{"report_id":"f4b80b84-21a7-40f3-8ae2-25e94e70a5c9","version":6,"status":"done","tags":[],"date":"2026-03-04T14:16:00Z","url":{"schema":"https","addr":"bet73041.com","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":0,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"bet73041.com/#","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"title":"365英国上市官网","dom":{"size":213669,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"71f4d6173747da66ed3138556b9263bb","sha1":"dee264ed110528fef5011d29f8458fee78899fd9","sha256":"c964bbc2e20365fac0536f04992919e6ee316c7940637ac404967b087bcdde0c","sha512":"9521a2c8769a17e29471838876194412649acc192f4297f60ab8bc4e0285d394d15289b7c258212a42582f41a6a3e4a260b2fd6390bfc262e55d175501566af2","ssdeep":"3072:Ca7fgp1KDT+nFQCRIXsQoFFAFhtRhQSLRvMBsy4sH+V7FJiGPlX33X3K1+QDWrOw:Z8bq6nFQCKzUeUaEB940+LJi0X3Q5A","tlshash":"3324af5058fa15a300b390c52ab66b1f6ea5e143da06da083bfc4b945fcbd4fac7719c","dom_hash":"domhasha7a9d0de78d14d5dbb5c9ea3f8251bc3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bet73041.com","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":0,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T14:16:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-04","alert":"Phishing Block","trigger":"bet73041.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"3f38sfb.qdhyxt.com","ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-15","domain_rank":0,"first_seen":"2026-02-01T14:48:15.77089Z","last_seen":"2026-03-04T08:07:02.429883Z","alert_count":0,"request_count":59,"received_data":1591432,"sent_data":27620,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bet73041.com","ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-04-12","domain_rank":0,"first_seen":"2025-09-10T13:34:53.765691Z","last_seen":"2026-03-04T08:07:03.112765Z","alert_count":45,"request_count":9,"received_data":428945,"sent_data":8864,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}]},{"fqdn":"hm.baidu.com","ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2026-03-02T02:50:27.298567Z","alert_count":0,"request_count":2,"received_data":30885,"sent_data":1127,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"758927895f5be25c947abb2fa25f3b7b","sha1":"eb36a53755d424935df6e292bcec9600ee9dc341","sha256":"c25265dccbbaf2c14016819003b6afc8193bcc4c5a81d0c8c5cfb2ff530f3b78","sha512":"5bbb8e7f235bcdf5d546fb529f00faeafb0081339dacdb187b4058d51f6210d44e099c53b1abe4de691951f35788081646aed8c14e5b380126f419f661b66625","ssdeep":"","tlshash":"36417bc5fab153a0593b14b66cbf510a6d127407fe0bf52af14c56d05f2841c31b9989","size":2350,"data":"","first_seen":"2024-12-03T13:13:16.901389Z","last_seen":"2026-03-05T07:26:27.002274Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0409e0f5db03f2403e24f2f17c5f1062","sha1":"a143255c04384ac5f399e21b9a869b4ad7319c9c","sha256":"265db1961a69871e8ea32b7931bab52a5fe2ca7c38d1a4160561788e9d160f5a","sha512":"b92fcd4a156fff948036d720b724565ea82774b30d13deb6b75bd978cafccfaa44095b2f6720728f19a6e9550b79e91c0458032d32967a9a16fd4667b5f7d097","ssdeep":"","tlshash":"d8417bc5fab153a0593b14b66cbf510a6d127407fe0bf52af14c56d05f2841c31b9989","size":2392,"data":"","first_seen":"2025-06-13T13:04:10.960958Z","last_seen":"2026-03-05T07:26:27.017649Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/jquery-ui.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","size":253669,"data":"","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-07-25T16:27:19.297845Z","times_seen":22830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/#","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-07-25T09:47:30.068751Z","times_seen":121747,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"357456ce5fb00180e34757da91beb7af","sha1":"6b4d88430e6bcfff366da503fd20396036cab111","sha256":"847548a7b13689f1bd5c08d98101672540c2022f167718e258faf83ea3724d7a","sha512":"bd573b236a11f68a167e81821467f95e28a625081cf527bf8226bd11a0599af8a819bc034d456ff0dea8b1501dd1daf4680a8f3828c3d322c7586a7ad4c411bc","ssdeep":"","tlshash":"de219a1cde1a484229e1cbb80481164226985583ddb0fa2fbb9c96806f6e02f97f26dd","size":1422,"data":"","first_seen":"2026-03-04T14:16:04.592141Z","last_seen":"2026-05-15T18:56:49.789914Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c92d1023b99deb7b42686a8d9af723a9","sha1":"d5a2b10e6da53018859a6cb15ac1242a86894c3a","sha256":"83cbd423f1b582052fbb62664c8cc47b1b8b84ef4964e86307ce48c1ee369754","sha512":"0139fba6f4d8dd7142a6467df2917e3f31cf3ae67565fd8324d2eed47b86723cbad207c565096d0d72b3236bbaa5be31059e9d0ae70cc11208b1c6c72aae9f15","ssdeep":"","tlshash":"f221123ae042104406a7e0bd888a285120800c03cf482a08b3cc92958fad3cf32f3ace","size":1236,"data":"","first_seen":"2026-03-04T14:16:04.594371Z","last_seen":"2026-05-15T18:56:49.792026Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/#","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"19fd3dbdf644f908db4179c0db6c907c","sha1":"1c3d056a43301c508906059c3b25c39de78fe8d3","sha256":"4eb05ed9111dd19ef86b1cdadd72381f735d2452f82362078a0e08c1ce79ca28","sha512":"314223989c85f97746e9ae28be4de120426d047f87a55185c76421a7870eadfb7277697131fca16c87631141ff3adec502570b28f3ecf8991448bfd3c5ba42fb","ssdeep":"","tlshash":"75e07dcc23d186c637db2cd46562744c72e90e1534840c39c80024039cead6b1ed36df","size":324,"data":"","first_seen":"2026-03-04T14:16:04.596204Z","last_seen":"2026-03-04T14:16:04.596204Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9019874f2f793dde21327d6538753781","sha1":"e5b1d2b3c7b2fda35ad01d40ff4bd5ac059154e4","sha256":"3b229dd16b0a485404a37e35fd14724f26d3bd1856bf88e4ecb49eedb68c644f","sha512":"fe341bd127ae09fc7df20ff96cba26e2e691913e7988dfc29bdf19151497251bc88e8475145a075c705124ed85952eb044221d30faa4b1da88d18c946795ed57","ssdeep":"","tlshash":"8611924bf7e86601707732be8abf5429173b2407ec050c40f86c0aa83ba14545cafa88","size":901,"data":"","first_seen":"2025-10-16T18:47:47.806589Z","last_seen":"2026-03-19T07:12:23.043554Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/js/custom/checkinput.js?ver=1598008226","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1701a1c0e116f99b046f95c9f2f4ef5a","sha1":"c0ea303e6c96847ed6bb4c72afd3a84332ab5b3a","sha256":"5a053d48644953a4dbc5f0cb73d4723dd958c9b5574be9cdaac4bccf21d9f38b","sha512":"131b0b96f085bbabf04eac826013f7a62402bfe7e8aa4f6830ac9bdd4d629e4062a687b03a14d6c02d8ea741aea17fe4646da4c054c1954454025fa22f0fd307","ssdeep":"96:ZRORCQC5WCPCD9CQCwCGCkCmCQC+MiCwCdCuuCkCbmCd9P/ddPojcHoujp1SPZaQ:ZRRRvJdlANu91diXdT59j6IQNHYerS","tlshash":"9d62204de0983ea6857333750e7f5200f57906278525eb08be9c59b42fbe80a4b63f5a","size":15360,"data":"","first_seen":"2023-04-15T09:13:23Z","last_seen":"2026-07-25T02:29:56.410916Z","times_seen":5057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/sweetalert.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f9966a615f3f46d846807adbe42644f","sha1":"441544c084828da55ca0bafdc4c3df7dc7020820","sha256":"be4d1215ef6f2b2915b7f65cd28b9a9f7dcef17e1f0d883edd19400ca0ea795c","sha512":"e85f14552c1b5837780990e210223c5d6f532dd55f16589f682d1f2f95acc540b715aaac23ce12f871661006f80ec9043a9674dfdec1c3efc0819125d492dff6","ssdeep":"384:Rigwo5UpVZG9lOUlgkhzj7FRNE82XyySyTYayWri/SRVRXFKP9nWZcT2Rc8ex51f:RiB8lOuR5wSWrrRVR1KP9WK6Rc8ex/","tlshash":"ad72c899325438b327e361f1009f504ba4b196bde8095861376cc9e62ff8cc95ae2f77","size":16994,"data":"","first_seen":"2023-03-07T01:11:43Z","last_seen":"2026-07-25T02:29:56.422556Z","times_seen":7195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"969e82df7a9fa326fe0ddfec9e2b0adb","sha1":"be001ce91f8b9a6ce7b7602b1f48bda2da62248d","sha256":"b28b6c63250d4f3c1d82e206071aa5a9b8cf2839879bad1792878df0c9de9dfe","sha512":"dac8b35b53f697fc68223b111cb05867929dd8050a5e72a8a8997586824ac2535cbc0c8c421a23af7a895ee86d737b00f013a39b565934584734f90f5c399b1c","ssdeep":"","tlshash":"4521c2a8ea707120508641361ad3895e391072b7ce213218378cab2b5f5a86f73bb58d","size":1351,"data":"","first_seen":"2026-03-04T14:16:04.59976Z","last_seen":"2026-05-15T18:56:49.785736Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a48ea152d9e7230304cd8edfffa4d6b4","sha1":"717f0c6d67fc6d84f48b0063bf646a7c736a350e","sha256":"6e47423699be3e7f92655bcef00eab3e4ebe117b319718f3645217e4ff956c8d","sha512":"8091dc470d6e4d17bd5270013c60e31349fb47eb3c7fe8b6696141e8d5046d0fa4f2d121fd6ae6c648d142cbdb312ee99e46f481684f37a3ce8f3575ebb45531","ssdeep":"","tlshash":"49419246d3e56137a52aad384caee1169a318003dc3f3c74b9c09a54df5e62c90feae1","size":2007,"data":"","first_seen":"2025-10-08T08:43:27.519417Z","last_seen":"2026-03-05T07:26:27.016895Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?13d000e86c487ab21ddde56b764037d6","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a3120a2c56cf7e0e0ae06f0aab4a7c5","sha1":"c35c4878608370503a913aa740feb9545bc078b8","sha256":"56cace55e7a6d9d9ef32c45d820f22ae94a0719a44c10f82ab6b1fdf46c5d047","sha512":"58498956ac2560dfe8e37127719c84472dbb890e9724c46301a9998a3c76b5a195883e0ca527afd009c23e07c3bfeb37ae1545c6b58faabccb16dab7b0b887d9","ssdeep":"384:12JSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:124VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"f8d2c9a9b282713293a324a5153f324af17b5a54bd4968a4f11894c07d38fbb027bfdd","size":29903,"data":"","first_seen":"2026-03-04T14:16:04.47469Z","last_seen":"2026-03-04T14:16:04.47469Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"06f2b49b56e6efcaf64bba6a92eba4e1","sha1":"917a67df953dd2d2065e669d77fec4648e5d821b","sha256":"15793eec4f9e05a28e800104abede54649ffff8dbd2c16bbe7f6e81e155e82b8","sha512":"ec76c8a68c4f765161525d3da1a91956f6392ad13baa2c45d6238cb807adc274044a8385f26b0a66b56df318bc1af452fac0098dad16f5a976a0b0c87b5872cf","ssdeep":"","tlshash":"4a311297d16c5c5d45cb9670342518a5330ebcb3fa028ae2e23fc76832b3d49c553d6a","size":1528,"data":"","first_seen":"2025-07-31T04:29:11.983216Z","last_seen":"2026-05-02T03:51:45.664772Z","times_seen":1580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/js/custom/main.js?ver=1598008226","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a579f2e4d3b31b3ea017e7b03a475dd","sha1":"8d9a6430face051ae1365d421f15c60cff36613c","sha256":"ca0d1288490dab47eb98606d7e519b4be96e1d5f354b8cf4a6ef39dd1846c41c","sha512":"e5c65863509fb786d1a2ac8a1c0e0ec1446158037079a067eb6976040a0d912e326c2254e7968a7e22ae794d3adad6b9bfccbd2a4eb35dad622676d3a989d742","ssdeep":"","tlshash":"1941cc1df9f665c208b730164f3f451c2163a81f6a09ce40395c65c09fa267ed2dbeba","size":1933,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.408998Z","times_seen":5056,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c924f329d0687059213910bf3b1fea44","sha1":"0fb27eee2f332619a9fc5a806d78d90c8c3c0f19","sha256":"f293fd4437cdcc800af3c778efbf494562eb78f13ec3a1f2ded82045b941a2ff","sha512":"11fe04c513223ff78531e1f39eafaf09e374af8537a97c9ea6ac85a3be397413969cbfb5d4108fb4af1f6a6ec796dac0419cd07e4429dba9a28e6bc4184e2a13","ssdeep":"","tlshash":"6821c2a8ea717120508641721ad3495eb914b2a7ce2130183b8cab272f5d86f77bb18e","size":1327,"data":"","first_seen":"2026-03-04T14:16:04.603843Z","last_seen":"2026-05-15T18:56:49.807518Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/assets/js/caller.js?ver=1675418258","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e7441dc033395b76a96b25b6efef0f0","sha1":"c833e33f4a95efa559a847dfff036cb904260b48","sha256":"80caabbe50f5f83254e2545d01bacf299c7f417a103e912bd41d6c330a6e4f86","sha512":"e96041ac2b7106fe9aceddc1faa3e996ffaa97945d56cff7b3ca0697492cf6ff53f6fc3826319a85eb360e684a166c0c8c075118a37655312dfbf231ff9aa167","ssdeep":"96:veR5suijTWxKhgCBTSCkAjnhefPMm03OMu9eqeeV0vMu9eqeeVqgYi:veR5su+TWsU1eO70v76i","tlshash":"dc914212de042051f76332b85a55661f6131684f7f8a888dbcbc747f9b70acb857d189","size":4386,"data":"","first_seen":"2023-03-13T18:11:33Z","last_seen":"2026-07-25T02:29:56.41883Z","times_seen":5054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/js/unite/jsencrypt.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64507221feddff84c80b99c98827d76c","sha1":"5c7000638c6bae1a1c448367822a8682d59d371f","sha256":"5a0be406a1bdf94a25a9d142d4124e3dccbdeb5593cd78fb0bd234df89dd7389","sha512":"cc3beba9e9c0d1e149642c41b2bcb351972f8a1bcd9445dbb5e32feb6c91c5d851e2cecad5a6b3f8b8ec4727e4e8cf9824bc80244baeaae20023c23c1a02c2f0","ssdeep":"1536:cJxLSEwwmr2yZPp8yQPj6OR1fdfqovoRonm7f6T:cPErPp8yQPOOR1fdfqg2l7f6T","tlshash":"cb43e9853ae6b075039a50f0051f084ab13ab92e192f44ecf699d8e17cb584d637ffb9","size":56142,"data":"","first_seen":"2023-03-07T13:16:24Z","last_seen":"2026-07-25T12:58:28.739379Z","times_seen":20181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/js/custom/moment-timezone.js?ver=1580697220","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc45c47c99fe4d26b2b24e46cec399ad","sha1":"221067a4147ece74b03934528ad61bcd4026e477","sha256":"4a65c2af68e89944c3da128c9b329596d930ce09dc9b8ba726b640d812e1fd88","sha512":"1658e474170022d40e698a422f024b4872bff33c78af1dbe98df3a6a99a0f1cd1eb36725ac9fca7bc1264ea491d0a19a2ee0a3a952adba4aba3242c06f830f93","ssdeep":"3072:olpkvlaDD/DCD/DCD2iqWCPrMBq1rGPuAZDDD1DDWoST+piMhrlon5Blu4hK:CkbW0sNpiMx","tlshash":"f714b0292617bb44e459c08bfa3779c0caade18a940614d25f7d57b31fa37e2de68c03","size":196335,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.393971Z","times_seen":5062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/js/unite/encforms.js?ver=1761119296","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2d77387c0dedc78ae85a7ab52aad886","sha1":"0d8ee19645e8246409f76adee4412ecef3466b76","sha256":"2af6b51b39ceab86129d473a1fb9a4a827539efc7452de2103a84ebd09d75790","sha512":"d922ced4a418ef9049cebadaf49f897432449ad051ece1361014ca9c64514f9eb53f6d77d6e83551ed2939d0eab9d518f0c048e12aef3e167ef3d1d517dbe3ca","ssdeep":"192:gxlzcp1ISvp1S/yakFAn1hQu66H1Ka1t4l/O3a6Nr:zb6cu6IQM","tlshash":"9f32209871bb1870993338344bbf8512793ac11f4c5cd954bdac2aa07f58a5ec6e1bb4","size":11858,"data":"","first_seen":"2025-10-22T08:39:12.013749Z","last_seen":"2026-07-25T02:29:56.445614Z","times_seen":1506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/jquery.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9c7afd05729f10f55b689f36bb20172","sha1":"43dc554608df885a59ddeece1598c6ace434d747","sha256":"f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c","sha512":"3dcae1ff6e98c64e3586be3eb14dd486c51f7d4e9fa1b8f9a628be4fbb6a9ab562f31f9b50e16d2e0c72b942bdbe84eee8e0ef87fa730db1428b199a59d88232","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ","tlshash":"ca83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84345,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-07-25T07:20:02.685262Z","times_seen":26154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/jquery-ui.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","size":253669,"data":"","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-07-25T16:27:19.297845Z","times_seen":22830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/swiper.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8be4ec964b15c656c05a17f822762b3","sha1":"1afabbf1eeecc4d7ddfbb4c824696ce1aadc8d0f","sha256":"e32b2b578b1345c05be32292da9016f7ff564bb3f4aeda3c1b6b76869648fcbd","sha512":"0abfe93e1dab3db289b0efe0f92e42f6ff14cc4e550b5bca8d4a84fe736245fb70b39e5b86bd9aea620e6fd73a76ce8aaed9d3a561c6208dc9108778dba141b9","ssdeep":"3072:2hUcC5HqffYIdcMZOGHgZsUOUIBdID8CX:y45HqXYIdcMZOGHAsUOUIBdID8I","tlshash":"7ab3094eb35071a551e36257525e8241a3b72409780ad0ac35b6d8ebacbde4c13bfefc","size":114405,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.434546Z","times_seen":5157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"54687bf81eb33d13d59aaa318de16da7","sha1":"d19c32d654f3d65ed79ec037d04bf31db13b176f","sha256":"8d18f2b123e2d8534645cb6c671ecaa64113088007d483eab63b85054467b342","sha512":"36a66bcdfdd59496198da703aa5a6ccdb16f3e7368313ec91d46332cc9da7a0906f0a32985c5e4c249070b236fa17d072f11b9b39d334215b9dbf7d6c94a691a","ssdeep":"","tlshash":"c2315ecec1ba2876068fb4361ddf2814995361f7ca8829253f4c81212fd521d8dc776a","size":1841,"data":"","first_seen":"2026-03-04T14:16:04.605688Z","last_seen":"2026-03-05T07:26:27.014049Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/#","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-07-25T09:47:30.068751Z","times_seen":121747,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc73d35f5cc1806a1d4a4644579104c0","sha1":"2ba6e2a59a23ee43c16b4bd9e5cdc8e05646fb0b","sha256":"4053ddd607d4daccffea0d1a7b56e10018cc56096937fe55dc2e7a8142c210aa","sha512":"52af5976ddffb9116c526808dcd9dd73609939a5b5d0763ff406d86a2d8f02cc5563465532949aef08c1f3f1dc96f6eb477e3e68ce68566010eb692f665671d7","ssdeep":"","tlshash":"53b012ec7b539243248d13f2ec3ac9358c39317d1371379321bc204d0c154085410100","size":106,"data":"","first_seen":"2023-03-07T15:03:59Z","last_seen":"2026-05-30T10:19:54.535688Z","times_seen":3290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"528e44ec900b66e2bfbdbd06d5671c93","sha1":"2ed84aaffe73e96096aa6c2867ab38aad3edad15","sha256":"b5bca3ad030e95eb3ef2e58e9b7f418ccf04fe519ef62fb14719c785533ebcce","sha512":"8cb5628f74dd2c79fafeb77d577bb0910201fcb8832503aeee035325578eede56edb90ed19c3c3e35b8cececa05fac035cdbfa92e7cb0375ea328c01e7639351","ssdeep":"","tlshash":"8831ab99f39cba26d07e00b44c3f65c5d52d2871e60a1ea5fcfd529611ca357315b180","size":1483,"data":"","first_seen":"2026-03-04T14:16:04.608098Z","last_seen":"2026-03-07T22:25:05.156852Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/jquery-migrate.