{"report_id":"7323a6d5-0fba-4ebf-90af-a8869650889e","version":6,"status":"done","tags":[],"date":"2026-03-30T06:58:44Z","url":{"schema":"http","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":0,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"title":"KG999","dom":{"size":16965,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"eceab8773d85026b3594ae9881c5843c","sha1":"8fcef0cee5690ec3f2650477d4a9970ee3769589","sha256":"7e50f8cfb0bacff632653f75c53c3932e567d00c601d9c76e489467c9296efbb","sha512":"a63f42fd64a75e234ea3adb49d20aba9025ff52622ffcc21170a13dd0c86bf0dbfade279ec4026bfbae4e44cf52d76e0698fa6f9e2f0bfb6d15c5512272d9fbb","ssdeep":"384:YjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/p:YFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+m","tlshash":"4f72ff50041744009b835ce223ce7f34fe4e92517142d0b1abfd9b6beedbda6926939d","dom_hash":"domhash08ae0081c1574fe7e013785c60b9d7d5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":0,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-04T06:58:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-03-30","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"www.kg999.net/res/encrypt.js?v=8","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.kg999.net","ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":86,"request_count":85,"received_data":20502787,"sent_data":45030,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-29T22:35:00.993215Z","alert_count":0,"request_count":4,"received_data":1077088,"sent_data":1781,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"images.4033888.com","ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-17","domain_rank":0,"first_seen":"2025-11-19T09:39:23.093524Z","last_seen":"2026-03-20T18:37:37.454143Z","alert_count":0,"request_count":188,"received_data":4500365,"sent_data":90776,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"identitytoolkit.googleapis.com","ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":28137,"first_seen":"2019-01-03T12:56:47Z","last_seen":"2026-03-25T21:49:07.604364Z","alert_count":0,"request_count":2,"received_data":1347,"sent_data":1461,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-29T22:32:58.732232Z","alert_count":0,"request_count":2,"received_data":288214,"sent_data":923,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-03-29T22:38:18.41371Z","alert_count":0,"request_count":4,"received_data":118731,"sent_data":2571,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-29T22:42:45.780712Z","alert_count":0,"request_count":9,"received_data":3867457,"sent_data":4269,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1086,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/common/promo-ui/assets/chunk/CASH_VOUCHER.Cn0Y36G3.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e7feb8066f3d589458b5e905a356638","sha1":"af4ef890c2778b4930f769e48b8ef62e4ad22b5a","sha256":"1954786bf71459c5b7b08104275b89aba32f836971d3608ba243cfa75fea9fbd","sha512":"069db298dcd6629c546d8073c5e55f9fba28963c6c888ccdbd5c40268d2b5a8a907d801d37c736570fa584973eb01ef87674ea7def6ce24433edcd575cd71ee9","ssdeep":"","tlshash":"e3b0120154a4c216500eb30d5168d15e3e12af18bd2910e8804c950273d790584105b0","size":99,"data":"","first_seen":"2024-07-11T14:40:28Z","last_seen":"2026-04-05T13:40:43.920561Z","times_seen":1734,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@antv/g2@4.2.3/dist/g2.