{"report_id":"21d6d7ef-0a35-4668-805a-b2f2922cf20c","version":6,"status":"done","tags":[],"date":"2026-04-15T05:46:30Z","url":{"schema":"https","addr":"king-betdrivesystem.click/","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"172.67.207.91","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"title":"Book of Ra","dom":{"size":107502,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"5516f5a82d0e7bb96dcde61f1657a14c","sha1":"9cab3c4f658e8b6cda5e9ab29b878d0148471000","sha256":"3adf03a7494e23307af2ec8ab82de5e3422bd1b39917915c5bd9535cb98c7576","sha512":"bf033c749ff019b0dc0c3eb31481d93760daf2d581542d8b4043b6fa2fdc11e76b5d666413b8d8a261f327987e994fabaaeeb9387ac8235161c1ff3cb67346b5","ssdeep":"1536:SkF/E0O16EA+DaiBE5BdQFZ2tMuvI30z07SY808Q5QJwWW6dxdCrvlgH:SkFsdNXgW6IvlgH","tlshash":"0cb35630a8f214370143d191ae669b1b6ee0f607da464701bbbc87e46fdad8bed0b54d","dom_hash":"domhash42821803eb2b5998744eb22e1880dd5c","first_seen":"2026-04-15T05:46:36.210325Z","last_seen":"2026-04-15T05:46:36.210325Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"king-betdrivesystem.click/","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"172.67.207.91","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T05:46:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"king-betdrivesystem.click","ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":28,"request_count":28,"received_data":1405625,"sent_data":23860,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"easy-image.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2024-10-22T20:51:12.623208Z","last_seen":"2026-04-08T12:59:36.316818Z","alert_count":0,"request_count":31,"received_data":517764,"sent_data":14204,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"betterlinks.pro","ip":{"addr":"104.21.23.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-01T11:14:04.853343Z","last_seen":"2026-04-10T02:22:30.093063Z","alert_count":0,"request_count":2,"received_data":3168,"sent_data":1161,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/jquery.min.js","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-08-12T01:18:04.494606Z","times_seen":30907,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/uaParser.js","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fae74f6b710e428ad5ca0378fc339859","sha1":"0d8f92bc5fcfb0ef72ee329f0a0763524443b5bd","sha256":"9735a83f5152c01eefe3ca9457e3b440502b60246d60f232196eb36c126f2125","sha512":"092f093612174c0f84c491a2e9ff03b4ee160ae90aa16ebd5f83e80a7c128efb6e8099629c9c88d7a330f9313a1a3d78e561d295b4fdb446dd18266fe75e46ff","ssdeep":"384:69M5d42wb/6iOD0tRqwkdZISkzVBv2ETttl9rsATHskN:69CKyzDYRqZduSAZ5tl9rsAT1","tlshash":"0b92da3ed365bf2093bee589c51790002d3a5c3adb41b0f99ae4b540e8d6db1129f7b2","size":19383,"data":"","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-08-07T09:07:57.005137Z","times_seen":288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-12T00:55:45.331794Z","times_seen":742003,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/translate.js","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99c0d4f9a645bf2c48bcf1789692ff1a","sha1":"90ccdd603c5035a69c77d340db76e503d6efb48c","sha256":"5d8725968df266c2a1d0d513b9e02a52d2c68ea48b23733a5b7103dbe1abca87","sha512":"04cbbe9e8ecdae18b08e3a21264e15c37efd00313e7f9cb5847fa681c25a879657e82d2a6938e17fe32454849503612a226ebd1f5dd2d9e133228fc58270d98e","ssdeep":"","tlshash":"5271974cb0f2010d5993b02efbeb6895b224985b0265fe183f5e45436fe393dd39e689","size":3637,"data":"","first_seen":"2026-04-10T07:45:47.001447Z","last_seen":"2026-08-07T09:07:56.993492Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/main-function.js","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8d7b307927d955696e5844b63be7e04","sha1":"88ff8abf49a2f2beb1a41ebc3aea33a2baff29bc","sha256":"2631dad9276ce97323c54be53ec6a6c8bbd6bbeb7479c271e091001bc38c5fe0","sha512":"801333434679ce15d04aab6565a51fec87e03f8f93ed3b88359a152454368184b95d5455447dc2f9205a8bc0a6231137fb7d7b48e28f5a29580f7e61e6c6b9e6","ssdeep":"3072:l8qPxtNoMsa4zFcw/dnVKwj9PXgcxmTD2EnZKuYMWpX05omqABHP5BB240fi:lGwcxm3jZKuYMWotBHP5BMhK","tlshash":"9714940193c5bc80110b9fb7b72fb7e5e9295aad34990c8fd1047c55ebbaa06dbe0931","size":200835,"data":"","first_seen":"2026-04-15T05:46:36.290702Z","last_seen":"2026-05-09T07:38:33.809619Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/sendUpdateLead.js","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c8600c50a8195db26f08b7d522b8fa3","sha1":"3706d5703a854f4d2ca6085ebd4adcf646b306c0","sha256":"6822425265c50ea20c8ab1040aac89ba3148c4c842f4755238f1a449d8b6ff89","sha512":"dfc3c8d1dce62f604d54e226c775043913d57045d5a7999f2167d31ed7f3c6bfee6ce2946aac750c49bc5f6d70476ffb3c41cb6161f927035df6cb95f8cba7d6","ssdeep":"","tlshash":"cd3111a25c6651ceeefb10ac93af5186d376401b2836d065781d9b0c5f8483e12bbbe5","size":1674,"data":"","first_seen":"2026-04-10T07:45:47.040788Z","last_seen":"2026-07-13T06:00:20.168359Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/prompt.js","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44ebc534ff78e60f1b65bf973fce02e0","sha1":"cf48af00a3fefee9965b4ac1b8857f4036a2a252","sha256":"ff398de885567f110214c619e2421fd329a9aa4b873f2480a953acc6cc61f898","sha512":"6bd669dab5a3c5daa5e34b892b3a7b156afea0bec86c91ae9ce6b46946300a65ea26d2fb8edf361bd89739f377457a12b5f93b07cf193be60a8e862c0bad8518","ssdeep":"","tlshash":"cdf022200baa18b1a01b336e8f1f1e84233174a72d225d203d5d4c8dcf816a842b2be7","size":453,"data":"","first_seen":"2025-11-01T11:14:12.483716Z","last_seen":"2026-08-07T09:07:57.011608Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-11T22:43:38.781407Z","times_seen":237600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/firebase-prewarm.js","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/firebase-prewarm.js HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2BuWXYLkH0in%2BuiIB3J7wQcEe6GSNmXu84zCPS0CglZE%2BqQlVHxYkH66mX6lU5JxbUjLS5wxvbe3peZV0ofOT%2F%2BR44Kfp%2FEJs6uHS3KdLBd8RN93sAptjQYWzsNvAE5WXpXpfQabXfdOp1Fv\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69ca921d-321\"\r\ncf-ray: 9ec8a5ec0fc94c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":801,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (311)","md5":"4d905859417544362aa8524b07b698d4","sha1":"f0c6a7bccdc3bc9f6657ce56f51e31ba6a6282fd","sha256":"b66651f3401f421cb088bff2c5edd123a5e080fede6be34673996951aa6a2e6c","sha512":"dc9fb5d67b1785d40c6042cb8fdecb9acd330f855488bde450d38fa7d01d90eed325ff3a991a14fcd2f5a1be27011d02971f75ee2a202cbf927253b509144dd4","ssdeep":"","tlshash":"8b01ce4f91beb4b64e3650b85c476005622e550ae789c5d93b8f9234afe2168722678c","first_seen":"2026-04-13T04:27:41.65573Z","last_seen":"2026-07-12T09:08:39.533241Z","times_seen":9,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/screen_2.webp?options=content","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/screen_2.webp?options=content HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 32158\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8a5ec2fd04c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69ca921d-7d9e\"\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tY5HJHqvRliiuu2R7gaqoo7Yc1Gf7xLHE%2FCupvRCnh91OHjc7WD9SFlzjH7aNivuwoxnaRjXe2bnJIg6YssSIjnu9QjgFA9zcHuka9jgSg0ddC6Ziq76JswF7ttWZo9cF3%2BoGFhQssc2csC6\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32158,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x408, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"34212053d7ac22aae20df5db006dd362","sha1":"8661fe2e505b8950b7b1fe455a46bd41867afeea","sha256":"d23a0821603da236045233ccb4ab6cc1fe8d1f54dd1403f401fe38f45d211473","sha512":"f98335d6c58c12ddd76fbeb3eaa1b056add6917c44e767fdcb1157a8599539d426637c1f7cade8396c27d1ec1c25f11ddb05f7ccf53f8b2fb6f135ec22f80c28","ssdeep":"768:qcg/AUrudbhgU7bCFtz0Pd029uc/xrolOF:qjAUC5CJrI1029lZ0wF","tlshash":"50e2f132d7694338ab6d5d773b2fdc95a0d1c83e9dc14d528ee152c2fb81589a0835e3","first_seen":"2026-04-15T05:46:36.216678Z","last_seen":"2026-05-09T07:38:33.697284Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/70.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/70.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17720\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0550-4538\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:20 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1029\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:46:08\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 27acab426e13dfa616b4de59005d514d\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17720,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"152571f13124d6e7bce09af33e57beae","sha1":"7f883966cbcb35ba35aba3b63469775c80d6aa93","sha256":"5fc38869d09efaefd9e2a56d15cb6ab69bc60d061c0abffa72a91b9a3c0f7dc1","sha512":"b0536cff4b16bc37cafbec6598560542f7287cb135bbb468da15ae89ccb97bd3d7b35e0cec869ac446955dcfb7932da5e82f432a130631390314fda5a7884f8b","ssdeep":"384:OlDP93cywId7OeW47I6+y9xWLNHOP7ItGkk1xFupvF24LT4eZ3:oDaqA1M36+7qU1xFu1EK443","tlshash":"a482d16eeb9eb15af4b1c5381d76077313122e68c835816e381dacc6356c5d8f58f06e","first_seen":"2025-09-24T04:03:22.01051Z","last_seen":"2026-08-07T09:07:57.006401Z","times_seen":22,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":144,"dns":0,"connect":0,"send":0,"wait":82,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/uaParser.js","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/uaParser.js HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vrha9WSLkq7%2BA%2BZCNwOL%2Fi112VzSw37usnSpiHuyP0f0afYq0weOnv%2F3RLQVpM10ltRKd6nSPAvG%2BjIMvGOD2rP6HJaSvpStYlE9sZTC4gNChLYh0YoJ5WD60e8otXIDB4gejlUBqXCxeV6\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69ca921d-4bbc\"\r\ncf-ray: 9ec8a5ec8fdb4c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19388,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19275)","md5":"fae74f6b710e428ad5ca0378fc339859","sha1":"0d8f92bc5fcfb0ef72ee329f0a0763524443b5bd","sha256":"9735a83f5152c01eefe3ca9457e3b440502b60246d60f232196eb36c126f2125","sha512":"092f093612174c0f84c491a2e9ff03b4ee160ae90aa16ebd5f83e80a7c128efb6e8099629c9c88d7a330f9313a1a3d78e561d295b4fdb446dd18266fe75e46ff","ssdeep":"384:69M5d42wb/6iOD0tRqwkdZISkzVBv2ETttl9rsATHskN:69CKyzDYRqZduSAZ5tl9rsAT1","tlshash":"0b92da3ed365bf2093bee589c51790002d3a5c3adb41b0f99ae4b540e8d6db1129f7b2","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-08-07T09:07:57.005137Z","times_seen":288,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/fonts/Roboto-Medium.ttf","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:09.