,"data":"","first_seen":"2025-05-11T10:37:33.481295Z","last_seen":"2026-04-04T02:11:24.883564Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"918c938a8110cbfff8aff295fd898acb","sha1":"32880253c90b46b467d8fb99b814b9765ceb089b","sha256":"e6f5c129d3850b0e816d742ef302dd7b270961c8f7a2552f9571e7a70f1d2c4e","sha512":"d210e8583f5bdb4bde2c5d5e32b3630bba8455da536ac5468b01f590d31a99f316f685e1ab2631ed813b96ed009fe4c255c367ff98ddc0849af44af308ca7477","ssdeep":"","tlshash":"b7016b3622b224b3407360bed3cf6ac5e62410b36286cac5fd6d46440f528d5bbe2b87","size":846,"data":"","first_seen":"2026-03-12T06:13:18.144958Z","last_seen":"2026-03-12T06:13:18.144958Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b3303578d8.webp","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b3303578d8.webp HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 64534\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 07:00:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b3303-fc16\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VW4uXV6mqB1a99v2RvxOO3r6q9za22koFQNSmfaMYPnYOx6LtIzc9Ha8Qg9psC%2F1u3R9NnYq6LElSKEe2rNXAV2vJfbiRnOYdq8OrQ%3D%3D\"}]}\r\ncf-ray: 9db0a64228eb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64534,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"36c04d2b771ed1ab1d63293d85c58a19","sha1":"4ce9e40ae2ac2849a7cad2908ec95b820040eaa8","sha256":"93966e04147d8cf2690ef9ef0f200e409c53054d33ee9256e2cbc27fbee6fbda","sha512":"c61f719a11aa021e6343bdff5173d7f82adce90e94c485301c5b7560569a0015794715e8bb060a90e32f39d577af1b4af804bd99fb99fbfd47ef251a90d91059","ssdeep":"1536:RaK2tdG9db02ZlDycvQmSPOsaVh9HXBD0:MKMGTg2Z7vLS2LJRo","tlshash":"6b5302a7ff3c14994df3089de5fc9086010b827653019fb9423ed1b297fb869e9d61a4","first_seen":"2026-03-12T06:13:18.055292Z","last_seen":"2026-03-12T06:13:18.055292Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1051,"timings":{"blocked":130,"dns":70,"connect":9,"send":0,"wait":395,"receive":380,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b32197ce7b.jpg","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b32197ce7b.jpg HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 207191\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:56:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b3219-32957\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fDqtjC3Oujqaqkn02TBpq1eVBTwMOlVd0b9eT7uAXeY3tTL%2B8q0eQvpwwM9ZFmO1uyJvAXCdhi7oMX0xGtvF9H1YQreE10Uk%2Bezx%2Bw%3D%3D\"}]}\r\ncf-ray: 9db0a642086276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207191,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x600, components 3","md5":"4b41ed79af99fb9ac3bd923134806ce2","sha1":"c02b3fff95391078a84f17736e7b229123944047","sha256":"6999ca2f29b2ad22881c39987cb1c529fe4c173e4c5366bb0dfa1efe88ab13ad","sha512":"46a60ce5badfba747a20ea0de0695da7be83bd8a8c817f4c1f3050c0003efbb067d81f2e4fa3a70c0ea36ad493a7d276092d7e728baa9b0ecd1ca25e5daaab70","ssdeep":"3072:rZcQU/aG5Ww/x7qgVh8EZcaToyf/EYatpQSujcDBPV60K5a0jjkBNunfxIVFzQP2:Vcr/aGAy9qgXFZMWnSS20LGIJqFvz","tlshash":"3c1423438c226cbe951bb6200b34c7750f8a4f705729de8258d6fcfab49d39842f66d6","first_seen":"2026-03-12T06:13:18.058431Z","last_seen":"2026-03-12T06:13:18.058431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1121,"timings":{"blocked":108,"dns":0,"connect":0,"send":0,"wait":416,"receive":597,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b2fc52179a.jpg","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b2fc52179a.jpg HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 59383\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:46:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b2fc5-e7f7\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p86GtBRMsQmTpBDtiowxoFzoUJxty32PBWL7u2BYNyCtxUjatq96crsLOt76eE55eJ7NlVuSThA5qPK0BSzOTfpNHhNqQP9g5DTxXQ%3D%3D\"}]}\r\ncf-ray: 9db0a64228c076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59383,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x600, components 3","md5":"5e251fb1b7125280701eaa66149e5724","sha1":"3ffc71bb8e1bc75ca9d4618cd2241c0239d5875a","sha256":"ea793c5f7d69a4dc8bfaf0bda5cf47a2a24e58f66b2d800af9136481f1fd8c62","sha512":"2a144f6a7b3636e86af52719c42792f71b97b212277ea17062ca57d53cb56e381545253c935746209c747b779fb2337e75657790b1023718cd45a4da90c07189","ssdeep":"1536:CYIPjwT+BHACx8C55cuySjhiNGi186JMfO:VIrwFe8kryy8BHgO","tlshash":"9943f1786ae1d0abf20e7b625766424806e1cdf4c50ef521e96137a3ca603b65e3c7c5","first_seen":"2026-03-12T06:13:18.061225Z","last_seen":"2026-03-12T06:13:18.061225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":389,"receive":388,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/static/images/888vndbetcom683e88c50d7ad.jpg","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"888vndbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:36:43 GMT","end":"Fri, 15 May 2026 11:35:12 GMT"},"fingerprint":{"sha1":"4E:1B:3D:38:0F:D8:6F:8E:9D:04:05:3D:65:E9:61:06:F6:5C:22:CC","sha256":"45:0A:99:22:99:6C:36:50:49:D2:3F:A2:9E:C8:5B:55:17:F9:7A:CD:1B:B0:16:69:3F:96:9D:B4:16:D7:C4:7E"}}},"request":{"raw":"GET /static/images/888vndbetcom683e88c50d7ad.jpg HTTP/1.1\r\nHost: 888vndbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Dec 2025 13:35:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6942b19c-b8f\"\r\nexpires: Sat, 11 Apr 2026 06:12:49 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aVO5BKmqympm71MCGk%2Fz74xdr2C4vvXSk3hq0LCN0T57ZgpZ2zChg5fvi109CGDfodhgB6Iwn5J06eeQ5X8iDBkfweihhNL0IbBcGe0%3D\"}]}\r\ncf-ray: 9db0a6414e5f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2959,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 100x100, components 3","md5":"56f4072e219b0cd5869a313c79d33fb5","sha1":"70c0d44abdb9e264c4acf636d5ff5bb81036b4e0","sha256":"72017a94b485d5b6a095e401e6bbab3eeff78fc5449a4a1cad502aeb44f6c0fc","sha512":"8c9cb4a00227099a24ae80a6f3255a43bd3f4c52e7bd35f24a35b76e5a20b8d9e0222dad39e660c7739b05fba2356597f0a0cb25a4713f8f0e2be1e4b8e1bf80","ssdeep":"","tlshash":"08512c854e481024d5c4623a7e930e65097ddf34ce83d683a603769f94673e98bb7bc6","first_seen":"2026-03-12T06:13:18.063876Z","last_seen":"2026-03-12T06:13:18.063876Z","times_seen":1,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/static/images/888vndbetcom683e88c50fe94.jpg","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"888vndbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:36:43 GMT","end":"Fri, 15 May 2026 11:35:12 GMT"},"fingerprint":{"sha1":"4E:1B:3D:38:0F:D8:6F:8E:9D:04:05:3D:65:E9:61:06:F6:5C:22:CC","sha256":"45:0A:99:22:99:6C:36:50:49:D2:3F:A2:9E:C8:5B:55:17:F9:7A:CD:1B:B0:16:69:3F:96:9D:B4:16:D7:C4:7E"}}},"request":{"raw":"GET /static/images/888vndbetcom683e88c50fe94.jpg HTTP/1.1\r\nHost: 888vndbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Dec 2025 13:35:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6942b19c-1772\"\r\nexpires: Sat, 11 Apr 2026 06:12:49 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kvlEYh16aRvgeL5lGxK%2Fc6ZF9eSWSl8eNYuqHjg6HjMdBA5eOmr1ZzCJkn%2BowGfpDlFNSIXPX4vY2k2Mc010THGCKp%2F1pGMY0IT5Ih8%3D\"}]}\r\ncf-ray: 9db0a6414e6049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6002,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"5ff8bf4dd5c08d5ee9a8d830d3142e38","sha1":"6837acc84be7f36f41fdddb0170f8065f97de0d4","sha256":"751464d39b7b2e22a261f68432121f2f099bf2847b56c4f78b25609c0a8cc5ea","sha512":"6c13e2c142639f56e08a1b08a52e02df145f9b3b0decedc103868a45dcd2e5a5f4269466e9f74968c0bc2c68eb69fa9061b91eed088b47299dcb28b013b9b5be","ssdeep":"96:aFlBYzvd4E/wv9Sthm6h8zIbMyPLLgxeSOmCD3FhXq6ZhIzJSQj+P77k00M8uiYP:aFlYl4Eov9StE6DMGRS2D3XESP77eunP","tlshash":"6dc19e129d394079ea5363b8023948c5f5144f4afe3bc7946419b82fe7b7afd89c1485","first_seen":"2026-03-12T06:13:18.066333Z","last_seen":"2026-03-12T06:13:18.066333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b2f5503ab5.webp","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b2f5503ab5.webp HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 69966\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:44:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b2f55-1114e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ftzgIO4ixDAaTYX53IpVZ3gbIu3XqTqCNz9iyt%2BdLmmCtGGqfeWqbwcee9Cq%2FpAbTXwsK4QnXBHMTJZIpJKlCTnQP%2BH%2Fw5kZxHL8nQ%3D%3D\"}]}\r\ncf-ray: 9db0a642391d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2d3014f8458cd5e6c649026b20bc87d3","sha1":"927427ffd6c3205cb3ce0f8bc7485367462fa9bf","sha256":"90e59342e85d2723c5f8d6dacdfc05de24cd1260e3d12560cc0e5af102232db4","sha512":"5132e4bdd9bc3a0de841905f029bd39f1539c3a8f562590ddf6ebe9bd61976ada75e1242b77a2c0e2bed81d1e7c20f800d93508946ddb01975878ad3c71337c5","ssdeep":"1536:VpgtR4qsrocfwBHna07hYjN9u5t91yb2DMEJCDm2ZI0BQSfIbyUk:Vmv4qsroSYHnaKWjN9015Mdy2ZI0BQJU","tlshash":"a26302470cebd9e83807dab33ad1191d25c9d01fe8c7b2dbda6922359ec0d6c4e39685","first_seen":"2026-03-12T06:13:18.068478Z","last_seen":"2026-03-12T06:13:18.068478Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1082,"timings":{"blocked":135,"dns":82,"connect":9,"send":0,"wait":395,"receive":388,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b329350164.webp","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b329350164.webp HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51908\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:58:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b3293-cac4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JuRcu0Lx1ytQAcA3EzizEyEcuYFfOEOOyFdu6XF7fnLSzOMu7iLATD%2B2RKOd17etd7HilWau6apghDx9RYrU7ucFn52vtHVatycVig%3D%3D\"}]}\r\ncf-ray: 