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","size":7199,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-07-25T21:11:39.672177Z","times_seen":24730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/plus/plugin/js/bootstrap.min.js?ver=1598106537","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37045,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-25T21:26:48.843997Z","times_seen":96474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/js/unite/share_unite.js?ver=1749181409","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00c6288b67f7750a75b6e9abbf74c8a4","sha1":"5f464f4ce28448acc1c2fe825d4218795b023db4","sha256":"20327edf72e6632c450e8f8e443db2f728361f74b68697932491108c7f483b9e","sha512":"39dac004bb9b904ec4c4bb4d4963c3b8c4c9d98f9a80d90e53134e28c6055831652f0911e59b58f54c4b1e7156d8aba181b90ee3fe0ba6aefb67162b990787c0","ssdeep":"","tlshash":"37513127e6b82006207730a7deee346b556a8426b3417f06b7bc01a54fc58ac7f9270c","size":2667,"data":"","first_seen":"2025-06-07T06:32:46.623015Z","last_seen":"2026-07-25T02:29:56.404775Z","times_seen":4086,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"39cac8a114b7261b0a75a4eeb9049d5f","sha1":"446ed95f590765f2f0fea20b376b198f23725ee9","sha256":"521e128589217dcb2302d74a85bb8f15f1cb90d6f0ce7656d9cc302e52a6cb8e","sha512":"3698c71bb4bc6a16de37c2a4e60ce82f1cc4e70acee481f140dada63c6e07275bed7ea58155dc0ce08eeb182ac90ec0c180b53af47ea66a192524e27ed679b3d","ssdeep":"","tlshash":"8c218c3bc79a1386598b403a2ad68a0571a818e3ff189c107a4ed3111f8a90a217de64","size":1214,"data":"","first_seen":"2026-03-04T14:16:04.609487Z","last_seen":"2026-05-15T18:56:49.796494Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f9cdd33ada23155ce86d0dabb09c6a","sha1":"e627d182268eab2ee49d36d9062fa01fe089fb32","sha256":"97a3429461cf3f4ee63938a386ade6ca6df69de51465960a598306b3f2f922e1","sha512":"f0ae6b00591691cbeb7371b036f8d1a9685bb5cbed1c7f506a7444f95789b51da0dce969e5b84f1156064d3d7384c16d424f5f7bf181d5dc266555e196a30287","ssdeep":"","tlshash":"5831260bcd0a22a3556284701a193268319004e3cf0034453f6e82181f4f20f21f25cf","size":1616,"data":"","first_seen":"2026-03-04T14:16:04.610889Z","last_seen":"2026-03-19T07:12:23.055977Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0595b738ebceed52e33a9cf1dc910b5","sha1":"245f47a1747915d058148a44c89a7c8b39fe0796","sha256":"cf276e508ca6f53f80abfdd803697763bb9dc5cfb9f23fa1c6a87795308afe6a","sha512":"9466587066daec9853c97cd95f0d013571bd6827b69fcf2c2c7c8edf1081bd0406e76f9642aa64ac21ed470a09d8399ba403ec77f3429cc73b6a4208268c1d03","ssdeep":"48:M88hfqDG9Mmk2xp+phzOgOOfDYU2olo9M1CSl525R2yfuB2yfBb:M86dxuwE69WCMMUyf3yZ","tlshash":"9aa1ce29e9e76504812330768fef5008b138a503c828ad687f4c92532fea42d92fdb6c","size":4801,"data":"","first_seen":"2026-03-04T14:16:04.612187Z","last_seen":"2026-03-05T07:26:27.00464Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/js/www/decrypt.js","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d1d23f897c7f9fa4b24eeb8159d7e21","sha1":"9c6ab5fed65abe81454978f1e844c4f36d61a1c7","sha256":"8da1db8adc85dc835413880c71cc811c762e48018590f9a991115e83a722c869","sha512":"4d258cf5b37b503615a1373aebf3474ec8f94351455729665223a9318067ca6b815d0bf3c265ead937660bfb3b0e75b25f450ef1b235a64b32d87df01e1b8e32","ssdeep":"","tlshash":"b9f0bec8adaffdd4add295d2627ec809a99315430209df52b688ac1c9fc80281a2b0f1","size":531,"data":"","first_seen":"2023-12-21T07:44:20Z","last_seen":"2026-07-25T02:29:56.42339Z","times_seen":4755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d20ec42f8e54df3e5dc8dec9ec666ece","sha1":"c9fcbaa60e4a18846e7e0ca6989c45c65737c04c","sha256":"3597962d75252da214c4add39bfa10fac831c1a5f0af6d3c7a9efec28af4709d","sha512":"3f40856ae1963f66bc8ecffdc49c59a8964934796b1d2df4129883133aa34623a61081d61fca7bd44fe8843c9e6076517d6736c8e2dbe3fde0a465f2f91b5aec","ssdeep":"3072:Fa7fgp1KDT+nFQCRIXsQoFFAFhtRhQSLRvMBsy4sH+V7c:Y8bq6nFQCKzUeUaEB940+q","tlshash":"fbc3024c4decbef840fc688b104ea4bd482e4f53d2b96e9c9d50ac2581635adbd7d670","size":121279,"data":"","first_seen":"2026-03-04T14:16:04.613554Z","last_seen":"2026-03-04T14:16:04.613554Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"cadf73670f53fd33e2a1d1bffeefb1c8","sha1":"ae0426bc82b766d4615abe40cebdc1fc40244bc0","sha256":"cbcb2cb37c83465442b99a499058634c16f220591f5d46937b8c5c6234d89ca8","sha512":"156481ba9b8e68cbf2571649f16ff2d2b2384cd553ba8dbdeb661808b8cd58b3578ee5b3ad517244a8f35b61933f143186660a67a4f55284aac94e3c041c632e","ssdeep":"","tlshash":"ec21cd58da707120504541311a93465d35507297cd253018375cd7131f9d89f77bb54d","size":1383,"data":"","first_seen":"2026-03-04T14:16:04.615221Z","last_seen":"2026-05-15T18:56:49.792955Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"66dfcd1110926dc72c709609b7fe54a8","sha1":"e2c5c5d000992b6336f3aa145fb2a07c855263ad","sha256":"00356d78985dad3332a20a3a38e4bf53575d70b804ed30902d23689d486c8348","sha512":"e7d01a3e517160e7b6673f5a61b2dba3f334017799ad4616e20a7e780e89ef5b75b83dc6d0614f3912fc23ab00324fc077a310b9db4526eede21814977a734a0","ssdeep":"192:SNeTmZW8XQcTtEtjKRzfQhFxhBizH4A1ltpKS9:MrWMGj0TQhLhBGplt0S9","tlshash":"00021005ea1909924492937938d71d27229cc187ce41301e7fec4ab92f9f42fb8f765e","size":8956,"data":"","first_seen":"2026-03-04T14:16:04.616418Z","last_seen":"2026-03-19T07:12:23.059089Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"16b2a0ee5de01a82ce757a5959fb53fe","sha1":"26e635488c433c79767384dd8fbc09bc91f17b99","sha256":"e6a17fae41579a339cf4e77fcc980cdd35cab076b63f48efb81f3c96177bb0b2","sha512":"e36151d68be8ce61c6a54b15c2ee6911cbe0e9a20f932e71b13907c2c0b1762c10a3d11871f3792162bd767f781cab40d5666aa623ee73b2e5884865aa0d20cd","ssdeep":"","tlshash":"6a41ede9f4e804004427ec7cac1fb19b21aea00ae04cc831b5ba60c19e212c9569be96","size":1959,"data":"","first_seen":"2025-10-08T08:43:27.518201Z","last_seen":"2026-03-05T07:26:27.02006Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7adc44c99785fe3c0d146aaa7811fb83","sha1":"2177df844d2bdf496753c533e0f42f8249c2c3aa","sha256":"882722d4dc07e7ce42df17919cbab160c3667492764bbd58be3e4b2179bd0655","sha512":"94b95497efa477e46a7ccbad6d8e44f6676e316a5aaddeed301c0843295f987ccc246c98f5fbc96a59ccf8637648b9ac8f364e2878ccccc7b01ac2efa9e30275","ssdeep":"","tlshash":"6341cd15d6b646042937707054ff56d43f16e423eb018915315cd5c05f68e35d93d55d","size":1879,"data":"","first_seen":"2025-10-08T08:43:27.52477Z","last_seen":"2026-03-05T07:26:27.006176Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/plus/js/unite/crypto-js.min.js","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf3402d7483b127ded4069d651ea4a22","sha1":"bde186152457cacf9c35477b5bdda5bcb56b1f45","sha256":"eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc","sha512":"9ce42ebc3f672a2aefc4376f43d38ca9ed9d81aa5b3c1eef60032bcc98a1c399be68d71fd1d5f9de6e98c4ce0b800f6ef1ef5e83d417fbffa63eef2408da55d8","ssdeep":"768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe","tlshash":"9c231bc1a19c219152a774d0093f7107b463353a460ed5acf668e9eeecbcaea903dd7c","size":47992,"data":"","first_seen":"2023-03-07T12:04:24Z","last_seen":"2026-07-25T20:46:04.48046Z","times_seen":76981,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"96afdaf909dbd58ab7e513a45648fe2a","sha1":"09fc554421644d3416f0a7423d61cf65cc0556ea","sha256":"e201179619939df349908a4bb546b2b64aa1897a966b22ac559578355a3e6f99","sha512":"2a56e8447e9944c3dee07b0e660f1244ccd5e5ff572f3274796c662c4d8fc1f9ad99fb82a00058d796295f04d129234cf2ac97435c7bfd33915b72127c23105c","ssdeep":"","tlshash":"f421c21bec5b54a03757043913fbc44cb1a2994fe069c405b48de8514f54e860d2eb9c","size":1316,"data":"","first_seen":"2025-10-16T18:47:47.849352Z","last_seen":"2026-03-19T07:12:23.049675Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8024f8e1443938ddf54888b00916e01b","sha1":"7339e32698a22d1da0b5127907562d5a8f003180","sha256":"5316d8177159b3e67dab6aa424f743f6899d25016949036d47397a4f7d7e812a","sha512":"001279545fa79c9a4b4c8869bae3fdfd68b80dfd0842870e4fc724ae854f0d430655f9ae148e2db35ac811ca57a63e45ab875567a998559c49eb314aa32f85c3","ssdeep":"","tlshash":"bb21120ace21217545eba234a6b321a7391150d3cf06b47a3bcdd3026f0d81f20b62ae","size":1205,"data":"","first_seen":"2026-03-04T14:16:04.623947Z","last_seen":"2026-05-15T18:56:49.804534Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c831d3a35ac912cf2a3e77867c5989c","sha1":"93c94fb83c4d768bf11acb6c6faa475b1d7cde31","sha256":"7e0c1052f6b9e4a86349a2fc0a7dc8ebb3dba063e5b146b0133547e26eb13763","sha512":"4afbdc3b200dc952ec1b993ac5bd8731acee2b462d27af713120b976353bc616f83278c574f10d279efc27c0511327293c490fb683a5c45a77730df66da968ea","ssdeep":"","tlshash":"3131ed8cc526001420091339b88938022a455e8bde98342e339e1e7e2feb80e4ae369e","size":1688,"data":"","first_seen":"2024-05-02T15:12:11Z","last_seen":"2026-03-19T07:12:23.045811Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c43794176eb84b7ac4c9046b9b8f538","sha1":"9e606fb0d9426dc317830a0c75c7ba3a2cc3e9af","sha256":"218b4ddb3aae79d43fb6ff4b620fe03d9f5f3493cf01435dd0b01a3dbf07088f","sha512":"285442d6c63131a5db048ddde47f979fa7771793c135c14fe7a37f32c7495f583169c2012326c53814ddd2c0a4aae377c9f79fe347e12cf13517c4dbdec4b9b4","ssdeep":"","tlshash":"3e7127a2dd1402b24196633236a30b522a51609bde513024b7cd95b44fce69ffeff6bc","size":3792,"data":"","first_seen":"2026-03-04T14:16:04.626693Z","last_seen":"2026-03-19T07:12:23.038473Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b9d18c38eed193644f5af91582a53bc","sha1":"9e39f5f48024a4e32a2caaef81f5f889a828ce36","sha256":"c309dad19f85479114eab4d3d269db0bf146dada21e2f3c9da503775b6c87e70","sha512":"f12cbd2e95a78c316b0d15ed64f25067eb86c98b0c60dabd10144499b7d5f468be85eb5ce70178681d76bbd02ab22ead4a5fd22128944222f6737a8a6c2f35da","ssdeep":"","tlshash":"2a41821af0db8a140473367b97bb624a2d32148fd68ece08be5c0fe08f2a2565192708","size":2393,"data":"","first_seen":"2026-03-04T14:16:04.628133Z","last_seen":"2026-03-05T07:26:27.005361Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebdabae818b99d26b1f0375bfa42f171","sha1":"e4af03d20a52ab880dff0d624662ea1364eca08c","sha256":"ff10716ecc1358fffbaf7cf1ad786638b1588262c9b8fe5c3f3196ce6bc56096","sha512":"8f06e24c2579798466f831096a27661c3106434da797f217c2ef0334442d099ace07097f04a8836c4c22e1fb044419e8738429fe163c34f14ca1be484e7953bc","ssdeep":"","tlshash":"b241e59ff0f9022106f774324e7b5104392650abe447ab0036cc56406f68a2f8ae9e9a","size":1881,"data":"","first_seen":"2025-12-24T07:30:06.397851Z","last_seen":"2026-03-05T07:26:27.02292Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/js/custom/moment.js?ver=1580697220","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e70edb526ff09f426618efade93a4782","sha1":"840b05449d3851118fc835592bd98af885bdbf1f","sha256":"ab513aa4626ba224ac61b747674e6aead965f6e2cf87a2e60c7d4645b519817f","sha512":"943192c03e09b13bbdee324fda4c81d019b4cb5178596b5c548a1e6776022aded289a6076d32d5f55f99316b57b6f7db13c6429edb3a1e6927e7bcea89774cd9","ssdeep":"1536:/cZlnfxbjbJzvdvpeG2iMuz/M6z4QZFSNwmJaxxKZ5dFR79LNOf0uK:/cZlntbEG2i8umYx620uK","tlshash":"cfc3508a69476123467267398f9f4509ff6985330a0e8605bc9d92d83f71c6c43bafec","size":127757,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.419416Z","times_seen":5116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/js/custom/login.js?ver=1597629260","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24bc8669caf172f2c17a06fcd73ae539","sha1":"3bad8f340bca43d8fb98c3ca39def12f816769a8","sha256":"29df48677fd1c2b2a602c35faeadd3693f083b78550b2c0f3108f356c34b74bd","sha512":"0b4b2dc35f8b97238079334be832751d1e33dfbbddda4961c38127afadcb088101bad71b0442bd810930df2658dfd9f42da0b08d44bb1e1f1dd0a5dde33423a3","ssdeep":"","tlshash":"f3c02240b13f377c587372a0803a0506df73701c1c0056e0b0b842a02c187040813c78","size":191,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.416995Z","times_seen":5059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"af64dacfdf371b3e612c1842d818dfbd","sha1":"3006fb30496b21671209fa1ff97a232ee8ce11f6","sha256":"989df55f709409208b59f85e3eca40831f509a9bbe18b5fcc3fa02fc3002e11d","sha512":"1e9c321b430846d9d4a0959c86d96d4915775055d4551cb1477a1b0a57edeb0afac527ca6b0b6404f8c68bf5d8805b48798d8f7debb9f06d0558b911fd7e5574","ssdeep":"","tlshash":"71513839e7b23250d8b7b23b2baf935829918043c50dc9123f4e76b40f1041f3d446d8","size":2784,"data":"","first_seen":"2025-10-08T08:43:27.532272Z","last_seen":"2026-03-05T07:26:27.01493Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4c998cae01d2273eaab76dc937f7d5b","sha1":"befbdb17fb1f73348631053f91a08bc52add15f5","sha256":"a78898da09095a9bc19fb5a49ddd342c4c41de80c7476cface15ed45d7d51f0d","sha512":"4ff90eb8384241d2ec5e6052da79e398324239471476da298254381946894abe46b2008766f9dd27579f1b9b2daa375d8c0f5f2140b29ae2fc9df6dc18a73757","ssdeep":"","tlshash":"19410e98e418b947142bc47860ea1c8fa714d681c1947401c163f0f36f330130829c88","size":1951,"data":"","first_seen":"2026-03-04T14:16:04.631926Z","last_seen":"2026-03-04T14:16:04.631926Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"60a7adf0fcc2fe72426f5d1e1311785b","sha1":"c054e81fbbb729e1313c6f0e317bdb39a62c8499","sha256":"e58402e841e4caa05204d07043e2c35e0becf4fe90d7e408f8a9ea41841963ee","sha512":"869509747b8c4d79a0dd8bae3c4069004bdd0716fdf7b087e6c184d951a996f648c1e3c916d2f275567985c4a89840549bf06b1b1dca397c7434026c7ed5833c","ssdeep":"384:hiANOUnNIdJ/N2+Nh7hj8hu2jWEWJUy4w:hiANOUnuJ/N2+Nh+rjWEWJFB","tlshash":"3b03309014fa14675572d1e23ab02f2baf95f593e54aca0436fc1fc88fd7e86b423098","size":37812,"data":"","first_seen":"2026-03-04T14:16:04.63325Z","last_seen":"2026-03-04T14:16:04.63325Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/swiper.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/plugin/js/swiper.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nKgEicHL%2FUpJCmwF6vWadT3DhsDQu%2BNL087imhQs55Ycj%2BjgoohAMomBwF0JNTHpE6w4hCRt7w3nCVVpHXDtmeRU2T6lk92zb9c%2FzM9ueQBZEw%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"5f412ba9-1bee5\"\r\ncontent-encoding: br\r\ncf-ray: 9d717e95ae094b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114405,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65271)","md5":"b8be4ec964b15c656c05a17f822762b3","sha1":"1afabbf1eeecc4d7ddfbb4c824696ce1aadc8d0f","sha256":"e32b2b578b1345c05be32292da9016f7ff564bb3f4aeda3c1b6b76869648fcbd","sha512":"0abfe93e1dab3db289b0efe0f92e42f6ff14cc4e550b5bca8d4a84fe736245fb70b39e5b86bd9aea620e6fd73a76ce8aaed9d3a561c6208dc9108778dba141b9","ssdeep":"3072:2hUcC5HqffYIdcMZOGHgZsUOUIBdID8CX:y45HqXYIdcMZOGHAsUOUIBdID8I","tlshash":"7ab3094eb35071a551e36257525e8241a3b72409780ad0ac35b6d8ebacbde4c13bfefc","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.434546Z","times_seen":5157,"resource_available":true,"data":null}},"time_used":742,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":740,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/sweetalert.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/plugin/js/sweetalert.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KVJTz58y%2FI8dAT6nXFBKFoPohFQ4W03B0PG2QXXo6wSLpC9qhzsuzILwTGaiLAbiv9mwqWDr%2FAOQAHxa71xJhk12w1lGxYwcA5DE9GEnAm0cfw%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"5f412ba9-4262\"\r\ncontent-encoding: br\r\ncf-ray: 9d717e95ae0d4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16994,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16994), with no line terminators","md5":"2f9966a615f3f46d846807adbe42644f","sha1":"441544c084828da55ca0bafdc4c3df7dc7020820","sha256":"be4d1215ef6f2b2915b7f65cd28b9a9f7dcef17e1f0d883edd19400ca0ea795c","sha512":"e85f14552c1b5837780990e210223c5d6f532dd55f16589f682d1f2f95acc540b715aaac23ce12f871661006f80ec9043a9674dfdec1c3efc0819125d492dff6","ssdeep":"384:Rigwo5UpVZG9lOUlgkhzj7FRNE82XyySyTYayWri/SRVRXFKP9nWZcT2Rc8ex51f:RiB8lOuR5wSWrrRVR1KP9WK6Rc8ex/","tlshash":"ad72c899325438b327e361f1009f504ba4b196bde8095861376cc9e62ff8cc95ae2f77","first_seen":"2023-03-07T01:11:43Z","last_seen":"2026-07-25T02:29:56.422556Z","times_seen":7195,"resource_available":true,"data":null}},"time_used":705,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":704,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/common/storage/cms/cms_1050.jpg?ver=1607687349","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:43.