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/fonts/Roboto-Medium.ttf HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 168644\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:46:09 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8a5f168704c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69ca921d-292c4\"\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2BoNzLy9c3WI6SwbYl%2FjsB%2B0WOcV2ROWMxosLZSeSXJRkxlycLZGxcXfzEEeEvKyYU%2FyuHkCM%2BGVmQZvwqGfwb7mllMxwP1Qj1Ol%2FFK%2B6G8iDxdoJ1z8rUA7rcnyeFlUnow1Kijk790Hvenk\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168644,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med","md5":"68ea4734cf86bd544650aee05137d7bb","sha1":"3c6a09fcc6a454924c81af7dff94fc6d399ed79b","sha256":"9d0d55a303bfd13b79a87721f65185e93f235e2d77fe398b2dca67ac519915f5","sha512":"5d55a41b845f3a3ae9b08cee5258348dfd83dac5f0a0e48159cd85c141c614a02f8f474fa683d2bfbc451d49dd3b749820662d403b2e3fd3f16a242eaca64115","ssdeep":"3072:wqmtn5wkex8r6Qym7KCkygAKuXylCC9ptSUXl8j/6afWRCgqdhASD/80/:n25wklN7T3QtSUXz7XfST80/","tlshash":"73f3d701d241bf25cac6b6787c7c93be4cb5e41abc4aa52730d9ab3159c8805ec58bfd","first_seen":"2023-04-05T23:29:00Z","last_seen":"2026-08-11T08:02:16.394406Z","times_seen":2102,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/icon_arrow.svg","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/icon_arrow.svg HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3mXM2jrd5Sazr68HHNsMUZwoMFnljZzBDwGIC2He9bqsE32eF0o4Yu1RWROR0SmkAWL6rL3m5jeIWyOIF03XbUeNeejfxAgHNj50i6XUWYdGPpkC7cL2efjDjGcUsBDcHY%2FnEoRqkzw0S34M\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69ca921d-db\"\r\ncf-ray: 9ec8a5ec1fcb4c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b43d99f133288e69bbbf4086d2e6ef32","sha1":"f405ed0c6a2240746d942d4af0014a310a058d44","sha256":"ac79cfa70fe0b3820fa22be89a4220bfa05de2b99f3ee68bb10a7a35937c245c","sha512":"1ebc17375039ba8c9aeccef936efcff9785c1b12995b9d18fe5d3f0ffc545595c5ebc728ab4cd3dc1cb54108a45849920c922e6feafff9f30e6c35bdb248d7e1","ssdeep":"","tlshash":"efd0a7be554c990145044f525d59316772b674cd53c804b9e54175e07ce00d79d5dd78","first_seen":"2024-08-19T13:45:40.065042Z","last_seen":"2026-08-07T09:07:56.996565Z","times_seen":276,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/verify-dev.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/verify-dev.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5200\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf247d-1450\"\r\nlast-modified: Fri, 16 Aug 2024 10:05:49 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2c147516e4a0fe17783a469257ca02f4\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"24320f300aafbe3211b8b6a9a8f8dba6","sha1":"fa8ca7b908c4de4f51a45c1ef7f79582dc2fab22","sha256":"8e30d059ae297c9c231e28ccb6637a6fa5a95f8d29643a76c36ac63180d617e7","sha512":"8cb2f54d1b422833925d29a93f30b2fa9b42288550fe11de555d270c81a05609528806c98c78f6a5d0eac4b1792651a0a73dc4a0db0ae0e1ccb075d4743de0cd","ssdeep":"96:2gBnsssqWq3S22mN0yavi97D+Xw+nw8a47T7Yj99EVcw/:XnsnI3S2EJvo7D18aSH89WV","tlshash":"10b17cb7352842ccc1b86964b4275943d2204e12831e2af59b1812d7ca2a76cfad2b13","first_seen":"2025-03-26T16:41:42.434031Z","last_seen":"2026-07-29T23:24:39.09324Z","times_seen":252,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":226,"dns":1,"connect":17,"send":0,"wait":46,"receive":0,"ssl":261},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/27.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/27.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8882\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0462-22b2\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:22 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 03:01:46\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 64cc0e16cf23b052f38908c3d7765137\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8882,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 173x197, components 3","md5":"797d96b2359e1b4bd6b83e5851f8c093","sha1":"c86d38c84d262d01ea663903c5f31d8d81443b72","sha256":"bacc5ca0c142421f04040d237ab82a6c9b9baf4ba4bb40ff36b30df85ed5d67f","sha512":"6fa604c9dcb9b698aa9b445869d1889fe63d2652f15b4d61fd6c7d5dfad94a121a5b51750e836efa988f9b645e654b6a7c339418bbf3e93166eed639729fe142","ssdeep":"192:JPrBjKR8+0Id5EVBG7ADQ2/xuV3kjWW0aqaQCaN3f9gS3j4C+a4B2:JPrB2R8+0Id6WUDQ2J4k0a7Qz3DAi","tlshash":"fb02a008ec12d171c734013ba745aad57c676633e1df127408a38fdcaa96477a7d1a54","first_seen":"2025-09-22T08:45:43.395138Z","last_seen":"2026-07-25T07:12:04.407168Z","times_seen":29,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":195,"dns":1,"connect":24,"send":0,"wait":55,"receive":15,"ssl":233},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/security_icon_n-2.webp","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/security_icon_n-2.webp HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 198\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8a5ec2fd64c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69ca921d-c6\"\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fa%2BVy5HZQwabJ9gPGoa4%2FEpV2kJY6fpIxV7AmVoUipecjmfakxozcFEgUYBkWzz%2B%2FSXMcuGSVmSI0isPkCr2gUePXcXVhU12G4IYrsJnBgFDErfE%2FCv%2F2hvdl26Syj6LGqM9ZOTel94frtDO\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ac1664b06f112ae930716445d9765a9","sha1":"064752fdedd5ba2d38ef36617111de68133cf6b7","sha256":"c55aa588c9480ee7851d578b3306c80f5548f9ae5b3bc9afb5d126e5ef0652f0","sha512":"c00d5d5cb2e5e0afcf3b315a2649da2611ae0e3b75e5677aaf6e851bcb8afd49582161a06c80374e3b47942258ab54379cbfaa8a6ea772b2ad97a33a18fe69cc","ssdeep":"","tlshash":"dad02292cf2508280a732c0a0240442511f3589c20c3ea31a6a62cfa4c3f74b666aa00","first_seen":"2025-06-13T11:43:17.267674Z","last_seen":"2026-08-07T09:07:57.019989Z","times_seen":146,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/44.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/44.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7365\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0465-1cc5\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:25 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 03:01:46\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3f407ffe8cbb4874dce21ca97647a544\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7365,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 243x319, components 3","md5":"b8a5f2b2b2789ccb7b9209a3c8276e03","sha1":"b337904b493e8d9a006668698049585fb248e07b","sha256":"f05132ba3911566be3e19e3535b0a2790edebc6e7076320614006bfeb138d65c","sha512":"4979a9316b13d89d9adbc329ac2a0e77879e2f69e44dda488955e338788199f8fd7d1d043186d690a4d2e44b401c4b4b41dc56317e88c72f9bcc27b22fd6e932","ssdeep":"192:7P33NXLJIT3gGfOuEbs6E5TA2ZRYkY6hBBSyVgqklsJujq:rZLiMGfOuEbx2YABBSeHH","tlshash":"8be19e76176e4c17ba7537309ef8abb45543e8d947244362f689a2ff53a218f4073822","first_seen":"2025-06-03T02:54:05.982767Z","last_seen":"2026-07-25T05:56:40.12213Z","times_seen":31,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":174,"dns":0,"connect":23,"send":0,"wait":74,"receive":12,"ssl":210},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/61.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/61.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18376\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0469-47c8\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:29 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:46:08\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3831f10a58321a367a9f3f466ae1f7ec\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18376,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x230, components 3","md5":"c08ab63b8652dc1b948c5d18e4487f20","sha1":"7460396255f8535b01661d7c02bc06c51e960767","sha256":"622a790146334f3efa1d3084af1182eaa873d661cd56a9003ab8783a66740486","sha512":"0d76bc63793192ac36bb498db118dd877a23cc282f5dc7bac417d1b0b3c6aa188d30c6bb8402e3ff859b864adc41bea5659b5795cff454b72c40d6c707dd0b7b","ssdeep":"384:bwX9Ci/M/r0p0zeI0iTEFk9LVTai568UgtqwJi7l6rPcRBNUuvtZYxIoq:yCi0T0p0vKW9gkLqwi6TCUQvp","tlshash":"2482d18740011f308abb2315973c08dea4f66c685d68eb7e22eb70e0f9b4cb1459b61e","first_seen":"2025-06-25T02:14:17.521258Z","last_seen":"2026-08-07T09:07:57.0159Z","times_seen":26,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":82,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/screen_4.webp?options=content","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/screen_4.webp?options=content HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 23674\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8a5ec2fd24c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69ca921d-5c7a\"\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4WS%2FDg2rI1zjORtScLnVruigSCtUL5RQMxkZVrMtSWOlepzF8h6PwFsdAA5yJHgdq%2BK0z8V5XWRHkxV13x9yNX8cE2J7dHXqGSkGTMiZk6RqxO%2BuyrrM5DSfzkCcCYkpCEADvitChzA67%2FLK\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23674,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x408, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f5e50c4786306ee9ec3d5bfce052f12d","sha1":"4fd552f5e3716f52ea2cf14041491a71f7beddb0","sha256":"cd0237e63d6c28e95b89bcab1bbecf5f1e66e8fdecedeb3417c65365dbd8f1b8","sha512":"ef2bdbd53eb128c7b9c3355ed5f596ffc7faf2fc9b5e9f28f040f7eae3782f079c57a9f5d4a480ef237c685baee2e3a3bec84bf3bd225032466a5dc04cf873bb","ssdeep":"384:KgvRu/vwZbrFxCLAmtAbGjlVLqmv1g0XqASWzUvhjx5YitGvF6t:KSu/YZ+cmtAa+N06geDS9m","tlshash":"60b2e140e987cadc514e3bbecc85927492dab544a0ce1df9300617e9abf5a7dd82e0f4","first_seen":"2026-04-15T05:46:36.230811Z","last_seen":"2026-05-09T07:38:33.734593Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/63.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/63.