{"report_id":"f8a3d8e3-05ee-410c-b29d-121187ad0e94","version":6,"status":"done","tags":[],"date":"2026-05-17T12:22:42Z","url":{"schema":"http","addr":"bet613.cc","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":0,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"title":"bet365","dom":{"size":34591,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1790)","md5":"6d6b31b16d4b6cc58bf463dd5fc02b13","sha1":"2b65c9dc3ef540af7eddbb69bee06a22b5de6694","sha256":"86983eb652182f468ccc10e077b5c3605b81515b99a9bb41de2bac1d7e57ee8b","sha512":"6b5a55fdc949dd75cc15a35947c0f318a03053254f0e57e687359a66ef841987b8c42f515cc4379aa72c3938e87d78f63768ae3c348678e50501b05427215745","ssdeep":"384:UOlIZAPyvqDhGuMmst9cRkTsDrtOhOqG9DfCe+5EoQOR6sN:RIZWyvqDhGuMmst9QeUb+5cOosN","tlshash":"53f2a72086f91e0f023392c2bd34ab1e18279a53d6074e05b2bf15aaefced954c171db","dom_hash":"domhash4ca241c277dcb25145442453625adcf1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bet613.cc","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":0,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-21T12:22:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"bet613.cc","ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":78,"request_count":39,"received_data":876328,"sent_data":19252,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.7.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":1,"received_data":108631,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bet613.cc/common/template/member/secondary_verification_v2.js","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f00eb4161f5c23b284cfdb73e3b3b1e7","sha1":"919a70be30a0fe21f79b8e44f089ba94093e847f","sha256":"87242e1ee78849953159081c90a6ca006ca276efaaef2f111d0826f1ba19931b","sha512":"1b81b8e4fa62697fcfe47413f52425140a6b7f4565538bbf7428924de77435b023327865a350d9e064fa469fad7ecd2f6656a14ddfe075a339b085955478f018","ssdeep":"48:Z7hwwDdJP2LgpcqX2mODKCKjfl5zPvIefIacijS3x5GiBqtmDsJ4Hd/+uBmBfPmY:BhBJuEXVjfLDRfm1kBsAu0fegXO5ik+R","tlshash":"efd13f4bacca0412557b95b48a12530eff30c107aa52ab01fced35e32fb5929b393f59","size":6459,"data":"","first_seen":"2023-03-08T05:26:54Z","last_seen":"2026-05-17T15:20:18.475601Z","times_seen":815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"c76f02b22d4e8d33d3c1ba8c06f87148","sha1":"41723ccce6a0e935e229ead0833a194d544d887d","sha256":"b982f53253aa17e3d982f40f086bf35b2a5dd3cb96007a3ddc8e810642d73daa","sha512":"e280bf2594d666ebaa6799f2f9dd50b7dd7f379fa3b69655425b060868c59d074ced20fd4765592155523f460483e41c360fc93f29eeb3c2948820c61d58029a","ssdeep":"","tlshash":"cdc000fcf000003000000030000000003c0003c0c00c0000003fc3c03c0c00f0cf00f0","size":165,"data":"","first_seen":"2024-12-02T11:55:47.144698Z","last_seen":"2026-05-17T14:09:24.652164Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"c76f02b22d4e8d33d3c1ba8c06f87148","sha1":"41723ccce6a0e935e229ead0833a194d544d887d","sha256":"b982f53253aa17e3d982f40f086bf35b2a5dd3cb96007a3ddc8e810642d73daa","sha512":"e280bf2594d666ebaa6799f2f9dd50b7dd7f379fa3b69655425b060868c59d074ced20fd4765592155523f460483e41c360fc93f29eeb3c2948820c61d58029a","ssdeep":"","tlshash":"cdc000fcf000003000000030000000003c0003c0c00c0000003fc3c03c0c00f0cf00f0","size":165,"data":"","first_seen":"2024-12-02T11:55:47.144698Z","last_seen":"2026-05-17T14:09:24.652164Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/common/modelCommon/notice/js/jquery.cookie.js?v=1.0.1","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5528dde0006c78be04817327c2f9b6f","sha1":"31e1bcc4cf805a2c2fee21f48ded1e598f64a2a8","sha256":"b84161c9fbf7520cd14e7019f92120bd87a928a074156e91a992eba9fc9436e8","sha512":"69484bdb1382ae92c4b860f97fab601db2d8117469619f06e720fe5a516b5eb3f2d88ad6065bba6e28790bd1faa86b20aa753a9a0c7a2ad53c4eb787a404a9af","ssdeep":"","tlshash":"ff516650b7cc361e06ab22516b6f10ace63cff721158449d881965f82cb0c7bdb6bd6a","size":3121,"data":"","first_seen":"2023-03-07T01:06:39Z","last_seen":"2026-05-17T14:09:24.636769Z","times_seen":16676,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c096dca1596039bb2af393a0f718fc4c","sha1":"bb658c72ce1d72a72c732da7d57894a96b7cc562","sha256":"87ddeee2557fcb259463f89a616a40a689abe31a64b80dbfc854df1c46054b01","sha512":"f4248b48878b668c2c53945e3ececaabeabd56efc466372ca3065fadc903de574ce7888c75ddce1074e68ec46d119725a8479ac9a315fcb73e3c28bacb41c794","ssdeep":"","tlshash":"509004014f33d01c000533fd403c10145d1150701154dc57415cc00d50d15cd51730d1","size":41,"data":"","first_seen":"2023-07-23T01:41:49Z","last_seen":"2026-05-17T15:20:18.473719Z","times_seen":488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d57f8f69ccc4864aedeb37ae7ed9a058","sha1":"e5a9f13094d4de6cd3f1a5ab77e81149ca5a4293","sha256":"67d54d87148a87635c82d216d6666e6b4d45b0aa8c3a899df0652e8e84bc65bd","sha512":"85127da2f31ee9ef15206edad29917277192360a378a196108ab345a19bb8ff4ed69631c261d0c7eef5af851b71e2fb5e9076ac02a6bd0d40c51987f9048f19a","ssdeep":"","tlshash":"a390022687352650109623059754569c536546395642e858005ed49790c5c0d949f706","size":56,"data":"","first_seen":"2023-11-05T14:36:34Z","last_seen":"2026-05-17T14:09:24.653299Z","times_seen":898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"c76f02b22d4e8d33d3c1ba8c06f87148","sha1":"41723ccce6a0e935e229ead0833a194d544d887d","sha256":"b982f53253aa17e3d982f40f086bf35b2a5dd3cb96007a3ddc8e810642d73daa","sha512":"e280bf2594d666ebaa6799f2f9dd50b7dd7f379fa3b69655425b060868c59d074ced20fd4765592155523f460483e41c360fc93f29eeb3c2948820c61d58029a","ssdeep":"","tlshash":"cdc000fcf000003000000030000000003c0003c0c00c0000003fc3c03c0c00f0cf00f0","size":165,"data":"","first_seen":"2024-12-02T11:55:47.144698Z","last_seen":"2026-05-17T14:09:24.652164Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"c76f02b22d4e8d33d3c1ba8c06f87148","sha1":"41723ccce6a0e935e229ead0833a194d544d887d","sha256":"b982f53253aa17e3d982f40f086bf35b2a5dd3cb96007a3ddc8e810642d73daa","sha512":"e280bf2594d666ebaa6799f2f9dd50b7dd7f379fa3b69655425b060868c59d074ced20fd4765592155523f460483e41c360fc93f29eeb3c2948820c61d58029a","ssdeep":"","tlshash":"cdc000fcf000003000000030000000003c0003c0c00c0000003fc3c03c0c00f0cf00f0","size":165,"data":"","first_seen":"2024-12-02T11:55:47.144698Z","last_seen":"2026-05-17T14:09:24.652164Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/common/modelCommon/layer/js/layer.min.js","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"436f12cf528ed5bbc50859c96884eedc","sha1":"4b9574392b734a6660141bcb56267d6658986440","sha256":"a6af6a7426c1c766f612939baea0e88cf4b0b2f3f193c490e7f0b389271397b3","sha512":"b2caa755e0fab8ef0c7b5fa32b896ea0bf40c0770b82d314f15b62efbb9e3f759b7641820f786c8c07925c6b9ffe68c6795bfb8f9bcb395df80dc5b638ae7f93","ssdeep":"192:V4YVRVD2PEeWaWFzl9/q9fiQ7e2Mwf9uhmHH5VZFzlCxTx99w1F:VDRQPmefBfEwHbZvfF","tlshash":"0762945eb10075976162d5a9901fa50f31f60d22db078868f26bf4bd1dbceaa11b3b0f","size":14942,"data":"","first_seen":"2023-04-15T18:34:25Z","last_seen":"2026-05-17T14:09:24.631256Z","times_seen":653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"c76f02b22d4e8d33d3c1ba8c06f87148","sha1":"41723ccce6a0e935e229ead0833a194d544d887d","sha256":"b982f53253aa17e3d982f40f086bf35b2a5dd3cb96007a3ddc8e810642d73daa","sha512":"e280bf2594d666ebaa6799f2f9dd50b7dd7f379fa3b69655425b060868c59d074ced20fd4765592155523f460483e41c360fc93f29eeb3c2948820c61d58029a","ssdeep":"","tlshash":"cdc000fcf000003000000030000000003c0003c0c00c0000003fc3c03c0c00f0cf00f0","size":165,"data":"","first_seen":"2024-12-02T11:55:47.144698Z","last_seen":"2026-05-17T14:09:24.652164Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/js/jquery-1.7.2.min.js?v=ver44.1311","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b11ced65f32fedbe9bf81ef9db0f3c94","sha1":"fdfd441e66831bfb8809e8cb69c2c3cd26b5d7c2","sha256":"0fb170f24675c84f8228ad6b61d69bf6705030949cc2fec316b3a006eab282f8","sha512":"864e5aa02e74823de70e3914a9ba75413c9559e4508f72ee7d23993acbf6488d69ef13a50e5b465bee3a709b36664f38aefe9ec0b8d9d86f4873f1ac552c64cb","ssdeep":"1536:8YRKUfAjtled3TmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUbCGvCu09s2o2skAieW","tlshash":"9593e7d9b2d67123c7b731b850af510bb17698aa784c8c50f068d8e4be74a48907bf7d","size":94839,"data":"","first_seen":"2023-03-07T12:01:56Z","last_seen":"2026-05-17T15:20:18.468018Z","times_seen":2836,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e28e7dab742c56e