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /common/storage/cms/cms_1050.jpg?ver=1607687349 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/jpeg\r\ndate: Wed, 04 Mar 2026 14:15:43 GMT\r\netag: \"5fd35cb5-72cd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:09 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncontent-length: 29389\r\nage: 169887\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WD2tieR%2B9qf%2FHcrZb2kEqmln1l%2FogGAEV7usLVHtL4nNLrBh97SghhwpJzrrAaC9rngufI%2BTO%2BidolQw0oWpvVg0FxIwnKwYJpUJEKnzYKot%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d717e9fcbae97c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29389,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 844x214, components 3","md5":"38c80c4e821869df9ae28040c4e2abe4","sha1":"de9d8a0f1e6628df841ee9d05b0e0ac4678d7188","sha256":"f6d5607fe56e39eaffeaee05a3e7392bd9adcc9275e7e63f67881db018b68b73","sha512":"e84587a9bd387755437efb56331b2bc7a0e1140aa41f2f645f68b000b1f0be806b30aa435c6d6dee5fd49a19c22ba45617c71afa75c1f2028e65c377ea95f91b","ssdeep":"384:zOAdT2hjDL1C5uPFNiaxOmITLsTeZXBq3lz2HrqFrRmxbpyHovTaR65hcOFEgGUe:pEhjDgCLICeZXBKlxYpKov9ZEFt2G","tlshash":"47d2e14fca8dfa4c1c35f33d692e6b4e9747cf888a214d2956c68d0805d0e8e6796bd3","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-03-19T07:12:22.998604Z","times_seen":1426,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/jquery-ui.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:43.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/plugin/js/jquery-ui.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\ndate: Wed, 04 Mar 2026 14:15:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"5f412ba9-3dee5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S6Om4aF4STvFQWU1B0jX9p8zfR3JwOUg6RSvL7mDG%2Fk00YyIJBLYa5DQA5OcExxudzSkLMRCvNEJhvZS2wdCcW%2BCo21zdXvNj%2B9bRRgulVH4dg%3D%3D\"}]}\r\ncf-ray: 9d717ea01bbb97c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253669,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32074)","md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-07-25T16:27:19.297845Z","times_seen":22830,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/css/font-awesome.min.css?ver=1753257975","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/plugin/css/font-awesome.min.css?ver=1753257975 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"688097f7-71b3\"\r\nlast-modified: Wed, 23 Jul 2025 08:06:15 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ndgw6ZBYPAf0qxu%2BSGP%2BZ5A1tWLXAMz7gMMfTi3WnDfj08F9gVGRYgK4Wo%2B0TbpxSa32xPr7Yr0StwvSRPXWYJqAJF6TMAFl6IPR0ooIN%2B8eEA%3D%3D\"}]}\r\ncf-ray: 9d717e95ade24b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29107,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28900)","md5":"31bacfe1d010712cb3837aec4ec1e237","sha1":"3c28b0f6e91fa137ab67c8370f11f60a63d87d02","sha256":"4f0bbfaec56962e62f55bef603cc25d0f56cabce57471131b21f4e9438066baa","sha512":"29c73d08840e5e21c677748c0aa88ee7900968602af5cbb5c6f6bf801c765b64562f4401a49f041aad7e229461be70db9a5a74317bbff479724547013a0d19cc","ssdeep":"384:Qu5yWeTUKW+KlkJ5de2UYDyVfwYUas8l8yQ/8dwwdG:blr+Klk3Yi+fwYUf8l8yQ/eC","tlshash":"73d250e8e54c01d66731c48bff81b36862baf73dd5844d99f01f690c29d22a522c5fba","first_seen":"2025-07-24T08:18:25.967403Z","last_seen":"2026-07-25T02:29:56.401828Z","times_seen":2884,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":102,"dns":46,"connect":11,"send":0,"wait":680,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/css/unite/prizedraw_pop_unite.css?ver=1733883989","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/css/unite/prizedraw_pop_unite.css?ver=1733883989 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: text/css\r\ncontent-length: 1703\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 6938\r\netag: \"6758f855-1b1a\"\r\nlast-modified: Wed, 11 Dec 2024 02:26:29 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hysoaJ0qX6rF8vf7l4CsQo8Xzalfh0sxQ%2F3l4e82EvfsGUXghatAVqVxq%2FWoyHCf1GY1GccWOceYeXl8BkPWxYQhf9XQ%2Bukf59%2FSiWx3%2BVIahw%3D%3D\"}]}\r\ncf-ray: 9d717e95ade44b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6938,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"f56d937649f436cbd7617abc7b9302fe","sha1":"761345474d919ce27ab91f2e4802763067c30a3a","sha256":"c9e27bfda9106e5282324702332c7bb8fdc46307daa7542be22bb586690a2a15","sha512":"4d99d6d61b1720501131379c1ee5a115e346dc5b271dd2cc3d39a29237034857893a56b757ac21c58d079fdf9e994684ca5b4cb8b404ae5aae0fe6f592d4e0d1","ssdeep":"96:jIjyND5elhmYza9/4Oynn0LDqsEx6hhIArcBlCWhXW5bQMqYsxhe0CKFwfO:zMfeEn0LDqlx6hfcBkW5WN3IhsKFwfO","tlshash":"aee103f0e38f38c97bb797e96eeb0d46a54602cbe202ce04a3595ce55f5a23c3535284","first_seen":"2024-12-11T12:22:16.015061Z","last_seen":"2026-04-11T00:00:37.152071Z","times_seen":4331,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":728,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/css/unite/login_modal_unite.css?ver=1738950076?v=1772633739","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/css/unite/login_modal_unite.css?ver=1738950076?v=1772633739 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: text/css\r\ncontent-length: 2001\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 6984\r\netag: \"67a645bc-1b48\"\r\nlast-modified: Fri, 07 Feb 2025 17:41:16 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A1RJqLYKzxkpXq4P6X1lT7X9Lku8XZyRI04HdFg32de2szxH%2FjbrKzRU0mVOFKTmi26s%2FZplVht80wAxPXxRaSkDs4Rvqg8rHWd4%2B1ytFj2fvA%3D%3D\"}]}\r\ncf-ray: 9d717e95adef4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6984,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"252c2fa58e6d682ca2b18b0888ebf910","sha1":"511ef6db164e0c745e67941cdb2043aef965dd0e","sha256":"5bca12ef0f6bfba5c12cbdd0eaeeb1d48e05c91149df7743b76b80480317306a","sha512":"1aa311c2f06a767d9eeec9c384f806d2b19977bda91af36a6aff9443896e677a3e488974b64c0e7c3e6a07cf77c834e6d115a8388b5938f065c5cbeff224c7d7","ssdeep":"192:4ybbQhWJZ4JWpC/+FtCmSCgIUaTgIaxl+F5Dm9qE:tFYd4F5Dm9qE","tlshash":"9de11e0576bf0a63a06e860935ea9b80630f9217c615ef7f7df132448fcd6689139f64","first_seen":"2025-04-11T10:47:55.703801Z","last_seen":"2026-07-25T02:29:56.411523Z","times_seen":4310,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":661,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/js/custom/login.js?ver=1597629260","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/js/custom/login.js?ver=1597629260 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fRMcJdr2b2mrp9Sv8LaiQ5t8mpg%2FibkT5Rj7VoBQeJEu1R7dEbvu1kXPYjuPg2k%2FY0Qpvwc89ChU%2F9RKJHHE2Q0PyqhZhFv3xTkOjV4o6p6KXQ%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 17 Aug 2020 01:54:20 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"5f39e34c-bf\"\r\ncontent-encoding: br\r\ncf-ray: 9d717e95ae194b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"24bc8669caf172f2c17a06fcd73ae539","sha1":"3bad8f340bca43d8fb98c3ca39def12f816769a8","sha256":"29df48677fd1c2b2a602c35faeadd3693f083b78550b2c0f3108f356c34b74bd","sha512":"0b4b2dc35f8b97238079334be832751d1e33dfbbddda4961c38127afadcb088101bad71b0442bd810930df2658dfd9f42da0b08d44bb1e1f1dd0a5dde33423a3","ssdeep":"","tlshash":"f3c02240b13f377c587372a0803a0506df73701c1c0056e0b0b842a02c187040813c78","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.416995Z","times_seen":5059,"resource_available":true,"data":null}},"time_used":723,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/common/storage/cms/cms_1083.png?v=1612880139","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet73041.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 04:44:01 GMT","end":"Tue, 12 May 2026 04:44:00 GMT"},"fingerprint":{"sha1":"89:AB:39:9C:B6:0D:95:72:EB:96:7D:5D:F9:1C:25:96:0F:C5:45:85","sha256":"73:4D:65:96:80:6C:A9:02:46:42:46:09:C1:28:EE:6B:A9:B3:6E:60:17:CE:1B:87:E1:06:AB:56:FD:F8:B7:82"}}},"request":{"raw":"GET /common/storage/cms/cms_1083.png?v=1612880139 HTTP/1.1\r\nHost: bet73041.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkRjdVpReWR0bjd4R1J0SHV0UFJ0WFE9PSIsInZhbHVlIjoialRRZEVRQlR5MmkyR01ma3hjYTFsZlRiTDJZUGpIY0U3bkpVNlQ0MmZYdmd0aHRTeDJCc1hcLyt4K2V6cjAyNUg0WVdzdVlLbE5FY0ZJUzJWMEtkNWxnPT0iLCJtYWMiOiI1NGNjNDA2ZDVhMDEwMDJmY2JmM2JjNjFiNzBjNTYxODIwNGI0YTg2ODY0M2JiNDg0YTVhMzkxYzYyOTc4NTczIn0%3D; vanguard_session=eyJpdiI6IjR0ajRzK3FuNUowREdzNkg3U3p6UGc9PSIsInZhbHVlIjoidlpWWCtCeTNyZVRVWW12TWZCZmp0NjZmbzF0eXJNMU5iMXdWUmhlb2g3TGY1NHdydjV2WTVwS25QTWVPbUh5YXJTNmVzTjVvY0YrMGxJbXkwRkhWMmc9PSIsIm1hYyI6IjM1MTg0ZGU5YTRlZTJhNzI0MDUyYmQ2YzY3ZjgxMDE5NjRlNzlhNjVjYWZmYmM0Mjk4YWIyMDJkZTZhNjExMzEifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 14:15:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 27231\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nCache-Control: max-age=315360000\r\nEtag: \"60229911-6a5f\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nLast-Modified: Wed, 04 Mar 2026 13:50:18 GMT\r\nX-Cache: HIT, policy, disk\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit colormap, non-interlaced","md5":"083dcae037d113283d35610595299275","sha1":"f225b2b127e8d225a8911426742be25a683e8c11","sha256":"5f8dfd94e1774c3de80fa4fd84b1ec88aca70b1f0404b901e6937f69e6073a4a","sha512":"f3961a8cfd7d8c80a4fcd61fa20d7089347cdbeb8bac61672f8e810c90f61fce64c664929de946f1681c401dbe865e8971915d2b987bd84c76439b3d1aa1bb09","ssdeep":"768:Bd2Xa9+Nq/JMYDHnGnTy6IunVqUL7tDIoM+:BA7NKqYDmnu6tqFI","tlshash":"06c2e14d84f8ffb28c48192d85c07e271d68989207ca83755c94caaf31db79790fe5e0","first_seen":"2023-07-20T05:21:02Z","last_seen":"2026-07-25T02:29:56.420608Z","times_seen":1009,"resource_available":false,"data":null}},"time_used":1572,"timings":{"blocked":776,"dns":0,"connect":0,"send":0,"wait":546,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-04","alert":"Phishing Block","trigger":"bet73041.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/css/swiper.min.css?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/plugin/css/swiper.min.css?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: text/css\r\ncontent-length: 3631\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"5f412ba9-4bef\"\r\nlast-modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=raaTioIdb197fx8Xcju2Poo0zrDQEyMaGh77Ixm8a391BAC628StNwToXhe%2BJJQXjDLzD9%2BQ2FpybLTAflos6GUwySAGpBlJNXY3VMNmpldqvA%3D%3D\"}]}\r\ncf-ray: 9d717e95be534b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19439,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19174)","md5":"319f20c8f06461463f24bfc703551a18","sha1":"f3bc53e03aefc4ee3be3adbcc707f7ed4c1c65a0","sha256":"67b6584af0fff14908d8f05c0eb9d59cb809da113feffd197f3ddb38a779ea45","sha512":"56439e25a232e6f80b79505aa867b341628cdc5818be22d4d83b7dac66d314a3d91f3eb4dcaa6240795c1a5f990322082c2e85e89a9fce6721cacf828cbe2c4a","ssdeep":"192:YxaNv/lSSyJWCj8zfi5o/uDN3eBxwdJ5c:Yxa1/lS0CYfi5o/uOGJ5c","tlshash":"8a92602c17003057e6334f1a87d99778c724c9939e4358ef6250ee48c7bb96a32af766","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T02:29:56.418201Z","times_seen":5222,"resource_available":false,"data":null}},"time_used":918,"timings":{"blocked":99,"dns":44,"connect":11,"send":0,"wait":699,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/css/unite/header_unite.css?ver=1744941935","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/css/unite/header_unite.css?ver=1744941935 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: text/css\r\ncontent-length: 1796\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 4957\r\netag: \"6801b36f-135d\"\r\nlast-modified: Fri, 18 Apr 2025 02:05:35 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OslzWPGmC7Z8ZC92%2FatEknrKAnyiJ%2Fnv8%2B6yBTTIodhblz%2BAFjh%2Fzdm4cfevuzbx57UdpgF5vUIO%2FCN1eytiXFDzn%2B%2B43ggFDIdmR9xUdN2A1w%3D%3D\"}]}\r\ncf-ray: 9d717e95adff4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4957,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"b934b75c09f2645b1e46dc5a89d13fe9","sha1":"91a38586f325f7b98af5eef96d66f38a04dace2b","sha256":"f17daf0db63aa8fbab2a4a73efe37469d9b17d13df2a1d7ad0512671c6ebb408","sha512":"d8e77a3eeb8a2d055767cbbe218a53bafa85c99fa3efaee736a4dd74743b922e6d64115317560c72969d0e3496c13f5b684803ca71ff6b0c4b3f7c0fa7122862","ssdeep":"96:N1/uCASG8K0h91s2sqVKnmqHuRbElB/sAx7BdlAfq0WO:N1llK0h98nHkbaB/HB+N","tlshash":"56a165ba9304100ab367d56578a0cfea63bfa1918442ab7dadf9304dc4ce1d456f62c5","first_seen":"2025-04-30T10:38:17.688345Z","last_seen":"2026-07-25T02:29:56.437741Z","times_seen":4307,"resource_available":false,"data":null}},"time_used":793,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":739,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/css/unite/float_unite.css?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/css/unite/float_unite.css?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: text/css\r\ncontent-length: 272\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 725\r\netag: \"5f412ba9-2d5\"\r\nlast-modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMtOYJ8MopRiWUI2iGzkE4pYb1adece13upNDR3%2BQDFeJFvQhxOxinbhDZk%2Fb4mxX4BAcRo1jaSOz5IHqoT9QO%2B%2BjZcaaQWlwR3jrtgn4lnGCA%3D%3D\"}]}\r\ncf-ray: 9d717e95ade64b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":725,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"077a2c1ebe25590b50eae8ce89787e0c","sha1":"499751737e286bbc93a46a1d2d4aaa3e2163d336","sha256":"093a799f9422754f7e53dfcc8516d3753616de283a14553f37d58b3822fd1b3a","sha512":"390f32fe8e81d9a379c14e0552c198d5f83e650f085b1df623c45cfc1aa4076d2e220ef02a4ef6747c0cd597eeecc510a67933c26190cdc306b28ffc861c366a","ssdeep":"","tlshash":"080147d307230b40fc1ea3196fde835e142a00cb9c9ecc08366827689f4b62c9662ff4","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T02:29:56.445126Z","times_seen":5043,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":709,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/css/font-awesome.min.css?ver=1753257975?v=1772633739","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/plugin/css/font-awesome.min.css?ver=1753257975?v=1772633739 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"688097f7-71b3\"\r\nlast-modified: Wed, 23 Jul 2025 08:06:15 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2FASOLLqYQPKayvRoJ8Sq%2BMer%2FDiuXAGpG9Jlg7lUEpzurrovAShPMwftPu2THKmtacKOQOfc20thS8Yi13VIXhuwhK8jjp1zsJldfeBu17wBA%3D%3D\"}]}\r\ncf-ray: 9d717e95adee4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29107,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28900)","md5":"31bacfe1d010712cb3837aec4ec1e237","sha1":"3c28b0f6e91fa137ab67c8370f11f60a63d87d02","sha256":"4f0bbfaec56962e62f55bef603cc25d0f56cabce57471131b21f4e9438066baa","sha512":"29c73d08840e5e21c677748c0aa88ee7900968602af5cbb5c6f6bf801c765b64562f4401a49f041aad7e229461be70db9a5a74317bbff479724547013a0d19cc","ssdeep":"384:Qu5yWeTUKW+KlkJ5de2UYDyVfwYUas8l8yQ/8dwwdG:blr+Klk3Yi+fwYUf8l8yQ/eC","tlshash":"73d250e8e54c01d66731c48bff81b36862baf73dd5844d99f01f690c29d22a522c5fba","first_seen":"2025-07-24T08:18:25.967403Z","last_seen":"2026-07-25T02:29:56.401828Z","times_seen":2884,"resource_available":false,"data":null}},"time_used":771,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":706,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/css/unite/login_unite.css?ver=1614680239","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/css/unite/login_unite.css?ver=1614680239 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: text/css\r\ncontent-length: 155\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 170\r\netag: \"603e10af-aa\"\r\nlast-modified: Tue, 02 Mar 2021 10:17:19 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZOJUe0RKNV8G1V6V0FNFF7yC2FxbrOn3xbRxY7Q%2Fvdxf8zBAqpb3RpJT992YMuR9gWNmMDv7bv8%2BuCOf95Ae3ocIWVUblgsV%2F%2ByE5VDSCVYnQ%3D%3D\"}]}\r\ncf-ray: 9d717e95adfb4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"5aa3dbf621e04d73e3a023b18dd141bd","sha1":"f35345fc401964592d37688e641b86f9eb3931be","sha256":"dcde9ab25bde6d1827a49457a7ef72e7e177ef141a188e074e23a9136ca2ef66","sha512":"1bdbd3e8c6e1dcd6e4381ac29ad636f9218a8ec0a972ee77c1ed1a4805d7d4bad8d776de93ca554d7f116e9a1f01873d6f1c048ed348873b78b5d3d285e5273f","ssdeep":"","tlshash":"d3c080530c954f57d50786957c9e87029b7e60209e548f1f1c341878da85f2461fd575","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T02:29:56.424448Z","times_seen":5045,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":725,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/gdcode_1772633739","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet73041.