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 57253\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed054f-dfa5\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:19 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:46:08\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d6b81154033a0c1223ad808e1817b5f6\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":57253,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 644x468, components 3","md5":"7d72187740e7c60c480064a7fca38e81","sha1":"22a11d4ac440308717384f5e376d830d0fadc099","sha256":"c219c032b3cc2a5f70d10a027835b441b9defa346ab56f23b066a40771b4f9be","sha512":"6c65097ef4e29f5beb36ff985c8cc860b72f1c308221db5373df7d88e072e313f348d9f1c47d9ef371a8686442a98cbcbc85736e6b08417282c9a8679744a82e","ssdeep":"1536:HzH3XCzxDHrbOXetDH8Q1pN625qc8xEwRo:TH3XClHvOQDH91p3uEMo","tlshash":"ad43f1ed685f6afdf947226e66cb13dcb4761f848aba41ba0d8019f060d134ec334d19","first_seen":"2025-10-08T17:02:46.223632Z","last_seen":"2026-06-30T23:32:05.445808Z","times_seen":22,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":87,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/1.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/1.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33324\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0546-822c\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:10 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/30/2026 15:03:04\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e799c282e1d41a7048fccf8d6b7962da\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":33324,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 497x332, components 3","md5":"8b9bb7fc19b04a28dad3923b75f45dbd","sha1":"35b0320b813e025daf224355a9e35112fae32534","sha256":"13a49807466a5e3af06899026733588a41e49814637a7cd3dfae099a80d77130","sha512":"3da429b90d19a5da8fe7f9998b811377353a8849c8b45aed6b66f23ac0c00c560cfc1bcf82ab1fb05c6345f00ca025bc0e67889fb83c4a480da3e9fd421e6fad","ssdeep":"768:ejcdxyIM/vZJ7pHD+/oaXHNkky4AO2j0TnkMwC8A:ejWxB+vdD+hHN3y4h2WkNA","tlshash":"c6e2e1da4b0a5247f6f22816d6b390a331d11523162f47d3661b0eebb3ca8bf5a531d1","first_seen":"2025-04-20T09:00:58.020251Z","last_seen":"2026-06-25T14:42:02.23994Z","times_seen":23,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":139,"dns":0,"connect":0,"send":0,"wait":76,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/screen_3.webp?options=content","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/screen_3.webp?options=content HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 32030\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8a5ec2fd14c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69ca921d-7d1e\"\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=prXCLK%2BaQSR6UFEwB5m9T1h1sJFnanuC9CE9KHNceHJ5zgKedTMYeNHSD2Fy37RH9AnMhNaMiCgxbbXJefyYYJwGalV9dcmhVCloUDHxdj4XrSC2Uf4kNl7i9ppP9Zjb9HTd6HSWLv1mQMJq\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32030,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x408, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ed3a4ff5d9765e3fac454c9857d8dd9e","sha1":"4864955d5c11b8d5a6276648b320b081c21e2951","sha256":"0df4b02c73bd9bbf6d3ac44103bb728f476a04ff2e7ceb2326f6fc3bf418a8b9","sha512":"28cd1a9f59ca4c64b591a3397c3c37b65ce51cd4b8989051ff3dceffd59e33bee044ca1fe698567ca2b5bcbbc64e82a285a7ac28d33a38137603966a7faf2181","ssdeep":"768:jq8eDfdHOAoUy8rk87FB9na5M//iK3Iuva3hEHKljVyoinqL:jqJdHlhy8rH9a523UpHyFS","tlshash":"3ae2f19dd3bee63fddb45186d3d9965f9c1353a49eef1f4b6812085b3420c142361788","first_seen":"2026-04-15T05:46:36.235611Z","last_seen":"2026-05-09T07:38:33.781731Z","times_seen":3,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/49.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/49.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23111\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0466-5a47\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:26 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/14/2026 14:42:56\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7cb99a8cb796c94356c9aa0ff8061416\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":23111,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 307x451, components 3","md5":"751cad703f7f512cc861640105adbf1d","sha1":"362b4c3df16316a2adf527d74a89a0331fb146eb","sha256":"766faadd0d13d55353a0ae9a813b1a0e7b45ca835e6554b5d8c4dd38424b5f7e","sha512":"48e204bbb207c3c39b6e23ed75b0fa00a977b75796fb384d03dcdf32a65a726b9f223c10aaee4035910bf2a7b77a0a796368802155472730d25750b03ebb2f55","ssdeep":"384:1AbRRgpJsnFbRfu/q1T4ZMH+HjCeHIVWzM1Uc0xClL2QIxYMr0hmoh5w:EHgrsnbZJ4ZDHjC4I4zGwk9er03o","tlshash":"56a2d0625111d1d04b664134bece92608e81f09cb7f6031f74d62ed228dc6f990abb67","first_seen":"2025-04-20T09:00:58.012301Z","last_seen":"2026-08-07T09:07:56.986851Z","times_seen":37,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":163,"dns":0,"connect":0,"send":0,"wait":21,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/89.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/89.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31630\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046c-7b8e\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:32 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/31/2026 13:07:09\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1bc29c8e81d51dfb8c4ba0a792c51939\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":31630,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x360, components 3","md5":"ec9d91fa4ca17c8ac5d0ab5779ba5724","sha1":"724131306998b2d49cb6d59399831d5e653c7bf9","sha256":"7f0b9b46a9262463e705d9c02e1027560ca1f3475636868085f669aaceec6df5","sha512":"bb93c0ec18b73af00a7752ce5f8566e077f5e6a2b40ae9fdd365a57d01bf93778d6d17e557ab779f03faf4a8284100e14bd3f2ea851a433b753cf3f39004bd80","ssdeep":"768:0JpP7Mox3XXjBitWE8+ocmelbzW9WFSRRICZfvUrpdxcTkpCkzTvt8quNk:otgw3Hw0dFcvAIWmPx5R/O7Nk","tlshash":"5ce2e0fa7b61df464918fe27832925ef76cae08a335c0868209fc1e99d55199804ed3f","first_seen":"2025-09-22T08:45:43.467369Z","last_seen":"2026-06-27T09:54:03.839199Z","times_seen":16,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":161,"dns":0,"connect":0,"send":0,"wait":42,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/8.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/8.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23531\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed045f-5beb\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:19 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:44:19\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 55137bf296c01797f39f702c7db871b3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":23531,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 251x376, components 3","md5":"a85d07373a1461dd23255fa32f6053ae","sha1":"fe7be6d195d5a1931b0cc693a96579632ac6992f","sha256":"4e4ca137ca4893327fada71b1f81c013b51c3f8040682e34f2b1a2a98fa4e3a7","sha512":"501588d005a988451038f50e792016723624bd08e8872133c5497285bebe17a2dad926f57f26b38cf4f2bbcc7008bf30b846c142c92201b0b17609325d55dcd4","ssdeep":"384:MVNLeWgNUFsORF2ktfeW4eEGIp22UW+xlMKRdLGS8uDczzO2b4WEyhOeQ8t5EYgX:1Wg6VRF2kWW4eg22UZlNl78vzPb4cId5","tlshash":"1cb2e01e56d439e28af363a600978809c742ba0a50dc9bdd89e4f4d09d60fce76d9ced","first_seen":"2025-10-11T09:20:45.383339Z","last_seen":"2026-07-25T01:13:15.980839Z","times_seen":36,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":151,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/security_icon_n-4.webp","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/security_icon_n-4.webp HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 200\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8a5ec2fd44c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69ca921d-c8\"\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Whwe7mkWPj7KskUm3ocf12vbi388p3jFFcREAHn4FVJboS26vfU7evz3VGL9kXNEnLYuHFpHCLRW6jCnc9IbgHRDsve8CP%2FMYnGX7s%2B8bGIa%2BujyK6OouF0wt4TvAhbXOS5x6lbvszRgeLc6\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df61c422ecae7409b8697262192a44fc","sha1":"d402d28a126d995638a2f434ddbd2b276887b599","sha256":"329ad3c7ac436f964c7a8cfcc6a74c859b51cdabd8974a65f0836410b11f2dc5","sha512":"32b50246ff38917d79c18c2750fdddafd991ebb72f9b1eadf0ff928fa0f083ee1c6ba74f697549e50743e89e1e9fb547e666a895801669c7ac65219691492562","ssdeep":"","tlshash":"63d023089d27c1984e281f1d15b145941e748d547102836d1111c5d8e0304102e5698d","first_seen":"2024-07-13T05:31:04Z","last_seen":"2026-08-07T09:07:56.99107Z","times_seen":845,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/69.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/69.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18585\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0551-4899\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:21 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:46:08\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4aaf057c02fe5603007983254bca4247\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18585,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 219x336, components 3","md5":"10f7b90b983cf87b2c9a4394e8a099a7","sha1":"0fd8601dac0dbe9b043b0e9e1c41f5aec6c31c1a","sha256":"a46ac44ca5dad4f862fa725c66b417af991298a434e7977c04a7976c9b6bf527","sha512":"925d950c367e8fc12cf4de4e2dab61fad289ec117dec7e516eff038256541a9b6e8af37d6a269c3784add1c45c8bb085944e6339c9e4a36757d035ed3ad1aa43","ssdeep":"384:T9ChjwZ+BpAhH8yu7PRnkY3weCn/SfzM7Wz0beIi1OfYaCfa:JChjw4pAR8yulKeeEvyJfRv","tlshash":"da82c071e2ee3683d11926e48485028585bc8d0e7db4caec71c68ed953097149dafcbe","first_seen":"2025-10-05T20:18:26.546792Z","last_seen":"2026-07-13T06:00:20.160928Z","times_seen":15,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":136,"dns":0,"connect":0,"send":0,"wait":78,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T05:46:08.