301a8ca79d4dc9c8","sha1":"bab9e82c0e3f6625435773d7fdb155a21a4e34f8","sha256":"7f2d4a9d804512f0eb51811880c12747a69acd932a21df985f20489d455b92a4","sha512":"8314cc3bb1f2783e1a19e0fd79f5cd77f18eecedc8db18a47977cdc37af0877072965faf29376da1d54286da2ca5460448c7999f795e5dd5d61d9f226a8d379f","ssdeep":"","tlshash":"f711efbdfa793701907771f4862f3a5e1179180ae8471b8fe47401c9286ffb8519ea0e","size":1028,"data":"","first_seen":"2024-12-02T11:55:47.149944Z","last_seen":"2026-05-17T14:09:24.653997Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/js/maxFloat.1.1.js","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac317385b245470c68b45676c09549b2","sha1":"eb382f0230b1655c25c2f45d06677f17c4afd718","sha256":"e59fe940ad02a081cb522015b502e56e9b762bb9965bf995f6389a0c13af0a0c","sha512":"4ece837b8893f340302a84c2afb8a2fcd586b02b30a0c2acfb85c06727ba6d22ae51961a7452fa9e237cbf5565b0a83706ef02c536cca6d3e1cf2f2b925da63b","ssdeep":"384:wNtj4vvHUDOokqUeeWlpHogV5jRO7Dv78g:ctcvv0iokqUeeWDIgG78g","tlshash":"35a2635db8f32259146b317b4f7f600c2160805b1a0aee04bd5c69e8dfe8618a7b7bf5","size":22259,"data":"","first_seen":"2024-08-19T21:07:50.202891Z","last_seen":"2026-05-17T14:09:24.628663Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"c76f02b22d4e8d33d3c1ba8c06f87148","sha1":"41723ccce6a0e935e229ead0833a194d544d887d","sha256":"b982f53253aa17e3d982f40f086bf35b2a5dd3cb96007a3ddc8e810642d73daa","sha512":"e280bf2594d666ebaa6799f2f9dd50b7dd7f379fa3b69655425b060868c59d074ced20fd4765592155523f460483e41c360fc93f29eeb3c2948820c61d58029a","ssdeep":"","tlshash":"cdc000fcf000003000000030000000003c0003c0c00c0000003fc3c03c0c00f0cf00f0","size":165,"data":"","first_seen":"2024-12-02T11:55:47.144698Z","last_seen":"2026-05-17T14:09:24.652164Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"11d39b9d067908f82b2ee2bb1cb537ee","sha1":"48ea7898353b894535b3cabcb4565be1164a8036","sha256":"ae4676a259577909db08d04f8b5d9cde5fc1f80bb5d7b41fc4d0b9cd2bd13c9d","sha512":"4227123bb18b405f7ed6f768a19be3a98134165cffff25fa6bea0764fbfa90bea98f64727aad406da5c6c8f8a7f72e602f08a494ad1e81b192d238a0dbc3d6f6","ssdeep":"","tlshash":"9ee0927eb8e12b02127b30f40e5f5559a871180b508a0e813d3c9ae58f1d47cc20ab4d","size":385,"data":"","first_seen":"2024-12-02T11:55:47.153272Z","last_seen":"2026-05-17T14:09:24.654533Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/js/jquery.SuperSlide.2.1.1.js?v2","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd7557b79ce6261f027b3f360ca5fa78","sha1":"e2975accbbfbb6daf9f4b6f0a48c93b6aa043407","sha256":"3400defd7bd2f094fbbe42a2449fa23bf573516631e76cc7451da186d14a1e4a","sha512":"bc4039a57e81723589878c4469b38f185ca857531d0844be6f2db746b276decd2e9d4869ac24af69f03bf5307289c5bb76192ade9929c529808fae6a1fa65718","ssdeep":"192:BEK3b+H+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:BDznqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"c532c75fb66635ce4597b3f1107f940d222b5965fc8a8ca0b17482c0adb9a1c243bfed","size":11250,"data":"","first_seen":"2023-04-05T04:17:49Z","last_seen":"2026-05-17T15:20:18.445812Z","times_seen":2277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"c76f02b22d4e8d33d3c1ba8c06f87148","sha1":"41723ccce6a0e935e229ead0833a194d544d887d","sha256":"b982f53253aa17e3d982f40f086bf35b2a5dd3cb96007a3ddc8e810642d73daa","sha512":"e280bf2594d666ebaa6799f2f9dd50b7dd7f379fa3b69655425b060868c59d074ced20fd4765592155523f460483e41c360fc93f29eeb3c2948820c61d58029a","ssdeep":"","tlshash":"cdc000fcf000003000000030000000003c0003c0c00c0000003fc3c03c0c00f0cf00f0","size":165,"data":"","first_seen":"2024-12-02T11:55:47.144698Z","last_seen":"2026-05-17T14:09:24.652164Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"c76f02b22d4e8d33d3c1ba8c06f87148","sha1":"41723ccce6a0e935e229ead0833a194d544d887d","sha256":"b982f53253aa17e3d982f40f086bf35b2a5dd3cb96007a3ddc8e810642d73daa","sha512":"e280bf2594d666ebaa6799f2f9dd50b7dd7f379fa3b69655425b060868c59d074ced20fd4765592155523f460483e41c360fc93f29eeb3c2948820c61d58029a","ssdeep":"","tlshash":"cdc000fcf000003000000030000000003c0003c0c00c0000003fc3c03c0c00f0cf00f0","size":165,"data":"","first_seen":"2024-12-02T11:55:47.144698Z","last_seen":"2026-05-17T14:09:24.652164Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/js/float.js?v2","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e97c779a88a354ee8ca80b23e4e697e8","sha1":"5c15f023d0b4e62e5a109d34d16e5912ddf7a4de","sha256":"2f255df39c86667f340e29b08350f0a66cc6b868dd7a7b5ca734fae1cf1228ce","sha512":"8ae3f6be9c49ecb43f3ca27b44785c67eba71c0e9b99e91a211d2b8725be8bbee46ea2bee7da2c805ce6fd5d7eeb660ad0a91a92d2456c2b611908bfb4316ffb","ssdeep":"96:G4OXFX+XMfaL259S2s5lXqCIv4e6H5eHOhPO:GLxuMfs2TSt5lXqChNHMHOU","tlshash":"f3d1dd9e6af72022aa7fb5aece5f81082535c44b2907dd103c1cd6d41f68978157afec","size":6214,"data":"","first_seen":"2024-12-02T11:55:47.083646Z","last_seen":"2026-05-17T14:09:24.630645Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"8861bc7689a4b5f6877c4b008f52a8aa","sha1":"5eaa3666b5e779f2304c0489f538caae2f07800a","sha256":"e894e366038b0fa7fefd927828fd167543d06c251abc7dcc901cfad0d4d48445","sha512":"5ab1aa06279681c40fdb738331d75531590dd79934125cd60c621728d61557cb7ca483977e469e30db77bfa142fe22a0d74135445161cb74e8f57599e0a56679","ssdeep":"","tlshash":"28d09bcb92977311107208bf5d3d9309041445db552937053c4d42331fd735450315f1","size":221,"data":"","first_seen":"2024-12-02T11:55:47.154867Z","last_seen":"2026-05-17T14:09:24.655131Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"c76f02b22d4e8d33d3c1ba8c06f87148","sha1":"41723ccce6a0e935e229ead0833a194d544d887d","sha256":"b982f53253aa17e3d982f40f086bf35b2a5dd3cb96007a3ddc8e810642d73daa","sha512":"e280bf2594d666ebaa6799f2f9dd50b7dd7f379fa3b69655425b060868c59d074ced20fd4765592155523f460483e41c360fc93f29eeb3c2948820c61d58029a","ssdeep":"","tlshash":"cdc000fcf000003000000030000000003c0003c0c00c0000003fc3c03c0c00f0cf00f0","size":165,"data":"","first_seen":"2024-12-02T11:55:47.144698Z","last_seen":"2026-05-17T14:09:24.652164Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"c76f02b22d4e8d33d3c1ba8c06f87148","sha1":"41723ccce6a0e935e229ead0833a194d544d887d","sha256":"b982f53253aa17e3d982f40f086bf35b2a5dd3cb96007a3ddc8e810642d73daa","sha512":"e280bf2594d666ebaa6799f2f9dd50b7dd7f379fa3b69655425b060868c59d074ced20fd4765592155523f460483e41c360fc93f29eeb3c2948820c61d58029a","ssdeep":"","tlshash":"cdc000fcf000003000000030000000003c0003c0c00c0000003fc3c03c0c00f0cf00f0","size":165,"data":"","first_seen":"2024-12-02T11:55:47.144698Z","last_seen":"2026-05-17T14:09:24.652164Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/common/modelCommon/notice/js/dialog-plus-min.js?v=1.0.1","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"933d0e0481f17f0d329e25e6715fa804","sha1":"e14b75016313aaf58a82675d3036829212ec6e54","sha256":"dc800d031b968ca1c951d771a58e17018ddb60ff46610258718259af3339abab","sha512":"861b46cabfd39d9b6de48404c419047ef1024e00d35868033ec1bcf2f56631f9ca19ed020ce03309f20d61fd1bd58dc8bd188efb73dd27e4cc35f54f0babd833","ssdeep":"192:Tm+WhWl8qfL9ciJD5K+CI96ctwRcT7a15dhdfh/7CKlzaFD:TWhWhVXCIcRcT7avD7DnzaFD","tlshash":"2552b5d8b2d1742446e792a0513f9b0fb2378519e80b416c747cc8d92dacd9ab07af3e","size":13292,"data":"","first_seen":"2023-03-08T00:16:09Z","last_seen":"2026-05-17T14:09:24.636089Z","times_seen":1225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2f1d913bd4614fb2ae597041dc1a851","sha1":"8fc20bd907d21a2d69b45a9efe868c51aaab92b4","sha256":"3cbcc7f7fd22d04aa13b7f7fabce44186ee2ebb541d269860f0ee225ac6b3c89","sha512":"f90a0cdab0fe33cb656892f6662bd2c28db8da6af91848fa894224f67f11d77ff1bcbc3b9acae29325f4aa3b33b5182063ca1ab954fdf7eb49537668478ffe8b","ssdeep":"","tlshash":"bf31c4f10139330e8a5156629117384ad3f3a0b399b6680bbbdc5c1acf4802a3475fdb","size":1520,"data":"","first_seen":"2024-12-02T11:55:47.157667Z","last_seen":"2026-05-17T14:09:24.65578Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/common/modelCommon/notice/js/knockout-3.4.2.js?v=1.0.1","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e956a74c005b7a243f0884d67e60f8f3","sha1":"c4fda6eee21550785a1c89ce291a2d3072e0ed9b","sha256":"a305fbb2ba223bf3b56bb8776b85f6f40d60dd082a74dbe28d143b5794c7e393","sha512":"eca283f482092f7793b4c1580cc834f59bd1f958b61b20af05ac1c5c20499676dfb99b58bffcf8ef0b166fa0481850bf78b1f4f4e5450116a0361d6cce950b34","ssdeep":"1536:AuiHOkl5MN5f01xVGWQjSTJEnILsP7JBfn84or4n:bP4MnwiL144n","tlshash":"ea43e8ec7296752267b330b9413f000bf13a58a6b98c44f1a155d8e0bd78aac517bfbd","size":60354,"data":"","first_seen":"2023-03-08T00:16:09Z","last_seen":"2026-05-17T14:09:24.635431Z","times_seen":1625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"c76f02b22d4e8d33d3c1ba8c06f87148","sha1":"41723ccce6a0e935e229ead0833a194d544d887d","sha256":"b982f53253aa17e3d982f40f086bf35b2a5dd3cb96007a3ddc8e810642d73daa","sha512":"e280bf2594d666ebaa6799f2f9dd50b7dd7f379fa3b69655425b060868c59d074ced20fd4765592155523f460483e41c360fc93f29eeb3c2948820c61d58029a","ssdeep":"","tlshash":"cdc000fcf000003000000030000000003c0003c0c00c0000003fc3c03c0c00f0cf00f0","size":165,"data":"","first_seen":"2024-12-02T11:55:47.144698Z","last_seen":"2026-05-17T14:09:24.652164Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"c76f02b22d4e8d33d3c1ba8c06f87148","sha1":"41723ccce6a0e935e229ead0833a194d544d887d","sha256":"b982f53253aa17e3d982f40f086bf35b2a5dd3cb96007a3ddc8e810642d73daa","sha512":"e280bf2594d666ebaa6799f2f9dd50b7dd7f379fa3b69655425b060868c59d074ced20fd4765592155523f460483e41c360fc93f29eeb3c2948820c61d58029a","ssdeep":"","tlshash":"cdc000fcf000003000000030000000003c0003c0c00c0000003fc3c03c0c00f0cf00f0","size":165,"data":"","first_seen":"2024-12-02T11:55:47.144698Z","last_seen":"2026-05-17T14:09:24.652164Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"c76f02b22d4e8d33d3c1ba8c06f87148","sha1":"41723ccce6a0e935e229ead0833a194d544d887d","sha256":"b982f53253aa17e3d982f40f086bf35b2a5dd3cb96007a3ddc8e810642d73daa","sha512":"e280bf2594d666ebaa6799f2f9dd50b7dd7f379fa3b69655425b060868c59d074ced20fd4765592155523f460483e41c360fc93f29eeb3c2948820c61d58029a","ssdeep":"","tlshash":"cdc000fcf000003000000030000000003c0003c0c00c0000003fc3c03c0c00f0cf00f0","size":165,"data":"","first_seen":"2024-12-02T11:55:47.144698Z","last_seen":"2026-05-17T14:09:24.652164Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"c76f02b22d4e8d33d3c1ba8c06f87148","sha1":"41723ccce6a0e935e229ead0833a194d544d887d","sha256":"b982f53253aa17e3d982f40f086bf35b2a5dd3cb96007a3ddc8e810642d73daa","sha512":"e280bf2594d666ebaa6799f2f9dd50b7dd7f379fa3b69655425b060868c59d074ced20fd4765592155523f460483e41c360fc93f29eeb3c2948820c61d58029a","ssdeep":"","tlshash":"cdc000fcf000003000000030000000003c0003c0c00c0000003fc3c03c0c00f0cf00f0","size":165,"data":"","first_seen":"2024-12-02T11:55:47.144698Z","last_seen":"2026-05-17T14:09:24.652164Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/common/template/member/common.js","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"37e33fcf4ccd08ddf4133a2d01c6761e","sha1":"7892ba6c97c1c154e5901eca19c358f20670d069","sha256":"bf57aabbe42add547a565f03fe6e6decfeaafb51b2db5bc8575d9bf7f78bed23","sha512":"e1c129e678982581ebfeb4f3ef68026c8e66f3f41ecfb1805e615a926461c5f8b7b18b65de62d47093d5ebf8dc8af3a52a7c904dbe91ba1fe127c3fd6acd26be","ssdeep":"384:EH6Or0bcTOKHsEmz/rEVzvvT/plf3ZwG8kaRt:+0bcTOKHsEmz/ib/pVppJ8","tlshash":"ef62558cb60a6a5b6a7366744f3b1014edbe941b5846c502f99cc1c43fb0a6ab337e4d","size":14811,"data":"","first_seen":"2023-09-17T19:11:14Z","last_seen":"2026-05-17T15:20:18.427625Z","times_seen":927,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/common/modelCommon/notice/js/notice.js?v=1.0.4","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7fec665dc27ba76398a52170ed69e3a","sha1":"0f59a5874bb2508e39a01220710cc0a58914b6c5","sha256":"0be88ca60288acb05c8e7464cc219132a61ab795d98187bbb573b52fdff5ae11","sha512":"1a3963f39dc3928ec982c2212eaf1a89d490424b89cd77d202f33164f1b22f1b909790c6f69dcddc5ff963bac3ccd1e0249b64e44913c211e4f6fae269b34548","ssdeep":"192:I6zij+2jzerZoaM0SFjIp6tELFtUpzf/06Wh:sS2jSmTctUBf6","tlshash":"d9e18648f7ee24714213f0790e2fa9c8b0bd54278944d9723c4c91595fa483eaabae9c","size":7055,"data":"","first_seen":"2023-11-05T14:36:34Z","last_seen":"2026-05-17T14:09:24.642026Z","times_seen":940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"c76f02b22d4e8d33d3c1ba8c06f87148","sha1":"41723ccce6a0e935e229ead0833a194d544d887d","sha256":"b982f53253aa17e3d982f40f086bf35b2a5dd3cb96007a3ddc8e810642d73daa","sha512":"e280bf2594d666ebaa6799f2f9dd50b7dd7f379fa3b69655425b060868c59d074ced20fd4765592155523f460483e41c360fc93f29eeb3c2948820c61d58029a","ssdeep":"","tlshash":"cdc000fcf000003000000030000000003c0003c0c00c0000003fc3c03c0c00f0cf00f0","size":165,"data":"","first_seen":"2024-12-02T11:55:47.144698Z","last_seen":"2026-05-17T14:09:24.652164Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"c76f02b22d4e8d33d3c1ba8c06f87148","sha1":"41723ccce6a0e935e229ead0833a194d544d887d","sha256":"b982f53253aa17e3d982f40f086bf35b2a5dd3cb96007a3ddc8e810642d73daa","sha512":"e280bf2594d666ebaa6799f2f9dd50b7dd7f379fa3b69655425b060868c59d074ced20fd4765592155523f460483e41c360fc93f29eeb3c2948820c61d58029a","ssdeep":"","tlshash":"cdc000fcf000003000000030000000003c0003c0c00c0000003fc3c03c0c00f0cf00f0","size":165,"data":"","first_seen":"2024-12-02T11:55:47.144698Z","last_seen":"2026-05-17T14:09:24.652164Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"c76f02b22d4e8d33d3c1ba8c06f87148","sha1":"41723ccce6a0e935e229ead0833a194d544d887d","sha256":"b982f53253aa17e3d982f40f086bf35b2a5dd3cb96007a3ddc8e810642d73daa","sha512":"e280bf2594d666ebaa6799f2f9dd50b7dd7f379fa3b69655425b060868c59d074ced20fd4765592155523f460483e41c360fc93f29eeb3c2948820c61d58029a","ssdeep":"","tlshash":"cdc000fcf000003000000030000000003c0003c0c00c0000003fc3c03c0c00f0cf00f0","size":165,"data":"","first_seen":"2024-12-02T11:55:47.144698Z","last_seen":"2026-05-17T14:09:24.652164Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"domTimer","is_inline":false,"md5":"9ac177840acf984d4f9a98dbeae2b94e","sha1":"b7540a234bc349e159fdc19f2d808e62dad23191","sha256":"dc1307542a77a68ca13d946f51f610a947a21c15ef07bd2516f39211164608cb","sha512":"0be6548d2d813115b0ef4505c809dccc98b20383d27bb7c9677c3519d33379d25b759e0d8889262a07d70bb13aec9d65dc6a42dc6e5131244ff982f03ef1c47f","ssdeep":"","tlshash":"eac00003f00000030300033000c300c030300330c0003000f00333033c0c00000300cc","size":167,"data":"","first_seen":"2024-12-02T11:55:47.143253Z","last_seen":"2026-05-17T14:09:24.650354Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bet613.cc/css/share.css?v2","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /css/share.css?v2 HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:21 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"77988-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Sun, 17 May 2026 14:14:09 GMT\r\ncache-control: max-age=10800\r\nnginx-cache: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77988,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (354), with LF, NEL line terminators","md5":"2a1403ab6ff8f803810881128242678d","sha1":"4d25ab23e9a6c3498d86a26593e302d9633646f0","sha256":"2803965654f6ab4663b9c662bca7b3e25217c127c8a9d5330e0dd6111debbe9e","sha512":"e496d78f08656fa9eddc30f9ddd84a19e8c8d475d19377c2bc5c37266e0e1b4b5e70e036a5944caa9bb876c53a01a536436cb8a158e48c295ceab61d0ea62732","ssdeep":"768:saoHrxcWyq/wUFkwpZI6M90sNAsNcjsMdvt/16H5/l4hv2FnqyMyxZ+GFeLoFHq:uHVchuO6dsE16HLfFK","tlshash":"177373218fa1310ff07bc1617d12b70af326e04b92931a7d9f963e2ad44d81a697e3d5","first_seen":"2025-04-08T12:15:22.19986Z","last_seen":"2026-05-17T14:09:24.640824Z","times_seen":132,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/js/float.js?v2","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /js/float.js?v2 HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:21 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"6214-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Sun, 17 May 2026 14:14:09 GMT\r\ncache-control: max-age=10800\r\nnginx-cache: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6214,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e97c779a88a354ee8ca80b23e4e697e8","sha1":"5c15f023d0b4e62e5a109d34d16e5912ddf7a4de","sha256":"2f255df39c86667f340e29b08350f0a66cc6b868dd7a7b5ca734fae1cf1228ce","sha512":"8ae3f6be9c49ecb43f3ca27b44785c67eba71c0e9b99e91a211d2b8725be8bbee46ea2bee7da2c805ce6fd5d7eeb660ad0a91a92d2456c2b611908bfb4316ffb","ssdeep":"96:G4OXFX+XMfaL259S2s5lXqCIv4e6H5eHOhPO:GLxuMfs2TSt5lXqChNHMHOU","tlshash":"f3d1dd9e6af72022aa7fb5aece5f81082535c44b2907dd103c1cd6d41f68978157afec","first_seen":"2024-12-02T11:55:47.083646Z","last_seen":"2026-05-17T14:09:24.630645Z","times_seen":165,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=ZCOOL+KuaiLe\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=ZCOOL+KuaiLe\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 