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 04:44:01 GMT","end":"Tue, 12 May 2026 04:44:00 GMT"},"fingerprint":{"sha1":"89:AB:39:9C:B6:0D:95:72:EB:96:7D:5D:F9:1C:25:96:0F:C5:45:85","sha256":"73:4D:65:96:80:6C:A9:02:46:42:46:09:C1:28:EE:6B:A9:B3:6E:60:17:CE:1B:87:E1:06:AB:56:FD:F8:B7:82"}}},"request":{"raw":"GET /gdcode_1772633739 HTTP/1.1\r\nHost: bet73041.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkRjdVpReWR0bjd4R1J0SHV0UFJ0WFE9PSIsInZhbHVlIjoialRRZEVRQlR5MmkyR01ma3hjYTFsZlRiTDJZUGpIY0U3bkpVNlQ0MmZYdmd0aHRTeDJCc1hcLyt4K2V6cjAyNUg0WVdzdVlLbE5FY0ZJUzJWMEtkNWxnPT0iLCJtYWMiOiI1NGNjNDA2ZDVhMDEwMDJmY2JmM2JjNjFiNzBjNTYxODIwNGI0YTg2ODY0M2JiNDg0YTVhMzkxYzYyOTc4NTczIn0%3D; vanguard_session=eyJpdiI6IjR0ajRzK3FuNUowREdzNkg3U3p6UGc9PSIsInZhbHVlIjoidlpWWCtCeTNyZVRVWW12TWZCZmp0NjZmbzF0eXJNMU5iMXdWUmhlb2g3TGY1NHdydjV2WTVwS25QTWVPbUh5YXJTNmVzTjVvY0YrMGxJbXkwRkhWMmc9PSIsIm1hYyI6IjM1MTg0ZGU5YTRlZTJhNzI0MDUyYmQ2YzY3ZjgxMDE5NjRlNzlhNjVjYWZmYmM0Mjk4YWIyMDJkZTZhNjExMzEifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 14:15:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1120\r\nConnection: keep-alive\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nCache-Control: max-age=315360000\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nPragma: no-cache\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6ImR1d2NNS05VNUxtMUFkVUdrSTlOUHc9PSIsInZhbHVlIjoiKzUxUjBDb0JtT3M3VVhoRWQ2XC9BYXpsMm5mQkI0MUdIdlpZU3p6NzU3enZSVTRGditKTStOUlwvWHo3VDJHblwvTitMQ1hiWHNNOUc3VHlBaEtUVDcwWVE9PSIsIm1hYyI6IjgyYjM2NDQ2YzBiNmM3MTU0ZTdlM2I2ZjY3YmE1MjU0ODc5MzRiNDQ3MTAxMDYxNDU1OGFlYjBmOWI0OTk4ODcifQ%3D%3D; expires=Wed, 04-Mar-2026 16:15:42 GMT; Max-Age=7200; path=/; secure; samesite=none\nvanguard_session=eyJpdiI6IjFCTmRiXC9neGtzSGNMNVViSWRnWjdnPT0iLCJ2YWx1ZSI6IjRERjNIVFRrZGQxXC9JUjFXU2hkUVwvSGdKSUdlSzZnYVwvMnJkTTJZR0w5d3lweXlFZUlCZlVFeWZINXZyNTlsZzlybjlYSGxqNzlMSlhMS0xRSFVqaEpnPT0iLCJtYWMiOiI1Y2EwZjUxZmUxOGY3NTc1YTk4NTVmNzE1YTllZWQ1ZDExZjM2MTNiMTUwY2QyNTZmMTYxYzVmNmU2NDk4OWZmIn0%3D; expires=Wed, 04-Mar-2026 16:15:42 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nX-Bos: b83\r\nX-Cache: BYPASS\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1120,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 56x23, components 3","md5":"3699a8443b478fdfacc42573855b016f","sha1":"94f3a9d190adfb84a4d5c114078db2b887aa9455","sha256":"bbace5153f50a21739378186c801c23ad1cdb651db5875490c181899f6a1b5a2","sha512":"50fa11bea45783eed27a9e43f5c6671579061f4d5e266ad06a79cd1f49974653931fe0d2909fe02390eac7d08dd94b91f05a0100386ccdb171281896873d0bee","ssdeep":"","tlshash":"1021421fdb578ba4cf0398f6770a28f6929e49d27e6476352b7142a4cd98df08148b88","first_seen":"2026-03-04T14:16:04.453172Z","last_seen":"2026-03-04T14:16:04.453172Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1390,"timings":{"blocked":779,"dns":0,"connect":0,"send":0,"wait":611,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-04","alert":"Phishing Block","trigger":"bet73041.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/jquery-ui.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/plugin/js/jquery-ui.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4O%2FIU82YbUgWey8acJryUrPOe9q%2BtrmTgtg8H01kGCEEcB9Fr9tGWfDN7oj1vV%2BD519%2F2ajtC1lCWxGx2p%2FZFkO6LvIUeqRArPS1X862OLCCHQ%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"5f412ba9-3dee5\"\r\ncontent-encoding: br\r\ncf-ray: 9d717e95ae054b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253669,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32074)","md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-07-25T16:27:19.297845Z","times_seen":22830,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":707,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/index/g03.png?ver=1598008033","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/index/g03.png?ver=1598008033 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 11946\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"5f3faae1-2eaa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:10 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 169887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lYLqbEAj5rE2pZxFWxD%2FYNRaX72DBRVI1kfvzcXqiYZmGhYcuuH%2FJEi8dSAvqx9xukNSI%2FG40K4AX8Rb2g9k24BtdF8EEezV7e%2FlS4MQSd7%2FQA%3D%3D\"}]}\r\ncf-ray: 9d717e95be364b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11946,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 269 x 79, 8-bit colormap, non-interlaced","md5":"d2ba9813a94ef43860a7e436085624f3","sha1":"ad36dce8e807934af7f49ea1be72955d7238314f","sha256":"de19c6fe70e572cb530efdc4ffdbd69fec93ceec8e8513cbd488496737ad8130","sha512":"875d45d8cc066b27ca582d230df3e7991a73e5ea10149c0e81505cd45a842174fdf8d84eab2de4a9eef9094bd847c851a6851d45955995550487c05f2c30f238","ssdeep":"192:Yowv62d6tFQNDiZjqyfbKWSgR6jcYzLT2j6PwP7Q0Cj3F+8YUIO:YoAm7QNDiZLf2k6jcaejGwPEh3o8YY","tlshash":"a732c014dbb9e6ba7efd6025be08d47193117c29859379144e02de2153d022f80f3f56","first_seen":"2023-07-20T05:21:02Z","last_seen":"2026-03-19T07:12:22.992148Z","times_seen":991,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/js/custom/checkinput.js?ver=1598008226","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/js/custom/checkinput.js?ver=1598008226 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wW54KpdSfawl20Uf7Eg4vtrHQjeZYJIMNtML6jWkwNeKXDkVIf1CCf%2BwXwJwqxl0esFm5loOxoV%2Fvlxide4yjXuz6JAdP8%2BK%2FGbyb1pm3wERtg%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 21 Aug 2020 11:10:26 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"5f3faba2-3c14\"\r\ncontent-encoding: br\r\ncf-ray: 9d717e95ae074b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15380,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"1701a1c0e116f99b046f95c9f2f4ef5a","sha1":"c0ea303e6c96847ed6bb4c72afd3a84332ab5b3a","sha256":"5a053d48644953a4dbc5f0cb73d4723dd958c9b5574be9cdaac4bccf21d9f38b","sha512":"131b0b96f085bbabf04eac826013f7a62402bfe7e8aa4f6830ac9bdd4d629e4062a687b03a14d6c02d8ea741aea17fe4646da4c054c1954454025fa22f0fd307","ssdeep":"96:ZRORCQC5WCPCD9CQCwCGCkCmCQC+MiCwCdCuuCkCbmCd9P/ddPojcHoujp1SPZaQ:ZRRRvJdlANu91diXdT59j6IQNHYerS","tlshash":"9d62204de0983ea6857333750e7f5200f57906278525eb08be9c59b42fbe80a4b63f5a","first_seen":"2023-04-15T09:13:23Z","last_seen":"2026-07-25T02:29:56.410916Z","times_seen":5057,"resource_available":true,"data":null}},"time_used":744,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":740,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/js/unite/encforms.js?ver=1761119296","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/js/unite/encforms.js?ver=1761119296 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kcKV8VoJ9FFGRvw0KhIzrhQUpKbMF7TdVRQ28QxQAtl%2BfksXdwDNPMzTQWto22OnV6C20yfEqXpMOzcXBaL5qofQ7FGuxc8koGTI5MG6AHxbTg%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 22 Oct 2025 07:48:16 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"68f88c40-2e52\"\r\ncontent-encoding: br\r\ncf-ray: 9d717e95ae1d4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d2d77387c0dedc78ae85a7ab52aad886","sha1":"0d8ee19645e8246409f76adee4412ecef3466b76","sha256":"2af6b51b39ceab86129d473a1fb9a4a827539efc7452de2103a84ebd09d75790","sha512":"d922ced4a418ef9049cebadaf49f897432449ad051ece1361014ca9c64514f9eb53f6d77d6e83551ed2939d0eab9d518f0c048e12aef3e167ef3d1d517dbe3ca","ssdeep":"192:gxlzcp1ISvp1S/yakFAn1hQu66H1Ka1t4l/O3a6Nr:zb6cu6IQM","tlshash":"9f32209871bb1870993338344bbf8512793ac11f4c5cd954bdac2aa07f58a5ec6e1bb4","first_seen":"2025-10-22T08:39:12.013749Z","last_seen":"2026-07-25T02:29:56.445614Z","times_seen":1506,"resource_available":true,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":726,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/css/custom/prizedraw_pop_custom.css?ver=1663905027","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/css/custom/prizedraw_pop_custom.css?ver=1663905027 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: text/css\r\ncontent-length: 38\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 18\r\netag: \"632d2d03-12\"\r\nlast-modified: Fri, 23 Sep 2022 03:50:27 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D2Mx81peqEyuH3qQ9adr5bWi5thzI9EJYYzNhJaJeBm2KPkq0uBa%2FzhvGg4FFzhT%2FgSfU6cq1XmE4ZyiXeS%2BvPh3jWgBFjI10Ahb3aEVah3C8A%3D%3D\"}]}\r\ncf-ray: 9d717e95ade54b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4957b1edbdaab02ae3242ff27d3732b8","sha1":"0fa68da2f11737fdc4d7961a632581c13f7a8577","sha256":"1adeb028e615a654ebf218f188ad6bc841ad3851da01b28dc4af82ea77179108","sha512":"4965ba38ebc9edebf0321e50f78d18cb9562fc234ffaf91715ecc3c9c9842e56a153a3cc9a30d01a234e8be4e0137d35a06dca1dee9b671ce80a4fa10152d485","ssdeep":"","tlshash":"8d7000000002000082308a280802002800a8b0822200888c8880002a302a0020000880","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T02:29:56.423919Z","times_seen":5162,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":710,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/css/font-awesome-addsvg.css?v=2507231","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:42.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/plugin/css/font-awesome-addsvg.css?v=2507231 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3f38sfb.qdhyxt.com/plus/plugin/css/font-awesome.min.css?ver=1753257975\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 14:15:43 GMT\r\netag: W/\"688097f7-5ce0\"\r\nlast-modified: Wed, 23 Jul 2025 08:06:15 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fKEigBkG510so9zfbsMKBdgoH6R1d8rnIAx1sUyO4ifibtNU94VNQSKTSEYC2tU%2F%2FE4EIlfppGfgVBCr0bi%2FiyWVfeXtzedn9w12%2BbskWHNEHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d717e99fa6c97c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23776,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2811)","md5":"6097f31c1b8ed2b58b36a26a704531d1","sha1":"f9d2b2c866d186c372ff6c11d5f69e608ca0f457","sha256":"4acd44ed0da6eae50d2f4b38649e6085c73d3202c08ba85870be5e0eb80a55c9","sha512":"a02f15b6e01f10bac28e3e1e24f8605ab65bf0c1e0a10b6746cae341194037cc71b124f39ee75fbe28bd1175f329e7065595437131f8856801c574642b84acc8","ssdeep":"384:AD+8djF3PcO3Pc4XfVK2wMXyWq73r2wMXyWq739WqMWqq2gw/2gw72fQ62fQ99:S+wxBjVHyvjqyvjUi1wDwq9","tlshash":"86b263b2460a78e24d143b3bd2a92a0d574dd6e2fe93ee56d07609588b0ff1837471bc","first_seen":"2025-07-24T08:18:26.078876Z","last_seen":"2026-07-25T02:29:56.39522Z","times_seen":2883,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":727,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/css/images/ui-icons_777777_256x240.png","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:44.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/plugin/css/images/ui-icons_777777_256x240.png HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3f38sfb.qdhyxt.com/plus/plugin/css/jquery-ui.min.css?ver=1598106537\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 14:15:44 GMT\r\netag: \"685ba9af-1b65\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 14:59:18 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncontent-length: 7013\r\nage: 169888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RFPhVHcuhfqbBcAYU6S6HGQAz%2FBZ0OA0yivTPlfNb3mrgLLyk%2F9NWQGV%2BSInc5vdaXiCt8PlMgXz2poqyZ2ONOPvXSDqO78rcGjTjAOV8CBebg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d717ea7dd0f97c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7013,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"40bf25799e4fec8079c7775083de09df","sha1":"4fc6b1449c73f5d10489c104225ebe326a4016ba","sha256":"e75b27211e16fcf94715168001bb7055ca376d46f928110ba3d0825232452e5a","sha512":"51c9e46224098e9270bf51bec93e0528b5e726a632a1de57863fba531d914a9db1d3fb07d22cef756f6fc9e999bf08043e73bca6225a9ab7efffe2904105c388","ssdeep":"192:92XiIsTugcTnouLuIXdj7Z7rgmlWRI1ie+BVtNzDby:AmOTnwCnZftW61ie+BV3Xby","tlshash":"5de19fc1e5f8c4e0dd58e668ee886209c7a658b9064742dbcf0485694b48d3186fab8f","first_seen":"2023-07-20T10:40:17Z","last_seen":"2026-07-25T02:29:56.397384Z","times_seen":1482,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/plus/js/unite/crypto-js.min.js","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:40.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet73041.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 04:44:01 GMT","end":"Tue, 12 May 2026 04:44:00 GMT"},"fingerprint":{"sha1":"89:AB:39:9C:B6:0D:95:72:EB:96:7D:5D:F9:1C:25:96:0F:C5:45:85","sha256":"73:4D:65:96:80:6C:A9:02:46:42:46:09:C1:28:EE:6B:A9:B3:6E:60:17:CE:1B:87:E1:06:AB:56:FD:F8:B7:82"}}},"request":{"raw":"GET /plus/js/unite/crypto-js.min.js HTTP/1.1\r\nHost: bet73041.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkRjdVpReWR0bjd4R1J0SHV0UFJ0WFE9PSIsInZhbHVlIjoialRRZEVRQlR5MmkyR01ma3hjYTFsZlRiTDJZUGpIY0U3bkpVNlQ0MmZYdmd0aHRTeDJCc1hcLyt4K2V6cjAyNUg0WVdzdVlLbE5FY0ZJUzJWMEtkNWxnPT0iLCJtYWMiOiI1NGNjNDA2ZDVhMDEwMDJmY2JmM2JjNjFiNzBjNTYxODIwNGI0YTg2ODY0M2JiNDg0YTVhMzkxYzYyOTc4NTczIn0%3D; vanguard_session=eyJpdiI6IjR0ajRzK3FuNUowREdzNkg3U3p6UGc9PSIsInZhbHVlIjoidlpWWCtCeTNyZVRVWW12TWZCZmp0NjZmbzF0eXJNMU5iMXdWUmhlb2g3TGY1NHdydjV2WTVwS25QTWVPbUh5YXJTNmVzTjVvY0YrMGxJbXkwRkhWMmc9PSIsIm1hYyI6IjM1MTg0ZGU5YTRlZTJhNzI0MDUyYmQ2YzY3ZjgxMDE5NjRlNzlhNjVjYWZmYmM0Mjk4YWIyMDJkZTZhNjExMzEifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 14:15:40 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nEtag: W/\"61dff778-bb78\"\r\nLast-Modified: Thu, 13 Jan 2022 09:57:12 GMT\r\nX-Bos: b83\r\nX-Cache: UPDATING\r\nServer: nginx\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47992,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47992), with no line terminators","md5":"cf3402d7483b127ded4069d651ea4a22","sha1":"bde186152457cacf9c35477b5bdda5bcb56b1f45","sha256":"eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc","sha512":"9ce42ebc3f672a2aefc4376f43d38ca9ed9d81aa5b3c1eef60032bcc98a1c399be68d71fd1d5f9de6e98c4ce0b800f6ef1ef5e83d417fbffa63eef2408da55d8","ssdeep":"768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe","tlshash":"9c231bc1a19c219152a774d0093f7107b463353a460ed5acf668e9eeecbcaea903dd7c","first_seen":"2023-03-07T12:04:24Z","last_seen":"2026-07-25T20:46:04.48046Z","times_seen":76981,"resource_available":true,"data":null}},"time_used":670,"timings":{"blocked":102,"dns":0,"connect":0,"send":0,"wait":567,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-04","alert":"Phishing Block","trigger":"bet73041.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/index/en/liveinplay.gif?ver=1682933216","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/index/en/liveinplay.gif?ver=1682933216 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: image/gif\r\ncontent-length: 616\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"644f85e0-268\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 04 Mar 2026 13:50:22 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fb2qJpoPXlXy7Twbsm2JS5Ob3tQH2LLEn4XYeXXuSl2RXP1pJDP%2BjFZhxjkEvA8lkn%2BRVci7qxowMdjxNG87LyDLPnG2CAJqvhNyqMAJIVeinA%3D%3D\"}]}\r\ncf-ray: 9d717e95be2d4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 204 x 30","md5":"712ffb89e85b2e1e254ec1c77b23fc74","sha1":"7e385f698a88e70953384d4bcd3698993fb6c322","sha256":"6ac8853ce4ba2bf9bbe37da81b96be06b0463bee89fe6166a02a913ce379307b","sha512":"34e6aed4474677abc763d44805a12df54313eea3a98847aa12fe940f81247ad6b218ec25c7e6d66107527adcbec0bf8e7dfa5facab3c8886dcc026452ec2b7f6","ssdeep":"","tlshash":"7df062c6f65b54bb862a46ecd74cb9140bc820884b000c8295f1f8efe00c7705bba0e0","first_seen":"2023-07-20T05:21:01Z","last_seen":"2026-07-25T02:29:56.391404Z","times_seen":1010,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":648,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/js/custom/login_custom.js?ver=1598008226","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/js/custom/login_custom.js?ver=1598008226 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8%2FHuSuVW0xlwlyQL8RUFoDn0K7yf%2FoNFsdvLPI48hRyB13fJ7DTZ0R9IhdQbWE2knbM1Xr%2FmTK0YJnmoDOOv8G%2FmfTNToQ1O64DiEFRKxOjrQ%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 21 Aug 2020 11:10:26 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"5f3faba2-0\"\r\ncontent-encoding: br\r\ncf-ray: 9d717e95ae204b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T22:24:09.286054Z","times_seen":17534824,"resource_available":true,"data":null}},"time_used":707,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":707,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/index/sec-nav-bg-grad.gif","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:43.