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"38ac8e4d3bdf9e4d4590f90f572b57ea","sha1":"79225e15d32c0435c4d12847f5ae89bece312add","sha256":"2cea25f3456374b0b3c31f35c6d9b78e638bc26710e8373d9a383ce703c88d4e","sha512":"dcbcdba45f623d55bc6dbb213b120645598396ffb7da40672d32ebed498b6b16788d2e999783e8b27e76c59d18b39ed5d3f4c69fb312b68ae54e4ab48ef10211","ssdeep":"12288:mLSlPBQyGSFzPOMKwnYgNsJsD7AzcFe4zqWf:m2a3IFfX","tlshash":"d215d9a8719078b1829361e8043f050af23ba86d604f65e9f7a5d9f3ac7d84f1076f76","size":885445,"data":"","first_seen":"2023-03-07T12:04:53Z","last_seen":"2026-04-05T13:40:43.905535Z","times_seen":1876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/manifest/slider.d420e4d3.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"691038bcb743061d27b043f1455c11bb","sha1":"dc256829ec9497a0ba1d78fdd8571bbe84e4c8ba","sha256":"c10724bb5b9943a4fcec38078e244cf901962f0b435ec514cfa525c12d32f752","sha512":"6d4752a5c8dc3414f9490a4dba8a95dd125e5b2e692b576506c443de25ff762113c0adc8fe8aac25a054e1e38e2388252557729365933ac8750c09c68c39bee5","ssdeep":"","tlshash":"c611780779d1b5946263b0a9520fd856f6c0d9eb01ecac843b4ccbe4df0507d06a19cd","size":1000,"data":"","first_seen":"2025-04-15T00:30:31.961029Z","last_seen":"2026-04-01T06:18:41.15985Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6c2415c0ace414e5153670314ce99a9","sha1":"5a9eeac34d86e92e5660e0f4f87204f1ed0c8ff6","sha256":"d8f9afbf492e4c139e9d2bcb9ba6ef7c14921eb509fb703bc7a3f911b774eff8","sha512":"de027062931edd07b01842eff24fc15fdbdcaa1af245dcd133155faba9e0c965f0a34dc6144ce3b149bc43b4597073c792cb6dabbfc6168c63095523923bcf77","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKV:/u1zNwcv9qBy1HOg8SMpQ47GKV","tlshash":"9f83f8df77ca702247ab30b9006f550bf276199d684d4400f259d8e9bc78a4a823bf7e","size":87462,"data":"","first_seen":"2023-05-12T23:07:48Z","last_seen":"2026-04-05T12:59:18.361286Z","times_seen":23749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"043d2a44511a4448bedbe9de32317bf1","sha1":"40037e16cb721531834f6e905a0bc51348cb3b78","sha256":"7b164e9773888980ade1980e60495a6d23db6ace9bdb9c5c7535c048b175539a","sha512":"0ddca247a26261fb77e4d54135d01c1e446109c732ea4613a65341380a6280a4e37cbe08e142a20073396e9253c469537be82ae5e8131d48833f43931cccd41d","ssdeep":"","tlshash":"5cf0c22c2e60f936805f2c57767ee24832a215199011e00068cfe8186566edf8eb9ac5","size":574,"data":"","first_seen":"2026-03-15T07:58:41.545609Z","last_seen":"2026-04-05T04:52:36.840772Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/qrious@4.0.2/+esm","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3f0602cee23a7b0377062a1a341d01b1","sha1":"1460e5e4ecac325960633e79118c96829f1df85d","sha256":"8478c77637d268ea9f88e1aae84dacd031256fb67063a8d94d222cd3eff8f84c","sha512":"7c1c6533f0e924a56239bb1395f6d4fd26cb9e718e355fc5448008da6fa6ca980d9a57e6d427e71e751cb66120dcfe5af1ce80d6b093d5336ab82ea63c0b9dec","ssdeep":"192:NMSJOPXg7hZv1fpYoE8GS9GLhgbHcj/13BBenIhG8+f3/pSq3c/WJBS7SEzonxKl:eSJOPX6wl8GfYUfhpfwcqEhwdlmRvki","tlshash":"a182859673a19269639669d5083f244f82f6e4193418429cfbb2c9dfbd3c4c96039f3a","size":17820,"data":"","first_seen":"2025-04-04T11:34:30.82088Z","last_seen":"2026-04-05T13:40:43.918591Z","times_seen":1566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@9.3.0/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4570fef97846ca636c3c49463f861552","sha1":"63c164ea279ab2a735d337b255a256bee79da0a9","sha256":"4651353cb061bc4c99cd04687a305193ecc7d4842aabf453914a59eab46781f2","sha512":"bf569392feb91f1548af4f4ccd5e9e30ad9c7580e34bd4a5231c5b91c2a7dc8a4d316d8cf31640e50e2e929f8f4ba74c1f34cb4b1962b35543ea87003f55319a","ssdeep":"1536:EIJAfGWjLP8NE6WG/KxXzbolxU/yBkt+TSD8wkvtnTClvwSmp8Y7CjGEG5/AsVuL:HJjNi+CyBkoBUvwNp8Y7Cji5/5cp5v","tlshash":"7ad309896221b57546e316db93e4c621a3b50540b80ac8f470bd4c9f597ec9813feffa","size":139695,"data":"","first_seen":"2023-05-08T16:47:31Z","last_seen":"2026-04-05T13:40:43.943818Z","times_seen":1920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/js/app.67c80ca.