17 May 2026 12:22:21 GMT\r\ndate: Sun, 17 May 2026 12:22:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107945,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (934)","md5":"1a6a1261ca62b7e06eac84cf4dd214b8","sha1":"1d3aa3a71eb620f7ab0ff453599a94543138a8e4","sha256":"646a6c66d1bdf6b80ff5e7a883c3c0e175f1b9f5bcb6dacab60e60109193f8b3","sha512":"375966b7397c5508e2276c3874aa5c4ad7bb6596e30524c3fd66cb593ee290f7352a58966345c25c964c42bc4e37200fb911bf4ca3bfb52074ddd504751ffb26","ssdeep":"1536:YMTL2ZR8oUa5gLlcXfSRC3n53JEfRMIygF+yJURylepIlOFkudUzcFIllvP:Pk318FjEI4FkNMIb","tlshash":"9db3efa0450745dffee72c6752ced5257ea9687cf881893892f509c3ac0e05ae1cbb8d","first_seen":"2026-02-18T05:43:47.475567Z","last_seen":"2026-05-17T15:20:18.419545Z","times_seen":115,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":68,"dns":0,"connect":7,"send":0,"wait":22,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/common/modelCommon/notice/js/notice.js?v=1.0.4","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /common/modelCommon/notice/js/notice.js?v=1.0.4 HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS, GET, POST\r\naccess-control-allow-headers: x-requested-with\r\naccess-control-max-age: 86400\r\np3p: CP=CAO PSA OUR\r\netag: W/\"7055-1777904504000\"\r\nlast-modified: Mon, 04 May 2026 14:21:44 GMT\r\nexpires: Sun, 17 May 2026 14:14:09 GMT\r\ncache-control: max-age=10800\r\nnginx-cache: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7055,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e7fec665dc27ba76398a52170ed69e3a","sha1":"0f59a5874bb2508e39a01220710cc0a58914b6c5","sha256":"0be88ca60288acb05c8e7464cc219132a61ab795d98187bbb573b52fdff5ae11","sha512":"1a3963f39dc3928ec982c2212eaf1a89d490424b89cd77d202f33164f1b22f1b909790c6f69dcddc5ff963bac3ccd1e0249b64e44913c211e4f6fae269b34548","ssdeep":"192:I6zij+2jzerZoaM0SFjIp6tELFtUpzf/06Wh:sS2jSmTctUBf6","tlshash":"d9e18648f7ee24714213f0790e2fa9c8b0bd54278944d9723c4c91595fa483eaabae9c","first_seen":"2023-11-05T14:36:34Z","last_seen":"2026-05-17T14:09:24.642026Z","times_seen":940,"resource_available":true,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/worldcup.jpg","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/worldcup.jpg HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"7440-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:24 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7440,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 160x56, components 3","md5":"6d0d7d7b022b2621d5c650568a1455b9","sha1":"1455b0e7575b3112b70b84422a48647879ed4b7a","sha256":"27d5a33377fe880547748de42796491641efca6f8c8fcc918a5b0301e269bdb8","sha512":"f367a634ff90108bb41eb687785606d1c95292ae7f427ab6b267dfeda6979db10808b3e281619c1aff40821e59b95ea897aaa4bbc60c156c7547e5889ab24b41","ssdeep":"192:htLJxQKyUHm6valRLaiznKta4/Xyd1xlgR0ZwUXW5pRWqC:htLJxQKySZalRL3zMa4/iTQC","tlshash":"f1e17e08c1a01cc2b2459ca7e3f6de28bbc254f096f684e775e749f98d690780d658da","first_seen":"2023-05-19T01:29:59Z","last_seen":"2026-05-17T14:09:24.624301Z","times_seen":331,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/common/modelCommon/layer/css/layer.css","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:22.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /common/modelCommon/layer/css/layer.css HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS, GET, POST\r\naccess-control-allow-headers: x-requested-with\r\naccess-control-max-age: 86400\r\np3p: CP=CAO PSA OUR\r\netag: W/\"13856-1777904504000\"\r\nlast-modified: Mon, 04 May 2026 14:21:44 GMT\r\nexpires: Sun, 17 May 2026 14:14:10 GMT\r\ncache-control: max-age=10800\r\nnginx-cache: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13856,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"798889969c5b5f6f7912f85fde99f957","sha1":"2bdafea8750e22226d15198a38b42beadcde3b9e","sha256":"fa51d28385f928e05c83d4823d00322cfaf2a063044c762c26632b5a77632ce3","sha512":"f5a0b9d174b88cd5983f5759dbf08691386ebe87e4d18a0fa16f3e0679f9130b6f76938b2c1cf432e43401de941f0bdb11718f936c8005f3edbaabed685b7333","ssdeep":"192:XBw66ojXXK33373d3MqwvHKFY7eFXgGcpXYSIHar1FtrEsd+n:XjXcnDlFuSF6YFyFtrD4","tlshash":"2952f1e199931ac97016c555dbdc72b563f88c03e11b8cbeb797380f8f886ca92b1247","first_seen":"2025-04-06T22:52:47.473344Z","last_seen":"2026-05-17T14:09:24.646106Z","times_seen":480,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/common/modelCommon/layer/js/layer.min.js","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /common/modelCommon/layer/js/layer.min.js HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:21 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS, GET, POST\r\naccess-control-allow-headers: x-requested-with\r\naccess-control-max-age: 86400\r\np3p: CP=CAO PSA OUR\r\netag: W/\"14954-1777904504000\"\r\nlast-modified: Mon, 04 May 2026 14:21:44 GMT\r\nexpires: Sun, 17 May 2026 14:14:09 GMT\r\ncache-control: max-age=10800\r\nnginx-cache: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14954,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14861)","md5":"436f12cf528ed5bbc50859c96884eedc","sha1":"4b9574392b734a6660141bcb56267d6658986440","sha256":"a6af6a7426c1c766f612939baea0e88cf4b0b2f3f193c490e7f0b389271397b3","sha512":"b2caa755e0fab8ef0c7b5fa32b896ea0bf40c0770b82d314f15b62efbb9e3f759b7641820f786c8c07925c6b9ffe68c6795bfb8f9bcb395df80dc5b638ae7f93","ssdeep":"192:V4YVRVD2PEeWaWFzl9/q9fiQ7e2Mwf9uhmHH5VZFzlCxTx99w1F:VDRQPmefBfEwHbZvfF","tlshash":"0762945eb10075976162d5a9901fa50f31f60d22db078868f26bf4bd1dbceaa11b3b0f","first_seen":"2023-04-15T18:34:25Z","last_seen":"2026-05-17T14:09:24.631256Z","times_seen":653,"resource_available":true,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/link.jpg?v2","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/link.jpg?v2 HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"32867-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:21 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32867,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 152 x 101, 8-bit/color RGBA, non-interlaced","md5":"aa88208c733b7c1fa52fc98464401c54","sha1":"c5b32db56eca74550f4d5ee4d408eb3aaab58cd1","sha256":"50432790ea38dc4f76e7e19f9093b10b641769390e7fb47918fe36e4eed28215","sha512":"c5c9a9233ccef810437a980fc3b572375697b74f75aeba543b2f032c8c1199a7d8dc7b41d61eac56ada8723cd5fe1a9450316248685a0fb05399233d1eb098ad","ssdeep":"768:7Vzj1VhaGsZ0csczMmjtvVkYfq4GZM8rRk5f7u8pkH:ZXVA0cscImjtvuYf1iMSRkJc","tlshash":"e0e2f1d9858978b0e218bf55a057e2d163cdacd2fc3e003d66e132c35418e269e9a4ff","first_seen":"2024-12-02T11:55:47.136171Z","last_seen":"2026-05-17T14:09:24.639347Z","times_seen":163,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/getConfig/listPopFrame.do?code=14\u0026position=index\u0026_=1779020542449","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:22.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /getConfig/listPopFrame.do?code=14\u0026position=index\u0026_=1779020542449 HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 2\r\nceipstate: 1\r\npragma: No-cache\r\ncache-control: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-05-17T15:17:33.297013Z","times_seen":274965,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/login_os.png","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:22.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/login_os.png HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/css/css.css?v23\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"2871-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:17 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit colormap, non-interlaced","md5":"1a113048a6dab837663872b42707489c","sha1":"09feb5628a47d630fbfd938f15d440c7b9d60d8d","sha256":"674c9c9b46666bbe59fe9c5c4753a4f702710544741f409490537634e17aee4f","sha512":"5f117699d6957943a106b6eca7c31451fce48e134c430c1c26ebee223dd2952a0249d6a19962aa301b78a9ad95b1ab3d6ff2b18f51091b84744c7fcdc1b8babe","ssdeep":"","tlshash":"a9510898bdd03a41738ae48215fce01fa32f0d90a9e1fa695d4bbcd25c39276414b0fb","first_seen":"2023-11-04T04:47:49Z","last_seen":"2026-05-17T14:09:24.649099Z","times_seen":254,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/panel_b_bg.jpg","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:22.