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/index/sec-nav-bg-grad.gif HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3f38sfb.qdhyxt.com/plus/css/common/index.css?ver=1685095467\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/gif\r\ndate: Wed, 04 Mar 2026 14:15:43 GMT\r\netag: \"5f3faae1-178\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:09 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncontent-length: 376\r\nage: 169887\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7l6DRr6cWKx9CCHFzhsM8Ym85qehrS5AIQsZY3t9F5IfjItszo0moeW0sWfevg40Rlp%2BD6xArshgzZ3xhrT99TLnHAZivvzzI%2BkoNzrZfCsTLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d717e9fcbac97c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 594","md5":"355b2cb853d78ae262c093065eaa6e70","sha1":"3e8d2a456204e635cfe5bd959cff47faf63023fc","sha256":"cd58d657e3d79583a5722257d8770e3b5f620f1d58e392f1d9460cc89ac485fa","sha512":"0700f78d8d439d90ed2eba294bccc07451cec67b8bf518c13a8221cccf223a31c9e620f193874149ac818a39a90efbaa8748607600b01c7c0f89f89b18521042","ssdeep":"","tlshash":"04e02d731aa377b0de08ec39abcb30ba280d243eb20ab1c0300c74da85c1832fd088c0","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-07-25T02:29:56.443482Z","times_seen":4786,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/css/custom/float_customer.css?ver=1607755023","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/css/custom/float_customer.css?ver=1607755023 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 1259\r\netag: \"5fd4650f-4eb\"\r\nlast-modified: Sat, 12 Dec 2020 06:37:03 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQSDUr%2BbGKJJ%2FmriuuhvgLjZBYOgxCSGJ0VV%2FZ%2F8m5V0EmdIs4JOhwuGx9BiFxC%2B6A70xaGmYLK0rrMJoB7Qe2TWMM%2FyH%2Bq5WChRqqx79xiBIA%3D%3D\"}]}\r\ncf-ray: 9d717e95adea4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2ddfef0c4056c3d9eb5f3df7fd940bdc","sha1":"5632067b6e1c0e2db3f7420470f8f5e15a78f2e8","sha256":"abb89644d467e88130629d409fe0c26f98779a78b539b6ff9996c720dfc8e662","sha512":"f989c4151853270e2ea25e60449305e0f9b0f5847a580e57b09908271d0d37f6b150515b3c49a343768b7cf4b34d42e858a9b30dbc3b7900747f40a5bd19e2f5","ssdeep":"","tlshash":"412195930d272904fc15e1742fc4112d122a80cfaa5fdc1c76d99f195fd266c98a6be0","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T02:29:56.43403Z","times_seen":3299,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":689,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/index/g02.png?ver=1598008033","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/index/g02.png?ver=1598008033 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 13819\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"5f3faae1-35fb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:07 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 169887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nXSzLxD0QrKjTzQf3wBo6buO8FGnRi1G2c4oqbiCFW4D%2FeiFWf4YcmrLmWH3USeyuih2vlxE3BV0oQ1z6k0Y5jNdK%2FI4l5gJ6aXfxNoAaYavVw%3D%3D\"}]}\r\ncf-ray: 9d717e95be344b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 269 x 79, 8-bit colormap, non-interlaced","md5":"90bacbbc6c165d555b528d48bfa616a1","sha1":"64041e94f44efa1df69c1e1b8086fa4773c06951","sha256":"39a7b5dc5fdec30c63517f2648bf20050718c6005cf8056b007f0aab103e9846","sha512":"18eccf12607f185217733225222a102ca36f318745d96af886ef8e1316e262bff8d431f3d13884e1dea7282c71eef83430648a256e0d156c47b2fc5ea580e351","ssdeep":"384:RYtGrPnLUKAUZqtt1EhOjyC6Z1RooAoXYfpqA:wIvLU1vDEQjyCc1soUb","tlshash":"4052d0de0b802b47a076adb91430b39970cb0aa65334dfcc239a05ab7635fcc067117e","first_seen":"2023-07-20T05:21:01Z","last_seen":"2026-03-19T07:12:22.985635Z","times_seen":991,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/js/custom/moment.js?ver=1580697220","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/js/custom/moment.js?ver=1580697220 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FEWodt3O4Ci4n8aZl%2BTo7L1jLfj%2B3OIxwiCwtrw7ok48QsPfXmPnGJqf9m%2FtHb32uyaFZEUGQp844kBnwlmdfGiGweX0Ql8b5DZDspLTLzXZfA%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Feb 2020 02:33:40 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"5e378684-1f30d\"\r\ncontent-encoding: br\r\ncf-ray: 9d717e95ae224b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127757,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e70edb526ff09f426618efade93a4782","sha1":"840b05449d3851118fc835592bd98af885bdbf1f","sha256":"ab513aa4626ba224ac61b747674e6aead965f6e2cf87a2e60c7d4645b519817f","sha512":"943192c03e09b13bbdee324fda4c81d019b4cb5178596b5c548a1e6776022aded289a6076d32d5f55f99316b57b6f7db13c6429edb3a1e6927e7bcea89774cd9","ssdeep":"1536:/cZlnfxbjbJzvdvpeG2iMuz/M6z4QZFSNwmJaxxKZ5dFR79LNOf0uK:/cZlntbEG2i8umYx620uK","tlshash":"cfc3508a69476123467267398f9f4509ff6985330a0e8605bc9d92d83f71c6c43bafec","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.419416Z","times_seen":5116,"resource_available":true,"data":null}},"time_used":698,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":698,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/header/common/kefu_icon.png","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:43.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/header/common/kefu_icon.png HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3f38sfb.qdhyxt.com/plus/css/custom/header_custom.css?ver=1738643282\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 14:15:43 GMT\r\netag: \"5fc6f20f-246\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:09 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncontent-length: 582\r\nage: 169887\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VY8awuzN42eXHxRoUH0e0yul6F4fqeGagU6TQaJBcD%2FI%2F%2FVnIBlhOoE8yO5c3s5z%2Fw2Fg%2Fj%2FOlEbK7ZmiqWRC2LoG0qaq479TmtWIWrx0%2BVTYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d717e9edb7297c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 16, 8-bit colormap, non-interlaced","md5":"d66100dc3b6143ccaab68587edf59169","sha1":"aec841ed002d6f0572b1bc380212d38be5858728","sha256":"cba9dfe544df0c8b71bb9881e1d77b9be08007df320acfb8398c9b636bc1afc5","sha512":"a5db92a6bb8e2bed2268ba81ebcfbff6564ee50d09ed94c2302cbafb4e234cf9acc99d585568adb0de318e38e790467cf81fcb05643338c7200277a878d04d73","ssdeep":"","tlshash":"abf041ded0770db9f6a8245ae0a20980fd525a1c9ee6534e2a9ce04f08ed0049ab6746","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-07-25T02:29:56.439847Z","times_seen":5048,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images/dc_hot.gif?ver=1597629314","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:43.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images/dc_hot.gif?ver=1597629314 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/gif\r\ndate: Wed, 04 Mar 2026 14:15:43 GMT\r\netag: \"5f39e382-56c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:09 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncontent-length: 1388\r\nage: 169887\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ybFiTapHJUX%2BzmXH6YjeOBerdvjeim0lq9MlrTqYVac9VS0v6e37rd0hzsfJyY9Q%2FnQeahHbu8QDZAHrz6ZsZAd4yHPs%2B%2FP%2Bn4JvhHhX3RRFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d717e9edb6f97c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1388,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 21 x 12","md5":"e5f49d4212fec35b11b76cd616e1f8ec","sha1":"0697a3b11f5d0906b2d1cf59051b46ee3b5dc72a","sha256":"c34ed994680ca6446b85dd47aa963cd4cfdd07180a9517b4d7d37f3c7a1b94cd","sha512":"a7057e7e9cd4fec2ca911ac507ce7161412f8813453ceb3f2a1d28380fdaadf1e8d5119eae83f92ae001ca7f8a2cf0f0c0369a8ef2af4d751b6a08053c3efc94","ssdeep":"","tlshash":"3421660eed42b841944c68da3effc81f5651448089e4f4cbb49e6d1b5e1507e54668eb","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-07-18T11:56:42.032387Z","times_seen":5154,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/csrf","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:43.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet73041.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 04:44:01 GMT","end":"Tue, 12 May 2026 04:44:00 GMT"},"fingerprint":{"sha1":"89:AB:39:9C:B6:0D:95:72:EB:96:7D:5D:F9:1C:25:96:0F:C5:45:85","sha256":"73:4D:65:96:80:6C:A9:02:46:42:46:09:C1:28:EE:6B:A9:B3:6E:60:17:CE:1B:87:E1:06:AB:56:FD:F8:B7:82"}}},"request":{"raw":"GET /csrf HTTP/1.1\r\nHost: bet73041.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImR1d2NNS05VNUxtMUFkVUdrSTlOUHc9PSIsInZhbHVlIjoiKzUxUjBDb0JtT3M3VVhoRWQ2XC9BYXpsMm5mQkI0MUdIdlpZU3p6NzU3enZSVTRGditKTStOUlwvWHo3VDJHblwvTitMQ1hiWHNNOUc3VHlBaEtUVDcwWVE9PSIsIm1hYyI6IjgyYjM2NDQ2YzBiNmM3MTU0ZTdlM2I2ZjY3YmE1MjU0ODc5MzRiNDQ3MTAxMDYxNDU1OGFlYjBmOWI0OTk4ODcifQ%3D%3D; vanguard_session=eyJpdiI6IjFCTmRiXC9neGtzSGNMNVViSWRnWjdnPT0iLCJ2YWx1ZSI6IjRERjNIVFRrZGQxXC9JUjFXU2hkUVwvSGdKSUdlSzZnYVwvMnJkTTJZR0w5d3lweXlFZUlCZlVFeWZINXZyNTlsZzlybjlYSGxqNzlMSlhMS0xRSFVqaEpnPT0iLCJtYWMiOiI1Y2EwZjUxZmUxOGY3NTc1YTk4NTVmNzE1YTllZWQ1ZDExZjM2MTNiMTUwY2QyNTZmMTYxYzVmNmU2NDk4OWZmIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 14:15:44 GMT\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 60\r\nConnection: keep-alive\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nCache-Control: no-cache, private\r\nContent-Encoding: gzip\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6Ijh1NmhlOVpZYWZ6RVVIbGdVOG82aGc9PSIsInZhbHVlIjoiM0lmYUFjelwvZVBkdFhNZnpiaHZoOGlma0czWkZZM1dVWVdQN1c0dW1mVkpLb0I2VWdnbHhrOGJjOEo0SmYyTXNEWWtFUTdmZG1iM0M3WXAwNXliWVNnPT0iLCJtYWMiOiJmYTQ2MGE5ZGE4MmJkNzNiYzU2ZTBiYjkyMzcwMzU5OWNiNmNmMmMxMThhYzdkNWQ1NmE1NzQ5ZjE1OGEwZjM1In0%3D; expires=Wed, 04-Mar-2026 16:15:44 GMT; Max-Age=7200; path=/; secure; samesite=none\nvanguard_session=eyJpdiI6IktGOTBhazMzbFYxV3RrbDFmaXRjakE9PSIsInZhbHVlIjoiUCs5MHRkMXhMUmEyMW1Mb1lEdk85TTNVXC85WVQ5S0N3d2V5U0t0WmswS2lLOFwvdlY4cUVQd2E4anh2OHJZUUJBcjNGY3k3RlpLZmU4Z0FldnJMV2VaQT09IiwibWFjIjoiYWQzZmExOGFiNjc4NjQ1ZjBiZjk5YWNmNGZkNDNlZGM0ODBjMzY2NGEzY2Y5ZGE5MGI4YWQ1ZjBjNDgxNmM4YSJ9; expires=Wed, 04-Mar-2026 16:15:44 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nX-Bos: b83\r\nX-Cache: BYPASS\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"17eeb68fa9801056cacd05e3c165e7b7","sha1":"0f004d857e9dce5bed3a36978fa9af30d70166ec","sha256":"ad324f72b82204dfb4852d4e77f50711893663ef1f63baf6f73cbbabae537c08","sha512":"353831856a6dc173e8afe95a84acd833fa0862ce01d0df23dc766f8e56a26ff52a9b9c97a28c3454e097607ac4302bd5beeff780eba686b9977cd8cbe8723ca4","ssdeep":"","tlshash":"f8900440f4c14c417d14f414df000d04150c14d1cd01c10504405705dd7c40c1300041","first_seen":"2026-03-04T14:16:04.468866Z","last_seen":"2026-03-04T14:16:04.468866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":634,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-04","alert":"Phishing Block","trigger":"bet73041.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/index/en/NCDBC_210x204.png?ver=1700473768","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/index/en/NCDBC_210x204.png?ver=1700473768 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 9237\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"655b2ba8-2415\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:10 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 169887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0lCPLd2VSRpED60qAKTVlNcwMwPMFXKPkizOY1bpAwmdKe%2FnHallHSAFpC1csdFkqdcNPpBGcd8pukZlkWrdmIxdep33JtAAl%2BPmFBagMJHHgQ%3D%3D\"}]}\r\ncf-ray: 9d717e95be2b4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9237,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 210 x 216, 8-bit/color RGBA, non-interlaced","md5":"9bdd6b8d5589d397db7068d3a294de42","sha1":"98b5bb4cb3d46f59db14ab9f2ebb2b54348202f8","sha256":"6b53a71f33b8a9b1c81f84e0371a4028a1e7d2f1b6fdda72ad3cbf5cf99194ca","sha512":"641884ccbcb09834b95f57f6d1a7225fdc611ed6f54fb933dda63e33a34ffb440a9f9b873a0b22344ee9b8d364dec93afcb4cb8191a8694e32af13953c828a26","ssdeep":"192:ESLkn+Lp42swygyfFBzBkFlkZJM97Xq8uel5m1/+t8QdQTvmmt33lVb:Dgn+LpywufH2lkZJr8j54G+L93D","tlshash":"ce129e265f025d419cb4e30de9adb4c726af1ec0df5184e82aefc14d9db02ba825e1c7","first_seen":"2023-11-20T18:20:46Z","last_seen":"2026-03-19T07:12:22.982929Z","times_seen":1116,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/jquery-migrate.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/plugin/js/jquery-migrate.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXjJQFyitmOBwygXtO4e6y%2BsJiW1wJKUnxBy8zqZx3MjqesX58skzoFzFT2i%2BzgTF22kaTz9JkDhP5PFXp3la3GO38kiXgiboTYDi1xwkrczKw%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"5f412ba9-1c1f\"\r\ncontent-encoding: br\r\ncf-ray: 9d717e95ae124b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7199,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7085)","md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-07-25T21:11:39.672177Z","times_seen":24730,"resource_available":true,"data":null}},"time_used":671,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":671,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/index/icon_play.png","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:43.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/index/icon_play.png HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3f38sfb.qdhyxt.com/plus/css/common/index.css?ver=1685095467\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 14:15:43 GMT\r\netag: \"644f850e-d6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:09 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncontent-length: 214\r\nage: 169887\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RLUf9Ita%2F%2FWM3Yqq%2FzpgYotlROs3cQ%2BNEB34T9sOykh84rJHrpD0yVBx8ILIAG6Jn40%2Bk9pZAW9K%2F0wd62Jlo4kwpfwiOF9%2FCOatZi75Ur6y2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d717e9fcbaf97c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 7 x 11, 8-bit/color RGBA, non-interlaced","md5":"1d3364063dfed42858dddb89b22c4d71","sha1":"6d66d841a97e61c64dac75e15006bceedd7a0f93","sha256":"207b4691434677f319a50bd137a579be31f50c6c47ddbc3e2daa6eab7b9b05a0","sha512":"280a18a864ffd4963331d31553c9aad4dc519c89fcd32f46f06abde3289e28b0e17c292b8cb42ce8f06dec8863fd1345522ada523e20a1933f9dacde17cd0c93","ssdeep":"","tlshash":"fcd023c20191892ce15471331782e030c0324d01992083cc1f12e02b3f72601d43a021","first_seen":"2023-07-20T05:21:02Z","last_seen":"2026-07-25T02:29:56.446191Z","times_seen":1010,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/plus/plugin/css/to_bootstrap.css?ver=1598106537","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet73041.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 04:44:01 GMT","end":"Tue, 12 May 2026 04:44:00 GMT"},"fingerprint":{"sha1":"89:AB:39:9C:B6:0D:95:72:EB:96:7D:5D:F9:1C:25:96:0F:C5:45:85","sha256":"73:4D:65:96:80:6C:A9:02:46:42:46:09:C1:28:EE:6B:A9:B3:6E:60:17:CE:1B:87:E1:06:AB:56:FD:F8:B7:82"}}},"request":{"raw":"GET /plus/plugin/css/to_bootstrap.css?ver=1598106537 HTTP/1.1\r\nHost: bet73041.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkRjdVpReWR0bjd4R1J0SHV0UFJ0WFE9PSIsInZhbHVlIjoialRRZEVRQlR5MmkyR01ma3hjYTFsZlRiTDJZUGpIY0U3bkpVNlQ0MmZYdmd0aHRTeDJCc1hcLyt4K2V6cjAyNUg0WVdzdVlLbE5FY0ZJUzJWMEtkNWxnPT0iLCJtYWMiOiI1NGNjNDA2ZDVhMDEwMDJmY2JmM2JjNjFiNzBjNTYxODIwNGI0YTg2ODY0M2JiNDg0YTVhMzkxYzYyOTc4NTczIn0%3D; vanguard_session=eyJpdiI6IjR0ajRzK3FuNUowREdzNkg3U3p6UGc9PSIsInZhbHVlIjoidlpWWCtCeTNyZVRVWW12TWZCZmp0NjZmbzF0eXJNMU5iMXdWUmhlb2g3TGY1NHdydjV2WTVwS25QTWVPbUh5YXJTNmVzTjVvY0YrMGxJbXkwRkhWMmc9PSIsIm1hYyI6IjM1MTg0ZGU5YTRlZTJhNzI0MDUyYmQ2YzY3ZjgxMDE5NjRlNzlhNjVjYWZmYmM0Mjk4YWIyMDJkZTZhNjExMzEifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 14:15:41 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nContent-Encoding: gzip\r\nEtag: W/\"5f412ba9-2dc4a\"\r\nLast-Modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nX-Bos: b83\r\nX-Cache: UPDATING\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":187466,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (386), with CRLF line terminators","md5":"8778d79f7633526cee2d636c518d9d76","sha1":"b2e715b1c401220e8165353c60d1e3b3815cdb60","sha256":"de3c1a93b240cc733fec329f2272d3b640ffa5bb736ee5df966745c20aa71d32","sha512":"13eebee14a8f011114e3352939d8f0440dcfa3a28f3f0737126b661d669914ae97534f029fab80fa9d0bfa376ec68b86b86e2fc18b5aa844fd7b8cbe397e7eb8","ssdeep":"3072:v4rq/Ei8U6V3/k1UqQGQr79YiVk/UOiCYdf4Q4t1v1S38pWLgdXyLSJeFR+PfmgM:v4rq/Ei8U6V3/k1UqQGQr79YiVk/UOiP","tlshash":"a604a9989b003bc2a231867c736f4d01bf8881a195ea4d3db75f33785e679e66133e85","first_seen":"2023-04-15T09:13:24Z","last_seen":"2026-07-25T02:29:56.432795Z","times_seen":5038,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-04","alert":"Phishing Block","trigger":"bet73041.