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: 9ec8a5e94ce80daa-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nset-cookie: cl_st=b; expires=Thu, 16 Apr 2026 05:46:08 GMT; Max-Age=86400; path=/\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7wu%2B3Z9kV0IecHN%2Bw%2BDzdaUl899I2nGkkAq61jgqEpj9tfEorPrS08jBc8u8i4kjWMZklxaxqeQpzqL8Ym1t7IZbn8UKztrHJevyhZLkWkBf1lSJFJA7EYw96q3dag0coPvQEo1vzgKhtoU6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107665,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"bf4f23c2d10a0dafbe9b2c3954642f20","sha1":"94aa0877acdc5a19d34ef096108bd673061182cb","sha256":"d17738dd0d167d665cc0f04891b71e16f7850e4a81b2dc22b91554f7445ffc4b","sha512":"30f2f06bb8cdfa5bfb0375809a097f93aaa08a7589087a7766806576c5de0bb148e0c9169a1095e10dbd65f5536fa061a2cac30dafcafff1ab66688173a22e36","ssdeep":"1536:e3B0DvNORx0ha6825/27JdxZto1eJCcjd0k0/SM0kJ5uyhWW6dxdCrvlgH:eR+ILmz4W6IvlgH","tlshash":"a5b34530a8f214370143d1916e6a9b1b6ee0f607da464701bbbc87e46fdad8bed0b54d","first_seen":"2026-04-15T05:46:36.241228Z","last_seen":"2026-05-09T07:38:33.757993Z","times_seen":3,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/prompt.js","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/prompt.js HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EaEJiIPDbcAl91Jo3QtFLtZFVITNo7lfidpEPg%2BVJWa8MBWGSLZQr4O3Wku%2F24vIhE5R1xitJRiBTow5eZxWFQSf0P1H2HZ%2Bx%2FGhP7XqrfdtocYrZGHQJ9PrNnhzlzCYUD%2FY260klSMqf6BB\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69ca921d-1c5\"\r\ncf-ray: 9ec8a5ec8fdc4c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":453,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"44ebc534ff78e60f1b65bf973fce02e0","sha1":"cf48af00a3fefee9965b4ac1b8857f4036a2a252","sha256":"ff398de885567f110214c619e2421fd329a9aa4b873f2480a953acc6cc61f898","sha512":"6bd669dab5a3c5daa5e34b892b3a7b156afea0bec86c91ae9ce6b46946300a65ea26d2fb8edf361bd89739f377457a12b5f93b07cf193be60a8e862c0bad8518","ssdeep":"","tlshash":"cdf022200baa18b1a01b336e8f1f1e84233174a72d225d203d5d4c8dcf816a842b2be7","first_seen":"2025-11-01T11:14:12.483716Z","last_seen":"2026-08-07T09:07:57.011608Z","times_seen":85,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/fonts/Roboto-Regular.ttf","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:09.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/fonts/Roboto-Regular.ttf HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 168260\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:46:09 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8a5f1686c4c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69ca921d-29144\"\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zRzvcB0wU9BixwMCM5Yi4wy6Bbg6s85SgjistdHYRx3M4JrDEVpb8RFb79bYQXLEoCnZCx6aXQLvegD4E2q3zwH5AKAMJbw3fF0Jd5UmsqzAbNYILCpeBOgCuUfcR9iKynOq0mbagzHclrvU\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168260,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob","md5":"8a36205bd9b83e03af0591a004bc97f4","sha1":"56c5c0d38bde4c1f1549dda43db37b09c608aad3","sha256":"4e147ab64b9fdf6d89d01f6b8c3ca0b3cddc59d608a8e2218f9a2504b5c98e14","sha512":"e96b43b0ca3fd7775d75a702f44cd1b0dfd325e1db317f7cba84efdf572571fe7594068f9132a937251aab8bd1f68783213677d4953aca197195fbe5db1f90d7","ssdeep":"3072:5y2goL/sAQRuzzlPrvRwhRFUzMWlYfxJVBxV+aYT3qPXI0yH4yDuNOIOU7og2NE/:xOmCeu+bqPeHr0WUMxNE/","tlshash":"83f3d601d642aa19c6d6b2787c7cb3be4c75e82dfd4a602734e5af2115c8c05ec69bbc","first_seen":"2023-04-07T15:31:36Z","last_seen":"2026-08-12T00:54:00.10388Z","times_seen":10398,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T05:46:07.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-length: 0\r\nlocation: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CP47pxjqzUbp%2BYX4oUNjEMML64NXuSDMywJjPSzdgb136PZPUNyRxZm%2FYbqKsR3wWA2N1dv7vj0VY%2BhozHy2dKrMLT6bSDc8QMCQYuYj1a3CxAVkm5B2kWAiSksnM1qYRWu2TutmYuQXz568\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ec8a5e809ad0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107665,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T00:57:33.442795Z","times_seen":17846528,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":62,"dns":50,"connect":1,"send":0,"wait":123,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/screen_1.webp?options=content","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/screen_1.webp?options=content HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 28894\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8a5ec2fcf4c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69ca921d-70de\"\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sy7FPhJdfU8wuW%2BmfF15ZqVTfHaW8lK%2FpvmiEhgwHsk9M9OR3BwSnSVDAANQEE%2BjlNmZTC%2FegPemeqGZdn3Vgq7yTdy4pWmxHp5zsZE4zHJVz10JxXwNPdvAvVZ4K%2F8yVUsa8U3xlx%2Fo0EO0\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28894,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 230x408, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"426a5fbf47c938dc22cb51b6bf20d9a9","sha1":"99a4e61391eac64e0a18b93e15debd247cb82e0b","sha256":"e689af2df863a151f503f567eba007ab06565f1527707cd223ac7d95d46fa036","sha512":"41033e0f1833a97f76568bbc55ffb7fae8332cd7b7878b844f690cf2d71c0c4e170be7731db6c8c7d32da7794f824e97101f3e93aec4ebd323a60fe54515d50b","ssdeep":"384:0MTTJ7q5j8G40cRqtZESGdG2uZI/uSAEOH3cYt6ByBUCGFR43MjwYuLdp:NTTJ7q5N4TqtH0GxA1aMYK3KMe/","tlshash":"2bd2e0d881aef9fa5e927bccf4889f36086fd2ef8034d508b1442c90b416d8af069656","first_seen":"2026-04-15T05:46:36.245547Z","last_seen":"2026-05-09T07:38:33.818083Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/48.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/48.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12805\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed054d-3205\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:17 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/14/2026 23:30:40\r\ncdn-edgestorageid: 830\r\ncdn-requestid: caa6fd8d4277fe27dda7463a69bdec19\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12805,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 308x204, components 3","md5":"730251a849d48c8860f4b906d8005411","sha1":"321fcd1f0e2e14de01c154eaf3d864d7ebaae7dd","sha256":"6e32e6efa2a8a99ccab342b2e83683c323215f97a38e5397207e1367188860ef","sha512":"74c8ca9a62510d74ad48d4a1169060ec5b0c594e89e489a7d230455f574a9a5b25199c39e4bd2243933d366ae1fe26d18a613033e1c7dfae80d99afc20039e48","ssdeep":"384:+eZi4QSkzuWLMDv2zSsO0lY/jKaj34RuIJVVTXS5m:+xakzN/Sclg+gfIJvLJ","tlshash":"1242d001bbae5304dd6a3711887052366b3c77d300aaf256c081d8c8a1e9da44bcaaae","first_seen":"2025-06-02T23:22:33.533334Z","last_seen":"2026-07-19T02:43:50.845399Z","times_seen":36,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":142,"dns":0,"connect":0,"send":0,"wait":79,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/2.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/2.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9596\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0546-257c\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:10 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/31/2026 17:54:37\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fd3c275b6ae89dae6e90becc375e97e0\r\ncdn-cache: REVALIDATED\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9596,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 271x180, components 3","md5":"fc7ad245f4c9ff0218212b660c021b48","sha1":"df77ea435edacc5b1d443ad4b9049ddad837e090","sha256":"4007c128c260235a3a23518621a3fea7efdec25415a07c012216b0aab9739cfb","sha512":"1d01a160a8a3d4c710cf421f62d9c44500ba7495e854b3c3a08447c27d0e34a41d204e591bc554afa173d8bf41f3cabbea803a1dd3d14dde9b9a7abdd834d7b4","ssdeep":"192:KzzRwnu/OxzCOP1cCz+Gz3n92FjC5AEoiMPYV1Y8pNx+bBK:KnRGGOZaGbmC5AEobPYV1Y0NY1K","tlshash":"7b12ae6b605a44c4d66cff7edaa10a9ea6c38120d0e8cabc4d4ae4d477b6cf949b3001","first_seen":"2025-08-04T05:48:20.961648Z","last_seen":"2026-06-24T14:37:36.047544Z","times_seen":13,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":138,"dns":0,"connect":0,"send":0,"wait":77,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/icon_close.png","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/icon_close.png HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 427\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8a5ec7fd84c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69ca921d-1ab\"\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jknlJmH7Ps3MzyJG1tIWqzX5r6rVBhnt3DI%2FxCjoxuieVBNIuwIGKjUlMY8rBgEjCCnVFFvSwEIcFC6ONVSYQGtc7miZghYFigAcbXwhCL5dkuC%2F%2BcM%2BjPCCv4%2BB03KuaAJFbL4Hyi79es1g\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":427,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 4-bit colormap, non-interlaced","md5":"26e9ae28962f669b44198d28293dbe30","sha1":"27b6e3581b6c98fc5934f4e4af1698cab270ef7e","sha256":"f67d193e6472e73251254135e0eee99f529bb8d14c4e434d40d9e7a53a37ce9e","sha512":"dc5c4c572e3094a73106b7f014ba89fa0f27aa9b1c2603c21656eeb5f930cbc353f08f4d9a3a2e295063404f0f1d44920f4b88b401577557c2a7feaf0bfdfda5","ssdeep":"","tlshash":"82e02b8af33849bad677a09ea2353a67bb689e6564580019c41671bd47701869106056","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-08-07T09:07:56.995042Z","times_seen":287,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betterlinks.pro/api/leads/link/30a2cb48-b51a-4e64-b726-4b237be904e7/event","fqdn":"betterlinks.pro","domain":"betterlinks.pro","tld":"pro"},"ip":{"addr":"104.21.23.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:09.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betterlinks.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 23:56:45 GMT","end":"Sat, 20 Jun 2026 00:54:26 GMT"},"fingerprint":{"sha1":"1B:08:79:61:23:58:31:DA:A6:68:AE:C3:59:EF:A6:33:91:B7:EE:45","sha256":"2C:CA:27:79:01:81:75:51:49:4D:EA:72:CC:AA:26:12:7B:79:51:0B:FD:03:65:5A:70:96:0E:8E:40:A5:D5:52"}}},"request":{"raw":"OPTIONS /api/leads/link/30a2cb48-b51a-4e64-b726-4b237be904e7/event HTTP/1.1\r\nHost: betterlinks.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://king-betdrivesystem.click/\r\nOrigin: https://king-betdrivesystem.