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/panel_b_bg.jpg HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/css/css.css?v23\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"4267-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:19 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4267,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 270x234, components 3","md5":"fee5097bc88f140446c66c0f02f4ae1a","sha1":"39e1a7314d93a6e3afee86a58a5b67a3943c8723","sha256":"7068ee30d85be9813bf2277ceff755a0c2abeef74cd5000beaa910c7dc3dfab8","sha512":"e9536da98f5bdd479946b6b68b5c51da09819fa95dd0739ff733892615e4e39584d4d6236c46a4aa9ab77ceced83f925c0fdff985480643884d74b8f799b2378","ssdeep":"96:rQUNe3tjQTuG9jZIBSN2l7IUUOzQVUAQjPkG:rxNZuG9MS8l7oOkVUAG","tlshash":"60912a079215bd4178e8a1308696c33a5b33c562d3ab9dd280f55806f6ac3d06bcd5df","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-05-17T14:09:24.646751Z","times_seen":1436,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/common/template/lottery/jimei/css/secondary_verification_v2.css","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /common/template/lottery/jimei/css/secondary_verification_v2.css HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:21 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS, GET, POST\r\naccess-control-allow-headers: x-requested-with\r\naccess-control-max-age: 86400\r\np3p: CP=CAO PSA OUR\r\netag: W/\"7234-1777904504000\"\r\nlast-modified: Mon, 04 May 2026 14:21:44 GMT\r\nexpires: Sun, 17 May 2026 14:14:09 GMT\r\ncache-control: max-age=10800\r\nnginx-cache: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7234,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9e185d2517edf0f1bcf57fecac3b7142","sha1":"ae35c229ea56f70ee270dc642f106124a22650b8","sha256":"c2dc0da7aee0110f092bb2b8bcbe05f23c3ef55034c2d001689602fa7783be65","sha512":"d572c911552206358191e03f152f1a63c5789a67ca933278adf6d65213372cf0bea55180bec0b7edf9a23c8926ff600c6aac31749cb8a2a3f9af6f31e203c6d3","ssdeep":"96:CCNRtPOBtjl8Y+SUOrVMqi7NneHxv8KjweaHzbPHp7:CKRtmTpDUOrked3wVz7Hp7","tlshash":"e1e12359bd0a0012b9ffa7b6af03669ce7260517ca0702357fde599627903798352fcc","first_seen":"2023-05-17T18:46:56Z","last_seen":"2026-05-17T15:20:18.456738Z","times_seen":806,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/common/modelCommon/notice/js/dialog-plus-min.js?v=1.0.1","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /common/modelCommon/notice/js/dialog-plus-min.js?v=1.0.1 HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS, GET, POST\r\naccess-control-allow-headers: x-requested-with\r\naccess-control-max-age: 86400\r\np3p: CP=CAO PSA OUR\r\netag: W/\"13292-1777904504000\"\r\nlast-modified: Mon, 04 May 2026 14:21:44 GMT\r\nexpires: Sun, 17 May 2026 14:14:09 GMT\r\ncache-control: max-age=10800\r\nnginx-cache: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13292,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13292), with no line terminators","md5":"933d0e0481f17f0d329e25e6715fa804","sha1":"e14b75016313aaf58a82675d3036829212ec6e54","sha256":"dc800d031b968ca1c951d771a58e17018ddb60ff46610258718259af3339abab","sha512":"861b46cabfd39d9b6de48404c419047ef1024e00d35868033ec1bcf2f56631f9ca19ed020ce03309f20d61fd1bd58dc8bd188efb73dd27e4cc35f54f0babd833","ssdeep":"192:Tm+WhWl8qfL9ciJD5K+CI96ctwRcT7a15dhdfh/7CKlzaFD:TWhWhVXCIcRcT7avD7DnzaFD","tlshash":"2552b5d8b2d1742446e792a0513f9b0fb2378519e80b416c747cc8d92dacd9ab07af3e","first_seen":"2023-03-08T00:16:09Z","last_seen":"2026-05-17T14:09:24.636089Z","times_seen":1225,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/logo.png?werwes","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/logo.png?werwes HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"10261-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:16 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10261,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 69, 8-bit/color RGBA, non-interlaced","md5":"177dd735a1640e4f5cfd02e329ae5ada","sha1":"073a51019e047090117239c28050e5b6e676ec12","sha256":"2712a9bd65e770409c35ee51bafc5fc3cbe4baeb665e87c14473463ead6f8124","sha512":"1622d5d870e3d18b1a656558313af3f1f3a59de39410c5710f75629fbc129524053a4598e7b280e4c6bfa67576e363830ec33cda166f4cf65d647b4e8dbbcea6","ssdeep":"192:KeBDyGHnLlkf/CPiMvCcFALJMv2vn4wml5wCuq4qCuR+WM6eIDRS6vV3MrK:KewIBGCPiMfFALev2vnHmwe9pR+t5ORv","tlshash":"33227e4ce1516f07747f4037506dd82222118cc4d6a9dbe83eef84352fb9a3781a6f5a","first_seen":"2024-01-14T18:34:26Z","last_seen":"2026-05-17T14:09:24.63742Z","times_seen":327,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/g04.png?dwa","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/g04.png?dwa HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"29631-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:20 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29631,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2016:10:10 15:13:04], progressive, precision 8, 271x81, components 3","md5":"c8cce521286b583361172d133865d868","sha1":"760896c00c9493adbd32c4d81ef2a5a3bab23df5","sha256":"94b3778cfea3692040ebf1348784ee6248ccf0dc54b4077df9a6a1f4153b2217","sha512":"17daea6b4b3cbd52bdd1decbd34b2f2388b5edd8671f57c4fcc6d65ef4a13bf3c4f724ff09b168209bf7329a68a90285a12e6585c12f268581952b45bebcc6c2","ssdeep":"768:7fqE0P4qEJ46lTh4g8ErXsUyZ5++Eq7Lmjz:d46lThEEDsKq76X","tlshash":"72d2ae34fb559e45e5d462304ca1e7c7a361af8c8a87699a7e8c3143bf3a3412dac342","first_seen":"2024-12-02T11:55:47.118493Z","last_seen":"2026-05-17T14:09:24.638719Z","times_seen":161,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/email.jpg","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/email.jpg HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"32679-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:21 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32679,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=413, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=152], baseline, precision 8, 152x100, components 3","md5":"eb44eebac505be04c9dc4b64ec359379","sha1":"7d995e34ee6ad84fd1141d56758f7c7b11c3488d","sha256":"ae2632dab23301497fd8dd58ad81f614e73a1a2be0a2225eaf75e639c907ce90","sha512":"55ea4bb46da3362230e29c077ed24fc74cac1c64c74652ae0ea5cee56671cbb1578a6bec9c869dd07276583898acf31fbc8a663ccc2d70a6cf1bd3cc05f7aacb","ssdeep":"768:+8TPM8s3E2C6fhKfgzm9xaWRA66RUxvN+aup:+8g8s+AhKQSxCLRUPup","tlshash":"28e2d0215b73de24f9e49e7aa865d7d723348f88e7d3260ef44c34467b31216ac2c299","first_seen":"2024-12-02T11:55:47.116748Z","last_seen":"2026-05-17T14:09:24.648588Z","times_seen":163,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/css/css.css?v23","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /css/css.css?v23 HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:21 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"35362-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Sun, 17 May 2026 14:14:09 GMT\r\ncache-control: max-age=10800\r\nnginx-cache: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35362,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"83bc4645535593cdbaba50b447c49c46","sha1":"05158a222a03ccadf51bf63854f16b9c214227ec","sha256":"cc7fc79d0ebec57e93b793c23489a2dd812ed5cd4cd82f595cbdbce86964b23d","sha512":"ed6a9d1affa8215c9b761a379b607626eac7e5c3e2bb3418b7c5a38804061eebd83c982020ee37a70580bdbce78f7891422b7818785786107c3b3a8d4dacd9ad","ssdeep":"384:fsEvmbZPalSPQH/Vs3t1Ijaf148OGXXpVICCqVjIEtL134XC2kSp:ftOTPQH/VkGduXpaCCW/134S2ke","tlshash":"bef222319ba5304ff03b8262bd13a75e6216c047e2435fadbfae7a39d04e41a6533395","first_seen":"2025-04-07T11:46:59.061692Z","last_seen":"2026-05-17T14:09:24.644393Z","times_seen":147,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/js/jquery.SuperSlide.2.1.1.js?v2","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /js/jquery.SuperSlide.2.1.1.js?v2 HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:21 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"11408-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Sun, 17 May 2026 14:14:09 GMT\r\ncache-control: max-age=10800\r\nnginx-cache: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11408,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10855)","md5":"fd7557b79ce6261f027b3f360ca5fa78","sha1":"e2975accbbfbb6daf9f4b6f0a48c93b6aa043407","sha256":"3400defd7bd2f094fbbe42a2449fa23bf573516631e76cc7451da186d14a1e4a","sha512":"bc4039a57e81723589878c4469b38f185ca857531d0844be6f2db746b276decd2e9d4869ac24af69f03bf5307289c5bb76192ade9929c529808fae6a1fa65718","ssdeep":"192:BEK3b+H+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:BDznqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"c532c75fb66635ce4597b3f1107f940d222b5965fc8a8ca0b17482c0adb9a1c243bfed","first_seen":"2023-04-05T04:17:49Z","last_seen":"2026-05-17T15:20:18.445812Z","times_seen":2277,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/g03.png?daw","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/g03.png?daw HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"36464-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:16 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36464,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 269 x 79, 8-bit/color RGB, non-interlaced","md5":"5bb8c6a190c9b3af5f2385397675672d","sha1":"9b4b546cfc8768ee1cdc9c1a5b8c424dad425668","sha256":"15b3e6de97e4efb936e20637ebdf924b041f5a3a1dbe4a76f4bc848b8b5b425f","sha512":"352c046ac82263363bc98b4e185704d97b02bc289d3f4fab7cea6dfe7511b39eacf9e454c2e4438df92f8b1c6fb44f749d730ba5640ddd3ad63f2ea0f88e265f","ssdeep":"768:rDbY9rnQCXUyjKYLVQ29DWL7HwWGhdxD9Gk:fk9rQCpKYZQ29DWfY9d","tlshash":"3ff2f109f63973d8a1fae36463d6020f57cd3fa1428beeb87aca547099043675851be8","first_seen":"2024-12-02T11:55:47.111792Z","last_seen":"2026-05-17T14:09:24.62805Z","times_seen":163,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/js/maxFloat.1.1.js","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /js/maxFloat.1.1.js HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"22301-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Sun, 17 May 2026 14:14:10 GMT\r\ncache-control: max-age=10800\r\nnginx-cache: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22301,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ac317385b245470c68b45676c09549b2","sha1":"eb382f0230b1655c25c2f45d06677f17c4afd718","sha256":"e59fe940ad02a081cb522015b502e56e9b762bb9965bf995f6389a0c13af0a0c","sha512":"4ece837b8893f340302a84c2afb8a2fcd586b02b30a0c2acfb85c06727ba6d22ae51961a7452fa9e237cbf5565b0a83706ef02c536cca6d3e1cf2f2b925da63b","ssdeep":"384:wNtj4vvHUDOokqUeeWlpHogV5jRO7Dv78g:ctcvv0iokqUeeWDIgG78g","tlshash":"35a2635db8f32259146b317b4f7f600c2160805b1a0aee04bd5c69e8dfe8618a7b7bf5","first_seen":"2024-08-19T21:07:50.202891Z","last_seen":"2026-05-17T14:09:24.628663Z","times_seen":169,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/wechat.jpg","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/wechat.jpg HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"9708-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:20 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9708,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 152x90, components 3","md5":"fa4799a98faa2d95b924fe5d95bd01e6","sha1":"02b4fe3fddf8c32c3cf1734b7211b0094958ec24","sha256":"5f3de54b3862af9c881915d8485140864777511cb98083e5f0fa736ea488b4d4","sha512":"c637e90aa4b00c15b6e86d4191c7461150f8ce41f980753d497ab471b7ca626e7cf4192aedff77f8f300a1a0d8f5ebac06dff9e6b0f4635ed64241b88700c9ea","ssdeep":"192:q7wZ/33Eh1tMux+wsIfujj9X2Y25oUw3WkN0tzuq/H6ghqErixgNQAHj:q7wZ/33Eh0ujHk9X2p+0uK3LHj","tlshash":"a612be3ccb0783f2d81c51b2add6ddc82683ab94ed6499063f1a81544eec55879dc6a8","first_seen":"2024-12-02T11:55:47.1081Z","last_seen":"2026-05-17T14:09:24.629405Z","times_seen":163,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/btn_start.png","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:22.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/btn_start.png HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/css/css.css?v23\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"2068-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:19 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 15, 8-bit/color RGBA, non-interlaced","md5":"570945161d2a9b844bab523f82d028c5","sha1":"ef71ec466115420c02ee989ea65044c91ceabd7c","sha256":"397180e20b6278f7ba413a23c0e0fe280f21265ff773f9f63b863df4a30952a8","sha512":"6bd250cf78483cb76b8aaa564d79438ade34d94810e876fd248134a13caecae2d17a64f353bd6e9f9b5c828d7844d08a02d6cec51b5586ab936be4acecc2b492","ssdeep":"","tlshash":"6441fa85e7b51c409aa4ca4298ee413be423cae0e5e0e42cfccdd4935f642a6044d5cf","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-05-17T14:09:24.64971Z","times_seen":997,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/js/jquery-1.7.2.min.js?v=ver44.1311","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /js/jquery-1.7.2.min.js?v=ver44.1311 HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:21 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"94839-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Sun, 17 May 2026 14:14:09 GMT\r\ncache-control: max-age=10800\r\nnginx-cache: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94839,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32769)","md5":"b11ced65f32fedbe9bf81ef9db0f3c94","sha1":"fdfd441e66831bfb8809e8cb69c2c3cd26b5d7c2","sha256":"0fb170f24675c84f8228ad6b61d69bf6705030949cc2fec316b3a006eab282f8","sha512":"864e5aa02e74823de70e3914a9ba75413c9559e4508f72ee7d23993acbf6488d69ef13a50e5b465bee3a709b36664f38aefe9ec0b8d9d86f4873f1ac552c64cb","ssdeep":"1536:8YRKUfAjtled3TmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUbCGvCu09s2o2skAieW","tlshash":"9593e7d9b2d67123c7b731b850af510bb17698aa784c8c50f068d8e4be74a48907bf7d","first_seen":"2023-03-07T12:01:56Z","last_seen":"2026-05-17T15:20:18.468018Z","times_seen":2836,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/common/template/member/common.js","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /common/template/member/common.js HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:21 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS, GET, POST\r\naccess-control-allow-headers: x-requested-with\r\naccess-control-max-age: 86400\r\np3p: CP=CAO PSA OUR\r\netag: W/\"14817-1777904504000\"\r\nlast-modified: Mon, 04 May 2026 14:21:44 GMT\r\nexpires: Sun, 17 May 2026 14:14:09 GMT\r\ncache-control: max-age=10800\r\nnginx-cache: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14817,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"37e33fcf4ccd08ddf4133a2d01c6761e","sha1":"7892ba6c97c1c154e5901eca19c358f20670d069","sha256":"bf57aabbe42add547a565f03fe6e6decfeaafb51b2db5bc8575d9bf7f78bed23","sha512":"e1c129e678982581ebfeb4f3ef68026c8e66f3f41ecfb1805e615a926461c5f8b7b18b65de62d47093d5ebf8dc8af3a52a7c904dbe91ba1fe127c3fd6acd26be","ssdeep":"384:EH6Or0bcTOKHsEmz/rEVzvvT/plf3ZwG8kaRt:+0bcTOKHsEmz/ib/pVppJ8","tlshash":"ef62558cb60a6a5b6a7366744f3b1014edbe941b5846c502f99cc1c43fb0a6ab337e4d","first_seen":"2023-09-17T19:11:14Z","last_seen":"2026-05-17T15:20:18.427625Z","times_seen":927,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/kf.jpg","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/kf.jpg HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"24989-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:21 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24989,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=413, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=152], baseline, precision 8, 152x122, components 3","md5":"a6beb89b399155b997a559cc6ff38eac","sha1":"cebc2a90efb194b92ebeb6168d3e9aa77521bb89","sha256":"89864d4aa074e14e21eeb83ab68d4ab86630ce782585b91d71e7578ecdaeed83","sha512":"e8fcce6d723feb0e0562fcf506775f3954db0ab34c838bbf646308478a66b0a8eef71f61eca518251745d69b08afdd17888afc37605199560eeed28acbfb2567","ssdeep":"384:eu0Y8WCFsWN1PYo0Y8WCFsWNmnxvn+bZ22kzztbVf3FEXsaX9nyqz6eOmkfj3oz7:euSWSsGP1SWSs3xv+LWVVytfJWoz7","tlshash":"5fb2ae19ab63ce16f9e11235d99ac91b4313bbc751933289788c7aa2bb342d47c18393","first_seen":"2024-12-02T11:55:47.134293Z","last_seen":"2026-05-17T14:09:24.647366Z","times_seen":164,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/inco3.png","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:22.