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/css/custom/login_custom.css?ver=1663905027","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/css/custom/login_custom.css?ver=1663905027 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: text/css\r\ncontent-length: 92\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 105\r\netag: \"632d2d03-69\"\r\nlast-modified: Fri, 23 Sep 2022 03:50:27 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2BLPNGLTlU8pw9C82cAsE9t9V%2B2nuYnPgAqoGeG5NqzJL9R%2B1ULK%2Bel5jVuxtQeqUiSZGUH9G2oFTv7Vntrihv0HBruulxushs8EilZDj4zFSA%3D%3D\"}]}\r\ncf-ray: 9d717e95adfd4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d520ae5e8e22ca748c7a9f42456b2999","sha1":"bc32a4581b85bbba126872bed2d05be6e8db1c96","sha256":"2ef18a39610b5f98818cd76249061e93a4bc8c01677b51d73ea80fd3b1519865","sha512":"2a6bd8693789250119a0a9fb8d109eea7ff436ac974ea547b5ae7282d4e6450f2c1fc7c076486395d056ad7cc775f3ff5cbf1cc08ce718e7f5e2a58e0ce90ad8","ssdeep":"","tlshash":"1db092900c5a4f238407c595689a87018e3d90219f888f2f0c3928a4ca8af1410a6670","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T02:29:56.441969Z","times_seen":5048,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":689,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/js/custom/main.js?ver=1598008226","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/js/custom/main.js?ver=1598008226 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Os9eEdnY0pA7TPF10MhtcY2ArxmYym%2F%2FlgpLyP5sbP4BANIB%2B1%2BUbkkk9QRNC0hzJslUanoSkQdIe8X%2Bths1OzREQcc87VSFm126%2F%2FsYSMK9w%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 21 Aug 2020 11:10:26 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"5f3faba2-78d\"\r\ncontent-encoding: br\r\ncf-ray: 9d717e95ae134b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1933,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6a579f2e4d3b31b3ea017e7b03a475dd","sha1":"8d9a6430face051ae1365d421f15c60cff36613c","sha256":"ca0d1288490dab47eb98606d7e519b4be96e1d5f354b8cf4a6ef39dd1846c41c","sha512":"e5c65863509fb786d1a2ac8a1c0e0ec1446158037079a067eb6976040a0d912e326c2254e7968a7e22ae794d3adad6b9bfccbd2a4eb35dad622676d3a989d742","ssdeep":"","tlshash":"1941cc1df9f665c208b730164f3f451c2163a81f6a09ce40395c65c09fa267ed2dbeba","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.408998Z","times_seen":5056,"resource_available":true,"data":null}},"time_used":729,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?13d000e86c487ab21ddde56b764037d6","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:43.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?13d000e86c487ab21ddde56b764037d6 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11297\r\nContent-Type: application/javascript\r\nDate: Wed, 04 Mar 2026 14:15:44 GMT\r\nEtag: 84f0ad088a31503e00bbc3bf02623b7b\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=C5D66815DD70C81A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29903,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (627)","md5":"8a3120a2c56cf7e0e0ae06f0aab4a7c5","sha1":"c35c4878608370503a913aa740feb9545bc078b8","sha256":"56cace55e7a6d9d9ef32c45d820f22ae94a0719a44c10f82ab6b1fdf46c5d047","sha512":"58498956ac2560dfe8e37127719c84472dbb890e9724c46301a9998a3c76b5a195883e0ca527afd009c23e07c3bfeb37ae1545c6b58faabccb16dab7b0b887d9","ssdeep":"384:12JSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:124VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"f8d2c9a9b282713293a324a5153f324af17b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2026-03-04T14:16:04.47469Z","last_seen":"2026-03-04T14:16:04.47469Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2048,"timings":{"blocked":895,"dns":296,"connect":197,"send":0,"wait":257,"receive":1,"ssl":400},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.81","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T14:15:38.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet73041.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 04:44:01 GMT","end":"Tue, 12 May 2026 04:44:00 GMT"},"fingerprint":{"sha1":"89:AB:39:9C:B6:0D:95:72:EB:96:7D:5D:F9:1C:25:96:0F:C5:45:85","sha256":"73:4D:65:96:80:6C:A9:02:46:42:46:09:C1:28:EE:6B:A9:B3:6E:60:17:CE:1B:87:E1:06:AB:56:FD:F8:B7:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bet73041.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 14:15:39 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nCache-Control: no-cache, private\r\nContent-Encoding: gzip\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6IkRjdVpReWR0bjd4R1J0SHV0UFJ0WFE9PSIsInZhbHVlIjoialRRZEVRQlR5MmkyR01ma3hjYTFsZlRiTDJZUGpIY0U3bkpVNlQ0MmZYdmd0aHRTeDJCc1hcLyt4K2V6cjAyNUg0WVdzdVlLbE5FY0ZJUzJWMEtkNWxnPT0iLCJtYWMiOiI1NGNjNDA2ZDVhMDEwMDJmY2JmM2JjNjFiNzBjNTYxODIwNGI0YTg2ODY0M2JiNDg0YTVhMzkxYzYyOTc4NTczIn0%3D; expires=Wed, 04-Mar-2026 16:15:39 GMT; Max-Age=7200; path=/; secure; samesite=none\nvanguard_session=eyJpdiI6IjR0ajRzK3FuNUowREdzNkg3U3p6UGc9PSIsInZhbHVlIjoidlpWWCtCeTNyZVRVWW12TWZCZmp0NjZmbzF0eXJNMU5iMXdWUmhlb2g3TGY1NHdydjV2WTVwS25QTWVPbUh5YXJTNmVzTjVvY0YrMGxJbXkwRkhWMmc9PSIsIm1hYyI6IjM1MTg0ZGU5YTRlZTJhNzI0MDUyYmQ2YzY3ZjgxMDE5NjRlNzlhNjVjYWZmYmM0Mjk4YWIyMDJkZTZhNjExMzEifQ%3D%3D; expires=Wed, 04-Mar-2026 16:15:39 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nX-Bos: b83\r\nX-Cache: BYPASS\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121751,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"77298ab83b1f3971b91085d59d6125c8","sha1":"cb3f19099f22bcd40ceeac8004f1b475357ba5a9","sha256":"2eddd90a139423c8fef92507c8946ad5d6ea89a63257e6a4fa97b8f7f3db35a6","sha512":"926d8863668b4930cf5f7dcc7847ab1b51b8dad906a1250ff24ff2a1ffaa8beaeb6ff10c8466b562e4dea0b841bc2b6c3c675ecbcfa2ff5197cb92ecf69f0507","ssdeep":"3072:ya7fgp1KDT+nFQCRIXsQoFFAFhtRhQSLRvMBsy4sH+V7r:J8bq6nFQCKzUeUaEB940+B","tlshash":"01c3128c4decfee840fc688b105ee4bd482e4f93d2b96e9c9d506c2581635acbd69670","first_seen":"2026-03-04T14:16:04.48811Z","last_seen":"2026-03-04T14:16:04.48811Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2665,"timings":{"blocked":569,"dns":68,"connect":249,"send":0,"wait":1265,"receive":255,"ssl":257},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-04","alert":"Phishing Block","trigger":"bet73041.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/js/www/decrypt.js","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:40.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet73041.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 04:44:01 GMT","end":"Tue, 12 May 2026 04:44:00 GMT"},"fingerprint":{"sha1":"89:AB:39:9C:B6:0D:95:72:EB:96:7D:5D:F9:1C:25:96:0F:C5:45:85","sha256":"73:4D:65:96:80:6C:A9:02:46:42:46:09:C1:28:EE:6B:A9:B3:6E:60:17:CE:1B:87:E1:06:AB:56:FD:F8:B7:82"}}},"request":{"raw":"GET /js/www/decrypt.js HTTP/1.1\r\nHost: bet73041.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkRjdVpReWR0bjd4R1J0SHV0UFJ0WFE9PSIsInZhbHVlIjoialRRZEVRQlR5MmkyR01ma3hjYTFsZlRiTDJZUGpIY0U3bkpVNlQ0MmZYdmd0aHRTeDJCc1hcLyt4K2V6cjAyNUg0WVdzdVlLbE5FY0ZJUzJWMEtkNWxnPT0iLCJtYWMiOiI1NGNjNDA2ZDVhMDEwMDJmY2JmM2JjNjFiNzBjNTYxODIwNGI0YTg2ODY0M2JiNDg0YTVhMzkxYzYyOTc4NTczIn0%3D; vanguard_session=eyJpdiI6IjR0ajRzK3FuNUowREdzNkg3U3p6UGc9PSIsInZhbHVlIjoidlpWWCtCeTNyZVRVWW12TWZCZmp0NjZmbzF0eXJNMU5iMXdWUmhlb2g3TGY1NHdydjV2WTVwS25QTWVPbUh5YXJTNmVzTjVvY0YrMGxJbXkwRkhWMmc9PSIsIm1hYyI6IjM1MTg0ZGU5YTRlZTJhNzI0MDUyYmQ2YzY3ZjgxMDE5NjRlNzlhNjVjYWZmYmM0Mjk4YWIyMDJkZTZhNjExMzEifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 14:15:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 531\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nEtag: \"65572be5-213\"\r\nLast-Modified: Fri, 17 Nov 2023 09:01:25 GMT\r\nX-Bos: b83\r\nX-Cache: UPDATING\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":531,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"1d1d23f897c7f9fa4b24eeb8159d7e21","sha1":"9c6ab5fed65abe81454978f1e844c4f36d61a1c7","sha256":"8da1db8adc85dc835413880c71cc811c762e48018590f9a991115e83a722c869","sha512":"4d258cf5b37b503615a1373aebf3474ec8f94351455729665223a9318067ca6b815d0bf3c265ead937660bfb3b0e75b25f450ef1b235a64b32d87df01e1b8e32","ssdeep":"","tlshash":"b9f0bec8adaffdd4add295d2627ec809a99315430209df52b688ac1c9fc80281a2b0f1","first_seen":"2023-12-21T07:44:20Z","last_seen":"2026-07-25T02:29:56.42339Z","times_seen":4755,"resource_available":true,"data":null}},"time_used":1727,"timings":{"blocked":511,"dns":1,"connect":255,"send":0,"wait":701,"receive":0,"ssl":256},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-04","alert":"Phishing Block","trigger":"bet73041.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/common/storage/cms/cms_1079.webp?ver=1770027519","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /common/storage/cms/cms_1079.webp?ver=1770027519 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6734\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"698079ff-1a4e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:07 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 169887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NnpThvr2Qwb8dVq8694bxvVoaT1pCsTNKI4X1jiKf107eI7wEUfeKEf%2Bb9nCxYAqoNEYu7gUTbPQ63Xm%2BYRWd8naKw0DpvY2fFICSGxGjkpYFQ%3D%3D\"}]}\r\ncf-ray: 9d717e95be274b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6734,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b164c8c9063157fa2fcb5fa3298b851","sha1":"7c967561db4876e2414e5c26653010636232281d","sha256":"42769c9ea8ef671c0ac3c50c8171171df0caf6f5472475bf37d5893230966184","sha512":"9b49422986ce5325354062a4cb0a4ace7bc39b1fccb457e55dc4bfe1e95c7be8e5fcf443e66487383f56e5ba534c63fde96d3b4853c1a80b1629cb890449b4e1","ssdeep":"96:PY7Zo5bdSw55l+aoVpwQA/YlunnGrCP63N+0Lgh9PHz7X5MDjXK3qv811opu0Tf:PIZo3Sw55yfA9Iu6o0Mn7GD7K3K8Xz+","tlshash":"1bd19e60e87cf8b32083d72723d9a57436cf9bc222c90785349bcdc329a56b2a55099e","first_seen":"2026-02-02T21:06:37.60327Z","last_seen":"2026-07-25T02:29:56.412331Z","times_seen":50,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/plus/plugin/js/bootstrap.min.js?ver=1598106537","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet73041.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 04:44:01 GMT","end":"Tue, 12 May 2026 04:44:00 GMT"},"fingerprint":{"sha1":"89:AB:39:9C:B6:0D:95:72:EB:96:7D:5D:F9:1C:25:96:0F:C5:45:85","sha256":"73:4D:65:96:80:6C:A9:02:46:42:46:09:C1:28:EE:6B:A9:B3:6E:60:17:CE:1B:87:E1:06:AB:56:FD:F8:B7:82"}}},"request":{"raw":"GET /plus/plugin/js/bootstrap.min.js?ver=1598106537 HTTP/1.1\r\nHost: bet73041.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkRjdVpReWR0bjd4R1J0SHV0UFJ0WFE9PSIsInZhbHVlIjoialRRZEVRQlR5MmkyR01ma3hjYTFsZlRiTDJZUGpIY0U3bkpVNlQ0MmZYdmd0aHRTeDJCc1hcLyt4K2V6cjAyNUg0WVdzdVlLbE5FY0ZJUzJWMEtkNWxnPT0iLCJtYWMiOiI1NGNjNDA2ZDVhMDEwMDJmY2JmM2JjNjFiNzBjNTYxODIwNGI0YTg2ODY0M2JiNDg0YTVhMzkxYzYyOTc4NTczIn0%3D; vanguard_session=eyJpdiI6IjR0ajRzK3FuNUowREdzNkg3U3p6UGc9PSIsInZhbHVlIjoidlpWWCtCeTNyZVRVWW12TWZCZmp0NjZmbzF0eXJNMU5iMXdWUmhlb2g3TGY1NHdydjV2WTVwS25QTWVPbUh5YXJTNmVzTjVvY0YrMGxJbXkwRkhWMmc9PSIsIm1hYyI6IjM1MTg0ZGU5YTRlZTJhNzI0MDUyYmQ2YzY3ZjgxMDE5NjRlNzlhNjVjYWZmYmM0Mjk4YWIyMDJkZTZhNjExMzEifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 14:15:41 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nEtag: W/\"5f412ba9-90b5\"\r\nLast-Modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nX-Bos: b83\r\nX-Cache: UPDATING\r\nServer: nginx\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-25T21:26:48.843997Z","times_seen":96474,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-04","alert":"Phishing Block","trigger":"bet73041.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/js/unite/share_unite.js?ver=1749181409","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/js/unite/share_unite.js?ver=1749181409 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=70jX0fLzkmbiXv61e%2FXrl7Efqu3vb6Pv3692EoQ62UmhbFW5ODmOPB8mwymwKhhHRt6M3rFOLnBA5duEIT1GHQvRuskysM7Bdp3GdpJtRymaSg%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 06 Jun 2025 03:43:29 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"684263e1-a6b\"\r\ncontent-encoding: br\r\ncf-ray: 9d717e95ae174b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2667,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (527)","md5":"00c6288b67f7750a75b6e9abbf74c8a4","sha1":"5f464f4ce28448acc1c2fe825d4218795b023db4","sha256":"20327edf72e6632c450e8f8e443db2f728361f74b68697932491108c7f483b9e","sha512":"39dac004bb9b904ec4c4bb4d4963c3b8c4c9d98f9a80d90e53134e28c6055831652f0911e59b58f54c4b1e7156d8aba181b90ee3fe0ba6aefb67162b990787c0","ssdeep":"","tlshash":"37513127e6b82006207730a7deee346b556a8426b3417f06b7bc01a54fc58ac7f9270c","first_seen":"2025-06-07T06:32:46.623015Z","last_seen":"2026-07-25T02:29:56.404775Z","times_seen":4086,"resource_available":true,"data":null}},"time_used":707,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":707,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/css/jquery-ui.min.css?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/plugin/css/jquery-ui.min.css?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"5f412ba9-7d4c\"\r\nlast-modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GkJuBQY3nEIlTsdXzboaPFdKM%2FoReaq1n%2BKhb0oScJMU0NeW2uFoUUEeZMXBfMqEe01QkpUMHuPVv%2F%2B%2BqG3h5w0tLxNWxr4E%2BwosW3SdT9Uupg%3D%3D\"}]}\r\ncf-ray: 9d717e95be524b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32076,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29137)","md5":"0b5729a931d113be34b6fac13bcf5b29","sha1":"88ba90d2d2944315afd28a706ee5715ed980c634","sha256":"ac1c8f94750b39b12327a5d0c56fdf946dabfb6d91e5d2a202879ff9a5d67e29","sha512":"68e1b473a9cf3731a4fb9ce3c3225aa1152009d3ab7d20e198c203daee3e388b25af41a3a4b2a8ed79b4028df19a93384fc026228b9192ac23d67add56c2ca11","ssdeep":"384:pCwiEt7lcR8lOXHc11evBMzymUh+4C6G/zDcSc7nfZBhVi:slEtiXHcEBMznURC6G/zD8BhA","tlshash":"ade25330a5c2242dfe33c23060e11ef4523bc146eda65fbda09af65953ea8e4c47b971","first_seen":"2023-03-10T04:06:13Z","last_seen":"2026-07-25T16:35:45.548277Z","times_seen":11826,"resource_available":false,"data":null}},"time_used":1058,"timings":{"blocked":101,"dns":40,"connect":10,"send":0,"wait":845,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/css/custom/header_custom.css?ver=1738643282","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/css/custom/header_custom.css?ver=1738643282 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: text/css\r\ncontent-length: 2028\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 6702\r\netag: \"67a19752-1a2e\"\r\nlast-modified: Tue, 04 Feb 2025 04:28:02 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MkzUIv53y9cUlUwQpaVq%2Fz4WEBLxlJC35g2A%2BOxcgF4No9z1EpyUIT7TxLUqAzsZ8EiuF0ho7WxEOOAf6S5RMM8H1l3GdaV1w6yuV8O2joCQ1g%3D%3D\"}]}\r\ncf-ray: 9d717e95ae014b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6702,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9bb336c25275a44be055593cee547e55","sha1":"881e45a4d3bfc4ff6e3eb29bd7dad13fef00cbb3","sha256":"f093c1ff1c5576fe70b99542fa3ec95459e2353380574e6b3b9621d4d0d5e310","sha512":"94d669998c59ce5b10a47738e1b6ac68c54a590afe0ed793c08d57f2dbd4e334d8586dc9d76e0704adbdc2bf01689c681453a796605f716a56f8072934c40674","ssdeep":"96:585UOKrCo+wyCWiV9PR6FS5+j60XF1RnfgE6Gvg1CFcSk6yx2/kK5wN0DzMaZ:6oNRRrPIFW+j60XXFcdbLCvMaZ","tlshash":"a5d174c167e16448b526c5f2bc616a68635f6052c40fdd2cf3f8246cddee1c6a376368","first_seen":"2025-02-06T13:25:38.25631Z","last_seen":"2026-07-25T02:29:56.424942Z","times_seen":2897,"resource_available":false,"data":null}},"time_used":743,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":691,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/footer/footer-gt.png?ver=1600747940","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/footer/footer-gt.png?ver=1600747940 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 360\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"5f6979a4-168\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:07 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 