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:09 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://king-betdrivesystem.click\r\naccess-control-allow-headers: content-type\r\nx-iplb-request-id: AC40D10A:26F7_3626401C:0050_69DF2621_E28630:102DA\r\nx-iplb-instance: 64365\r\nset-cookie: SERVERID263164=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; HttpOnly\r\ncache-control: private\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Et4AnejU%2BG%2FqEvYVm8RzLRgYh%2BhHMCIK9hnlqL4UhRAi4gBzzH8pj7jGBowdnL%2FnPf5EKoRD0w72FX2BSoCm8MHGFDnowEm6udqTP5Oj0WUsOZ3SgsHk3nvo8dDdy1VjhIc%3D\"}]}\r\ncf-ray: 9ec8a5f14e744e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-08-12T00:55:45.269227Z","times_seen":363154,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":1,"connect":3,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/icon_zoom.svg","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/icon_zoom.svg HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9rnzf6jKEPgcM61%2Flf%2BtlNWWDrRWLrjA8o3uYlgQeVsNTSAUdRWrBKsHOR79cfwg%2BMl1R%2F%2F76HWln85st5wApxBaLX5Fz0XqCtYIy9WqCF%2Bx4rZxdbk%2BMVcVIBzJHneT1MuYjS%2Fmawsg9kk6\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69ca921d-3f2\"\r\ncf-ray: 9ec8a5ec1fcc4c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1010,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d00e097c840d9f1d02b5d70bdd6b4c6","sha1":"324c3df851e8cc590e6bf7ca4993268012773a06","sha256":"ebd6e763c431a2c5af2d04463719b7002f112f9539e9b1b0a90269a229f50314","sha512":"6363bf519581cd82a76cb62e344f1cdffe1bf5c6753d8c555e4104cbf456201c569abc49171c296d91cb1ef6c01e195f4bac6bec5752de3acac258548345be9b","ssdeep":"","tlshash":"081178969013d7c88d434af4fc37584e8d2919bea7a4b2fa40443e9cb4df4d8d9578e0","first_seen":"2024-10-12T23:01:03.386102Z","last_seen":"2026-08-07T09:07:57.019471Z","times_seen":276,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/icon.webp?options=content","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/icon.webp?options=content HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 34320\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8a5ec1fce4c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69ca921d-8610\"\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lqpXiiOXDUk4nWz2RoVSoz6nWzc6fbi0dCHwTQ881CTZKbxOyb%2FvhkPPNB%2BJdzu35ajQQBLT0o3R6aYTicPcY%2BpoJ96udtNMI4zY9fLoP7pdSnFpYrh084coSOCP2J4lvQ21D18l79UH852n\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34320,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"14f8a2ceff31495ec513b9f6b3a2a06b","sha1":"95d591372cba6dd07a9a4a8ddb9fcbedeb71e09f","sha256":"309c08836addfe5cac83a1e8794d736a67b8822782cd8fb1b61c89066107cde9","sha512":"900cb16f22157df3480bd59e64378cf367132bc163ebc3ee2f64438a49e4fffd02158089b0272c7c9ec7369da1b8a543a071ebc0f95c2d51e193c41413515317","ssdeep":"768:y1Dy3SBc59gdJnnh6j76HH/8YDdFELv5fx5C4PfKnS:y1+iBc59ChxHH/8YPET5fxYYES","tlshash":"68f2f1fc32ed8d349e4422406ec72faa155a56fa4b112ef272110affb514de67a2f144","first_seen":"2026-04-15T05:46:36.251894Z","last_seen":"2026-05-09T07:38:33.759166Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/icon_download.svg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/icon_download.svg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\netag: \"67adffaa-226\"\r\nlast-modified: Thu, 13 Feb 2025 14:20:26 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:35:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1ed7f2e6176a50cd90a479d0a1f8a948\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":550,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"359c897b8171e46840e87873725ca8a0","sha1":"b8dc0aa03d7e3d78ee971dfdc384730bbca08412","sha256":"1266bd734a167b46b287221ff03697cf323e198d441a3ab274fad08f35ea016e","sha512":"6d8b6a95b5de2f4d2e2e82d8f0e9c394c52dd9ad7267f9d7ec82aac4f61fb938c53deb9b5628646a6382ae996efbfda42e4e6a859872132d83f8a7ca2ac292eb","ssdeep":"","tlshash":"30f08b2470ffc5c6db08c61396e0b0ff773267c412498424f19359e921dc6c56d38599","first_seen":"2024-08-19T13:45:40.062311Z","last_seen":"2026-08-07T09:07:56.997055Z","times_seen":278,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":194,"dns":1,"connect":20,"send":0,"wait":71,"receive":0,"ssl":225},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/72.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/72.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9493\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0469-2515\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:29 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:41:57\r\ncdn-edgestorageid: 830\r\ncdn-requestid: acb5d2a3e68d18692344bc82cabd2363\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9493,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 233x292, components 3","md5":"8f3a5a82e6b082b43e5bba8dc17743cc","sha1":"6026efb0712d6e159487d84f313fe6745aca5f68","sha256":"0157e0e825299ebacf9084c74f4e80d2b0ec357e490dd83be26ba796fc7f2c00","sha512":"c4b2e7a4538079eccc8439c8b5a3e6c13d05206c8c21734624d008c1acc0ee4ca5c44e1c154c732fd4c54a46686fdaa6e42465274976a5e250a71557f9c3126a","ssdeep":"192:6O9DmAmKAtJXYih/ltaIf7j5PixD821IlSegC3DJqjmq5vd:p9DMXYiBzwD821jRKKmqFd","tlshash":"5112b07c050bdd2afb79b1a0698b5a85179cf7ae89423a7c304593c778b5341eb824a0","first_seen":"2025-10-11T09:20:45.354042Z","last_seen":"2026-07-25T01:13:15.963408Z","times_seen":37,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":154,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/85.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/85.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18523\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046c-485b\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:32 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/14/2026 20:12:24\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 161bd7aeb954ebab042cca12d9c2336a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18523,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 313x208, components 3","md5":"904ce4bfde4b80b898fb8b303a75fa3c","sha1":"d55383009dcb5fa340ed701710205215e408c3c5","sha256":"16810ba10da9f16c49931a9eb157152067c7e039ac7338615823a59d285e09cf","sha512":"81fa121c348b835336ea59f4e0fed4dbeadf29100cc1ab6bc81705918d4c3249d5f2be4cbd2abe4152c396e3d92f144376f82df20b6c41a803b4d5a17d659cce","ssdeep":"384:iHzfa7c2AjXBKN4bLDtL06oigB5DaAbmC1NGxRRGX7d6ufoRhqeH5:iHmw2AjRf+6KVamn1NmLkUcoRUeZ","tlshash":"fe82d0b3633f7113ecfe0cd7364907588b88a34d61f15c0a64a9a0fe5444c8aaad2b65","first_seen":"2025-06-19T06:56:57.164204Z","last_seen":"2026-08-07T09:07:56.987421Z","times_seen":26,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":147,"dns":0,"connect":0,"send":0,"wait":81,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/67.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/67.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17060\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0550-42a4\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:20 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:46:08\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1c47a54dbf8879504f8b46d5b875cddc\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17060,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x420, components 3","md5":"affde62c705a40a7601ed4ac17aa89a6","sha1":"a47840b970e4667c3024571da4ba04192b0c1e55","sha256":"3d42a48ddbbdf7f2445512bf27cc792efefb828c326205bd2c1da97b85ddf8ce","sha512":"ccc9e9447309bb9bf7030000a79201ab74334e8023b73665e131865081a4d2185bbe37d2f04581510d3b3b3c253b0489e3b592f7fc826748e448ad25a795840f","ssdeep":"384:VXTo28PFgCEZgYIgJlwE9GbJr7+dFzj6m13eLZ3keWMX:RTQPFgCTYzD9YeFXBeLpt1","tlshash":"c772d03fe1849e16d21d67b91354a267cde8ec9a108acf0a81742ccdb460e74da7cac9","first_seen":"2025-10-11T07:27:17.971295Z","last_seen":"2026-08-07T09:07:56.994021Z","times_seen":27,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":142,"dns":0,"connect":0,"send":0,"wait":94,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/style/style.css","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/style/style.css HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=50NhmR%2FHCtDwGwf0%2BqTjjx8eY8aHP0zsgxXUJEJ82YKEnAJVC%2BK5hVsKDjzst5o7VhmaMP5uz31fME2EOI2PFMP13qU7i%2F1TtB9iF6eRna8zRMY0MOfh02V526dD37gE4hTSebTDRF9eM8EA\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: text/css\r\netag: W/\"69ca921d-7228\"\r\ncf-ray: 9ec8a5ec1fca4c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29224,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"91d621c0f0e31fde3a9dc87f2c781664","sha1":"737355ad9e724ae621d9a64b38ee0b2804f521a9","sha256":"cf487da844ffed9cdee6ef2c012139db7e91d8c65332436eb9ceddb9b763ffd7","sha512":"b424991c1dbb3b14295d0f2de4782c85ec8ecfcde3fbdca270af1a47665e9728a086d788301a37ade7d193cdc20d3fd0556f4c517ed58852fd724a56393a68ba","ssdeep":"768:XyyOgh0FwE92m14JEtPeqFcFTTDiC3LcUOuFZBpXFVWM/wprtzP1NyNEFHwVBeYj:Xfh0m0X6JeeqydTDiGLlzjXzWKwprtzA","tlshash":"82d284d256642904b91bd8547e629f52736c9443920fccb9bbe0305ccfce2d995a3bce","first_seen":"2025-12-26T20:33:47.962717Z","last_seen":"2026-07-28T03:06:16.211398Z","times_seen":81,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/icon_18.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/icon_18.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 372\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf22e9-174\"\r\nlast-modified: Fri, 16 Aug 2024 09:59:05 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 884\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d3d42564710d6c4c6de80569928369a5\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":372,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f486e9cbe8211f66adc8b17c0f0d6c8","sha1":"9bff2faaadb43aa410a39b09c32e1f38cbc393ea","sha256":"d189311ea5cbefe56171921828cbc8f1c9d573c99832d801cce072d830523161","sha512":"8df29019097617c82b65a8b916cdb1078cfa16c0cca4d65ab41a82606cddadf04e31fd337c8a04b6a721aaddfc5b36b39f670a6447098e640ddc86cc40c46340","ssdeep":"","tlshash":"d1e0f8006f2a0927cc0899032a624c48d23363a6e8f3b40097eab0c6f8764ab6540c1d","first_seen":"2025-03-26T16:41:42.39254Z","last_seen":"2026-08-07T09:07:57.015368Z","times_seen":229,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":181,"dns":2,"connect":19,"send":0,"wait":21,"receive":0,"ssl":210},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/security_icon_n-3.webp","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/security_icon_n-3.webp HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 200\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8a5ec2fd34c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69ca921d-c8\"\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OzKSRA%2BoDrpnB8BmgL4GXiwYGeiWd1wa0UhJXCM3MlEk6Zdbu7ZR3bvY4nETNKPM1g%2BBOxurIk8%2BCys2h6uHIp3UtrD1ZSNa3o75qUIpJdKTEQwoaOJVlkAz%2BPTnp57WX52MBuaxxRrFS0Ru\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26ae874f3b7051bc5b112960c251080f","sha1":"1d6b38f7fe58dc79cc66cc0a3ee42caaa096b686","sha256":"8c66b3cb207515328ac21bdbbda1b90a74d7cac66267352048bfd7e4e1efe627","sha512":"88dbfe63b9a7374528308bd4ac891535c310ffc2277c3a44004772accea7115d8a1df77ecb56edf573000df4afc79e7e9524b4fb8c8e8dbac2384860306f0c31","ssdeep":"","tlshash":"2fd0224aeeae8a646d29fcb53453e630123aca8a21a4b0b0c85702e941b04f02e01c8b","first_seen":"2024-06-06T20:30:57Z","last_seen":"2026-08-07T09:07:57.021919Z","times_seen":989,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/6.