9db0a642188676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51908,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2df675dc57962e3f161508421d06dcec","sha1":"3c5f0ce9ab8782c4e67cb86ca18617fce9542545","sha256":"830aeeffea8ea80a1be0aa4c03362424f9724cad81b3f1b24051f75be9ead332","sha512":"43a7d3414ce02f290b6da4c51bf4b986451c1aa1c26df930cae57db82f00f4cf414efbb634b84b442f4660427e269aad7f58e8c250e046b3caeba1f2249c495a","ssdeep":"1536:dADAxRtSNPZ+apjX0AzV0OGwCaiZqTRxwKE0Tq:dZNM1dtCOGw+4FltTq","tlshash":"6033027f81adb2dfa972c424c8a20492e92a196311d73d5f2f9ff9550c9f600ee13d60","first_seen":"2026-03-12T06:13:18.070455Z","last_seen":"2026-03-12T06:13:18.070455Z","times_seen":1,"resource_available":false,"data":null}},"time_used":890,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":406,"receive":383,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b32783c77b.jpg","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b32783c77b.jpg HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 93595\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:58:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b3278-16d9b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ms6W2FzeBfA4qM4q6WxFgh7QYl0aMSzJd8g0dBMtVTobkbIz%2Fs3oGh6k9HrVYANZ%2FE1Rq02vUSDrqkY1Qh8XgFmKfgYV08JhPeWViQ%3D%3D\"}]}\r\ncf-ray: 9db0a642188a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93595,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x600, components 3","md5":"a218c0db0d13ee061c1ec55c26e760d3","sha1":"49f13da04f8ff7bd59df53290c1ec439f8bddb24","sha256":"77197159276c4c20e51c03410a3c373a563a511ec77486897009162ddb5263f1","sha512":"dfe2823cab78552c9943c89c28dd0d2b51a3bfca0da996c590f34d6244669118cd71dfafbffc0398a80c20f07f864d7d658859c76e77405554dde9f30b17a9de","ssdeep":"1536:1yagL6K9xZ6flNocaW2RCKH0jnUTHDvL4OJ/cgnxKmDr5TpDfHX/GJhjgVcvRH:YN6CkdNocGRC80jUTDLCqKir5TpDfvGf","tlshash":"1e9312b21745ef8786416d76489b0d2b8d2cbe1ae241d8e065c173b19e8c8d7dc2bd4e","first_seen":"2026-03-12T06:13:18.072225Z","last_seen":"2026-03-12T06:13:18.072225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":389,"receive":385,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/static/images/888vndbetcom683e88c50eacf.jpg","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"888vndbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:36:43 GMT","end":"Fri, 15 May 2026 11:35:12 GMT"},"fingerprint":{"sha1":"4E:1B:3D:38:0F:D8:6F:8E:9D:04:05:3D:65:E9:61:06:F6:5C:22:CC","sha256":"45:0A:99:22:99:6C:36:50:49:D2:3F:A2:9E:C8:5B:55:17:F9:7A:CD:1B:B0:16:69:3F:96:9D:B4:16:D7:C4:7E"}}},"request":{"raw":"GET /static/images/888vndbetcom683e88c50eacf.jpg HTTP/1.1\r\nHost: 888vndbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Dec 2025 13:35:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6942b19a-b26\"\r\nexpires: Sat, 11 Apr 2026 06:12:49 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uCfY43vrsZZsYoUFL8pmhrD3o6l5uo4%2BVC2bOg%2FSPu%2FwAxmiduRVGe9vnHarQv4BMPNoG%2FobG%2FAWvEusSAdeuQYm015BZsF20g2cELw%3D\"}]}\r\ncf-ray: 9db0a6414e5b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2854,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 100x100, components 3","md5":"d9f1f9ddb3240852f3c0d7138c1e0ff9","sha1":"1817aad7c79cc9c06ea8e754af60a574af7d00e5","sha256":"8e65199668414a68ad0742ae1b26f0dc00955ddaaf96b4d7a94a4fa89f18daf1","sha512":"d5ace33b0d7b7e9f62f32b39654fa1cb7c401f825e539ad6fbac7d4eb72494a3cbf0a28b8d2d72300d05dcfa6f480f2f209631deb5713c59f6b18c1827e4de59","ssdeep":"","tlshash":"ee512abaaf91e497fa85037081e64da0b75d4f48d80ffa932c190894ccb306789711e7","first_seen":"2026-03-12T06:13:18.081647Z","last_seen":"2026-03-12T06:13:18.081647Z","times_seen":1,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/static/images/logo.webp","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:50.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"888vndbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:36:43 GMT","end":"Fri, 15 May 2026 11:35:12 GMT"},"fingerprint":{"sha1":"4E:1B:3D:38:0F:D8:6F:8E:9D:04:05:3D:65:E9:61:06:F6:5C:22:CC","sha256":"45:0A:99:22:99:6C:36:50:49:D2:3F:A2:9E:C8:5B:55:17:F9:7A:CD:1B:B0:16:69:3F:96:9D:B4:16:D7:C4:7E"}}},"request":{"raw":"GET /static/images/logo.webp HTTP/1.1\r\nHost: 888vndbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12822\r\nlast-modified: Wed, 17 Dec 2025 08:04:08 GMT\r\npriority: u=4,i=?0\r\netag: \"694263f8-3216\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3zKDeaV%2BJ4owpZfIxcj078kYU2H65QH25%2BbHRZ%2FFtl3Z8slS9%2FRTw1FPmWNp5KqcfeNKfY6ypvOu9qTZOB3JVarev5qPvYz95I1DtoY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db0a648ffba49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12822,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a4ff456392a4a59ce04667a758a8181","sha1":"7673e90bd0b36eb1eb3b8ec86bbe8d8ea090bd4f","sha256":"2896457fc13cdb5949724070779194b9bd3af9dfd63f57a66bf8bd759e5cf572","sha512":"bad8e81eb5108f51d998e88555d9d3f33ee20b99b5eef0f43b0e633cd46f7526b626d095d1237a9f1fd5450881b163d2450d75feb8ecb8c91778ed889cff3248","ssdeep":"384:+hmChhtupxw8eEQFBh9XZXzbgwhLKbjlgqgW+oJIP:Ih0pxLQFPhmwIFgyJIP","tlshash":"6842bf27207a06d38f86e3c429b897ee21a51ea7030ec34ba577bc51df117954295a35","first_seen":"2026-03-12T05:36:41.634616Z","last_seen":"2026-03-12T06:13:18.083976Z","times_seen":3,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pv.analyti.top/api/event","fqdn":"pv.analyti.top","domain":"analyti.top","tld":"top"},"ip":{"addr":"172.67.136.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:51.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"analyti.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 06:52:58 GMT","end":"Sun, 12 Apr 2026 07:50:45 GMT"},"fingerprint":{"sha1":"F3:9A:2C:66:AB:D4:5A:73:73:D3:A0:12:B0:7C:29:9F:8D:CD:EB:74","sha256":"A2:3D:0B:65:0C:F4:84:A8:AD:35:A6:9B:D5:94:FB:A1:AF:1D:06:85:C3:D3:70:CB:8D:FE:F8:F4:F8:AB:25:6F"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: pv.analyti.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://888vndbet.com/\r\nContent-Type: text/plain\r\nContent-Length: 86\r\nOrigin: https://888vndbet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":86,"data":"{\"n\":\"pageview\",\"v\":3,\"u\":\"https://888vndbet.com/\",\"d\":\"vn-all\",\"r\":null,\"p\":{},\"h\":1}"}},"response":{"raw":"HTTP/3 202 Accepted\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:51 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GJwDSnFq8qY6C5MK-tni\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FeW9emMTs7vkv0hGyYwn1nf0VsFeUiuvurP0z%2FG0KmnLALokrQ%2B6NmdYVVktOAw%2BSByzIiw6%2Fia%2Bmaxuk9lEWzD5PO883fITjaDJAWv1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db0a64c5b46b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-04T18:42:48.098421Z","times_seen":391033,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/remixicon@3.5.0/fonts/remixicon.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/remixicon@3.5.0/fonts/remixicon.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 3.5.0\r\nx-jsd-version-type: version\r\netag: W/\"1e1f5-48QJs2Ev7WXpvZWlpyTMbKw/aZY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 12 Mar 2026 06:12:49 GMT\r\nage: 4158319\r\nx-served-by: cache-fra-eddf8230037-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 15663\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123381,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a1502679c4edcf458b19dce1380a0f79","sha1":"e3c409b3612fed65e9bd95a5a724cc6cac3f6996","sha256":"3319df8b9c28451700b6dc398868f64e5554b3cb164d188bf6f0cac6b6e39793","sha512":"1d75d1d25db23301c3ac3cb125bacc0fd78bbcf7b7cf7a8bdcf3dea33353b221c9104371c7c0c7d82c66574e62c06d1dc28cf99f8810650c982d436dd567607e","ssdeep":"1536:Ykcvr8vn4cYzgKvP1IqRCwNd1l3JclUaqM2GSsRotP:Y58v4cYcKZ7clA","tlshash":"42c3c8beea4f45801702e8d66367278163b9b67dc9817c7ad413788df3c766883862dc","first_seen":"2023-09-03T13:15:01Z","last_seen":"2026-04-04T19:36:44.023301Z","times_seen":1431,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":15,"dns":1,"connect":13,"send":0,"wait":13,"receive":3,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b31f5d22bb.webp","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b31f5d22bb.webp HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 54520\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:55:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b31f5-d4f8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uQlBVG%2BhY168DP9t%2B7bX8s3gCfDRUJ49loKfAmbv1lBrrlgZP702YXaumgbg%2BbHv1GTInrIPSEbX6UggIN0x3Ia2MERC5yE0j%2Bl%2BLg%3D%3D\"}]}\r\ncf-ray: 9db0a64228db76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54520,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"59f8f3de46e74f9b313a9585d319d8a4","sha1":"ee68bcb63859538f850495972e3fcff1297db29d","sha256":"72d566de1c7c73455816fe5e05d97028db45d1c3e20d5c9e8f45ea2260e310e2","sha512":"b9aae3482d8d8f570d538d7031191064403607bcfdd9bee121bf2039b8cdb4ad2c110571dc9305c8887cf043f02a1914948987802d29e99bfe5788b82f0bf061","ssdeep":"1536:Ccmz0qx2dMuyTLd0ah0QGuffMAfDmFfC+aW:Clz9My90ah0QGuff1rGfvh","tlshash":"7a3301cf9ba02acc4e7d1a0b649c29eef43d85ae81465f01868fe52d7577d43428ce4a","first_seen":"2026-03-12T06:13:18.087968Z","last_seen":"2026-03-12T06:13:18.087968Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1053,"timings":{"blocked":132,"dns":90,"connect":1,"send":0,"wait":386,"receive":370,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b329351d72.jpg","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b329351d72.jpg HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 186873\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:58:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b3293-2d9f9\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5CaQyTb7Xd3XfvkgtdOMt1bQ25St06UKMCGAtZOE7scgMTLlWmFK8WirW8tSKjutYkwVHZoM644C6vV58P0eVYm9sGDq1kZdbIFCHw%3D%3D\"}]}\r\ncf-ray: 9db0a64228d676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186873,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x600, components 3","md5":"edf386367e2a9a60f73ff3601120bcb8","sha1":"ae08dca671dc189435a71a384c8c8256256f10ff","sha256":"cf37f9760e2684dfcd1b2ba7ffcaff3cac4f2843815152cdfebc96be27bd8be4","sha512":"9e8849caf7f4463e72cd678fc83062509b4810dfe43f86c1f9e811f50b1f17367319a7cc4e15fb78ebadee43bab6fd1abf40c46af7b64c601d8938a8c2076a1a","ssdeep":"3072:D1QWkRcDOumkuoLawlQrO92KbWy+1ZUjw0Yxutki7RFpLHAOAGRByqJB:RQJFTouwlUO92KaUYutki5gOPRT/","tlshash":"550412261439f9d0ac791e39cb898b5a93c5f844329162c21bc4c5f57897f2b80f757e","first_seen":"2026-03-12T06:13:18.091177Z","last_seen":"2026-03-12T06:13:18.091177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1271,"timings":{"blocked":131,"dns":90,"connect":1,"send":0,"wait":393,"receive":582,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b32bad1c96.webp","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b32bad1c96.webp HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38716\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:59:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b32ba-973c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rmX4Pfzz5Y2L1AgeitgEUyJ6kQdKzWkrOI1fpA8VvcEGQpiy%2B75VTMD%2BctwCIblle%2FlNUX3R0H81KeVi311DOemI8lVaY2WOIcVimA%3D%3D\"}]}\r\ncf-ray: 9db0a642087876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38716,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"68a5815d412b00868dd67a0ef939262f","sha1":"fd98e5024affc3506324c83fe96cb7e015a5a092","sha256":"dd53ec2d95ca487212dc84e8c3c42656fb1a3df686f25c123564dc5dcb0d922a","sha512":"250a7e7a2feb28d8c3db128435a5b0beebfc1e11134c8306b3a984ab68b5c2958b74ce40cf68ab5dac31cd497fbd7590afe73a024b87858d7b7d3c86fda3b100","ssdeep":"768:Zqu3F8OvdRjKzkgSStbTMLVv2CGL2JUa79nR3+4+qt7f9sisGH3:68ySsTzCG6m6n53+ypX","tlshash":"c903f193c9ec599dca3a9d4de42a0f876d172e22c052629ce5c85c5c6f96fc8a4f12f0","first_seen":"2025-10-19T09:08:12.861019Z","last_seen":"2026-03-12T06:13:18.09335Z","times_seen":2,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":102,"dns":0,"connect":0,"send":0,"wait":412,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/static/images/888vndbetcom683e88c505ed1.jpg","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"888vndbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:36:43 GMT","end":"Fri, 15 May 2026 11:35:12 GMT"},"fingerprint":{"sha1":"4E:1B:3D:38:0F:D8:6F:8E:9D:04:05:3D:65:E9:61:06:F6:5C:22:CC","sha256":"45:0A:99:22:99:6C:36:50:49:D2:3F:A2:9E:C8:5B:55:17:F9:7A:CD:1B:B0:16:69:3F:96:9D:B4:16:D7:C4:7E"}}},"request":{"raw":"GET /static/images/888vndbetcom683e88c505ed1.jpg HTTP/1.1\r\nHost: 888vndbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Dec 2025 13:35:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6942b19a-a8b\"\r\nexpires: Sat, 11 Apr 2026 06:12:49 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Ww1Q7s0ogLdGGMYZO%2FWf%2F%2B4LUQF5twXMODLVwKst%2B40jT%2Fr5dIXwnLW9htffRHehRW%2FZFtQy8kYzFWSyzX96dIIEojl9VBdPIL3i6I%3D\"}]}\r\ncf-ray: 9db0a6414e5e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2699,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 100x100, components 3","md5":"029d4945f676f6e255bb95c6cb5ad504","sha1":"04a2d75dd18a891c42692aa29fb8c26b82618d66","sha256":"b0bc69e5bd6fddf4ee6be9c8dd392795e52cf8f94c3da781251b995bb86678a6","sha512":"3086995278021c683473441fcac793b9b3c6c6b251be6842d904c068dde68f13218e4f65b5e8b72c7f9143726366ebce337351e52b2e5d52d2212c0f267d7573","ssdeep":"","tlshash":"7c513b8fde42c4a6eea3277598634580f40ced01cd2784c39c1f20ca956f62a8e4b303","first_seen":"2026-03-12T06:13:18.095819Z","last_seen":"2026-03-12T06:13:18.095819Z","times_seen":1,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://888vndbet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:49 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::rhz55-1772419043268-7fdcc195e7a4\r\nlast-modified: Mon, 02 Mar 2026 02:37:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 876925\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FoFJbLbBMgGNzU9h8v1vubKcY1KIEzJ7NMAnraLFeABneF21xbhK1Q5pDbUKOsCark6S%2B7AQ0wwkqovk%2F3%2BrfGfXh1RQq9GuV3NgSJcfKgskaQ%3D%3D\"}]}\r\ncf-ray: 9db0a6427f7249c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-04T18:47:49.540539Z","times_seen":28805,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/static/images/ico.webp","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:52.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"888vndbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:36:43 GMT","end":"Fri, 15 May 2026 11:35:12 GMT"},"fingerprint":{"sha1":"4E:1B:3D:38:0F:D8:6F:8E:9D:04:05:3D:65:E9:61:06:F6:5C:22:CC","sha256":"45:0A:99:22:99:6C:36:50:49:D2:3F:A2:9E:C8:5B:55:17:F9:7A:CD:1B:B0:16:69:3F:96:9D:B4:16:D7:C4:7E"}}},"request":{"raw":"GET /static/images/ico.webp HTTP/1.1\r\nHost: 888vndbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12822\r\nlast-modified: Wed, 17 Dec 2025 08:04:10 GMT\r\npriority: u=6,i=?0\r\netag: \"694263fa-3216\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Q6nDwkPp0t10AGJ%2B0mgm4gRuLAoHZDZFu5SnChaKP4DO2t9f18QBFAABkvKmhT1KxaTvlGSfeodiX4KubFFcChvZ6NE3YbVdnL74I8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db0a6513a5049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12822,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a4ff456392a4a59ce04667a758a8181","sha1":"7673e90bd0b36eb1eb3b8ec86bbe8d8ea090bd4f","sha256":"2896457fc13cdb5949724070779194b9bd3af9dfd63f57a66bf8bd759e5cf572","sha512":"bad8e81eb5108f51d998e88555d9d3f33ee20b99b5eef0f43b0e633cd46f7526b626d095d1237a9f1fd5450881b163d2450d75feb8ecb8c91778ed889cff3248","ssdeep":"384:+hmChhtupxw8eEQFBh9XZXzbgwhLKbjlgqgW+oJIP:Ih0pxLQFPhmwIFgyJIP","tlshash":"6842bf27207a06d38f86e3c429b897ee21a51ea7030ec34ba577bc51df117954295a35","first_seen":"2026-03-12T05:36:41.634616Z","last_seen":"2026-03-12T06:13:18.083976Z","times_seen":3,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b34a6ddbc5.jpg","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b34a6ddbc5.jpg HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 102154\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 07:07:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b34a6-18f0a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nywcUV28%2BhcHGcrkwFH4bu0HCGBDoZ%2FYwPxxGiHrJNaLosZMxZgxu%2BboFix0zmS7IUK87GVrYj%2B0l1dCvGuOw1AAm0BzZeSNIESQUA%3D%3D\"}]}\r\ncf-ray: 9db0a642086c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102154,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x600, components 3","md5":"48b1edf04db4c742a5e4e3dc3e7195c6","sha1":"48d6391f7d1406cd653adfd1f7cbb34e515f794e","sha256":"a0d536d18f3231ea348801aa32c21c8e5396f13ae5656f88aae71839949f8916","sha512":"76295813a954e0acbe61ba95a5b2f6d6e8ee26fead39dab53ebdbc344e0c45de4d97f2513a0bd73704ec0f4e1d4b42fc54c0dfb30de27d329fdaae31ed752d4f","ssdeep":"1536:LjUQRLEvU2pX05cSfHugO7ZgOeJxLw4hhWac9jjhA7yCj9cX7NYUPF7czd0akpzM:3tarE9v87VqxLjPjcBy3+NLPF7cpkCbx","tlshash":"dfa312982c1ce2c48b3b7b4747168339c8154875f433aab5ec01af95ad807e6aeefd54","first_seen":"2026-03-12T06:13:18.098666Z","last_seen":"2026-03-12T06:13:18.098666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1088,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":407,"receive":575,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b309df0e21.jpg","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b309df0e21.jpg HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49181\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:50:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b309d-c01d\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lq%2Fj9gVKffrqcfZc%2BdnAUikEvqiOZQNDy4QDlIXQZD9uc4%2Bx9UHQZUlLC2w6KI%2F52Do0MLpWQiPqHtN1bVxWyrpj9F6QPjMo0i%2BTSA%3D%3D\"}]}\r\ncf-ray: 9db0a642087276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49181,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x600, components 3","md5":"e8b4d40b2b793bef49311a8f05079feb","sha1":"cdbcfd939fc1eaec7adabca78bf424e4e4ecb452","sha256":"cfc0c35631c5ff768e7b82f7eb22589a5fa5cd9754246429031cde2005dcd4d7","sha512":"6faba0f105e556e6456b3d46292d5a73d9cbd29e5bce8fb753f4641e737d8cba78a6682e18402500091c5a18930c13500a45da2e9705fa92256afc6f7f9a5200","ssdeep":"768:fQLaIxWiiCaMk7+2232QhGLN73xBN5/WeyfvE+2Kpuj1OtzP3g29nI+CWGPgasQL:IaIpfkQ32QIxBvOeWvyKp3tdFIQKgoL","tlshash":"6923e00d77b09c92e5e4f2391b4b33e15b19d22f15ffa1d7a2428252980678c69a70ed","first_seen":"2025-10-19T09:08:13.756479Z","last_seen":"2026-03-12T06:13:18.100298Z","times_seen":2,"resource_available":false,"data":null}},"time_used":914,"timings":{"blocked":104,"dns":0,"connect":0,"send":0,"wait":416,"receive":394,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b309df3f94.jpg","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b309df3f94.jpg HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 