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"24273ca14ef20e2629d3f95c77032704","sha1":"e67962f208317707fd7677d2de0052fa27ed1155","sha256":"5ddbba719f389796617a5e35d3e1dd0587de3338df68024bc605e5b61b26b474","sha512":"8638b8e02802001fd97f6bbbabae073890fead9720ce61766d7104a20d4c715ca110219ebbfb77a8bc5a78dc8590b53c6a6f616fae85e572a24283858b27f1b1","ssdeep":"12288:v/P39IwJDfx88Ir3tyGEtwu8jdlhjdQfNTRD0f:vn9IwJDfx88Io9+f","tlshash":"27054ba9a1cdf0f9864397e5522f2128b33f2ca6b915c540fe3dc5c8666dcbc811be64","size":828311,"data":"","first_seen":"2026-03-23T09:59:23.614326Z","last_seen":"2026-03-30T06:59:22.145434Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/B2C/libs/gt/boc.js?v=1","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"845e2236627b939e57fb462ea29ec554","sha1":"9e3bf49321d552ec26777a8c6d9bf71530f47bef","sha256":"cf2e948263c1ca01e8f6e163439d99a176345e0a41bc93104608f675b2f4145c","sha512":"b3f6919c720eae8d2aa4f12a9657d936c5c52206ca2bcec44920c2d76be5fce6be8e2c5bf1dab20aef890fc11a149321c7199a0e44296f51e7d77878d6dbda39","ssdeep":"384:OcB6Y6+HiaWSXauU058DIml6yDwFJQqVqB:OcB6Y6+H9HII22ze","tlshash":"1852114d68f7609385a3b428ca9fa114b9788a57002ccd85bd4ce3589f9447c9bbbfdc","size":13353,"data":"","first_seen":"2023-06-14T14:59:52Z","last_seen":"2026-04-05T10:50:17.513834Z","times_seen":349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/manifest/external-module.cb963217.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb9632171bda82b786fbb89531ad45f4","sha1":"1b36a6c329ac24c7adfe0e10959f04f4bb325969","sha256":"b7760263cba6848749e6cc9376f0d4dfc3485878240848a526ef56ebd804327d","sha512":"3474e573bae0212524c2a9d4f3a9f76bf7c6c558d6ce004ec307c589d18228b7cf9a51365cc778022dc8dbed81e0d8e43b5683d9f7ed23f2e12fd88a7ba8a4ba","ssdeep":"","tlshash":"e6e055ab0247e5015d32bfc7f003b161b92a1735aee8a8c2055449b297140a3f2da818","size":426,"data":"","first_seen":"2023-05-26T03:36:06Z","last_seen":"2026-04-05T13:40:43.922912Z","times_seen":1846,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b55b90c630ad899c694dc42582979708","sha1":"f08949879387eb8dd6553c8b0c548c701b5f0db9","sha256":"eb297967f5005eb95dfb369ff9f780a436a67144be372260b6f86f6fe37b917f","sha512":"eb9945688c1c7a4847df769bd9072f9f3be532c697c1b11185b48345162ab6a22c7ac2b8a251c9835e81ad8a8b155d67f0885a1986908cd69b3f9370f5a030d3","ssdeep":"12288:Epo+RhFDORIh355fBjbFOsAi6dhTOLtl5dlV3EZm9eyVbI:UhFDsIZ55fBjbFwZItXB3EZAhbI","tlshash":"ea053bd879127be16372b4f510673009736da826d88c086df6a5d8f02eb194d70f6ebb","size":870412,"data":"","first_seen":"2026-03-26T03:15:38.916554Z","last_seen":"2026-04-05T12:54:27.610989Z","times_seen":11757,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1a01dd99c771ffd210ea6ceb50d4bd8","sha1":"c0f95605d076dd18c198f5413a1fafd07b53a462","sha256":"2241bf2d2791c67718f1e1b68f74347402c23e237e55c1065ba9c08800fc01a5","sha512":"d50e4f236a2c8145a164678574732a3d48c973c647d08e3b63d022be9c2d4e4daeff3154d521f10bd99fe9ca5a63e05a6e55563ce582031f3528433ace287dd1","ssdeep":"6144:vlTERvtO7hrpJyfa0pwgrzOuL7c5aCm728C5/yb37ti+VTm7ETiwfXG9+:vFktO7dpku8728C5aj7TLT1/","tlshash":"9fe43a8db201746242eb61b5003f1a0ba237552aa40a84acf57ccdde6e7cd4d61bbf7d","size":658506,"data":"","first_seen":"2026-03-04T21:43:56.598328Z","last_seen":"2026-04-05T13:40:43.925696Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/ac/v.1.0.1/manifest/ac-ui-shanshan.4fd61a57.