169887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mn1aMaeRJ6XpbaZu90ErpY%2BLg8xJI2VBjQyo32yZw37yip50lea4gXVxkbh0dy0QfCh1aZchegmzHXXtW1zT4KelWZ0chU%2BMaTqarvGCYNGKjQ%3D%3D\"}]}\r\ncf-ray: 9d717e95be404b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 37 x 32, 8-bit colormap, non-interlaced","md5":"c8b8b09e3d3f8a69599182c5df680895","sha1":"0522f162609c91017ac5977eebb1ebd207a57525","sha256":"ac257cdb0555003da4b484189c57e37c9758258b6fc0fa653ce17252c6e54f41","sha512":"b3d5b74b08547d7084a4ba0cba601c51ec7cb4ba9ad3bd05471f7cc3ec0ee7f6b0b954d8bb20439928be26a6a0f2e7f92ec27b95ff04fc326074ac0fe14efb47","ssdeep":"","tlshash":"9be02051ff2ad839d1e75f755adf4185dc9ed0f8fc23030632520d10162e890a3b4997","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-03-19T07:12:23.034263Z","times_seen":4987,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/assets/js/caller.js?ver=1675418258","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /assets/js/caller.js?ver=1675418258 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HCvt9gOe8UbyropIPUUHioh%2FHOfgllUFozE%2F4NC4U%2BRbFU2ysl96rRSnyz5WvwMMpQmW763Qr35ULcUeXBSZX1wo10XCKcwS%2Fv2PNLkw9ZZ%2B1Q%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 03 Feb 2023 09:57:38 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"63dcda92-1122\"\r\ncontent-encoding: br\r\ncf-ray: 9d717e95ae1e4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4386,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4e7441dc033395b76a96b25b6efef0f0","sha1":"c833e33f4a95efa559a847dfff036cb904260b48","sha256":"80caabbe50f5f83254e2545d01bacf299c7f417a103e912bd41d6c330a6e4f86","sha512":"e96041ac2b7106fe9aceddc1faa3e996ffaa97945d56cff7b3ca0697492cf6ff53f6fc3826319a85eb360e684a166c0c8c075118a37655312dfbf231ff9aa167","ssdeep":"96:veR5suijTWxKhgCBTSCkAjnhefPMm03OMu9eqeeV0vMu9eqeeVqgYi:veR5su+TWsU1eO70v76i","tlshash":"dc914212de042051f76332b85a55661f6131684f7f8a888dbcbc747f9b70acb857d189","first_seen":"2023-03-13T18:11:33Z","last_seen":"2026-07-25T02:29:56.41883Z","times_seen":5054,"resource_available":true,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":737,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/js/custom/moment-timezone.js?ver=1580697220","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/js/custom/moment-timezone.js?ver=1580697220 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RIe%2F9amhql8TTdAWLx5SHRscNDFDIbeEtlhQs4CZp4XKmgoNt%2BLEszwK2v3nZakeRWLH2ue9wvjr5qMzHGbbXumBUJiIsIQnZ8lzM6hc0NuHaA%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Feb 2020 02:33:40 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"5e378684-2feef\"\r\ncontent-encoding: br\r\ncf-ray: 9d717e95ade34b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196335,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1434), with CRLF line terminators","md5":"bc45c47c99fe4d26b2b24e46cec399ad","sha1":"221067a4147ece74b03934528ad61bcd4026e477","sha256":"4a65c2af68e89944c3da128c9b329596d930ce09dc9b8ba726b640d812e1fd88","sha512":"1658e474170022d40e698a422f024b4872bff33c78af1dbe98df3a6a99a0f1cd1eb36725ac9fca7bc1264ea491d0a19a2ee0a3a952adba4aba3242c06f830f93","ssdeep":"3072:olpkvlaDD/DCD/DCD2iqWCPrMBq1rGPuAZDDD1DDWoST+piMhrlon5Blu4hK:CkbW0sNpiMx","tlshash":"f714b0292617bb44e459c08bfa3779c0caade18a940614d25f7d57b31fa37e2de68c03","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-07-25T02:29:56.393971Z","times_seen":5062,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/index/en/bg-sports-title-white.gif?ver=1678955880","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/index/en/bg-sports-title-white.gif?ver=1678955880 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:41 GMT\r\ncontent-type: image/gif\r\ncontent-length: 536\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"6412d568-218\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:07 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 169887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eAPnrs%2FzhaeiEzKUkAjkutXnbzoUY9E1VDWOP55uG%2FckNoluylkjg1fnNhnGayaZMyX9Bk3kZO2v%2BTBsu%2Bu7NCpEUBo3xwUEQ%2B%2Be9P51lzogRA%3D%3D\"}]}\r\ncf-ray: 9d717e95be2a4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":536,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 130 x 38","md5":"3ecfa3bc82874fe5208d9e9924cebd51","sha1":"e801a0bb64370407da31412e432326e8b9887a73","sha256":"1e59d016b5ca6a09c1df3fb8c51d3cdd0e2dcadb980aca2f0f5c81a8216e4ec2","sha512":"7d808fc92d38e316ee78d5023ef50c386a219671a0d99d8c58b85c4ed8ff5a0de1d6b5e6db6ff52d61008ea589b9eed6838d340ee8c0a04641893f9230e7deea","ssdeep":"","tlshash":"26f00569f361ddd4cfd832bc5301102526646735260d1ffa411135e5334dc7b505c5a8","first_seen":"2023-07-20T05:21:01Z","last_seen":"2026-07-25T02:29:56.436689Z","times_seen":1010,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/index/en/204x30-live-streaming-02.gif?ver=1678956392","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/index/en/204x30-live-streaming-02.gif?ver=1678956392 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:41 GMT\r\ncontent-type: image/gif\r\ncontent-length: 425\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"6412d768-1a9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:10 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 169887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zxj74UQljXITuieIjjlQdjAapW3er1VFq8O0hSIFoT4MmGHK0SbayRSBsOizHrFVvj1UZXRMmf1Ld8HhHvSGwaUmpPes4RBt6S4fVsnfUU8vIw%3D%3D\"}]}\r\ncf-ray: 9d717e95be2e4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":425,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 204 x 30","md5":"63c123f206f80da19ec63d929f8e5f45","sha1":"41fbde8999e4486fc23779736c4717dff55702b6","sha256":"7ca0b58a9b93be2acea0a96626d5c6597eefeeee1602330f60e2f5b54dbef61a","sha512":"26a7fa7546037e3961e73f71c45a6fba16af15012af3ddaff41c0fdacd01e4826dceff00cfa8653313480a1bc899739cbf31bc30266c9e317cae9da9a1e7563f","ssdeep":"","tlshash":"67e060eef04444ece90ebd3b8b081204fe9c57a001524fe18c7021e488a77eb33a838e","first_seen":"2023-07-20T05:21:01Z","last_seen":"2026-07-25T02:29:56.425686Z","times_seen":1010,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/footer/footer-gibraltar.png?ver=1600747940","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/footer/footer-gibraltar.png?ver=1600747940 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 616\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"5f6979a4-268\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:07 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 169887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXqZi1ar4c5V8ME%2BCzuBoe04OfwHTxVRY%2F7ZTS2qiw7%2FDZZH3r%2BHraVuW7kfSMSdBmQfV33Sro55Y4bEi0CtT8d%2FNnpK90l5RoQcZHNSOHyE2w%3D%3D\"}]}\r\ncf-ray: 9d717e95be464b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 32, 8-bit colormap, non-interlaced","md5":"d78068aa4f691e86a736d5ec0fa45aee","sha1":"30e0842662a7f97b84289fb093c3755b99503e40","sha256":"12d00217bbf0ba6959f43b8ad1f5bbd0b9f7b63ecd6be5650bc91aef21716097","sha512":"a0f5aa3f4c004a5ba147fa4fbe283d1e06448deed3f11112d8700e6c3ac85b67868962e75d406dfea5a416f3c69c7d43ee5444e7e7db242c7c5dcdeff94841cc","ssdeep":"","tlshash":"f5f002d24bc2acbc90a6d925ab2c97a9e5c911245623ef3d91a4e018f447260a4d5786","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-03-19T07:12:22.987164Z","times_seen":4988,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/css/common/bet365_style.css?ver=1685497875","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/css/common/bet365_style.css?ver=1685497875 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"6476a813-3db7\"\r\nlast-modified: Wed, 31 May 2023 01:51:15 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dW5q0WzqLHX5DdmDydb93tMtCv8CA1UCqJYFzhlOr%2F8ggKmFrUZ%2FM4QWceAakzrLrutmPDqKDSkiYTuoUI38dFp3biFLJBVrLVGIA1a3lWuQdg%3D%3D\"}]}\r\ncf-ray: 9d717e95be4e4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15799,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"63d91c124b45be43dfba690f9045f34b","sha1":"e387df588d63853316200db1994fb05f2971dcdd","sha256":"f2f6ae08f73e63fa21a560b88fdeb49afc9dc7386c6db1bfb317904a3dc3bf85","sha512":"b7c973f6d4ef57c03d0ed0f2d27d87a29fa9bca34222d3fc0486f23739c871cfe2f313d9d8cf6255d07cd8a9812cf45aaa1a49e4cd2253434e3c1517a3bdae76","ssdeep":"192:kI/btVaRFgGntC76JlL/mt8ZM2Qpdr/0CCsafFUsOA8mxiqfFK4PNlQVOwGWNOn9:cF3LmaFU0FKfIXLAG","tlshash":"716262f69b671c45b926c1a9af68a7c133695213c00dc92d7fd4721c8fce5e898e238d","first_seen":"2025-04-11T10:47:55.702437Z","last_seen":"2026-07-25T02:29:56.431691Z","times_seen":2891,"resource_available":false,"data":null}},"time_used":924,"timings":{"blocked":107,"dns":50,"connect":11,"send":0,"wait":694,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/css/custom/login_modal_custom.css?ver=1726650059?v=1772633739","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/css/custom/login_modal_custom.css?ver=1726650059?v=1772633739 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: text/css\r\ncontent-length: 772\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 2491\r\netag: \"66ea96cb-9bb\"\r\nlast-modified: Wed, 18 Sep 2024 09:00:59 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4cH3sT4Y60Lc7ZGosMMOflD1g%2FR990uxXnlAYoZC8ld1iSsa0SOQAUAbnTV5IilmGsTy4ATggVTKx8hStnBNK%2BOT3hxB%2B06H3ietMk0KCvN48g%3D%3D\"}]}\r\ncf-ray: 9d717e95adf94b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2491,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"1c9324c073c8d8db7f32df740feceace","sha1":"5465a38fe6f669c4df9a2265a654c0815bb7373a","sha256":"79ecbd9aa7b6311f29cda59980feac8ac8263131b8089580f60f4ad6188f86ce","sha512":"2dd2e0b5645e119bcb2357c489d55fc76cedb95e19750489a32bb0974cfc1e974db62c06ee1f3b738114c3310776c73f59ad69149348a1701ea87d21efe3544d","ssdeep":"","tlshash":"215147026ebf2e93908c406d35de4e84225d400bc569ee2e3ff723648f5a6a6a177f04","first_seen":"2024-09-19T13:36:38Z","last_seen":"2026-07-25T02:29:56.441048Z","times_seen":2982,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":655,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/common/storage/cms/cms_1081.webp?ver=1770027519","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /common/storage/cms/cms_1081.webp?ver=1770027519 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2908\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"698079ff-b5c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:10 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 169887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NBTkFhZVZKeotIYbCgr1gbr84Rp6nhmYfreNgSog1Obsk7fzKgzamMetj5Hhiex4pgRTjaPZbTNx9wjrW316C%2BElCMF%2BvbyXNC9kvZBZw0pZTA%3D%3D\"}]}\r\ncf-ray: 9d717e95ae244b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2908,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"416ff0c16af0dff01b882b21bf6cba00","sha1":"40c1de608f455121728182eb5354d087a6b40694","sha256":"10c6ea4e033e35feeff885e6be9ab177afb6cff709abaf5a0dfc9c4df0e8929f","sha512":"a3974291ee961b41b2cb3d7bdd17222c4f7bbe19e609d456f145c7ea4c019240bc35c28c79698aba3aa3f6fc144bb59d551c2f8905b18b3d5ce12c63b75f214b","ssdeep":"","tlshash":"c2513a845288a8dec2fd85a8d9d94701a5b0cc591c7f426074b8d5e663b38c88a78a79","first_seen":"2026-02-02T21:06:37.634962Z","last_seen":"2026-07-25T02:29:56.405379Z","times_seen":50,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images/dc_new.gif?ver=1597629314","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:43.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images/dc_new.gif?ver=1597629314 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/gif\r\ndate: Wed, 04 Mar 2026 14:15:43 GMT\r\netag: \"5f39e382-4e3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:09 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncontent-length: 1251\r\nage: 169887\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVkY9OmC8U2Mg9ZjmCe1VksMbchb6KbVbZfpnNhQe3wuZDnF%2Fxp9Kt8OpaqVW6Ro3QlbZkQ5cXCUkVntkBr1N7j%2BTY9%2Byz7JpCR7kAu3gRIHJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d717e9edb6e97c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 21 x 12","md5":"25f6274aa9e9e073709978b30cf559c4","sha1":"a7cbd2bfcc634f40df01e0195e2cd666a22a7291","sha256":"243406dc9776577510746308a2816db585b4abd09a64e1c761654316c0d9038c","sha512":"9149b9e16b06d6508ebebbf78a59ad26eb15ff35084c2bb6be8f08795884f4a914e24689fc2402eaae46819efddc37281b7d778c92d2bf66f8939a4ff9f02a86","ssdeep":"","tlshash":"7921570ad842bc40409c54f57af7a9271ba60980c9f4f5d6b4cdd81e56241b96c19bef","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-03-19T07:12:22.987654Z","times_seen":4985,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/common/storage/cms/cms_1201.webp?ver=1772627909","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:43.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /common/storage/cms/cms_1201.webp?ver=1772627909 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/webp\r\ndate: Wed, 04 Mar 2026 14:15:44 GMT\r\netag: \"69a827c5-a5d4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 04 Mar 2026 12:39:38 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\ncontent-length: 42452\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f2GUgzBgjqjhN2JmEVQQFVnHjl9zYQ5k6zTrvH1XkWZyO1zixive2FSo%2BHIg27N7fN9gocRHbadllC%2FI7SYT9aNte%2F59wPgkpApvDGF2nxbSeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d717ea11be297c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42452,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x420, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e1df94bcbc349674d2da4fcb39730e9e","sha1":"d7cf4a098773f75b2d00138a48469251ed7aa6d5","sha256":"5edc6ae66b0fda91c11f736c740b28d9394970b8d41d78af25d0a8af7ddaa585","sha512":"d3ee3beca3dfc10675c09318a997c832327909a327acb1d0b0ab4ed5c43430c0ede26efe3e1449a141f049dea75857ce49728b326fc365238bc6fe8fc5ffae93","ssdeep":"768:+Tn+HnxR1F+TfTvVNob38KUKKBPpHYc3Wj5QgT9tFW:cn+HnxR1w3VeHLKBhzWFa","tlshash":"8f13f1c04b7906a6a5f75e7ba36612a021d7fe7db3d5c33454af007794204a4fb22b8d","first_seen":"2026-03-04T14:16:04.533056Z","last_seen":"2026-03-07T22:25:05.084966Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1048,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":638,"receive":409,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet73041.com/member/call-request?check=1","fqdn":"bet73041.com","domain":"bet73041.com","tld":"com"},"ip":{"addr":"206.119.83.71","port":443,"asn":140227,"as":"Hong Kong Communications International Co., Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:43.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet73041.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 04:44:01 GMT","end":"Tue, 12 May 2026 04:44:00 GMT"},"fingerprint":{"sha1":"89:AB:39:9C:B6:0D:95:72:EB:96:7D:5D:F9:1C:25:96:0F:C5:45:85","sha256":"73:4D:65:96:80:6C:A9:02:46:42:46:09:C1:28:EE:6B:A9:B3:6E:60:17:CE:1B:87:E1:06:AB:56:FD:F8:B7:82"}}},"request":{"raw":"GET /member/call-request?check=1 HTTP/1.1\r\nHost: bet73041.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImR1d2NNS05VNUxtMUFkVUdrSTlOUHc9PSIsInZhbHVlIjoiKzUxUjBDb0JtT3M3VVhoRWQ2XC9BYXpsMm5mQkI0MUdIdlpZU3p6NzU3enZSVTRGditKTStOUlwvWHo3VDJHblwvTitMQ1hiWHNNOUc3VHlBaEtUVDcwWVE9PSIsIm1hYyI6IjgyYjM2NDQ2YzBiNmM3MTU0ZTdlM2I2ZjY3YmE1MjU0ODc5MzRiNDQ3MTAxMDYxNDU1OGFlYjBmOWI0OTk4ODcifQ%3D%3D; vanguard_session=eyJpdiI6IjFCTmRiXC9neGtzSGNMNVViSWRnWjdnPT0iLCJ2YWx1ZSI6IjRERjNIVFRrZGQxXC9JUjFXU2hkUVwvSGdKSUdlSzZnYVwvMnJkTTJZR0w5d3lweXlFZUlCZlVFeWZINXZyNTlsZzlybjlYSGxqNzlMSlhMS0xRSFVqaEpnPT0iLCJtYWMiOiI1Y2EwZjUxZmUxOGY3NTc1YTk4NTVmNzE1YTllZWQ1ZDExZjM2MTNiMTUwY2QyNTZmMTYxYzVmNmU2NDk4OWZmIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 14:15:44 GMT\r\nContent-Type: application/json\r\nContent-Length: 40\r\nConnection: keep-alive\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nCache-Control: no-cache, private\r\nSet-Cookie: vanguard_session=eyJpdiI6IktER2xDc09CZGd3ZW9saDZjQ2Z0dUE9PSIsInZhbHVlIjoiVWI5OWVCVTgwRGxQckFkenBpQkhSdW8weTJzSnZtXC9QSHhjNThMODRiTlpFQWJmamdhRXNwWjliUE1weFhndmp3RHhLV0ZDb2JYUlpPWmZjZmxwMnJ3PT0iLCJtYWMiOiJmMmU4YmQzMTM1Mzk5NzJmMWU3N2U4ZTAzYWIwZmYxZTgwMTFlZmRlNTdkM2FiOGExYTgwNGNjZTFmMDRmNzFmIn0%3D; expires=Wed, 04-Mar-2026 16:15:44 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nX-Bos: b83\r\nX-Cache: BYPASS\r\nServer: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"27a5688b27ae3688ca0183ce926be3c8","sha1":"fa4dec3b6af6674afd7b14710cac41b15ae75b29","sha256":"4359a477fc8cc8212517f5a190d4aa0a7cd1c85509d56d2a6a8efef408420ad7","sha512":"d73bb567a0b0280d42dda28c8e97725e96529072bd78d0844786e008d9ce3f89c7c3399eea85342be65d7b440d6023094b9f2f5d624e7dde0a46fbfb1484bc85","ssdeep":"","tlshash":"e19004cc7747575c040c40c54d44004453744d005c500c04445c11c534401570750401","first_seen":"2023-04-15T09:13:24Z","last_seen":"2026-07-25T02:29:56.41029Z","times_seen":4894,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":643,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-04","alert":"Phishing Block","trigger":"bet73041.