78162\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:50:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b309d-13152\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aOZBRbt8toIvCA%2B6C0tZsdcl7plaIM9Va7%2F8XCCTD8l5hVvavNLXBwSsNI%2FMjpvDiEqrZwyOhBe3%2B8y5OqyApa4%2BbqYzqRz3Lsj84g%3D%3D\"}]}\r\ncf-ray: 9db0a642087476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78162,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x600, components 3","md5":"e0b57fcb2360fe4533d5db3b3232bc87","sha1":"74eca0cc8b6326ebfd668b8f3833ede6602b8567","sha256":"b1b5f4855792b9bfb2cec22f0b89fcaf2847a18e25effd299bd30919769e90c0","sha512":"9647e3c200737ffd8cd05d15d868eb4ea83a22901cf7fcf8f2c987c2f0f9b668455a220de76ca63b98b7fe982da76d50c2f0f9cbc327d9ce821c99b2cf3b54fc","ssdeep":"1536:yXj+9aZkWyAW+lK93jKyzcKZA+GPkPcMzkEvkLn/zs3krgo25a+6pav2x2Kyo/DY:yzpnyAtlYWy6+BcWkvngUsH50au4FkZW","tlshash":"bb73025d69cfb6831e8bd42c744d5c2381a33a56be8ddc1e3a74a7923c1949d0264bec","first_seen":"2026-03-12T06:13:18.102258Z","last_seen":"2026-03-12T06:13:18.102258Z","times_seen":1,"resource_available":false,"data":null}},"time_used":889,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":399,"receive":387,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b2fc52e35c.jpg","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b2fc52e35c.jpg HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 48546\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:46:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b2fc5-bda2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k8RGE6jTlLjnnnoUtgQfdmbBOdanR6LtqSiq54WPPx8A5ISPpmgVVkwEoawvXkdDu5XFpUerjCS82qEt3lQdogTzONwl%2FwrcNSdaoQ%3D%3D\"}]}\r\ncf-ray: 9db0a642087b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48546,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x600, components 3","md5":"88b4fdb12849e534b2b02a8beea0a2bc","sha1":"0dcff771f90fb82d2af46aafc97052f43fb33978","sha256":"42113b727578e1e445beda7cbfd88e1903f1a4db09f5693fd5633389b6826e9c","sha512":"93a041338db82696c311270116210a20a197a30516b39bc2bf520b349c4f1e37de9de4c0582a3a8c915cf557c70cad5a51e286ef7a3b51f55192ea9c28ccf4b4","ssdeep":"768:rB023BQ/PSphgMDMy3gMT66sHEqe+XeWNZUYz+c3ueEtIYiBqAHnBZpUnYsI2lsz:rJEagMDM+46sHEqe+tN+Yqc3ue6IYB4H","tlshash":"15230229bc7e4871732c1b99b4ae6b806f37a915927ca64e831de3947360344c149faf","first_seen":"2026-03-12T06:13:18.103986Z","last_seen":"2026-03-12T06:13:18.103986Z","times_seen":1,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":399,"receive":374,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b2f5507488.webp","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b2f5507488.webp HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 46426\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:44:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b2f55-b55a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8NTlhwwoGT95b95GhlO9Qoz%2BB5XuBCGXwWYn19zHP2mU7XiE%2F92zGAqYUQn0wbnHPONMd8XBxDv53xFY4x6mtpl%2Bl24X6PIXshdAFA%3D%3D\"}]}\r\ncf-ray: 9db0a64228c676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"02731e0dac28dae7684d59bee4dc40b1","sha1":"e883f500e0f12bf433fb78ec54a5e76f093c4a7f","sha256":"448859ee0e6ca444bbe6f6eaad9a3647f0f78c4089b801784d2e59ea5f981b31","sha512":"af0496c6a903243ba1d7bd4eec4ce03145dda2b22d718733a2e9f373714f1a19b189191321f79254ee4153a11da7b4e7f9bba031dfc0feb2494e4f7c5abf044e","ssdeep":"768:3sFmAd2oL8vV3VS9gZPzEB7ZTE2ykpKsxqeRbKfLpgkxhiTnv5RGV:3sHd2GYYaZ4D4YpKmZZKfLpdxhiz+V","tlshash":"0223f12d64a5343534b4414b1dbb8f6818a446c7e5e79ca710a80eeca4637ec9a7d2e2","first_seen":"2026-03-12T06:13:18.106604Z","last_seen":"2026-03-12T06:13:18.106604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":880,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":395,"receive":387,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pv.analyti.top/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"pv.analyti.top","domain":"analyti.top","tld":"top"},"ip":{"addr":"172.67.136.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:51.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"analyti.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 06:52:58 GMT","end":"Sun, 12 Apr 2026 07:50:45 GMT"},"fingerprint":{"sha1":"F3:9A:2C:66:AB:D4:5A:73:73:D3:A0:12:B0:7C:29:9F:8D:CD:EB:74","sha256":"A2:3D:0B:65:0C:F4:84:A8:AD:35:A6:9B:D5:94:FB:A1:AF:1D:06:85:C3:D3:70:CB:8D:FE:F8:F4:F8:AB:25:6F"}}},"request":{"raw":"GET /js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js HTTP/1.1\r\nHost: pv.analyti.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:51 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nage: 2196\r\nlast-modified: Thu, 12 Mar 2026 05:36:14 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FjPK20SCTzFzryC2XW2eBVw71bptB5LqzZFpWCi6jOGZiLmwaR48sAMG6iF7FNXeXWwK%2F306LC4iEAJYMFFqdCev6khe9SEXts3hFLzF\"}]}\r\ncf-ray: 9db0a64b3b28b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5115,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5115), with no line terminators","md5":"516ca67380287bda42833b3c1acf9c74","sha1":"b632f77cd9bd89b2d0f985e7ed2c2ff8bb5174c9","sha256":"0b1682605117a65469d252ba0f32e8b9aded53dbd788197c904e139de463f992","sha512":"c11827343c93be623162470ede22c1439b2f5233d4be39b4d01abd3a29d947c87099fcf777f9b5a3f512354a77c1ebd6e18159c49d78fb8f57e860aafd3846e3","ssdeep":"96:YwMXvSyLfekD8eY8LFnICm4F3sA/S6Gg1lUzCs/:tMNDDPICn3sA2gzUzV","tlshash":"21b1a5de7a01b5b994b9953b962f3206723b2577680c04007435ddc52e2cfeb63b2d9e","first_seen":"2025-05-11T10:37:33.481295Z","last_seen":"2026-04-04T02:11:24.883564Z","times_seen":186,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b3163d3c53.webp","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b3163d3c53.webp HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38638\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:53:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b3163-96ee\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ap3BYmJs5npKdFDI%2FN77TpKbLQT5zJ6Pk4ssdacpWmEokG9gLbshRuduett9A2qRBhseQtvvguvi4bHvzx9qljL8FdgGDX3T2mr%2BdA%3D%3D\"}]}\r\ncf-ray: 9db0a642088076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38638,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"247f79526a6eb9ec23aee2311c851244","sha1":"04081f946e2b3a6a0cda173bc9be386afdf1cb18","sha256":"d9fa36071ce3f1472a7db8d7893d3698ec82187112cb0bd90f4ed3fc3e378ba5","sha512":"cb2a5247ad519b81dec9ba60b8b56000fe1dfa9e29b9c93d4543284f079c943137ecb27be7b0b6c888e36e712fbde589e783a14d112fb411b30b2f9b39e31227","ssdeep":"768:FlQSBISZcC/5mqxaDAwp80oJd9TFg7SoWqpK:5ISZckwqeK0op2S4c","tlshash":"6c03f2d7bc11a86175cd2d319a5c508f3177433ad007f0be11768b74a8afe894de65ac","first_seen":"2026-03-12T06:13:18.108959Z","last_seen":"2026-03-12T06:13:18.108959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":418,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@8/swiper-bundle.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 8.4.7\r\nx-jsd-version-type: version\r\netag: W/\"406d-rwCOh5O6dcNGNg6U6W482jFM4n8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 12 Mar 2026 06:12:49 GMT\r\nage: 17419\r\nx-served-by: cache-fra-etou8220174-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4570\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16493,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (16237)","md5":"04720c60bc020cbba92785dd4029f7d2","sha1":"af008e8793ba75c346360e94e96e3cda314ce27f","sha256":"322d15d99efb792c941a5202fa8fc7ee9e932847227383ff9605163338a08eac","sha512":"37622c5ae2ac0586221cd61d684b8ae1e691274a277d41be71d66296775868c12150642afcc72c154ef9ab737e8db2543579ba3be2b9d8346b2be6d2a411a3d3","ssdeep":"192:i2mUJbiKneTT4bHZ+SKqnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:iTUbeTMbHZ+knh2AVfHfA4XYz","tlshash":"f57223681340282753274f374b71cbb9ddb444d24b93896e91c0ee88d7b6cb9236f6e9","first_seen":"2023-04-05T08:09:54Z","last_seen":"2026-04-04T18:38:24.077576Z","times_seen":9839,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":13,"dns":1,"connect":15,"send":0,"wait":13,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b2fb031865.webp","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b2fb031865.webp HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50036\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:46:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b2fb0-c374\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hv1V48ic2cEqGK5BD0%2FrG2VyK2KQsUgAnJLvxR2A0hfUvVDrdrl2SkH8DESzFMoREht6L4M72JexhkKLf9kb%2FGP0Y0lwXp7m8f7VTA%3D%3D\"}]}\r\ncf-ray: 9db0a642084076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50036,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c9f52dac54a8f71b2c6facd36ec2fa18","sha1":"1413af8c72d6516b36670d36d06a98e8b6fd351f","sha256":"1514f43379a1830be11e2c8089549a759ce24db8a5686c8a127e0c7db20d379b","sha512":"57b62f28ac16a7311c6edc3bdbf4ba700f614488d634db7b6df27fce2c97e258057f51f76e819be9b664f1064bbf93e46cf2fa5081e297c17897ac021d38723e","ssdeep":"1536:7CYFCQJWTyNWQXh8+Cn9NQljDpM267tYdCdFE:/FCQwCgLOjDpM2672QTE","tlshash":"552302017a5f3c7a9d7c0e01cd08fcb19df2ae203ae85835992e41e3fde41c4625ba4a","first_seen":"2026-03-12T06:13:18.111283Z","last_seen":"2026-03-12T06:13:18.111283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":118,"dns":88,"connect":1,"send":0,"wait":410,"receive":2,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b31d009148.webp","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b31d009148.webp HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 63100\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:55:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b31cf-f67c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FLx5Ezi7jh6aaEuUloTMvau3f%2B%2BDY9WuQuynP00SCwrUkvq4ZpgoJCM2BCHRWqfHKsWVJJpQYZGtgTlzO9Qf0guhZ5WLbzdfaXfe1Q%3D%3D\"}]}\r\ncf-ray: 9db0a64228df76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63100,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"963e2e952130a3a8fdfc19c52320a19d","sha1":"51d1facd5a45ed1a21df2fcfc9f0de1ddf350873","sha256":"f6c39b16545b74cab131c0eaf5705f6dcc8845332b4a0b9c99d556384b64ff34","sha512":"7d44aaaab269a847aa0592da8be0418682ce9751b597fe03565aa77061dac4ebfa5b77061ba9687208f107fd3fc3efa213aac4f622af1942612c345d58bf9417","ssdeep":"1536:Bnapxepu6DWgBPCBtCSQxfmwqFJb7dvMdvPwBemEZO:BapxecKBsFQxqZ7dSXwU6","tlshash":"cd5302ccffa3da78212512a4347b685754f969e0f5036a5f8b83c8a5de7840ad7a3087","first_seen":"2026-03-12T06:13:18.112779Z","last_seen":"2026-03-12T06:13:18.112779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1041,"timings":{"blocked":129,"dns":70,"connect":9,"send":0,"wait":385,"receive":383,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/static/images/888vndbetcom683d97aeda8a5.avif","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:50.