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1da33a96e9761bbfb926c723229b5926","sha1":"746a0bcc7b5072738ce22a11b7033d7b9fa8da00","sha256":"f2ce6a063526275629adcc9b092d2a945ed92477b03093bf7cdeaa5da5a54826","sha512":"35b2ccaa82820ed5f9828de80fd67552315731c62b9b605b3ef9e0578c75caba4520d2c2418809a1c2c328783f011248fd6a77263d69b2dd2cd20b9f1bb175fa","ssdeep":"3072:vjh1RDXBzXrEd+y/cBDiWiiTn6AXvcyt8nmwsTbNi5bSSSSSa5Sbi:rh1RDXBzXr25Sbi","tlshash":"9d946f14b6e70d7254b7d0d99bae2d147a20c337900ace1e3a8c9bd58fc9c29a5f4739","size":436477,"data":"","first_seen":"2023-04-19T14:52:23Z","last_seen":"2026-04-05T13:40:43.904953Z","times_seen":1852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/ac/v.1.0.1/manifest/ac-control-shanshan.b7303e36.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7303e36dd26c4eb1aae7dad46b56635","sha1":"e8bdbedf8692d0e5be85ecd4ac24026fb9fe6337","sha256":"06f9d9892319f817c918afc4b73a6b568497693062b5f32c91e83e1c3b3227d5","sha512":"301339103c9ee7bdaf527ca96bdce855b2f7fd908ea38cbd5b4d566d2b00dd6a6a4fbd81fa3373b7816f412ea93ed0facf3f3affa694e3f772b609ca4506c8db","ssdeep":"6144:qtDthvN/EL4SfNQUQysILiOMjJ1tA9wRh1TRAzD/Xp8w1PLaqmci7F9Y3YbCOGAE:RiUQzA9wRh1G/Xp8w1n8K7","tlshash":"d0150a08b16715e222bb1172a49f670271666a7bd40a4c95f0bea9f11f7cc887373f36","size":906946,"data":"","first_seen":"2026-01-21T14:43:40.774011Z","last_seen":"2026-04-05T13:40:43.92949Z","times_seen":332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/manifest/numberSeparator.598de917.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"598de917c7a1390e1b4cc5e65be75eb6","sha1":"8de5f9ebfa6b92d1b42d0086066ba653e094f3dd","sha256":"bdc44edeb986790b38c4c64ee36e5e1fa7b39ffaf89e4e4799f4f315da9a0a0a","sha512":"9895abf61392894b5b8746a0e145a578898c55081c8f3242223986500813fde1aca1f574f01d5dface7710cab4382a132cd861bd99a9b21d2a734933c375a391","ssdeep":"96:GIOVuXQTvvHfyiwCJd+SYgyquFWqSqyEcdpy5FMRSrbEonLmmOKVrxYSEB0:GIOcXYF1JJYTqGCqyZy5FtHEoBtYp0","tlshash":"afe1cd5972e720728a3f30aa5bdf80016531255bb088d9897b1ccf44af52c79c793abe","size":7158,"data":"","first_seen":"2025-11-06T02:56:03.081794Z","last_seen":"2026-04-05T13:40:43.927866Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/html2canvas/1.4.1/html2canvas.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7530aa0b7587e627484c49fdf8f13f2","sha1":"b987dc0cc6cfcdc2e34499375f505470c5adb891","sha256":"e87e550794322e574a1fda0c1549a3c70dae5a93d9113417a429016838eab8cb","sha512":"04d6914276096223d2a871c36f9f01d3268f7c2bbe5a076cf06a7f814df792a06d80d4b8b523c7b8689bca87aa315fd326548a75ae855f3a04c981a34defaf5c","ssdeep":"1536:dLkw5M8eKEsqi5xpg+n1sPMecC9JmgxBQSFkkZQRlNM7IgeXzh:dLUtZSpg+aZmabZQz9","tlshash":"121457b46ba71cde0a7ef49b00172d838d981b67117fd1e8f24aada62d70702ceb1574","size":198689,"data":"","first_seen":"2023-03-08T20:20:59Z","last_seen":"2026-04-05T13:40:43.944258Z","times_seen":4563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/9.14.0/firebase-auth.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3e80f5800c11d19d455627966a2262f8","sha1":"c66be704649d09d8c567533662f30e8c071bd68f","sha256":"77eb87926cbc4ca21f9da2a1d9290abe1cc08683d401d0e08a7aabd6447b3982","sha512":"386fa224fdbc774a9541c9181b32293a1de7440c1f2516ea43f847c371b0edae019d5b24af80b9a2f0bc1c3e69274b21c30e35a4d346be0ae61caa3e476235e8","ssdeep":"1536:Tt0/Cwwg21Lrb9KhZs4+3WRO/uFnO89uYkXQIv3pW/HM2QFu7F7kE6+qXcw9p+3L:TtqwgMLHNgrFgEmkSCeoh","tlshash":"e5b3098573e7e03286e988ebf0770103e32d5958795d806cb22d9dda3d5b885b637e38","size":117350,"data":"","first_seen":"2023-03-12T16:30:31Z","last_seen":"2026-04-05T13:40:43.931887Z","times_seen":1847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/manifest/mc-properties.21cf1498.