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/6.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14501\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed045f-38a5\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:19 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fe3295d6d32e73393f6094001b3a4c2d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14501,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 252x316, components 3","md5":"cebabd9852642d43036b137a68248990","sha1":"41747badfdaf37e585a98d9f2a7f033fc5abe6f2","sha256":"f8fd719ac5c28d4b9874ab8484aa04ed29980d3c67588a0a93cb34bbb628f2b8","sha512":"4ae3c222903eaf7a42baae1ee597bbecf466b1d241646adcef470625f950f09753b18857712598451c951107f05979dc50063c696955f81b412229fe13c36e08","ssdeep":"384:UFQHuATqYdpov4+hTWUjPIhZTJNXURtkC1ybTrSVWL:UFUr3ITTWi2TJNa/kTrnL","tlshash":"7f52c0a5fe53ec0681220ef5eb5517bcc06fb5c7ac0adb8884d922f451eb2d8306685e","first_seen":"2025-04-06T10:47:32.171403Z","last_seen":"2026-07-25T01:13:16.010216Z","times_seen":37,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/46.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/46.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24349\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed054c-5f1d\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:16 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/14/2026 23:30:40\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b7c4524c9501424da5c635c348d7a4eb\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":24349,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 342x228, components 3","md5":"138367fafe4a60c00dbb829ffef9de5e","sha1":"b56770886e6aa8dc9248d1ab60c5b61683c1b911","sha256":"875a42a088d26f38fc16e7be7462ea388b6a42d81611ba0915f9f7292cd31b77","sha512":"94054596788e304404ea4c7fd30a51406ea7be68f901b6ee7d91764529c7f9513190cc7811178df32c2c0f39b4f8c4d94505167c47c14e29ffa3c3952737158b","ssdeep":"384:qM6pE025+g567GjKXPsyiEmdNKrEi/L4fILGy8qJoRRdkVJxVNm0CV9xqJsvqbI1:q802Z56vX0yinKQi/LTJ8FRwVJxV6heI","tlshash":"d4b2e121e46ab141e9613fc3cab6250089c1f857dbbe68da44d97cd611f366608f29a3","first_seen":"2025-10-07T08:12:00.796115Z","last_seen":"2026-07-28T03:06:16.191368Z","times_seen":20,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":138,"dns":0,"connect":0,"send":0,"wait":76,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/translate.js","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/translate.js HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxD%2FjSutiJmg%2FYt6oLT88aN2h5SrPyE8So%2BtEXpH9x9gwRZAwtxe32FJJh3uw10baTF9MOomV%2F%2FFABK79PJjScI8V7ssTyPLsTw2er8Clj0rjbiHCJSI60K5VZWkhnPGYLpIJ24qqK1B3Xln\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69ca921d-e35\"\r\ncf-ray: 9ec8a5ec8fda4c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3637,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"99c0d4f9a645bf2c48bcf1789692ff1a","sha1":"90ccdd603c5035a69c77d340db76e503d6efb48c","sha256":"5d8725968df266c2a1d0d513b9e02a52d2c68ea48b23733a5b7103dbe1abca87","sha512":"04cbbe9e8ecdae18b08e3a21264e15c37efd00313e7f9cb5847fa681c25a879657e82d2a6938e17fe32454849503612a226ebd1f5dd2d9e133228fc58270d98e","ssdeep":"","tlshash":"5271974cb0f2010d5993b02efbeb6895b224985b0265fe183f5e45436fe393dd39e689","first_seen":"2026-04-10T07:45:47.001447Z","last_seen":"2026-08-07T09:07:56.993492Z","times_seen":78,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/fonts/Roboto-Bold.ttf","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:09.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/fonts/Roboto-Bold.ttf HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 167336\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:46:09 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8a5f198744c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69ca921d-28da8\"\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JrmPMYmJFu%2FzDLWuyxnp4Zpp00EYg2Zfhh2Of4NtNWlFFkdQYj1yB3V%2Ffiy%2FK3mRpeZgHOWjnnwl0fqkj61e1GBihvsDmFaqcXbStyRm4zqGxp23FVDAEiHpgZCjF00qIF7k1bFP1tLIlIpR\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167336,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo","md5":"b8e42971dec8d49207a8c8e2b919a6ac","sha1":"62442a18a9fe9457c1afeabf683d263a691b7798","sha256":"ec685a46105296fe46c8744da4a11cf8118ba6c11271941766f7a546df6aa7c7","sha512":"3bd40ac788d44626fd640ec67ef04ab0364816b5e8c831f2077bff8805cfe6890ca29274b476f933f6e96ddaa16f4e2f3f66c616dff7cd88cdcaff7dae8ca5e5","ssdeep":"3072:VBa9dX3CyiSB1/R7O0aXjC1YHeA9bOuPUPT9mYZK9K4N09PJ4X4HXYXXXXXXLnqT:uX6XiuMPT/eK9cnfST80/","tlshash":"29f3f501d2479629cac6b2787c3cd3be1970e429bc6ba11735e4af3149c8945ec69bfc","first_seen":"2023-04-11T21:48:33Z","last_seen":"2026-08-11T17:18:07.081149Z","times_seen":6339,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/icon_star_black.svg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/icon_star_black.svg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\netag: \"67ae0046-fc\"\r\nlast-modified: Thu, 13 Feb 2025 14:23:02 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:35:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 681f9c1762ff1ebb5d905744a9e05eea\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd7c9a36b018cd09c80d3c69bb83579b","sha1":"0b7c5758965fabcb509db70b94e2ecc62592a331","sha256":"5a29eb18c76586c2f55eedce4c2b46fa158df9148af71ade04a7934f9c5d312f","sha512":"ea7c5bd48d77a405845f935d5eaa3d373c246679f7404888b96d29ef2acfd38f64fe6fb54e75f77c6fc101f72310d6889a9d25cc95a6980dad9d7c1e7fa26f96","ssdeep":"","tlshash":"93d095752034da58cc55c651f2f75cfe6497d0db71c500c29549731170c086f4c59974","first_seen":"2024-10-12T23:01:03.367525Z","last_seen":"2026-08-07T09:07:56.990576Z","times_seen":178,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":203,"dns":1,"connect":20,"send":0,"wait":65,"receive":0,"ssl":235},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/security_icon_n-1.webp","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/security_icon_n-1.webp HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 574\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8a5ec2fd54c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69ca921d-23e\"\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6tvfdJVK%2FM37IibYVjvYtjx3fpFxpkLZ34LGOUoJ9llPQZtcP6x1Z%2BlK6CSGkJDvS4giF7j5Jt4mNAI8j5%2B6lS%2BnXIu9Hl3g9otdpK8dNt7rC8GLtZdNQQq010yxNAqc9nJs6i0m3FoPaIo\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":574,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"16735dee72b009f6085c85bf194c313b","sha1":"0f7409a79c4926442e1ed59d10dbb87f290ea0a5","sha256":"3244abdb32f757760de0676e5a5c71e45558014437b3e3f437efd110a722dd22","sha512":"d280b78c80f8541ca9617dd50969109b38c2488f125dab50b5fd5bcfe5329fbb7fe28f7f09cdd52df7deb65c1f147f2b071beab7ce23bfc39104121c142bd606","ssdeep":"","tlshash":"eff041cbdb8e2ee4238b68600da0191601af340281000a840e04682367a03f8b9dc497","first_seen":"2024-10-04T10:42:22.386228Z","last_seen":"2026-08-07T09:07:56.991603Z","times_seen":168,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/11.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/11.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8643\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0460-21c3\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:20 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.41\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/05/2025 23:29:09\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 507e143a316ff995e5aaf6d6a7f3d230\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8643,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 205x256, components 3","md5":"9ff36fbd9924212dc79c2ef1c1d0d9b5","sha1":"db5b19b9defc0a6daae3c8c3a6dcafcc7368d843","sha256":"73c4e4f0785cd77a149b0d6faffc665874e7dcba07dcf51712ddad38e587839a","sha512":"d85d4b917630592760d3e4201c181a086d33f0ad79269cc43825ba2b69f9eff0b2c473942e4f47424a155bf0f4509cd356e36839c03acf7dcbbfb39b26b3270c","ssdeep":"192:CZHV7YyQ8bxJzHHYtsnwTPCees5zcQfqA5A+6wU/Vx9wFgUXx1OoV:CBVsMngzeItfqASwUX81OoV","tlshash":"0502af4ca34ba65ece395f343ade252b63045dbbeba05c642c7d49e9ec04f81096095e","first_seen":"2025-08-04T09:14:47.40239Z","last_seen":"2026-07-25T07:12:04.392608Z","times_seen":41,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":165,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/40.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/40.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9211\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0464-23fb\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:24 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/30/2026 16:59:29\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7547d6a52749975cd9027413d44efac7\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9211,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 168x252, components 3","md5":"08a282970eadbbb97b5b339f57b3255f","sha1":"948de577ebb0a098b639211268655a6a7cc3bdf5","sha256":"3f252753a5915201d2f30ec0041d0d391c6558616e5a3152cfcac610489ee610","sha512":"79537456fb07da0e9be83223ab93fa1df57d4a0dbefb3173e2f6bba328523a4d939ad4e3b5e6e0e57fd6a947aa317347431c3d7eacc7d8ec8390fb47aec0e742","ssdeep":"96:soZ45sLOYBAz5F5ZUHE4fSbDZI3XK81mfyTDd9i2IqHiFz3OX4nyKLXcEeDBJpht:bJOdr5aHfanhAD1CcKLX1e7pQZ/vji7V","tlshash":"4012aff3f758569f8d38e836c4e6a6cc5a8e52d61425a1bb73992ff61438f884e1100f","first_seen":"2025-10-18T10:04:02.371755Z","last_seen":"2026-07-25T07:12:04.409371Z","times_seen":26,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":155,"dns":0,"connect":0,"send":0,"wait":62,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/92.