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"888vndbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:36:43 GMT","end":"Fri, 15 May 2026 11:35:12 GMT"},"fingerprint":{"sha1":"4E:1B:3D:38:0F:D8:6F:8E:9D:04:05:3D:65:E9:61:06:F6:5C:22:CC","sha256":"45:0A:99:22:99:6C:36:50:49:D2:3F:A2:9E:C8:5B:55:17:F9:7A:CD:1B:B0:16:69:3F:96:9D:B4:16:D7:C4:7E"}}},"request":{"raw":"GET /static/images/888vndbetcom683d97aeda8a5.avif HTTP/1.1\r\nHost: 888vndbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/avif\r\ncontent-length: 16913\r\nlast-modified: Wed, 17 Dec 2025 13:35:28 GMT\r\npriority: u=4,i=?0\r\netag: \"6942b1a0-4211\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fgV3apAdkyPudaXIsrkeauXYp1Poy6d2z%2BnKiHeKG0buH%2BgbsOfbtXfA3FYxTSRtMDFEPgqs5eSSmgWuBbJFaQosrP%2FB4jaqljRBRmo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db0a6490fc149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16913,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image Sequence","md5":"e32f333c6600687afcec482a1f08d9e7","sha1":"de71daf23d0fcc0377ce52843e725826af402289","sha256":"8ff9f947895393d541c9422a961312c577ddd1795dd96aa4ea8a67d5b826c751","sha512":"7e11de8d2810aec1bcba40402d15fc749c301175dfbd14360aa363a1019c33cfb3b5973da6fb166090bdd594efd2bfced1bdb8d883687045f8d6d5d6997389d6","ssdeep":"384:wWkfhaG7BL0hyR4giGXIqJaSg4Zwc3SrF0h:38w2JN/asZw+SrF0h","tlshash":"3772c0b7b3788f5fea82c73442d21b407901e2b55a7fe5e76ac397158c241a7bf19210","first_seen":"2024-10-17T18:08:49.201793Z","last_seen":"2026-03-31T12:51:03.912795Z","times_seen":6,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/static/images/888vndbetcom683d73a8a74b8.jpg","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:51.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"888vndbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:36:43 GMT","end":"Fri, 15 May 2026 11:35:12 GMT"},"fingerprint":{"sha1":"4E:1B:3D:38:0F:D8:6F:8E:9D:04:05:3D:65:E9:61:06:F6:5C:22:CC","sha256":"45:0A:99:22:99:6C:36:50:49:D2:3F:A2:9E:C8:5B:55:17:F9:7A:CD:1B:B0:16:69:3F:96:9D:B4:16:D7:C4:7E"}}},"request":{"raw":"GET /static/images/888vndbetcom683d73a8a74b8.jpg HTTP/1.1\r\nHost: 888vndbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Dec 2025 13:35:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6942b190-7c7b\"\r\nexpires: Sat, 11 Apr 2026 06:12:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VunCpMNzNPaT37I0aViSnP3pZT1XwV0SG%2B%2FX0HcbAJ8Y54Fp%2FD58z5%2BSZiCC50H4EDfoEEKfqxOAWVHa64NNGgeOMHk32RT2C73k2I4%3D\"}]}\r\ncf-ray: 9db0a64c886149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31867,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 686x280, components 3","md5":"cc01d8a109d5386f98fe5493b91f6da1","sha1":"2e0966afac2f16f6f2f99719e003e10a58e8dfed","sha256":"6e12d564152bebd231415096a63f3696c481f3ccb07d739d11f1b243b7eedd17","sha512":"4dae7bfa1e1296414cc67ee00e801887e8cdd168918d329c500d6a66599f9beb5ee3c1866f15efa41ecab46cbb9bf03d9e91ba5a71b1a5c8f4d3a59b140c846d","ssdeep":"768:aF94WYixBhAYwZIsNIMDmR47RidwlTtbxafBcy6GhGv2pTJt:aF2WYifhAY6Rt/pKibGOcTb","tlshash":"34e2f1da21a71f6bc7fa37371965f11822c0c6581b17ebc384509cbb66d24f245ef1a1","first_seen":"2026-03-12T06:13:18.115976Z","last_seen":"2026-03-12T06:13:18.115976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":439,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c3.maxcloudlink.com/?ch=FNG0B\u0026status=1","fqdn":"c3.maxcloudlink.com","domain":"maxcloudlink.com","tld":"com"},"ip":{"addr":"172.67.74.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:51.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcloudlink.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 02:06:28 GMT","end":"Wed, 03 Jun 2026 03:06:26 GMT"},"fingerprint":{"sha1":"40:60:5C:04:46:D8:49:2D:77:5C:10:0C:7A:FB:16:0C:C6:83:CD:4D","sha256":"A4:EF:38:53:07:2E:4C:CF:00:59:38:5E:74:0E:E3:FD:A8:3F:49:CF:11:08:1D:74:6F:1A:10:2D:92:A8:51:B6"}}},"request":{"raw":"HEAD /?ch=FNG0B\u0026status=1 HTTP/1.1\r\nHost: c3.maxcloudlink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://888vndbet.com/\r\nOrigin: https://888vndbet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.7\r\nset-cookie: PHPSESSID=sftkmevp5sc8qld3mol0j594e9; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VVCREK4FJjs6R3LphOVP1lTb%2BYmH0Nw1Mmk21XKw2NxbgmU9jUYJfwtuBDt6n3ESnLUVdIV1uEywCjalwSsJJSYWd1CtQQPBG%2BdNtUfL%2BD%2F%2BtA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9db0a64e19ae1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T18:47:00.89111Z","times_seen":13342615,"resource_available":true,"data":null}},"time_used":494,"timings":{"blocked":51,"dns":20,"connect":1,"send":0,"wait":390,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b329353235.webp","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b329353235.webp HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45376\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:58:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b3293-b140\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KeJPhFMEKOXhP2C56YquG5bK4YMGn%2F%2FX7nFD9UkxgLEm67JWpJXbdleii8DThMtukUTAnZ0szkOBypjOiiMQH7FA%2FAYtpWr2EI8LDg%3D%3D\"}]}\r\ncf-ray: 9db0a64228d076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45376,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"708df462300dcd1c8a1962ff88ecf2a1","sha1":"d161faae05942abfbd45a345a86cf955c066b895","sha256":"72e09fb40739e44cb6608bdc46df8e0cbbad3b26ded4ff75a1dec18ae1f3ed47","sha512":"b9b0a758f9c411dd449f4c5939070fa9d765bd117813ca297d3217dea4296db585ecc841cb8159ba26f0e033637eeebb7a54c1e59aa13e65c57c1128ee0631e7","ssdeep":"768:MuLryrzxLuKmvfNGN5YIXjUSlngwviOimm6hX9ZLXTMCfTsn4wbJ4usfiRL:Mk+z4NvVShXjUSwOimm6V9Z0mTsn4Ru7","tlshash":"7613029c7da75ec2c32e10970aaa58e353cbf71e178864cd2750831a6a17e41c96ef7c","first_seen":"2025-12-28T12:37:46.231988Z","last_seen":"2026-03-12T06:13:18.118488Z","times_seen":2,"resource_available":false,"data":null}},"time_used":871,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":393,"receive":381,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/static/images/888vndbetcom683e88c511295.jpg","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"888vndbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:36:43 GMT","end":"Fri, 15 May 2026 11:35:12 GMT"},"fingerprint":{"sha1":"4E:1B:3D:38:0F:D8:6F:8E:9D:04:05:3D:65:E9:61:06:F6:5C:22:CC","sha256":"45:0A:99:22:99:6C:36:50:49:D2:3F:A2:9E:C8:5B:55:17:F9:7A:CD:1B:B0:16:69:3F:96:9D:B4:16:D7:C4:7E"}}},"request":{"raw":"GET /static/images/888vndbetcom683e88c511295.jpg HTTP/1.1\r\nHost: 888vndbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Dec 2025 13:35:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6942b19c-2635\"\r\nexpires: Sat, 11 Apr 2026 06:12:49 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ceaIR7lb8mFS4SlNpnLjQ7EnlelN9G5PKsj0GVW41ETU9elBeBZXNK1J9S%2B78Z9T31XFntPOMUJbX6PzqhGf4ID2GER4PlclHXlcMLY%3D\"}]}\r\ncf-ray: 9db0a6414e5d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9781,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"152342ed5107f9c2e8c47c5a97f5e47e","sha1":"6fd144805763bbee81d07ed309dbab8cf0514bf3","sha256":"842ef41378d267b9cc9fb75bd1d19fe38ecfa0785b5e59ef1faeb296591c0e8a","sha512":"c49c85d15c9176a21cbda723b96a8fae8d767be49282feacfe0424562afb6d14201da71511ecbbf839c8f858470ff3122e11d65835b7e6fdf517833bd43a665b","ssdeep":"192:aFnSpbwMj0Fh+W9id1aO3KwBfQBoKcA1oW5hF/Tm4oKGiB:aFnSpUr+W9GaO3KvoiGW5hF/axKGy","tlshash":"d6129d00a258a25cdee5eafd83d060406e8b3ea6adc34971745405fb2fa54dff270826","first_seen":"2026-03-12T06:13:18.120025Z","last_seen":"2026-03-12T06:13:18.120025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/static/images/888vndbetcom6849af365f625.webp","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"888vndbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:36:43 GMT","end":"Fri, 15 May 2026 11:35:12 GMT"},"fingerprint":{"sha1":"4E:1B:3D:38:0F:D8:6F:8E:9D:04:05:3D:65:E9:61:06:F6:5C:22:CC","sha256":"45:0A:99:22:99:6C:36:50:49:D2:3F:A2:9E:C8:5B:55:17:F9:7A:CD:1B:B0:16:69:3F:96:9D:B4:16:D7:C4:7E"}}},"request":{"raw":"GET /static/images/888vndbetcom6849af365f625.webp HTTP/1.1\r\nHost: 888vndbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 556\r\nlast-modified: Wed, 17 Dec 2025 13:35:28 GMT\r\npriority: u=4,i=?0\r\netag: \"6942b1a0-22c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQigL3vzTVJXPr4G572%2Fvio557GsFcsD%2FNsM6z%2F%2BQJWlGKKqCF1wrY9E04VcGn3zHHAJFz49r0RWQhWSbbj9L1mPr3tOM8FceYrpGys%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db0a6423e7849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"742c26bc749fe95bd207900d7677d4d4","sha1":"43f1b5447e562afd164ec5717696d5acd3ab829b","sha256":"9d8eba8e67fc0b8153bd3f350b3ccf5301060170054958409d91375231375cc9","sha512":"fcedd1fed598d0fbcf52a5921df14a19e9627ac71dd0921378817071923a7f25a76a4b142755d37d4e964fcedf30e58135de4a62daa39881b85e6facb499b36c","ssdeep":"","tlshash":"8ff02645c05ef5c0c16bac21ae6753611d69c7d4b872bd4113c3b58ec550250598a149","first_seen":"2025-12-21T00:57:37.947764Z","last_seen":"2026-03-12T06:13:18.121521Z","times_seen":4,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/static/images/888vndbetcom68a810040997b.png","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:50.