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"21cf1498273eb7070ff5bd0acf317c6b","sha1":"9fa5aed65366eb6f683068926e3b710ec013c9ed","sha256":"f8138874c2cb6ed858deab8dee742bead57dc051c79c993acb3e6d327d37b71a","sha512":"6831fd365158e0d391c06479899a7d011a6fe76604f1f4ac655c43faf613e8bd59297f3c28e6a4dc034165308991247bd1c073e1ea8b50f5d5e80041a8393b4d","ssdeep":"24576:z68R7HWBC3/MhgRDTbBM1gFVdKs/aDM8UB:zlxW4/MhgRDTbBM1gFVdKs/qMV","tlshash":"4ad507d80e6fe9a588eea507308d3a3440e87d2296a6c3c1de6e0fdd45c9d7c825177b","size":2969077,"data":"","first_seen":"2026-03-18T09:30:16.292239Z","last_seen":"2026-04-01T14:49:11.466892Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"dbb56bb6a5aa3e6c7b48477f658cf39d","sha1":"7e625fbc12a3fdd4e355892a8ee5bdfc610d7938","sha256":"b2ffe9332c9aaea424264083d93175753867e06612a1d1ebf065dbcc67554a3a","sha512":"bb924519cc8d6b156508f0b29c3253a8e4cb40a8fc79752c1da7bfdea1e060660a818b16de0855f2916605a441276873ea7198cabfda72ef7d6557db3724c193","ssdeep":"","tlshash":"b5a0024514e5023218a12513c4e86a6194057e670e567d246165401a14bd4c5259372d","size":64,"data":"","first_seen":"2026-03-23T09:59:23.677939Z","last_seen":"2026-03-30T06:59:22.388765Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/index.js?_=1774853887391","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5333decd2392f78eda64dbc25fc94e12","sha1":"e445f4c676244d14c1bb78f1209e09c207db79ad","sha256":"994936c25c4400dab7732922c77df83af89bca1cd115ec948f76afe900e9504f","sha512":"507b68b0db84460f0768c09410d772d9047c75af4bbb6c1d2dd220105c01f52a48d076c0e033fa01405918234a0a70c3161f2a4d4f771d9bc72493a888b506e7","ssdeep":"384:ZbhNNKg5/885YHtkLhm4yNHFeFWipjrQ8WFaLjLsu5HNaFrsrwZ7BAhqZs7WudXt:flF+lSjWkPjqs","tlshash":"3f427d171c1e856c168de5bda8a54e4c6fef8eb24fc51e2db2ac897d042d80f49d93c8","size":13046,"data":"","first_seen":"2026-03-18T09:30:16.180643Z","last_seen":"2026-04-01T20:19:14.122422Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026co=aHR0cHM6Ly93d3cua2c5OTkubmV0OjQ0Mw..\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ato725tviiul","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6fe0c1a0967cdfde62cd8e8ffc5ee2e9","sha1":"b0c3136e2d6ae7f2154db3d8b50aa4bf6ae7c699","sha256":"dafd47d1e2ef38f16311e1c65ccd00f295b114be77fcdb2a262b7b8877871d7a","sha512":"4172f04318e85fc1af9dd197de96c7700b1449381aeafabebe2aab08207f97007a8aaa063856301f25b41d8d448b0c561ae1c34fd0084e38e06af2506de42619","ssdeep":"","tlshash":"857000882c0c2000022a32a8088b000c80aa000000803808008023c00e3080a0022c2a","size":22,"data":"","first_seen":"2026-03-22T07:58:52.496649Z","last_seen":"2026-03-31T18:16:21.307576Z","times_seen":1563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026bft=0dAFcWeA5FtZFmYg0wwpmLXHCpASBXeMh08kUr58CfuuOGo1wKeaaYNlKFoyfayLJEX7yhNOoDGdOETnEHBCq-LNKOIRSBRIoRVQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-05T13:46:35.791629Z","times_seen":389339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/manifest/mc-wps.47b8a39e.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"69b6bf327d73af321d8472841aed3eef","sha1":"8dc1671b3daee1de64e4482d04b00d732916d7ed","sha256":"38c34a9f5f6778b1f33e5ade04edb6beca445ad78558eef159680bdf30197255","sha512":"4ba7557e76e05ccce19078318b25243025408746acf92199619c3606bd3b9c99da7d3c1e1b2399a7e87f90526a50328c8c7c3d0688d147b48e47b5d7f6cc4432","ssdeep":"","tlshash":"4911efcab494fe65a1fa838a406f640bfa14292490fcb050e764ddf0f9b005f5a12b37","size":1000,"data":"","first_seen":"2025-04-15T00:30:31.963437Z","last_seen":"2026-04-01T06:18:41.172902Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026co=aHR0cHM6Ly93d3cua2c5OTkubmV0OjQ0Mw..