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/92.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21446\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0553-53c6\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:23 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1029\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/31/2026 17:54:37\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8718f560ca120e806f97fd2bf6049f0c\r\ncdn-cache: REVALIDATED\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":21446,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 228x342, components 3","md5":"dffb632cb6455976aba38c5504c124ba","sha1":"45863a0a4db16945e320748f50513a41b42efb30","sha256":"e6f7b5f54603a810432d573613e51fb7ee16e5d53ee12b2b3bbe757f209f8d15","sha512":"f9666938047156dd8fcb44f7a1d01e1b901c4ac23347cc40ea702cfb9f6f40db32207128fdc815f764f90c807be2d729229fa841f6a1d0d477eea84eda2fa610","ssdeep":"384:rPzy2XthpRnCEbUZQWw5z1Jz6psUFHI3lc+GQyEtD8p1U6ciVkS/pGMNCTvWs++H:r22XthPbUyWKqvgc+G8tD8A6t/pGn7H","tlshash":"efa2e15556d60fe02900932b8cd60a8bcb3c4179b1c3fc9d5086cfce6ecbb9a0982f59","first_seen":"2025-09-24T04:03:22.003113Z","last_seen":"2026-08-07T09:07:56.985777Z","times_seen":14,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":142,"dns":0,"connect":0,"send":0,"wait":80,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/50.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/50.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12211\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed054d-2fb3\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:17 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1029\r\ncdn-proxyver: 1.41\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/18/2025 16:24:05\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8647bb8170a1c5900e276ea4ebca6999\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12211,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 189x252, components 3","md5":"c7186ce73d676b694ffc862be2f26a8f","sha1":"f091cb470f5611d2b62cbc2a92c3fce0507e63d4","sha256":"de585f51f466e2d46fe4ce53b20029b5b97ce365f87a8b13ec61d5613422608f","sha512":"a96342f8aac9d12ffb5b0ac62b85c3ff8dc87fb416ba309182e0ec3c9e38c1aec3854ae44938431b5916b5baa5ac67bf995bca09998ab98247f675f35545b906","ssdeep":"192:LqSJxTlrBG56o1/Wv3F2zqswRS59EXL8RjhG6+oTuXttBmIItXMR3xbJZTQbY:LqSqX/WvWwA59cV9oCX/BrE8RhEc","tlshash":"2f42af50b365da83dcd0bfa6dba33a6dccd4f28217209b9e560065e5e8155ea7c608cc","first_seen":"2025-08-04T05:48:20.954706Z","last_seen":"2026-07-19T02:43:50.873713Z","times_seen":19,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":77,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/39.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/39.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20496\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed054c-5010\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:16 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/07/2026 21:19:07\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 63496a7fb63e9dfcde7dc4528928d3cb\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":20496,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 315x210, components 3","md5":"1ee62563017a667ae6adde24e36aa907","sha1":"3913f05899f6d4b364fc0e85c389185ea1fbb39e","sha256":"88e72f8c3c90defbcef9d834e91f54789d29cc6bf2c074ad3ae3cd2c741d65ec","sha512":"0cfd5acf0a572dca262b8778ccc4ddb91dd7dec55b45e102bfee38fd132bc737278307f23c7ac85ba34a7a054e063b991bbc67049c3e8dcb3ec528644e5f5205","ssdeep":"384:wpxll5Nn+UM2/fepap3Ocodidy29khOK81vM/W0PV0jbq:+F+UB28ydidyCwIM/W0tem","tlshash":"ca92f1abc059c12d6b5b6e1a6003d5665bf39137ae1700fedb600fccf036427598a78d","first_seen":"2025-04-06T10:47:32.158829Z","last_seen":"2026-07-28T03:06:16.181468Z","times_seen":24,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":135,"dns":0,"connect":0,"send":0,"wait":76,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betterlinks.pro/api/leads/link/30a2cb48-b51a-4e64-b726-4b237be904e7/event","fqdn":"betterlinks.pro","domain":"betterlinks.pro","tld":"pro"},"ip":{"addr":"104.21.23.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:09.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betterlinks.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 23:56:45 GMT","end":"Sat, 20 Jun 2026 00:54:26 GMT"},"fingerprint":{"sha1":"1B:08:79:61:23:58:31:DA:A6:68:AE:C3:59:EF:A6:33:91:B7:EE:45","sha256":"2C:CA:27:79:01:81:75:51:49:4D:EA:72:CC:AA:26:12:7B:79:51:0B:FD:03:65:5A:70:96:0E:8E:40:A5:D5:52"}}},"request":{"raw":"POST /api/leads/link/30a2cb48-b51a-4e64-b726-4b237be904e7/event HTTP/1.1\r\nHost: betterlinks.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://king-betdrivesystem.click/\r\nContent-Type: application/json\r\nContent-Length: 169\r\nOrigin: https://king-betdrivesystem.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":169,"data":"{\"events\":[{\"name\":\"full_page_loaded\",\"datetime\":\"2026-04-15T05:46:08.828Z\"},{\"name\":\"update_lead\",\"datetime\":\"2026-04-15T05:46:08.829Z\",\"is_bot\":false,\"timezone\":\"0\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:09 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-iplb-request-id: AC40D10A:26F7_3626401C:0050_69DF2621_E28631:102DA\r\nx-iplb-instance: 64365\r\nset-cookie: SERVERID263164=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; HttpOnly\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q3XhJpilGoRcHGueOUPtejLZRuueIm69NZoCuH0wLAh39PF4L2NspPveCyadbl6k3%2F%2B987pIFH74JqEUXFGYLuY656QbsinjGIXECAXvCacxWZYmgdWXmleVYvt%2BHNobzdQ%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ec8a5f2087f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1321,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e5af409cd07537868d4654dbf844f028","sha1":"a6aeddae9e7e80787260b8728b2c55a1bb3544ce","sha256":"573a92a4c3b306e0c0959e44e27a855fb6870e00c618dcc05bfe37333b77b35b","sha512":"766b7b5f72b437ac9b7f08be616b9cd6c353402e2277402627d23d117b84a0f0533a116dd57dd95b5903972ce5b1af025df3b353e78232835be87668855e44a6","ssdeep":"","tlshash":"a721560b4405ecf25dcad692d7567d0559fd896f60c31874d1b8af2458d85f52386823","first_seen":"2026-04-15T05:46:36.279734Z","last_seen":"2026-04-15T06:07:29.752744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/35.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/35.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5960\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed054b-1748\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:15 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 02:22:29\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 288fe8422b265ebab0d1af338e7dc8f7\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5960,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 125x156, components 3","md5":"acfab6ad763c7dd33f2ef32eb266185f","sha1":"7e6135db0550f29dc241d9060077c381b26db94a","sha256":"e160eaa92677a61679993fa9f0315f9ad6fad505f9ebc14e8f99155e44a21054","sha512":"398e1b7fff764965d4c07e74ff8fd3eb46b71bff42dafe91b46ee8f25289aa405304aff6f1498b32aae5426c4d693cc628be16b3665ac532edcc7a39d8622b30","ssdeep":"96:MAfBJukXAh1YkSHfLv/z6YknV91UFHwyaEuvN9TYpQHpb74hVxijtCwzp1G6bqcs:MUBFXA/YD/6nQRwuuV9caHpn4D+NVOcs","tlshash":"6cc19fbf297d4545ccde933bc454535e795aaa1ee127aeb11c8044e32c4a090fdbbf41","first_seen":"2025-06-02T23:22:33.513323Z","last_seen":"2026-06-24T14:34:52.886487Z","times_seen":37,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":144,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/play.svg","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:09.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/play.svg HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JhRmWKgJcdKiuNtEVEVn2jIA87o7VOFS5g%2Fyryq86jw6gKEIGMtA1sph4ml4uS%2BBBmF%2BQyJOMuyWgEOpQPQksQYNLHLlkWlzkx7AUIEHGEA62zl%2FZ9BdEJPdtB%2FDBaNcrM%2Fb0KVyu2PpeY8U\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:46:09 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69ca921d-30f\"\r\ncf-ray: 9ec8a5f2d8954c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":783,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a7e8010a745f6289a8a5c3d004b0c456","sha1":"db310316b0c190c690d8dbec03dd95fb11d8c0c5","sha256":"b1c80209f6868f3c7f31b29ee3d98381eac5bc4fec062e14d607e11fd42ab927","sha512":"6ac6595f6b76563ea726d35140b510afce3568b514e07ab8ce8d3b7caa57e45e3478581b865e29a2c7924c05ef0a12235e7056b58ece2b4a51ca3f4cec34c749","ssdeep":"","tlshash":"ef01cbb281d8a756407903ac98bc1481e8e5c85bb8349489bb0f0062ef7c4d3b48b719","first_seen":"2025-07-04T00:08:39.112232Z","last_seen":"2026-07-28T03:06:16.198931Z","times_seen":120,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/sendUpdateLead.js","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/sendUpdateLead.js HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KGRDlyDt%2FBFL4yN1LwgUSB2DRzJ4lvktgryt3bPAsIiFs2RwDXUR6vrmQaq0UKJp7e7l59entb2oGr7IDCJqa1qo292w%2FTe2jLHP1G3hcBYCavpWKHPcy1BYaws%2FM4ftSWBQF0eB2grTtowq\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69ca921d-68a\"\r\ncf-ray: 9ec8a5ec0fc84c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1674,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5c8600c50a8195db26f08b7d522b8fa3","sha1":"3706d5703a854f4d2ca6085ebd4adcf646b306c0","sha256":"6822425265c50ea20c8ab1040aac89ba3148c4c842f4755238f1a449d8b6ff89","sha512":"dfc3c8d1dce62f604d54e226c775043913d57045d5a7999f2167d31ed7f3c6bfee6ce2946aac750c49bc5f6d70476ffb3c41cb6161f927035df6cb95f8cba7d6","ssdeep":"","tlshash":"cd3111a25c6651ceeefb10ac93af5186d376401b2836d065781d9b0c5f8483e12bbbe5","first_seen":"2026-04-10T07:45:47.040788Z","last_seen":"2026-07-13T06:00:20.168359Z","times_seen":29,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/icon_point.svg","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/images/icon_point.svg HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gFpvsmTox2X95A1rKmjNJV57UM5y2dP68j5OZyotnj9SkFyaxwrnuHwvCZn5eAebp6xIXBayfQlPPINKQVBat3XroHKCDLzu765H94LY5Tp%2FnmidjbFUBkEKM7k86l9NKWN%2FqXIaGCKYY9pJ\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69ca921d-3b5\"\r\ncf-ray: 9ec8a5ec1fcd4c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":949,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b8d819ea14a41d457702cc80af95fdc","sha1":"42648c53f7d9efd1447fc7f63ff43b7b36866012","sha256":"2cf31df5b105adeee79efb9d94fb767c0cb05a552d231835ef8c258d05fbc977","sha512":"5931f2ea2a9164cbc339d8c9ec6305db92781b9cf4f19838f749faebdeea725e3a450d963825ad47b4c55f607e8ff1410c68470eeea7802d0ecc5e9980aec695","ssdeep":"","tlshash":"c71108f3fc6a06dbda57b303ad8618a407bfb8f91347a18c5818cf3ba294154c795b20","first_seen":"2024-08-19T13:45:40.065888Z","last_seen":"2026-08-07T09:07:57.014491Z","times_seen":276,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/69.