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"888vndbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:36:43 GMT","end":"Fri, 15 May 2026 11:35:12 GMT"},"fingerprint":{"sha1":"4E:1B:3D:38:0F:D8:6F:8E:9D:04:05:3D:65:E9:61:06:F6:5C:22:CC","sha256":"45:0A:99:22:99:6C:36:50:49:D2:3F:A2:9E:C8:5B:55:17:F9:7A:CD:1B:B0:16:69:3F:96:9D:B4:16:D7:C4:7E"}}},"request":{"raw":"GET /static/images/888vndbetcom68a810040997b.png HTTP/1.1\r\nHost: 888vndbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 Dec 2025 13:35:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6942b18e-3ea14\"\r\nexpires: Sat, 11 Apr 2026 06:12:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EsZgcQr57KcNUpG2aosXD0rV2de2MILYA8sgVdZqcU48GbTuuGst%2BcGMq8AtgNW%2Fhkbh36%2B5pXl0y47qWis4mCb%2Bv8RWLAzRm%2Fc3anc%3D\"}]}\r\ncf-ray: 9db0a648ffbb49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256532,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 686 x 280, 8-bit/color RGBA, non-interlaced","md5":"a8613959342635515879414a8ef346e3","sha1":"48fba92578cb069f43f192afb9aba52813d1d342","sha256":"4206515d77a72a79ff0e69a892c1c3ab9da1f574240073db803d268da227c0bc","sha512":"7dd82969c3fe8e970dc7f5968c727f7b208ffbe5fe11ceb4a514e3f1f628c42788d87a0d212f1a57dc77a8b3b5fd4b63b8279498dcab21c891bffeaeae2333e0","ssdeep":"6144:W3j0rRhIBk9Ofha676vrFNStFNa/oJ7q7m2K2H:W3HBAOZa6uxItO/oJ7q7me","tlshash":"b444228d3da3cb7c6a72a11985901b45845ece18abdb6038eebfc982635b4d494c1df3","first_seen":"2026-03-12T06:13:18.122675Z","last_seen":"2026-03-12T06:13:18.122675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":845,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b32934d111.webp","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b32934d111.webp HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 53062\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:58:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b3293-cf46\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vk8n2Wxg9Aeb6NowYQoQD2LrIudzBIvtsua8ynGK2X421DaFJb75RVlGSLGsVbGHMl4LDCmjOk3UrvEXzHRAkvb59aV4UCbcks%2BFDw%3D%3D\"}]}\r\ncf-ray: 9db0a642085576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53062,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"772202091d8a069840a70bb6ebfc4368","sha1":"6cbef18cc3e86f2e4952eb96ea5ba0062c765492","sha256":"28b446f8e24c17aa4eb2184121a6b896f9600cb3f6b10be020481706a2771bc9","sha512":"7bd25f4a47a4f5ede2d16aed8965de6d457700c30523b2b22f9455cfed4fd22739785a3d9d90cfdd33763529a9795cbec36535f360ca308e70914636dc632c26","ssdeep":"768:3KZA0VMzvMFqHcf4l50mrd/n+UPKcdmT3dkEvgWqtEO1B1qXRFwIXJOWmOLI/l:bzv8qHaa50mh/+UPKZEtEO18FmWzL0l","tlshash":"8b33015b8899ac1a98eacffe1d3c03f12a851d0115732b7ef8a2bc6762705955d71c83","first_seen":"2026-03-12T06:13:18.123991Z","last_seen":"2026-03-12T06:13:18.123991Z","times_seen":1,"resource_available":false,"data":null}},"time_used":906,"timings":{"blocked":108,"dns":0,"connect":0,"send":0,"wait":408,"receive":390,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/static/images/888vndbetcom683e88c5086b0.jpg","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"888vndbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:36:43 GMT","end":"Fri, 15 May 2026 11:35:12 GMT"},"fingerprint":{"sha1":"4E:1B:3D:38:0F:D8:6F:8E:9D:04:05:3D:65:E9:61:06:F6:5C:22:CC","sha256":"45:0A:99:22:99:6C:36:50:49:D2:3F:A2:9E:C8:5B:55:17:F9:7A:CD:1B:B0:16:69:3F:96:9D:B4:16:D7:C4:7E"}}},"request":{"raw":"GET /static/images/888vndbetcom683e88c5086b0.jpg HTTP/1.1\r\nHost: 888vndbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Dec 2025 13:35:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6942b19a-eb0\"\r\nexpires: Sat, 11 Apr 2026 06:12:49 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4BltJ3tlWCrRdQbz7jOe14G%2BpxSSAmPnTfyk6cwgySLN8TKPX%2BiOQN4x06sQQkVzvfzCKQDFn0CXMW2RyHjHmM8pQOeyNpo1vK9zYl8%3D\"}]}\r\ncf-ray: 9db0a6414e5c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 128x128, components 3","md5":"ff04940885b4ae485227fd02d2e8ebe4","sha1":"c76a9ed936f524372e1cd6e358f2d99db08a5461","sha256":"ead6b597bf5272ca0be24f8c26b4ba2730e3e1318f930936786fff2f21fb8f7d","sha512":"86d4ab648523a585b41faa13258a912fb0459c4a47c3556508a53e73f35867bd61c4ac10a7b50e8091d11b215f5e1f103e62c1a2d3eb8a1bbb03077b5edea43c","ssdeep":"","tlshash":"3d714d019e3a45fadf5948bb194a51413195ce42c39e8b8b9b52d0b1947f6f1aa324c4","first_seen":"2026-03-12T06:13:18.125437Z","last_seen":"2026-03-12T06:13:18.125437Z","times_seen":1,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@8/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 8.4.7\r\nx-jsd-version-type: version\r\netag: W/\"2315a-9NyNRghnOcWBIRhbLQ9OGQcQ8Rs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 12 Mar 2026 06:12:49 GMT\r\nage: 23550\r\nx-served-by: cache-fra-etou8220199-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 40660\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143706,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-04-04T18:38:24.081417Z","times_seen":11133,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/static/js/global.js","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"888vndbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:36:43 GMT","end":"Fri, 15 May 2026 11:35:12 GMT"},"fingerprint":{"sha1":"4E:1B:3D:38:0F:D8:6F:8E:9D:04:05:3D:65:E9:61:06:F6:5C:22:CC","sha256":"45:0A:99:22:99:6C:36:50:49:D2:3F:A2:9E:C8:5B:55:17:F9:7A:CD:1B:B0:16:69:3F:96:9D:B4:16:D7:C4:7E"}}},"request":{"raw":"GET /static/js/global.js HTTP/1.1\r\nHost: 888vndbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Dec 2025 13:39:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6942b278-10e92\"\r\nexpires: Thu, 12 Mar 2026 18:12:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n5Kx76b2P13prRKQfqrf5OYnpQ3BW4AnbhVavboZvis8L2f%2BcTapU0lFndqJZy7xczxiQY0QG7ITOx8ElFJc2jCD6%2BwjW4ZplkUBb1I%3D\"}]}\r\ncf-ray: 9db0a6423e7949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69266,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65498), with no line terminators","md5":"fc6a83584533ed11aed21e9da2eb282e","sha1":"d997b8606f84083592119ae85186e441ef4dfb54","sha256":"274818988b97ded017e0e437cd947ae05b82444b96e0592666b42d80c81b16c3","sha512":"fa7170fbf6f4a2f7730bd0bd05a82d2df8384f12f9676cf3b21ae9a0a00804fdcc55fb9a478c36a7ab2e8b30fdcabc7ae95e4fcce99d9abbe746388842b66534","ssdeep":"1536:2DkSwy/k1N53zY717nvnn/2NOi309gCAvmCbVjJRiW:GkSwy/k1r3a17nv6Oi30OC8bEW","tlshash":"7163c78c3b4a71e1967e35a32e1170a0eee5cc40fc4d5198eddcb86cb8a572dca77428","first_seen":"2025-12-25T02:50:15.277686Z","last_seen":"2026-03-12T06:13:18.127474Z","times_seen":4,"resource_available":true,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/static/images/888vndbetcom683d73a89de72.png","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:50.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"888vndbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:36:43 GMT","end":"Fri, 15 May 2026 11:35:12 GMT"},"fingerprint":{"sha1":"4E:1B:3D:38:0F:D8:6F:8E:9D:04:05:3D:65:E9:61:06:F6:5C:22:CC","sha256":"45:0A:99:22:99:6C:36:50:49:D2:3F:A2:9E:C8:5B:55:17:F9:7A:CD:1B:B0:16:69:3F:96:9D:B4:16:D7:C4:7E"}}},"request":{"raw":"GET /static/images/888vndbetcom683d73a89de72.png HTTP/1.1\r\nHost: 888vndbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 Dec 2025 13:35:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6942b190-33990\"\r\nexpires: Sat, 11 Apr 2026 06:12:51 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKQj40SG5WDZhuvVEuLoj%2B1HEYBXHZgE5o2IAr8hyLXSp19lhhQynUvc%2B3SO1a8nhI0Mq7XiXldbLKkL0qyFsBb%2FNbP5rPiG9wEAzgg%3D\"}]}\r\ncf-ray: 9db0a6490fbf49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1029 x 420, 8-bit colormap, non-interlaced","md5":"d76eba9699c44c0b6a76bcc5d153a999","sha1":"31220117f999d2cae67aa64d1a125df3a4bb9b47","sha256":"01470a7ddaceb514d24234f519706e21cc4c8ad573c57ba19448eb0282df36e5","sha512":"a6563f9de63d6a3938aaf19215902a840e0c96fe9f4ff1fd1ef042472c751ba6257f1598d6688e6ecdc0070d2362e54b0fdafc6d19fc3d17c1ee6efbe67db92c","ssdeep":"6144:IwuhcIvXBd+YiutHBjVlfeAYSaA3B0J8S:Iw4cOXBd7ptHnlfB3tS","tlshash":"8f2423619a8098dedc176e433ca6376edf0def21064bc118a2cd964f346f27921e235b","first_seen":"2026-03-12T06:13:18.128123Z","last_seen":"2026-03-12T06:13:18.128123Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":892,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pv.analyti.top/api/event","fqdn":"pv.analyti.top","domain":"analyti.top","tld":"top"},"ip":{"addr":"172.67.136.