\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ato725tviiul","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6452503396c4d1b55fd45c6545e606da","sha1":"d5799ad276c19205471d4557e0178966c5e0a5af","sha256":"9ef806d67a382a5c2beb27b4fbe89b6570d8ca4bec17aa6202fd88a2c0ebd866","sha512":"e572d266bc465f0197f4ea16d182f9545551ce3266f4c3eb3be32fbd4149c3de2ac9f438602a77ad98e486b27c5552dd4e685d935d221a63bb1f2789432264ee","ssdeep":"768:m6gL16X4i77geI8nuScsPpkYaeWHXtQZ1a:mXxxifgqnuDUkd8a","tlshash":"74d2fad8f652b03952b270f4552f151ea2fa3d62ec0c289cf050c6d53eb099aa16ff5b","size":28705,"data":"","first_seen":"2026-03-29T09:37:01.422842Z","last_seen":"2026-03-30T06:59:22.392279Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026bft=0dAFcWeA5FtZFmYg0wwpmLXHCpASBXeMh08kUr58CfuuOGo1wKeaaYNlKFoyfayLJEX7yhNOoDGdOETnEHBCq-LNKOIRSBRIoRVQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"002ddbf48893832354750240b784fd4d","sha1":"5e4c700be9dd060ad7911fd4dbd4ddfcd74c80c8","sha256":"a71be443740bb96c059028a0ae8cab13b8ceac8f22fc0ff363f5bd08830b0b7c","sha512":"2af1e9449a4ee223a790226792f018321d80326f34a44027b2e4406f7314fc997b48faa6651ec3feab04ade3cedb40c86da7903cc2e9e1d5a2dd2becc5851efb","ssdeep":"","tlshash":"add0a9a352022de60c18ac65081600ab5c880823912387f6bade7d856fa4d047a00974","size":219,"data":"","first_seen":"2025-08-29T00:45:09.019525Z","last_seen":"2026-04-05T10:50:17.567291Z","times_seen":483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/common/v.1.0.1/lib.js?mc_t=shanshan\u0026ac_t=shanshan\u0026version=v.1.0.1\u0026ac_v=1.0.1\u0026mc_v=1.0.1","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3aad2612dfcd43b8dfed1ca072aa5c21","sha1":"d3d97c5ae4454416d627ad3e9c5ed7856085b981","sha256":"8da0cbe25140dff92f08b7d1ecebd3da8c2f47c9d414dba6cc5bdcb4f7006de3","sha512":"206f426ea79f4ae420686a5a40e2ecf9ccabf1b6970a125ddc66ccb65e584c089622163fdc4ef94054734cd0869a2d1090fb66980418de0b23887aa0805d229f","ssdeep":"96:fYr5C14peqd/VyZ2N+dE+sf14D55gBmBEZQRZlgPhanvxiKLKH6aDVAG0:S5C1G/Vy8Id5n7gBmMQ/nJiGWVAp","tlshash":"1dd1504d7525f494a2c7a1a4c27f5c0fad37246e2829c034f5c1e9e2ad78e4d812bf5a","size":6486,"data":"","first_seen":"2025-06-14T14:10:40.274801Z","last_seen":"2026-04-05T13:40:43.942908Z","times_seen":1518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/common/promo-ui/assets/entry/main.Bpc_8MB9.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e635c431fa7d37c03c3dc23ce67b962","sha1":"7052c7c0e1165dce045d01b49ff079125709b1bd","sha256":"8d3ae4364c8f4b030aa597d48f2361bfa345535cdc4a521d0d095a5b85dd4bc9","sha512":"128b01fd247323ff4df96714d0ed30cc13ba43e20fb12e2b03a29fe16d3469b15f74f90024be3c0a66bf4f22c94e3ba627f46417dce56bef43840f4954305337","ssdeep":"49152:AeZdbvUFnD8zF/8mBw+c9YwbyicaZFI2ko9oRldmoc7e2+u1S8KqGTf9P1vjBNI:x/oD","tlshash":"3995f7056af758309267f02a575fe810b12450071e48fd58ba1d8ab82f9d63cb7f6bec","size":1957383,"data":"","first_seen":"2026-03-25T23:15:52.566335Z","last_seen":"2026-04-01T14:49:11.484709Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026co=aHR0cHM6Ly93d3cua2c5OTkubmV0OjQ0Mw..\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ato725tviiul","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-05T13:46:35.791629Z","times_seen":389339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b55b90c630ad899c694dc42582979708","sha1":"f08949879387eb8dd6553c8b0c548c701b5f0db9","sha256":"eb297967f5005eb95dfb369ff9f780a436a67144be372260b6f86f6fe37b917f","sha512":"eb9945688c1c7a4847df769bd9072f9f3be532c697c1b11185b48345162ab6a22c7ac2b8a251c9835e81ad8a8b155d67f0885a1986908cd69b3f9370f5a030d3","ssdeep":"12288:Epo+RhFDORIh355fBjbFOsAi6dhTOLtl5dlV3EZm9eyVbI:UhFDsIZ55fBjbFwZItXB3EZAhbI","tlshash":"ea053bd879127be16372b4f510673009736da826d88c086df6a5d8f02eb194d70f6ebb","size":870412,"data":"","first_seen":"2026-03-26T03:15:38.916554Z","last_seen":"2026-04-05T12:54:27.610989Z","times_seen":11757,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@thumbmarkjs/thumbmarkjs/dist/thumbmark.