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"bet73041.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/main/logo.gif?ver=1612839866","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/main/logo.gif?ver=1612839866 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:41 GMT\r\ncontent-type: image/gif\r\ncontent-length: 15313\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"6021fbba-3bd1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:07 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 169887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lRvinpP%2BIM0RKLr3XRvC2%2F6%2FMYM8mE7WOMhXBjeO8bwrIx4b3%2FGO2gSoE7Z3nXrylOzW14R0feFYDzo3U3uoT9sAcs%2FcByiyvESTKmyMPPKz%2Fw%3D%3D\"}]}\r\ncf-ray: 9d717e95be294b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15313,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 224 x 91","md5":"3719047940db89e415097aa46f3bfe51","sha1":"ffa944db5a95f8771081a2147ef08115095d55b9","sha256":"819ed93b5f94181c65947ee5e77fedd1237ab03f8c9d2ce75e2811405d0114f7","sha512":"fd156ce12d4ea6ad124da6388022dd6349d96c3b5ce05953850f91d6cea30a7215fd9aea4307650671c564b9ef15110beb89df019c25b9bee39963607761ba68","ssdeep":"384:WnG3n4ZBE8t/DRPm6/EG4U50BE8t/DRPm6/EG4U5+:WamBE8t/tPm6/EJBE8t/tPm6/E7","tlshash":"a0627c0dc17771fef15a3ab076223f090d9489b86d069ee5c81cabddfd8d04e4198ba6","first_seen":"2023-07-20T05:21:01Z","last_seen":"2026-07-25T02:29:56.420018Z","times_seen":3293,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/js/jquery.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/plugin/js/jquery.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=33wzGEzBUe4o7y%2Fw99KLX6DGY6Oe6s6hOMHqjf4ilKuF9XuozcvAbPo13PlobkFKk4AGJOd6KWi3PvjlvG0u7Bf37eQ4MrU%2FdXMdUF8spry%2B6g%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"5f412ba9-14979\"\r\ncontent-encoding: br\r\ncf-ray: 9d717e95ae034b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84345,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"f9c7afd05729f10f55b689f36bb20172","sha1":"43dc554608df885a59ddeece1598c6ace434d747","sha256":"f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c","sha512":"3dcae1ff6e98c64e3586be3eb14dd486c51f7d4e9fa1b8f9a628be4fbb6a9ab562f31f9b50e16d2e0c72b942bdbe84eee8e0ef87fa730db1428b199a59d88232","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ","tlshash":"ca83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-07-25T07:20:02.685262Z","times_seen":26154,"resource_available":true,"data":null}},"time_used":738,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":688,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/footer/footer-logo.png?ver=1600719130","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/footer/footer-logo.png?ver=1600719130 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 690\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"5f69091a-2b2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:07 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 169887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YgwNAka6yoTS0KPx4vJbUhHN4up2b1rAcRxNPwyGioCF41nqw%2BlGf%2Fa2ZnwMsOAYlOIQd3nzrtU%2F1Tr1juUUKrR5fFioXpdiTTOCJSZl6Rj32Q%3D%3D\"}]}\r\ncf-ray: 9d717e95be3d4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 19, 8-bit colormap, non-interlaced","md5":"b30ea49a2bcc7479a195bb1fc07bd031","sha1":"a7bbe06838b85840035172fa9a8ee6bd35c1c636","sha256":"08f3d508861fbb6e144807af6719ea78cf9c26e3c99a1cbd12f9d83fe9f0758e","sha512":"ac7f880c76eb7e3701046fc891bb9acc2540548431eff4552c3639dcc08b146f3ff973d050625edfbbe61407c36e36f03080d7380b4cc4cece176ea7cdfc4c3a","ssdeep":"","tlshash":"950162973981e41e91f65836d6a6b4a6a452960509e8c9f2a2db8c3c19204d0ee3e712","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-03-19T07:12:23.011485Z","times_seen":4988,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/js/unite/jsencrypt.min.js?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/js/unite/jsencrypt.min.js?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rREgZMh80pcNxiiCyi0b6GHAnyj2tex5tA%2BeFyP3veWYDos%2BNW%2FwZm%2FagsnJwuJj%2BplHPy5MSt5%2B3LMumQvLFon8siJ4jNEmLv61mQ1vBpnPrw%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"5f412ba9-db4e\"\r\ncontent-encoding: br\r\ncf-ray: 9d717e95ae1a4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56142,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13814)","md5":"64507221feddff84c80b99c98827d76c","sha1":"5c7000638c6bae1a1c448367822a8682d59d371f","sha256":"5a0be406a1bdf94a25a9d142d4124e3dccbdeb5593cd78fb0bd234df89dd7389","sha512":"cc3beba9e9c0d1e149642c41b2bcb351972f8a1bcd9445dbb5e32feb6c91c5d851e2cecad5a6b3f8b8ec4727e4e8cf9824bc80244baeaae20023c23c1a02c2f0","ssdeep":"1536:cJxLSEwwmr2yZPp8yQPj6OR1fdfqovoRonm7f6T:cPErPp8yQPOOR1fdfqg2l7f6T","tlshash":"cb43e9853ae6b075039a50f0051f084ab13ab92e192f44ecf699d8e17cb584d637ffb9","first_seen":"2023-03-07T13:16:24Z","last_seen":"2026-07-25T12:58:28.739379Z","times_seen":20181,"resource_available":true,"data":null}},"time_used":743,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":743,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=C5D66815DD70C81A\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=462284270\u0026si=13d000e86c487ab21ddde56b764037d6\u0026v=1.3.2\u0026lv=1\u0026sn=43065\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fbet73041.com%2F%23\u0026tt=365%E8%8B%B1%E5%9B%BD%E4%B8%8A%E5%B8%82%E5%AE%98%E7%BD%91","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:44.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=C5D66815DD70C81A\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=462284270\u0026si=13d000e86c487ab21ddde56b764037d6\u0026v=1.3.2\u0026lv=1\u0026sn=43065\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fbet73041.com%2F%23\u0026tt=365%E8%8B%B1%E5%9B%BD%E4%B8%8A%E5%B8%82%E5%AE%98%E7%BD%91 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Wed, 04 Mar 2026 14:15:45 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=A4F62912CB91425F; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-25T22:20:13.237206Z","times_seen":374863,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/plugin/css/sweetalert.css?ver=1598106537","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/plugin/css/sweetalert.css?ver=1598106537 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"5f412ba9-59ad\"\r\nlast-modified: Sat, 22 Aug 2020 14:28:57 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JTYz3b3qjvLinZcoRK69FAamW%2FReB%2B0N6h0O5l0NW6eZca%2BtLcI%2Br7lSRq6r9ZsbQR%2B2yapSv06OJhlU4Hh%2Bgm1P2vn4CDRh54f5opSbXxYxkw%3D%3D\"}]}\r\ncf-ray: 9d717e95be494b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22957,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d8cc26070373f41241f37ce5a9c9d885","sha1":"3ecb6f91187c0153724c950efcea0b0d944fd5aa","sha256":"460df149ba9d2eb000637d9bfb2df51c5080a19e9071ff4ed5a4b7e21a0bd2f1","sha512":"a10fd7b306bbe186c50c35066e45fb6491741c8ab161d6e8447069aa919e943b00768a3b65180195d68f6f2b7f4195035247d0b9115e5a758189a60bc1c04533","ssdeep":"384:MrFKaS31F8FkfZ6vFyFiFz2FFF01GF7xGxTxGxJwdD3qX1YtiemnEzpazAP:MrFKaS31eFkR6vFyFiFyFFFhxGxTxGxe","tlshash":"5ca223eb1de31284a727874553de4b2827384043a81bdcad77cd519ecf81eec21dab56","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-07-25T03:46:39.224772Z","times_seen":5515,"resource_available":false,"data":null}},"time_used":956,"timings":{"blocked":117,"dns":48,"connect":8,"send":0,"wait":719,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/plus/css/common/index.css?ver=1685095467","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /plus/css/common/index.css?ver=1685095467 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:42 GMT\r\ncontent-type: text/css\r\ncontent-length: 2379\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 8159\r\netag: \"6470842b-1fdf\"\r\nlast-modified: Fri, 26 May 2023 10:04:27 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EArx3X7KKfv9N8mMz3%2BX7kvKwh6wL0xvOvseBzuCdMByoJtaY4jSoti9J8CasTdn7bV0yGUSDvzVFTIomd5wAHpHlHfLzJITtH3YR%2BGNRLraog%3D%3D\"}]}\r\ncf-ray: 9d717e95be514b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8159,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"c572b5475cafa52665867ea34e941107","sha1":"9e84cb39ea5b4edd820afc675516b2da0afde1c4","sha256":"22fb660621cf5492145daf4e4c4dcf5671f19105dda41b1df6f5cc695dd906c4","sha512":"732b6a9c3c052a23b2a1030083111dd12c96a143df6db6c492c00f8860a69c3a6db12fb34883c0d5019dece30352ed53266e37d9fb0f0cdc0ab89b0807882a5a","ssdeep":"192:ucR93quipoSiBFT8mra9WJpCbYZbatUxT9k+OL/wskJY:Xp1ipRWFNa9WqYBdjY","tlshash":"81f111ba5bf71d42771281e5ab6eab504329e003910ee62c7fe0725c8fc629489773c9","first_seen":"2023-07-20T05:21:01Z","last_seen":"2026-07-25T02:29:56.40838Z","times_seen":1011,"resource_available":false,"data":null}},"time_used":814,"timings":{"blocked":-1,"dns":39,"connect":10,"send":0,"wait":703,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/index/g04.png?ver=1606874474","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/index/g04.png?ver=1606874474 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 11478\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"5fc6f56a-2cd6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:10 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 169887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=42nEGVqTHkstfdrrthP%2BmG6Fyn2vlt0N11a4IH5%2B1EGUjlxw9eylIi%2BTCvFnoJhTPZ72HIdiTBP0Sb6A5s7rkY41MhLgzYBSVGIZH9DkK85fgg%3D%3D\"}]}\r\ncf-ray: 9d717e95be374b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11478,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 271x81, components 3","md5":"6274335f5e37fb7e3aa19dba05a07ef3","sha1":"d54c0b0cccf2158aee56d7f1f465d5bb907edf06","sha256":"39d9bd9e19956bb52c4c880dc6987383c34dc0873aadaa6b3763e3421e06def7","sha512":"ed6c986810c46bcc66ab9bd9d3750fe4ff8c638904ad88cc6894ea00776d80da7b2bd6f8adb20a77c0ded5e7f5be805db96aa115426c1c32ecb2d6cafdcafefa","ssdeep":"192:unFWapk5PXHCbmhX7M4m2fHaDY4oHuB8NPwb5yTBw1+WlEaE+AYAtAcueGSHkOIv:unUapoXio/dX4qEb5x1plT+1fuepkOIv","tlshash":"1432b012c652ab01cd4998f4b8fe5905dea10e44dfc2fe45b6f2ce3d5cb09b06e97069","first_seen":"2023-04-07T19:22:59Z","last_seen":"2026-06-04T15:41:12.083496Z","times_seen":4786,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/index/footer_tindex.png?ver=1606876112","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/index/footer_tindex.png?ver=1606876112 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 30700\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"5fc6fbd0-77ec\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:10 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 169887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2BmWV0lpetzxB9RU9dh%2F796e9HUDIz7FvU%2FY9aqJTUUsLIjoWBBiAPADGEltOwrDIa%2FwmytC81G9bMbPOJVhnub3f%2B33eKwRX%2FjleMPSr5Ne%2FQ%3D%3D\"}]}\r\ncf-ray: 9d717e95be394b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30700,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 860 x 320, 8-bit colormap, non-interlaced","md5":"4cff4dc9e549d34af27afdf92ca7d2fa","sha1":"0eb049b2a26b17cbb3f8245ed917d1cde98270b8","sha256":"0cd23fe23383f6e30f715b9fdbbe23561ad39cedad929a2622464bd6b50f9f29","sha512":"d1adaefaea4ed22f7d6d52da60d05758b18d79624f8fd58b531d90fc377928b31e235d0bce16306225534875f2ba28d03bd94105fcd5d71729461aac7a19dd02","ssdeep":"768:WfNuoY2JXbpSK8Kl4JZ6xyTqERQ2mKmY5Cha4Zv:WfNuoY2J38KOUie2QYj4Zv","tlshash":"13d2e083c312a6d154a3147be9d7bf80cafca505891a8d7d00de9821a7bb4d3ea530f2","first_seen":"2023-07-20T05:21:02Z","last_seen":"2026-07-25T02:29:56.429097Z","times_seen":1010,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/footer/footer-gamcare.png?ver=1600719130","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/footer/footer-gamcare.png?ver=1600719130 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 379\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"5f69091a-17b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:07 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 169887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0yFXe6N807l41YgKbs9KvUFVaLHMHdgjexJdumFV0VjR93WGxxc580ELAFXx2vsrZ0diz0jzUN%2Fi4pYRPoCqYGrS7cAY66kg%2Bj4yTcxCFO3rnQ%3D%3D\"}]}\r\ncf-ray: 9d717e95be454b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":379,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 29, 4-bit colormap, non-interlaced","md5":"fed68f2bda8fcbde677d6243c0da867c","sha1":"19f6e8a0721b068651f3d893db375a0d2c44646c","sha256":"f1dd1841440203f7d5894ce378a49f8d33d02f6ba5896de0b885f1b9810d870c","sha512":"ed62b58cd01bdf562995311bdb2e6232bf8ace2b16c633c93b498d7236db5f326867323e2b9556afaff476d1253a276fa22aacefd0d8c04deb48dd648c20f932","ssdeep":"","tlshash":"89e0c0e03234ccbc094b1b6215d4f011d0278b6f38568c2b788e81b0ec101c1e55a747","first_seen":"2023-07-20T05:21:02Z","last_seen":"2026-03-19T07:12:22.986685Z","times_seen":3270,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/footer/footer-thwate.png?ver=1600719130","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/footer/footer-thwate.png?ver=1600719130 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 809\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"5f69091a-329\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:10 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 169887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jOX2Gjf91GGA61OtYkAmD0K4GhZZEooYVY9dV%2BJpdcFWe5ZH3fTtOqDYZd5HWY6I2GHmVCGhMPUasWeNy44Ez5crsPs5chScquJ2qvIi4MF6Yw%3D%3D\"}]}\r\ncf-ray: 9d717e95be424b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":809,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 123 x 32, 4-bit colormap, non-interlaced","md5":"997ba7f2d6da9a90f5517d426b5994e9","sha1":"61bdecfa266e48f6f0dc9469f598a45c7bff9036","sha256":"146c3bcd19eef83c9a698efae1d39cdbbf4a948f75b7677931654dffb89ae5f5","sha512":"673b28fdc116da7e830f7fdcab47496a72c13317065e4e4a934a86c89c939287f902f9dd225c78eb7c36a5859ba6fed717423078dc71dda886aaff9de2dcfad6","ssdeep":"","tlshash":"6d018669437c54668d94d3b0633cec11c5a7a3831878b353960380c9ef58a0260c618b","first_seen":"2023-07-20T05:21:02Z","last_seen":"2026-07-25T02:29:56.438696Z","times_seen":3291,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3f38sfb.qdhyxt.com/images_plus/footer/footer-18plus.png?ver=1600747939","fqdn":"3f38sfb.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"104.21.11.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet73041.com/","date":"2026-03-04T14:15:41.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 09:38:22 GMT","end":"Sat, 09 May 2026 10:36:03 GMT"},"fingerprint":{"sha1":"95:66:42:7D:AF:12:DA:F3:EA:7B:86:AD:CD:CD:A2:B8:2C:8E:B3:2E","sha256":"CF:65:48:D1:A2:4D:E9:57:22:FE:54:88:46:0A:89:11:10:EC:A1:0F:DD:9B:70:BE:B0:7E:16:63:87:30:B7:4F"}}},"request":{"raw":"GET /images_plus/footer/footer-18plus.png?ver=1600747939 HTTP/1.1\r\nHost: 3f38sfb.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet73041.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 14:15:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 441\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"5f6979a3-1b9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Mar 2026 15:04:07 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 169887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2BXAKthMqTa54wkw%2BMBx54692dVyeUBGRB8bIBFBbGeivCsx72p%2FM5ZsHjy4NRycUvtP5evnx%2F%2BmGUhfCx%2Ba0roK58s1oph1DfX9ORdSFx2ENA%3D%3D\"}]}\r\ncf-ray: 9d717e95be474b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 4-bit colormap, non-interlaced","md5":"950ceac8f20ad504e908c855fef89833","sha1":"694bdd9709a9bb3be26c6f7bb350205eb44ac7b3","sha256":"e17939202163e612402dbf251414bbb4e5faffdd133fdccd0bf2afd356e0d635","sha512":"07ef639d2d340fe07a2c32c06d67548675b57884e9c89e508cd1abce17dafa0e33bdff120c5c6f41e7fbb9d68f32908e859ed01b0d6f27a1fdb28b040749d289","ssdeep":"","tlshash":"f1f023d3874e9c50f4505f61c66f1a8398b68e0cd0afe906d91073bc283a724b2d36c3","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-07-25T02:29:56.394586Z","times_seen":5047,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}