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:51.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"analyti.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 06:52:58 GMT","end":"Sun, 12 Apr 2026 07:50:45 GMT"},"fingerprint":{"sha1":"F3:9A:2C:66:AB:D4:5A:73:73:D3:A0:12:B0:7C:29:9F:8D:CD:EB:74","sha256":"A2:3D:0B:65:0C:F4:84:A8:AD:35:A6:9B:D5:94:FB:A1:AF:1D:06:85:C3:D3:70:CB:8D:FE:F8:F4:F8:AB:25:6F"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: pv.analyti.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://888vndbet.com/\r\nContent-Type: text/plain\r\nContent-Length: 93\r\nOrigin: https://888vndbet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":93,"data":"{\"n\":\"pageview\",\"v\":3,\"u\":\"https://888vndbet.com/\",\"d\":\"888vndbet.com\",\"r\":null,\"p\":{},\"h\":1}"}},"response":{"raw":"HTTP/3 202 Accepted\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:51 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GJwDSnGKJ1zCNrEK-toi\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6FamWOR6xgMvT%2BJoIjZ%2FTimG7RiVVp0NSq454p7Asl9Q5P%2F55%2BQ%2BVa8FWyG2f%2ByPbSjyhC3Kv%2BizBnQCktkPMIjqB5Og8lVH85Odxf5U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db0a64c3b3eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-04T18:42:48.098421Z","times_seen":391033,"resource_available":true,"data":null}},"time_used":427,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":426,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papi.maxcloudlink.com/getDomainId.php?token=xxtJ96PkdSff8pPJHa\u0026domain=888vndbet.com","fqdn":"papi.maxcloudlink.com","domain":"maxcloudlink.com","tld":"com"},"ip":{"addr":"172.67.74.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:51.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcloudlink.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 02:06:28 GMT","end":"Wed, 03 Jun 2026 03:06:26 GMT"},"fingerprint":{"sha1":"40:60:5C:04:46:D8:49:2D:77:5C:10:0C:7A:FB:16:0C:C6:83:CD:4D","sha256":"A4:EF:38:53:07:2E:4C:CF:00:59:38:5E:74:0E:E3:FD:A8:3F:49:CF:11:08:1D:74:6F:1A:10:2D:92:A8:51:B6"}}},"request":{"raw":"GET /getDomainId.php?token=xxtJ96PkdSff8pPJHa\u0026domain=888vndbet.com HTTP/1.1\r\nHost: papi.maxcloudlink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://888vndbet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.3.7\r\nset-cookie: PHPSESSID=p9e54ik6lasdhccvr5gc9hgujk; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UboIVL6Lr8Q9Zq58FQ%2F7kcgf6WP5mkSV2ydbefppfh16UM5EwzbMkq5RCYAl7ncHjvTryK0MjqAhztyReMfzG2gIwCZb3pYB8%2BHqEapRwRgwcKFv\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9db0a64e199a1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84289aa138b426d1765b4f378d32a6e9","sha1":"dbdd8e1e8d999f08b10f76a9b8a249ef340e0e35","sha256":"2b0cb348277ff50c19dd94f300f791e23b14dcc36c5d93b24c10b6485a4a4676","sha512":"0bb41c949762e245dff83494f6176d5275d1bcb64f7581e78cd5c46f288278a7219e44ca8066f5199baf6f936c2f8da24cb7ab8891ed3ac69569211c3c152368","ssdeep":"","tlshash":"208000202a3c0c33c202280a282e0280002828882c030b2c8e0e0a28030b0a02a0203b","first_seen":"2026-03-12T06:13:18.129621Z","last_seen":"2026-03-12T06:13:18.129621Z","times_seen":1,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":47,"dns":13,"connect":1,"send":0,"wait":399,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b300b605cb.webp","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b300b605cb.webp HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59590\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:47:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b300b-e8c6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xNN1Vn0BKfbAiIWfpDy9OJRVJU8CD4GpjhA07Jpg35pauAHHyHDHlAaOvMfP8MJi%2Bhm9YlWWgISNeBYy0z%2FckEwZB6ABlfp5UVb6Cg%3D%3D\"}]}\r\ncf-ray: 9db0a642189676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bc7d371d12941a88c376710e6392f94b","sha1":"3a0652bb36d51f7f1fd7af3df5f45b605e07d7fc","sha256":"ef8424fe10c18f71d6caaa2dc30c643a68d8aaa5d9e2958417284a4be7465ad4","sha512":"e858fe61d9fd37e0a9557b9cad966f247738a8ede0327705c514bc33b2c95a81c69f7eb99ae81142ad85b372d50d1c3cf223254546fd913b4de407d4765a156c","ssdeep":"1536:UNMYJzuroVkksyJxSmgn02ASRHLyF1zJa1Q8ucm:UiYJRavyXSL0ARHWF1zJaqpcm","tlshash":"cb43023850580131f07cde1499a2d563cfbd08e86b3b1c96ad64fb534b7bb0d7a9168a","first_seen":"2026-03-12T06:13:18.131031Z","last_seen":"2026-03-12T06:13:18.131031Z","times_seen":1,"resource_available":false,"data":null}},"time_used":950,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":433,"receive":416,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b31f5ceca8.webp","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b31f5ceca8.webp HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40394\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:55:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b31f5-9dca\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ZImMVaxgCUsK5Jsvw4B%2F9s081XkWtai%2FhqO3hfA7Y6RcK0bewT4%2BkUpuo7%2BeKP9FI18aCjNc3A8GcRwHw2uqI4b7a5%2B3F4rZ8yH%2BA%3D%3D\"}]}\r\ncf-ray: 9db0a64218a476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40394,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8dc7bc89d1f4d73804734937cf11f631","sha1":"688d6bb0fe122d04bc41b558a0fec7ac79f9674e","sha256":"256aed44ce5587f176f107dc8d1b908495217384eaefdadc5fdca60436f8427d","sha512":"aac277b87df10c3a0d4236c38b31f8ba3a40563c214ea04ef668dba66f8d70180b15b3598156c388cd93621e1dcba84949d3e3171b4fa277b2b097875b4e8b4d","ssdeep":"768:yTPDQ1AbTtZxHuekzZREKVVvEhPR8kRdFOdgQTj0l99aZEucwNw/kqoyocwo+H:KPk1eNuekEKbEhPRFddQ0D9mEu5Nokqg","tlshash":"0c03f106713962b08074d98edc0cea35d9acfa1a683d57e73c931a0574bb64cdbca728","first_seen":"2026-03-12T06:13:18.132464Z","last_seen":"2026-03-12T06:13:18.132464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":389,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-12T06:12:48.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"888vndbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:36:43 GMT","end":"Fri, 15 May 2026 11:35:12 GMT"},"fingerprint":{"sha1":"4E:1B:3D:38:0F:D8:6F:8E:9D:04:05:3D:65:E9:61:06:F6:5C:22:CC","sha256":"45:0A:99:22:99:6C:36:50:49:D2:3F:A2:9E:C8:5B:55:17:F9:7A:CD:1B:B0:16:69:3F:96:9D:B4:16:D7:C4:7E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 888vndbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2026 23:41:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z0CsCR5jX83GucKWIl82FL0ZqoNARA7DpxSn5Tea1c9BQwshxKb2gnLFdqK53PewPAO0F58HnqxYbj2vqMNtmksGX2BzvmDtv8h99kY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9db0a63d1d59b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":96114,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (339)","md5":"f13cd7d9a59eb1fb19a1e947da2d665d","sha1":"a6af61edbd729adf1b5af5ae2d8ee30b6dfeb8ec","sha256":"a03500b89fcbd9b866e01d1a4f6a2c6e3ee929a95211f22f78abeed15eff1418","sha512":"163e0c4caad361ffb13b3f11f94e0e967715ca7b37b76a1a11c02ec2a80bdee7ba7ca106594db41625038756772ee801344d2feb19a1dcb58eca6711c28430ea","ssdeep":"768:XbtGZCLzY1wtVaLmjJrBG/3MUL4IDbrLFqS:R6CZaLsJrgcUT","tlshash":"3f93d86110f2157b41a781b1b5e27b2eeed8e713c69bca48f2ec81596fc3c528d83359","first_seen":"2026-03-12T06:13:18.133758Z","last_seen":"2026-03-12T06:13:18.133758Z","times_seen":1,"resource_available":true,"data":null}},"time_used":491,"timings":{"blocked":27,"dns":6,"connect":1,"send":0,"wait":437,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b329348e04.webp","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b329348e04.webp HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 63784\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:58:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b3293-f928\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sKoqRV8O%2FEqwWLaJr4G8kBJDs%2BZnVxi5dyUyeL0WkQr0raOkn5hNGSttMW2KbrD7SRBYzpT%2B3ETh4pP8uyJW7QDRGk05bCU4aHYmbw%3D%3D\"}]}\r\ncf-ray: 9db0a642085c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63784,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"23a74269ef559512d3a26c602602f079","sha1":"0882aeac24590deda4d5a512aaf8a15f869d5158","sha256":"0921806e2fe99de922983df01cfdaae75d5deacbbf1bd7fcf153ffbb4e35d77c","sha512":"a1f1f4eb695531e0aadae52232e7f7f0a45f3568a10387320abc828be825dfbfe700498da6d6f708793f75f57b8cf89f2f8de56fba1c934a5f0e94ed25528255","ssdeep":"1536:PzBGYPsH8pkSOXMuHCsl3OV8XDlgNPho3vEDndHu9D:Pz44sW8cuhl3OV86Nmv8ndux","tlshash":"4c5302047e32941d87e07b57533dae0f2bd9ac162eac3fe48241969d436a16dcd63833","first_seen":"2026-03-12T06:13:18.135075Z","last_seen":"2026-03-12T06:13:18.135075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":897,"timings":{"blocked":121,"dns":0,"connect":0,"send":0,"wait":396,"receive":380,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b30bbee371.webp","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b30bbee371.webp HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34292\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:50:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b30bb-85f4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bYhPiY9xUfe%2FN4mo1Tp3vTXjHVQkn63H1flOIMXyjRWaCiVg8lRJuM3mCFbwO3PaaBPoYdWitYWt0srlsIJbWvy41lYpFH2QSamTQQ%3D%3D\"}]}\r\ncf-ray: 