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed7067efd903d31263e2f9e2a7b3589d","sha1":"c5bac5ee4785f8460f9422a011f096350ecf9e68","sha256":"a2860dcd2bd0590aef5daec500203b8bf4615e1ce0b5e8e15f36a2b3611a6407","sha512":"1ea8a648de4ce99fe8c58ed07d0ce9a1dd990697a421c79632001cd91d3d99a1f95ef72285c15e6e22763fe1b395e5f851ee7b47738c53e4d4a73802c9148b55","ssdeep":"768:ltNLn7XywGbxLuFvgaZEpjy4mqXn352YJvWbFfRwpyu37eNlo2FFRTn2PxY2:H4NysDyE2ne","tlshash":"42d24cb972647027037a2d97a03b5007953567243a5bc040f22d9d577aa7e8f23bbf6c","size":31041,"data":"","first_seen":"2026-03-21T18:39:49.443492Z","last_seen":"2026-04-05T13:40:43.915611Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b55b90c630ad899c694dc42582979708","sha1":"f08949879387eb8dd6553c8b0c548c701b5f0db9","sha256":"eb297967f5005eb95dfb369ff9f780a436a67144be372260b6f86f6fe37b917f","sha512":"eb9945688c1c7a4847df769bd9072f9f3be532c697c1b11185b48345162ab6a22c7ac2b8a251c9835e81ad8a8b155d67f0885a1986908cd69b3f9370f5a030d3","ssdeep":"12288:Epo+RhFDORIh355fBjbFOsAi6dhTOLtl5dlV3EZm9eyVbI:UhFDsIZ55fBjbFwZItXB3EZAhbI","tlshash":"ea053bd879127be16372b4f510673009736da826d88c086df6a5d8f02eb194d70f6ebb","size":870412,"data":"","first_seen":"2026-03-26T03:15:38.916554Z","last_seen":"2026-04-05T12:54:27.610989Z","times_seen":11757,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/common/promo-ui/index.js?_=1774853887558","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cafe9f791ad40c05c74e2e19e6cf15f","sha1":"b2a069ff5d9a8366fbd7df423bedf98361ac196f","sha256":"b219dea63255472e6096e26d6a627d3e554159f73832eb98f88f5d65c5a5b5c3","sha512":"d9d22e31e79b5cb84017062a39e1bfcc7f740ce02db17ee3b79b48b0afebd19cc5e85fad914dd75660a460b4286682aaa77cf2c4e5d191501977fe097f713491","ssdeep":"","tlshash":"4f118c0a9ff39194647b309f97aa5444329182875121d591355cd8a2ff54d6402bdeec","size":875,"data":"","first_seen":"2026-03-25T23:15:52.521881Z","last_seen":"2026-04-01T14:49:11.218283Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/ac/v.1.0.1/manifest/numberSeparator.01b17b54.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"01b17b549ad285136b8cb7ec0c7ec291","sha1":"7c721fd5c8da887f7c067a488d88f5fa538e3029","sha256":"959a2c44941d0318df9e0a3776c30393f74d50c9e46d113ea911360c49a621d5","sha512":"296a7cd6d1d6741ca17d884989669b2563ff352143111629947c93892d784738d772de8a00ea99d6c2758f13065e775ab232be33fa7020f7dc4493c2a6372db2","ssdeep":"","tlshash":"d0217d5836b700124d7fb0e98b8f52025b2126577484da8fb62cda947f02c2be2d36fd","size":1318,"data":"","first_seen":"2024-04-23T23:35:41Z","last_seen":"2026-04-05T13:40:43.92999Z","times_seen":1746,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/ac/v.1.0.1/index.js?_=1774853887391","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e7ca135044dd1fbd97ccf3298d0cb84","sha1":"bcf5c83439a66cbc56813f48493857e7cb6a6cd7","sha256":"35132558673cb74430e124e8f346f40442ab02422d47a9cde2e9ef7974609d85","sha512":"f3512ca29fa25e521713912e2a3ea671207b06384d7327568cadbf75e392204a2450790b9ff3db3a042295b95f36024fa6f047be8768cc7dd2fe6a9f8e8c5d4a","ssdeep":"384:ljOIzhu7En2roI1k/WaHjnFw73LeH+whSwoxzYMNwU30CkCPJi4axcNayjL+4ljn:4sBCg6l5CRn5a+AjwE69G","tlshash":"068233562d0f512d0689f5ab78804d6d7eff4ab21ac41d2db2ac8e7cc06d90fa9c93d1","size":19273,"data":"","first_seen":"2026-01-21T14:43:40.798717Z","last_seen":"2026-04-05T13:40:43.896501Z","times_seen":338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/B2C/libs/device.html?deviceId=","