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/inco3.png HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/css/css.css?v23\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"1300-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:20 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGBA, non-interlaced","md5":"ad8ee26e42753e5ab9e8f1eb6f7217a6","sha1":"7d65538d71bc5b865c70546945c1aca0eb41ae90","sha256":"93f406654eb80188c42accad54a1398455523b6c01111a57ac30139a93a96d8d","sha512":"6aad12e86e314ac33c296df0154b4a1333fb37bceadf8bfe669c7f5cfbe758faee5588acc5bdf86ac6b74381a25ada020ed294a88f961f9ee039ebfe8d705b14","ssdeep":"","tlshash":"4d2172ddfa107843ab9dda5354fa801bc1464940d9c4e55b74cec84b0c714f5897d9df","first_seen":"2023-05-08T01:22:32Z","last_seen":"2026-05-17T14:09:24.632039Z","times_seen":614,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/verifycode.do?timestamp=1779020542604","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:22.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /verifycode.do?timestamp=1779020542604 HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\npragma: no-cache\r\ncache-control: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1222,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x30, components 3","md5":"3e7d716a146489a0f53570de2a7e4211","sha1":"3a8af5291c026a5a54306264f676758b15d86b97","sha256":"25f9dddb6e8cfacc1077205f5995de28f03744fbd272b6bbce553ffd2645302f","sha512":"9d1d5606266a52b77019098267b4b07af02dc11a492e5842c69a68209c63021eee48125f7549d4f1afb300939c1bcf86a855669d3a2f513c8c84bbdb56ea7af8","ssdeep":"","tlshash":"7c21b10267264710cf0b98b66d1839a7c4cae8823bb42f387cb641b11a22cf0c8887cc","first_seen":"2026-05-17T12:22:51.624543Z","last_seen":"2026-05-17T12:22:51.624543Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/common/modelCommon/notice/js/jquery.cookie.js?v=1.0.1","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /common/modelCommon/notice/js/jquery.cookie.js?v=1.0.1 HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS, GET, POST\r\naccess-control-allow-headers: x-requested-with\r\naccess-control-max-age: 86400\r\np3p: CP=CAO PSA OUR\r\netag: W/\"3121-1777904504000\"\r\nlast-modified: Mon, 04 May 2026 14:21:44 GMT\r\nexpires: Sun, 17 May 2026 14:14:09 GMT\r\ncache-control: max-age=10800\r\nnginx-cache: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3121,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d5528dde0006c78be04817327c2f9b6f","sha1":"31e1bcc4cf805a2c2fee21f48ded1e598f64a2a8","sha256":"b84161c9fbf7520cd14e7019f92120bd87a928a074156e91a992eba9fc9436e8","sha512":"69484bdb1382ae92c4b860f97fab601db2d8117469619f06e720fe5a516b5eb3f2d88ad6065bba6e28790bd1faa86b20aa753a9a0c7a2ad53c4eb787a404a9af","ssdeep":"","tlshash":"ff516650b7cc361e06ab22516b6f10ace63cff721158449d881965f82cb0c7bdb6bd6a","first_seen":"2023-03-07T01:06:39Z","last_seen":"2026-05-17T14:09:24.636769Z","times_seen":16676,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/180810064612.png?dawd","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/180810064612.png?dawd HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"171395-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:16 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":171395,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 844 x 214, 8-bit/color RGBA, non-interlaced","md5":"2f49ce3c04f826799b3c83d529831f4b","sha1":"048ab884e847b1d3a95e4888aeb9e6a7825395cb","sha256":"558c8347fbd4447151300608109d4c72c17561a2f87e601972baea2b6f098312","sha512":"ec036abf3d8fafe9caa2993ca9e6cae8b5a9fa44aec7336686e7e6099a5a92d40692ee765011242a63716a47ecab94d369cfca7911834f8d400cfb54a92f26b4","ssdeep":"3072:n+rHWmNDHgcGjkPRl0/y3NXIfvp/zZOO7hLTRtHVnYokAnsiJyFlySXkiFb:+rLN7tDfIv5ZOO7hXXHxYokOhyF3UiFb","tlshash":"eff312f69a4b2a922ebe81c1c48215fcc8cc319f1ed632476df1cf21069789469d7d6e","first_seen":"2023-06-04T15:55:09Z","last_seen":"2026-05-17T14:09:24.645536Z","times_seen":164,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-17T12:22:20.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:21 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17; Path=/; Secure; HttpOnly; SameSite=Lax\r\ncontent-language: en-US\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.7.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":31255,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (646), with CRLF, LF, NEL line terminators","md5":"8b48ee0f99f7e038b40c00b1e9a0df19","sha1":"8b94be88d91668c6fdb8dc9ef027cc9b9aed1cd7","sha256":"691427d1d157a909ba01f6019cc8c9c1a7b814529db0b492d4987f7ae70e18a0","sha512":"6cbdc946e51a46e2788b786bbb6c72034479b9580d410d2099f7266e6d341aa4eb8992aad2435ff150dad96c89cf34e09b3afc4a2b44e99e7f171eca50c6da9c","ssdeep":"384:gOlIZl5q6CuS5Rk6s1rtOgOaG9Cf5e+pvImkzFgDM7CM:1IZl5q6CuSHmUL+pvImkxZ7J","tlshash":"bbe2a41146f95f1a027292c17d30ab2e58775a97c60f5e06b3bf48da9fcae950c0b09f","first_seen":"2026-03-07T10:23:02.270516Z","last_seen":"2026-05-17T14:09:24.625644Z","times_seen":29,"resource_available":true,"data":null}},"time_used":2169,"timings":{"blocked":880,"dns":459,"connect":207,"send":0,"wait":409,"receive":0,"ssl":212},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/css/popMiddle.css?v3","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /css/popMiddle.css?v3 HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:21 GMT\r\ncontent-type: text/css\r\ncontent-length: 965\r\netag: W/\"965-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Sun, 17 May 2026 14:28:25 GMT\r\ncache-control: max-age=10800\r\nnginx-cache: EXPIRED\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":965,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ecb4665a05b8ce91b911601d46142885","sha1":"843a84731deb4cff8d5dc9a1d05b8d7c17804737","sha256":"3dd3ed0d24e2b7b9582f2c119c6d8c5d83a71482b5e33ab9bbccdada0cfb39e5","sha512":"d65a352da529709b5dafb056e7c3a4bb98b95091a4bc3ead94500be4bd4cb75d659d5c37dbeb9304079161e01ae773a8a8723be86a1d5f7c1af95e736884f8b6","ssdeep":"","tlshash":"d611ba52d3bb0945fc1ed0a9af2aa324231e4197860acc287bc8335cdf41188a8b5f8c","first_seen":"2023-11-08T16:33:31Z","last_seen":"2026-05-17T14:09:24.639994Z","times_seen":162,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/common/modelCommon/notice/css/ui.min.css?v=1.0.3","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /common/modelCommon/notice/css/ui.min.css?v=1.0.3 HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS, GET, POST\r\naccess-control-allow-headers: x-requested-with\r\naccess-control-max-age: 86400\r\np3p: CP=CAO PSA OUR\r\netag: W/\"11466-1777904504000\"\r\nlast-modified: Mon, 04 May 2026 14:21:44 GMT\r\nexpires: Sun, 17 May 2026 14:14:09 GMT\r\ncache-control: max-age=10800\r\nnginx-cache: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11466,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4973), with CRLF line terminators","md5":"3618a4e9db12a858c2b898d29fdb840f","sha1":"938e8b3bf113d3661381ee0fefed94256dec41da","sha256":"fb6d8b6a6dc9375bfddbc495fe67f3471e2659eaaedfc67fcf9866006519a6db","sha512":"f4fddc675f31252888aa1b6ad7a5f0cf07ef038ad3ae75400e90fb0ef3e0dee99d4ff819c6e673296758cd558d67ced2bb8d34ed65d6f5ade46b6259f29eb317","ssdeep":"96:5XTNsiodQjHuJTFgRytoVu7NRZeNbgKM4oWt39e7FHfwe/h4YkcEMvSa4ixkzAQ9:l527Muhe2NYQRjERbJglrbt1+VfwayWp","tlshash":"ea32f175b1883918f52ac6f6e971adf4f042d272b6a22bfff54fa40685818d4732f118","first_seen":"2023-12-31T12:28:22Z","last_seen":"2026-05-17T14:09:24.641413Z","times_seen":905,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/common/modelCommon/notice/js/knockout-3.4.2.js?v=1.0.1","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /common/modelCommon/notice/js/knockout-3.4.2.js?v=1.0.1 HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS, GET, POST\r\naccess-control-allow-headers: x-requested-with\r\naccess-control-max-age: 86400\r\np3p: CP=CAO PSA OUR\r\netag: W/\"60354-1777904504000\"\r\nlast-modified: Mon, 04 May 2026 14:21:44 GMT\r\nexpires: Sun, 17 May 2026 14:14:09 GMT\r\ncache-control: max-age=10800\r\nnginx-cache: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60354,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (644)","md5":"e956a74c005b7a243f0884d67e60f8f3","sha1":"c4fda6eee21550785a1c89ce291a2d3072e0ed9b","sha256":"a305fbb2ba223bf3b56bb8776b85f6f40d60dd082a74dbe28d143b5794c7e393","sha512":"eca283f482092f7793b4c1580cc834f59bd1f958b61b20af05ac1c5c20499676dfb99b58bffcf8ef0b166fa0481850bf78b1f4f4e5450116a0361d6cce950b34","ssdeep":"1536:AuiHOkl5MN5f01xVGWQjSTJEnILsP7JBfn84or4n:bP4MnwiL144n","tlshash":"ea43e8ec7296752267b330b9413f000bf13a58a6b98c44f1a155d8e0bd78aac517bfbd","first_seen":"2023-03-08T00:16:09Z","last_seen":"2026-05-17T14:09:24.635431Z","times_seen":1625,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/g02.png?dwa","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/g02.png?dwa HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"46481-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:16 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46481,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 269 x 79, 8-bit/color RGB, non-interlaced","md5":"7705ecdd2b5e59b9ed2d70ab88c8e7aa","sha1":"96e725f7cc23e2221deabf03218bebac53281865","sha256":"68b9ca7a66fc0947ee2ad8a70817792250ca95a37c78f0fc42ee6d32d62a9037","sha512":"6d66022e3731b8ef822b9be6cb2caee4a8512c5493c7a3d7a044e258de9a7a1469c1a9321902d44a84c834d83d24f3199fe27264a6ad69182dd2ecb4c3f09386","ssdeep":"768:fmcsjHWyEux6Z8vPUOgCS/Szbc1boGmtgX7w0cedQkAi9tgWofNYWhdL7J0bUBaL:OcsjHWyEwM8jzqSUJNmqX7jyti9thofs","tlshash":"1b23f183d7429187ad3ba9850041ab3e752c160b49301072ec8d9f19f6352bdb87cbea","first_seen":"2024-12-02T11:55:47.121725Z","last_seen":"2026-05-17T14:09:24.638037Z","times_seen":164,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/menu_bg.jpg","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:22.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/menu_bg.jpg HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/css/css.css?v23\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"2278-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:19 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2278,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 120x618, components 3","md5":"43c1a3019511810b7d7f593f3de43a09","sha1":"168f9698c39b39c09fb61abce677292976adb5d1","sha256":"02f0b394d7a0cff1ee693597fa159ec479263263ce1c8bad9a343de2efd6b51e","sha512":"6aa6813d2721d8dfc9f74bb0f374ffda0681bd9f9efe3a41c02ab624f0d6282e09c30d12d3a29b487181baa901b51428dc951ab0a7de0cd85ea79441ef216ff9","ssdeep":"","tlshash":"964150097f962cd1fbe8e27911a3d312071157c15cd3e5a564a1c04a3a983fa3e6fe87","first_seen":"2023-05-19T01:30:00Z","last_seen":"2026-05-17T14:09:24.633021Z","times_seen":347,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/favicon.ico","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:22.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/favicon.ico HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\netag: W/\"1150-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"7e9409770697f57e612c302a06d85ef7","sha1":"ad1000880c2f6a908ce98e546b8c1facc3f9d9c6","sha256":"d2545f90cf254321254a9cf3ce14d4048ab3a4ab77d2c38130297f47556af861","sha512":"11d04fb58b3096ef1c47b34c888b58cef91d52886bae5f60f5a45d1d023ad9e3181e265e6e0da6e05ff77a9a2a86febd93947da224353dd66f8d630627085694","ssdeep":"","tlshash":"7c21e35d3f55990bc1b46e341841a27d0008ac866b68c312152677b81c33dbcaba74ae","first_seen":"2023-06-04T15:55:09Z","last_seen":"2026-05-17T14:09:24.624951Z","times_seen":272,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/common/template/member/secondary_verification_v2.js","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:21.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /common/template/member/secondary_verification_v2.js HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:21 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS, GET, POST\r\naccess-control-allow-headers: x-requested-with\r\naccess-control-max-age: 86400\r\np3p: CP=CAO PSA OUR\r\netag: W/\"6459-1777904504000\"\r\nlast-modified: Mon, 04 May 2026 14:21:44 GMT\r\nexpires: Sun, 17 May 2026 14:14:09 GMT\r\ncache-control: max-age=10800\r\nnginx-cache: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6459,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF, NEL line terminators","md5":"228d461b5ba9a98cd818ceb5db71e412","sha1":"22b2bfd490a6cce3c078fed96c70d8b20aa1d6e9","sha256":"a832275956255bd364cfda22a628b31d30b00da6442f5e6f3f6a16b427d286b6","sha512":"3a36854f0ac95b136e8e0439bf601bbbf3643b0c5bc3d2ed9a05a62fdeb18cbcadd1c9b3137dee41145c75483dfedb1cc91d4c56f19e9c73d9497814d0d1b0f2","ssdeep":"96:BhBJuEXVjfLDRfm1kBsAu0fZUAvQJ5ikAR:BhBJuEXVL1m1kBsAu0xUAvQJ5LAR","tlshash":"13d1204bacca061255b795f48912530aff30c2079a92a711fced35e22fb5935a393f19","first_seen":"2025-04-06T22:52:47.453407Z","last_seen":"2026-05-17T15:20:18.461275Z","times_seen":590,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/inco1.jpg","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:22.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/inco1.jpg HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/css/css.css?v23\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"1222-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:18 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1222,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2x26, components 3","md5":"dc8d6623450a652a67d5739ce7a24fd9","sha1":"2200c3a541b3b34af5f04ed0df0f9fe781a54f5f","sha256":"4442f71881d451f894bfc7fecf317ade9a6e7699ae0a1d98b98db8146d8ecab5","sha512":"4ab57fc65fd7976d5e1e141905c035c2e5488c924031a42f36d2e6396c82d551ed863b31d1123b7ae6b4d4c6d4ed1a3151b20cc94fe612f4f18e694d6185427e","ssdeep":"","tlshash":"bd21260efe125743d6eca83234f6612f4a558480f5c1ea4bf8fac95318760f649163db","first_seen":"2023-05-08T01:22:32Z","last_seen":"2026-05-17T14:09:24.643183Z","times_seen":469,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/footer_top_line.jpg","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:22.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/footer_top_line.jpg HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/css/css.css?v23\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"1229-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:18 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1229,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x2, components 3","md5":"0212e759eaa6fe08cb33708aba03fdad","sha1":"a543c6de5184cbee75ed8607d22ed7c418238891","sha256":"0be458bde311be5220bb6ece020dc302508a4a7f067488a7df42646fde156d2a","sha512":"0f10f8a1fbaedad34c5041bff06bb7e7dd6ecc37d36029d075976b5fa1e73cbb98e84014ec603cc2a3a81599fa9eb7bef17a161d13806d9c8682b1463ee0bacc","ssdeep":"","tlshash":"ca21fb09b6822c11e1dca83124f6c7168b129440e8afba56b8d9d05a7ce40f36b1e2ce","first_seen":"2023-05-19T01:30:00Z","last_seen":"2026-05-17T14:09:24.63Z","times_seen":349,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet613.cc/images/top_line.jpg","fqdn":"bet613.cc","domain":"bet613.cc","tld":"cc"},"ip":{"addr":"122.10.20.69","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet613.cc/","date":"2026-05-17T12:22:22.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bet613.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 01:37:31 GMT","end":"Mon, 10 Aug 2026 01:37:30 GMT"},"fingerprint":{"sha1":"8D:D9:9E:20:E9:68:79:33:EC:04:7F:F1:5D:5F:B9:F4:B1:6D:CB:15","sha256":"B4:4D:4A:11:6F:CB:02:76:6A:AF:BD:01:19:4B:70:61:F9:7C:60:A1:33:D9:08:AE:51:C5:74:8C:63:EB:1A:A2"}}},"request":{"raw":"GET /images/top_line.jpg HTTP/1.1\r\nHost: bet613.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet613.cc/css/css.css?v23\r\nCookie: SESSION=56108f28-40aa-4797-bf63-3b4ee13bdd17\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 17 May 2026 12:22:22 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"1129-1732000592000\"\r\nlast-modified: Tue, 19 Nov 2024 07:16:32 GMT\r\nexpires: Mon, 18 May 2026 12:01:20 GMT\r\ncache-control: max-age=259200\r\nnginx-cache: MISS\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1x2, components 3","md5":"00efcea3dedd6575a261bac68bc3c835","sha1":"1a082e9591317926ab36930eee42cf3d7efda300","sha256":"18f81bc540555bde732bf62bec70da2f0687aeabe8a08f3aab2d6d7fb1058d35","sha512":"6a56e98f3d261a97eb0ae37dd9241bdfac2b5a0b42abbe99a9ba46083373437ce70533b1336682b80c809339e9176f96eb841416e72c078ba2698e2986407235","ssdeep":"","tlshash":"76211209e9d32da0d9ece9f511f2d12a5b024440a9e7d596a8c9e00b75d40f25e1e1cb","first_seen":"2023-05-12T10:37:29Z","last_seen":"2026-05-17T14:09:24.643761Z","times_seen":997,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"bet613.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"bet613.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}