9db0a642084976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34292,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"abb262a4cbedca00c55cd2747e798555","sha1":"2a88e75da93c4c2645e519d79b3f7dff5e0ef70e","sha256":"35d3d90687995453c574838847f7a18072a57238ccc882285b15cc2e7d0caec1","sha512":"5470d1e740c9840f94ad56306d7d7b5d35512d20831140d318c0b6ad3265cdac9383b9ac7af6cb5c713261b537680e2fa15f3164b866c05b5f5c4ec3a2804e1b","ssdeep":"768:XHiqIeYWikkM0j8yLcVvmrNzByJYNXhwJgeIi6Qs:XHrhYWioS830zbhwJ96D","tlshash":"b1f2f1d989b2a87ce0d50e1c1ae599db5800a09677ed09df18f56023ea404febe15c6b","first_seen":"2026-03-12T06:13:18.136401Z","last_seen":"2026-03-12T06:13:18.136401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":772,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":444,"receive":218,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b3060689e2.webp","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b3060689e2.webp HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32906\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:49:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b3060-808a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlFJXIxeo%2FKYv8AXf3JyDlWuD6XI9KapwZVFDDsXFDmYtdgmxIxaa6bbZ1Yb4kDQp32x91koER0ZpPABZF6Np8P3VsugJ6QO3SGF4Q%3D%3D\"}]}\r\ncf-ray: 9db0a64218af76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32906,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5c64b1699d7a6e4bbf0dff92790de612","sha1":"bdccbe67c241335d105d3e5c84457e49abee0edd","sha256":"e7b3de5df59e6bf23533aff022cd5cf250979fbd4708b0f345f51dd65454c006","sha512":"e4ad6c32424e82926930b5f970b74f5aa9c15789d34c5ca25da2a5aaa08fd674e1fa4ff384b0d363c8f74b0266bea8c79031cffeabf6a2b8a8b535818b96bf6e","ssdeep":"768:jDIK92E3Dd4XXARwc4mSIjEDqCPh7F0k/Cry4TjZH:jDSETqFm2Dfp50k18jJ","tlshash":"bde2f14eafddf0d2dc66d209c046fa7685c2dbd7cbca7facb81438e94646821e004e91","first_seen":"2026-03-12T06:13:18.137571Z","last_seen":"2026-03-12T06:13:18.137571Z","times_seen":1,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":102,"dns":0,"connect":0,"send":0,"wait":439,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"888vndbet.com/static/js/888vndbet-comSwitchLanguage.js","fqdn":"888vndbet.com","domain":"888vndbet.com","tld":"com"},"ip":{"addr":"172.67.169.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"888vndbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 10:36:43 GMT","end":"Fri, 15 May 2026 11:35:12 GMT"},"fingerprint":{"sha1":"4E:1B:3D:38:0F:D8:6F:8E:9D:04:05:3D:65:E9:61:06:F6:5C:22:CC","sha256":"45:0A:99:22:99:6C:36:50:49:D2:3F:A2:9E:C8:5B:55:17:F9:7A:CD:1B:B0:16:69:3F:96:9D:B4:16:D7:C4:7E"}}},"request":{"raw":"GET /static/js/888vndbet-comSwitchLanguage.js HTTP/1.1\r\nHost: 888vndbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Dec 2025 13:39:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6942b278-437e\"\r\nexpires: Thu, 12 Mar 2026 18:12:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YeQ8LZFoxFNrSuZR78Ilr2pGzeCUu79AkUkcVgEFMwBs%2Bq4eb7HE2kAhVFlr7eBwXFkH8SDsrOt%2FQqiBPQEPnQRcm6u%2FCRdSUaxQtMk%3D\"}]}\r\ncf-ray: 9db0a6423e7a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17278,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (17242), with no line terminators","md5":"f251030052d691ddddff8afbf8b17f71","sha1":"71ad49c53f17324066dfd1e8ddc2f8cd6b9718b7","sha256":"355cc7152022cb7e133f94381fced6c8477f168e6a771065278bb58aa2289fc9","sha512":"a30f7a8d4959f38355c4f8982a64ac54a41244041341e3cac00207680daf504074c2dc6b6a3fe511550a8b58499f16ca120a15cbce988c6ed44c644aa9f9b31c","ssdeep":"384:u7KKMtYGoF7G1a00HbJKNOyhZej8MLuAfPuDuz:u7rMtYGoF7G1a00HszZej8Q","tlshash":"c47274b1c520e37cbb0ac8a2afbd9d05d2390b51b1896f94518dec58bbce54b992d1c8","first_seen":"2025-12-19T01:23:53.73002Z","last_seen":"2026-03-31T12:51:03.931484Z","times_seen":6,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"888vndbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pv.analyti.top/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"pv.analyti.top","domain":"analyti.top","tld":"top"},"ip":{"addr":"172.67.136.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"analyti.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 06:52:58 GMT","end":"Sun, 12 Apr 2026 07:50:45 GMT"},"fingerprint":{"sha1":"F3:9A:2C:66:AB:D4:5A:73:73:D3:A0:12:B0:7C:29:9F:8D:CD:EB:74","sha256":"A2:3D:0B:65:0C:F4:84:A8:AD:35:A6:9B:D5:94:FB:A1:AF:1D:06:85:C3:D3:70:CB:8D:FE:F8:F4:F8:AB:25:6F"}}},"request":{"raw":"GET /js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js HTTP/1.1\r\nHost: pv.analyti.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nage: 2194\r\nlast-modified: Thu, 12 Mar 2026 05:36:14 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=guTIFOd7wTsKGVtuPneK38fDDLtjJ1LNFFwcL7uYeFzrNsxMy4uhOy5SxiSknyUXVwQiRKBV5g4oAbYDDQRL3hRnveyTkx93v%2B7lmyto\"}]}\r\ncf-ray: 9db0a642cea28be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5115,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5115), with no line terminators","md5":"516ca67380287bda42833b3c1acf9c74","sha1":"b632f77cd9bd89b2d0f985e7ed2c2ff8bb5174c9","sha256":"0b1682605117a65469d252ba0f32e8b9aded53dbd788197c904e139de463f992","sha512":"c11827343c93be623162470ede22c1439b2f5233d4be39b4d01abd3a29d947c87099fcf777f9b5a3f512354a77c1ebd6e18159c49d78fb8f57e860aafd3846e3","ssdeep":"96:YwMXvSyLfekD8eY8LFnICm4F3sA/S6Gg1lUzCs/:tMNDDPICn3sA2gzUzV","tlshash":"21b1a5de7a01b5b994b9953b962f3206723b2577680c04007435ddc52e2cfeb63b2d9e","first_seen":"2025-05-11T10:37:33.481295Z","last_seen":"2026-04-04T02:11:24.883564Z","times_seen":186,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":70,"dns":59,"connect":2,"send":0,"wait":16,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b2f550ce44.webp","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b2f550ce44.webp HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39726\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:44:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b2f55-9b2e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fMDUf%2Fi14r3VMcgFgcqkXIek8kcDx1xzW2AumS3LMhBZohwFTTW0dPl0oGA0bdi1v%2FYOW9MHXIH7GqDv5RCF%2Bqfzl1gumuSsH2V%2F7w%3D%3D\"}]}\r\ncf-ray: 9db0a642084d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39726,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"29e3c57001b2d86c323f988e3697216b","sha1":"1e9f3b019856f324a1d05242b2cb6f81b4487c1b","sha256":"92a8d958a2480205282547ef4d66199a17dbd10a260c68c4dae6fadcdf634e49","sha512":"8e9b0dc0f23e196a5a95e4312ae55006dbd058e5efba5cf706a0c68e057092556f61e59f1e40f1d1efaeca39b73f683aa97f39cc6388b6fe8590aebcea5168dc","ssdeep":"768:N92Acb3eOUpFNm8D2BEqiNYtE/7tCHY9o6alZg0VSQc4MihI8RW:N+3pUXN1DYEj/hCHTL1criyMW","tlshash":"1803f102189d59f0fd96ac9928160c13c853290338e4165a9beb3b98ffe0497b5fe747","first_seen":"2026-03-12T06:13:18.139767Z","last_seen":"2026-03-12T06:13:18.139767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":109,"dns":0,"connect":0,"send":0,"wait":402,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"countany.top/myimgweb/uploads/images/20250425/680b327829795.jpg","fqdn":"countany.top","domain":"countany.top","tld":"top"},"ip":{"addr":"104.21.26.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countany.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 00:52:53 GMT","end":"Tue, 02 Jun 2026 01:50:42 GMT"},"fingerprint":{"sha1":"47:FF:CD:D7:8F:E6:49:C8:6D:4F:31:94:97:36:E4:7B:01:2F:5C:86","sha256":"CF:04:01:80:60:B3:B1:C3:A4:A7:0B:20:D1:C5:12:09:1D:9A:6A:D8:D2:28:FD:45:54:47:CC:2C:AA:1B:C5:7F"}}},"request":{"raw":"GET /myimgweb/uploads/images/20250425/680b327829795.jpg HTTP/1.1\r\nHost: countany.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 06:12:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 61416\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Apr 2025 06:58:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"680b3278-efe8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6QbyDMNOMYKjzHQQYV%2Bd5gDs0YxD2xg9XeiDzPcx%2FjuWCPaxTEhKBPs6FZSaIEtiWN4DDiM0RiV4DxP9yGFZVMSBBT0WhB3qUO8skQ%3D%3D\"}]}\r\ncf-ray: 9db0a642085176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61416,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x600, components 3","md5":"d5259c3b9806ea4493824b4cb1354f76","sha1":"e53ce090c9c4195880da8c370fa03a8e17a7bdf0","sha256":"8f703b236365616908bddbde678fe20657334394c616e3de440fc1f698447ee7","sha512":"8c67fb281e8bb24a91f1ae2183522e8510d4d7742541bb2fcee18a845c94e08270ba2eacf8b04bc9889b3a0d1383eb6f169f1488660911c8eeff14947b8eb2bb","ssdeep":"1536:unmYBBvPV5bjbEXCt2a+0PydEP/VlHA/G/UCGrIX1tWSlwcA:eB1dNHt2X06OLg/GcCGrIXnp/A","tlshash":"24530235d29a3317be33dd39813f0a25d1d92f5102c08bf6b95b808b675eb87506f296","first_seen":"2026-03-12T06:13:18.14112Z","last_seen":"2026-03-12T06:13:18.14112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":109,"dns":0,"connect":0,"send":0,"wait":399,"receive":383,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://888vndbet.com/","date":"2026-03-12T06:12:49.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://888vndbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 12 Mar 2026 06:12:49 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::w6fdb-1773295798581-ed7cfdbd0fe4\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 170\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QAkqGov0I4pLbDDYqIjsB6ZdyqAY1nRwwSo%2F01OTDnke5%2Bcol1S7nxNyj5DDFNiLaAK5Alip5bNaKcVuw9sUR5oRlC1UrTtH9MOVcYR6iwNSjg%3D%3D\"}]}\r\ncf-ray: 9db0a64148e749c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T18:47:00.89111Z","times_seen":13342615,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":2,"dns":6,"connect":1,"send":0,"wait":10,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}