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/69.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16732\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0469-415c\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:29 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 00:06:23\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7818c2912566bc069add541a74c52a41\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16732,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 188x281, components 3","md5":"d4c0ad87949291a1c244496f3d8e1ddc","sha1":"23cf67c6664582804f2aa9d3e9797e92c5497ed4","sha256":"c7d44612f20060545c2e4047070b7b7c0424646b5aab5b7dc93227156ab23f92","sha512":"9b63cc63811ea2fa70d436c003a0a981c18f972c3d3bd02d41a869254e7314ead335a06c0c4f711dc86db3e1cbb3fb93cece8b0768df9c6dff703776c736afdb","ssdeep":"384:w8cOYSTAsDRtwiBZqORhRyM9GiiiQ9jpZf8Qfbf0YZi73:whvSTAsd5fqORaM9lXQrZf8QfwYc","tlshash":"2b72d07a5e0d5f271ec44c3dd881d18858489f58cb0839251f3ae5a8e33fc6b6cb05a7","first_seen":"2025-10-03T17:42:24.255257Z","last_seen":"2026-06-30T09:05:37.989069Z","times_seen":21,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":158,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/23.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/23.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26442\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0462-674a\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:22 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.41\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/29/2025 22:59:12\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 40104c185d5c16ab9788e6320378e749\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":26442,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"869fd23387bbda94ddf6e782e64e532b","sha1":"27d74d36bfead1473a6a0a132c564a537ce17b32","sha256":"64af389f2904f5cca0b7fcb2b6bf02519c92ee963b9340dee0bbad2973296866","sha512":"2f599cb97d1c516bef58bcd7c6cac7287ca30cd35759ea181ac2d45a8691cfe18cbee4067ccbdd08de99e93c3872ca27f96cc187789ac09ac798c05abc26cdf5","ssdeep":"768:mXKBYJBaV7i0Bra9RAk5lvKayFlB0PTtcInEi+:KKBYeu0BrajT5lSayFlmPupN","tlshash":"87c2e1e14815c95fd17a2f7a68a6130d66a12a5816f4dac8fe1910fe037beea25e00c9","first_seen":"2025-07-04T00:17:04.66063Z","last_seen":"2026-08-07T09:07:57.002659Z","times_seen":30,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":77,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/74.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/74.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6796\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0551-1a8c\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:21 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:46:08\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 552a9834345cb0aa71be3261703a3f18\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6796,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 125x156, components 3","md5":"d13315d06f17be12c669915e7b97a4ad","sha1":"214f2164975b1d31540be6d9563c1f8c5c3f048d","sha256":"86e1aac4e634cfd0793a72bb914d5aac4905ab3ef140facac55d68267ffeab6c","sha512":"5ff3bba4fc24196bc567eedb7c6ed7fe6da05e319a9de406c9a52fcc6b962f2abcff07d81272ac04d433349385e234e2b84ec83107a1f6096e313e9a16f92d61","ssdeep":"192:M8LAMx6x0gpWfDTtupvJ5WtCN7ZvB1PysGuMwE:rU0gpGDTt2Bot8tB1qXunE","tlshash":"43e1af4f41da5a1ad2221e740f29e722c90cdb874531cdcb61b11cd9ec7cb553da71c6","first_seen":"2025-08-04T09:14:47.389534Z","last_seen":"2026-07-25T05:56:40.110176Z","times_seen":17,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":146,"dns":0,"connect":0,"send":0,"wait":82,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/45.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/45.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8276\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed054c-2054\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:16 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 02:22:29\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ff34535aca9f75de8763d4ceeac29799\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8276,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 119x178, components 3","md5":"f42c3291b4af1e580b822578aad89b04","sha1":"69c89e91821e64c30d484d931e5fe34f3710f258","sha256":"8e71e7386dc194c67af786ccbdfcfed9b7fac1c839d6c86e75c0d28d01ff8026","sha512":"861ef448eda27845939480a34c6e994e93dcde216328bc0d5dfc3383c63433d8425eef928949b3fae4f3561162a53281342f9be48b0c60f654d120529823901a","ssdeep":"192:IQEET7uEehheNt7Hvpvk8iJgMlO0pjkzJZniU710zyQU2d:IQh7pehh07HvpspTlDpjk/np710bd","tlshash":"5602aec4cbda0388f7269076306892b57ce6b38f0a1817bd58b581cfee216029d65de7","first_seen":"2025-06-02T23:22:33.553189Z","last_seen":"2026-08-07T09:07:56.992062Z","times_seen":52,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":143,"dns":0,"connect":0,"send":0,"wait":78,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/main-function.js","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/main-function.js HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5bmY6YOoZIM2ytIhDvX9FO%2FUYbqojtripiAfKgdOAw1y1oj3TV3yiNJ9h%2F7tta1ReJLc2XfaFlI1aUf%2FYsMZfNb4hRnwd06WLjDkHOOjgxpnpN8eu9i1h9jRQ2g6LBLt2V1EEr6wVLsOdoTm\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69ca921d-31083\"\r\ncf-ray: 9ec8a5ec8fdd4c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200835,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"a8d7b307927d955696e5844b63be7e04","sha1":"88ff8abf49a2f2beb1a41ebc3aea33a2baff29bc","sha256":"2631dad9276ce97323c54be53ec6a6c8bbd6bbeb7479c271e091001bc38c5fe0","sha512":"801333434679ce15d04aab6565a51fec87e03f8f93ed3b88359a152454368184b95d5455447dc2f9205a8bc0a6231137fb7d7b48e28f5a29580f7e61e6c6b9e6","ssdeep":"3072:l8qPxtNoMsa4zFcw/dnVKwj9PXgcxmTD2EnZKuYMWpX05omqABHP5BB240fi:lGwcxm3jZKuYMWotBHP5BMhK","tlshash":"9714940193c5bc80110b9fb7b72fb7e5e9295aad34990c8fd1047c55ebbaa06dbe0931","first_seen":"2026-04-15T05:46:36.290702Z","last_seen":"2026-05-09T07:38:33.809619Z","times_seen":3,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/jquery.min.js","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:08.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/js/jquery.min.js HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wPL2yPiXz5pN02zEBqZH%2FD%2BlSg%2Bk7VEAhK1mKjvjzTlsJ3vv5anjP0V003Jijs%2Fx8agvOS5H%2BmDrN4xF1c2ogesvuTEVtpCRD5S1%2Fh%2BwTPqyj6PPLFEDWRvhcKhHmpx%2Ffw4Q90V5V4zsf5QF\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:46:08 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69ca921d-155ec\"\r\ncf-ray: 9ec8a5ec7fd94c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87532,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-08-12T01:18:04.494606Z","times_seen":30907,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/fonts/Roboto-Light.ttf","fqdn":"king-betdrivesystem.click","domain":"king-betdrivesystem.click","tld":"click"},"ip":{"addr":"104.21.77.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/?lead_info=bGVhZF91dWlkPTMwYTJjYjQ4LWI1MWEtNGU2NC1iNzI2LTRiMjM3YmU5MDRlNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3lvdXItc2hvcC5mdW4vMXlKTTVRcUM_bGVhZF9pZD0zMGEyY2I0OC1iNTFhLTRlNjQtYjcyNi00YjIzN2JlOTA0ZTcmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViOT17c3ViOX0\u0026is_webview=false","date":"2026-04-15T05:46:09.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"king-betdrivesystem.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 20:23:18 GMT","end":"Sat, 06 Jun 2026 20:23:17 GMT"},"fingerprint":{"sha1":"68:6A:58:09:96:39:00:04:21:4C:71:0E:EE:B3:97:86:9A:FE:45:8D","sha256":"E8:E9:DE:37:D1:88:68:DD:1E:DA:32:E3:1E:64:57:DB:89:F2:2D:DD:EE:4F:93:EA:A9:00:FE:A0:68:C4:31:E8"}}},"request":{"raw":"GET /6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/fonts/Roboto-Light.ttf HTTP/1.1\r\nHost: king-betdrivesystem.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://king-betdrivesystem.click/6920f5c5-d1df-43c8-b05c-72a9224f5df5/de/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 167000\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:46:09 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec8a5f198764c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69ca921d-28c58\"\r\nlast-modified: Mon, 30 Mar 2026 15:09:17 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6p7gtynE619TYzs7V%2F8eBlvEYmR0qw1s0IvAVbRWQN9%2FGOfw%2F5UbYpYzNjkH01EFDG4B%2BCHugTH1hHoXxXxG2BoqJTYtxeXZUBoP7dJRe16Xuy%2FM9%2BlA1pa4L9QLqOg%2BXMyUkLVxRNABkuA\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167000,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto LightRegularVersion 2.137; 2017Roboto-Ligh","md5":"881e150ab929e26d1f812c4342c15a7c","sha1":"18788c5d630fa695f9283f6393bfa541b2031508","sha256":"c576c50642271bcdbfffed04f92dc8d6a981daf300914d0a20c8a5a5a57015c7","sha512":"af18febdf3e0d5fc8111e6335bd8cc4fc8dd944910db8a4f3ebae284e3d1064eb793a25588007e3d1cee24051e11cf3328951a3f708375856d54176a53701b49","ssdeep":"3072:BXlLgbEmk0/Dv6QKwRr4T2EUtxq2FquPte/TxDuNOIOU7og2NE/:3qXpSIE6Ey/ux0WUMxNE/","tlshash":"daf3e501d245aa3dcad6f2787c7cb3be4875e429fd5a652730d6ab3255c4800ec68bbc","first_seen":"2023-05-08T00:29:25Z","last_seen":"2026-08-11T08:02:16.347415Z","times_seen":1040,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"king-betdrivesystem.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