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8534c9646fe52ac8488de79b30753ee6","sha1":"db0d3f7ebdc0846924f2caa8fefb4201398d7ea8","sha256":"021523d9adc0f646f622d6455b44a1fd352cdc6ef1b8512a892c76c54cc6a2b8","sha512":"b0d7d7b7c7751147f99e2db827fcc9f45c040540ce4c3700bc66cb77d40a20a950665711f243efadc20ca224eb30c9d26d9400011f6fda6186f719f52ffe7bf4","ssdeep":"","tlshash":"41f0990e38406881c1e2446ee1ba7709303ab0d0a4c98654660158a13ce1a1fca1bf8e","size":639,"data":"","first_seen":"2025-12-09T03:23:05.714732Z","last_seen":"2026-04-05T13:40:43.946842Z","times_seen":404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026co=aHR0cHM6Ly93d3cua2c5OTkubmV0OjQ0Mw..\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ato725tviiul","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1288a4a6d73b477cd8aa03b3a7c8c76e","sha1":"5124f45f19f2514af808d228cc98b298fda79d78","sha256":"9ab06b621138ea90ff95d74a505a794aafed9580e2f496ccca51bf445df99f4b","sha512":"853fa3da943d3ae1bd254c265e7cd2eabec4c42bfae07adcd876a20fbaf698798598fbf2aa83c1ac7a70f8c6b787cf1a006482ea8fa6a0a8dbb383378558b47a","ssdeep":"1536:8TrQ1UcwvTI9HmLiUjFZcGFjMA5JDMrheU0RHZRaE4Ugk1kWKvr18KLjEvqB4:oJsHKZJZc+NYrhSRHZRGrr18Py4","tlshash":"7e73bf2ae70370ebdfbf9b519ae93699133e500a195305c916bf10c2197aec6a27d1cc","size":78485,"data":"","first_seen":"2026-03-30T06:59:22.395579Z","last_seen":"2026-03-30T06:59:22.395579Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/js/vendor.0.61a1e47.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f7f6e18b12c57df8f10d155acd84737","sha1":"05cdcfae709dfddfe975a273f2ed67a87724ddf8","sha256":"5977f765ad5e8bb80bc5abbc659f23e7574890259a035bffee95b71072844824","sha512":"9c583acf32d3872cb924fb9cae4e82c3f9a4e0ded00479b4ee557db51b80dadb7845fccd842c509ec26354265b0e5fe6ba315ff3d8ffc77c8947d2f9e2f4d506","ssdeep":"49152:IrQSNRIxz1zNZCZnKsrBRRJ4NEf8FN5fiT5zR57kY6iC:0QSNRIrFb","tlshash":"83a52abdb2c2b0a607e360a5102f240af73a1d5b680d8454f639d8d57db994e923bf7c","size":2125452,"data":"","first_seen":"2026-03-23T09:59:23.679197Z","last_seen":"2026-03-30T06:59:22.397165Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/js/index.10.76c88d0.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"38196b6b3322b1138659d362a6c96c25","sha1":"fd38ce914abb3ee596df330f6eed63587021273d","sha256":"33bc489e4fea4b3411655c0fc8f30b8fd9455864a00235a4afb78abfdac3a106","sha512":"a35d9efe9e5235f0f5e7115eaaa9b7a4f6dac34e1c6edfe39ef18e45f33b1d53d12817e0d5f9300de0a45b7161e5a825afa5119f17a1f764f0eae9e2c33a49f9","ssdeep":"768:zTyfanfXHvS/+HX9vvA+zmaP1UyDcP4WipGJ69h2x/cuFGC9z+kufm5W5Ihl9q:3yfSvSW39vI+iaP1LDcnismhEtMeql+i","tlshash":"dd23ae1ab0c7f6b846272068001f2339bc730f64a619d481f275fcd56ef4629523beae","size":45636,"data":"","first_seen":"2026-03-23T09:59:23.643978Z","last_seen":"2026-03-30T06:59:22.14966Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/common/promo-ui/assets/chunk/GIFT.Pam_fORI.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6851acd306cf3dbdc40823c829d6199d","sha1":"d2925c8057e00ba1f0d23ee1b18ac0643d5711cc","sha256":"a9c33ca4ecded6e675ff76be1503ad875b9d74a750108e452f2aaee368a5ad3e","sha512":"a34c07a5f3a260523b7f7b4447a810fe69f7ac6ea820a1f428c6c4597d6ece419cc1d67b91238de5ed028b4955212911dd656c3ae4cc43721a1076880be3ba75","ssdeep":"","tlshash":"b0b0120714a5ca18482271c401789657b2094b10743515544048454237a3d2400409b0","size":92,"data":"","first_seen":"2024-07-11T14:40:28Z","last_seen":"2026-04-05T13:40:43.933623Z","times_seen":1735,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/ac/v.1.0.1/manifest/ac-wps.89824b45.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"89824b45a2b94e9b1cc8c694c33f1a67","sha1":"29107254ad8a5c612c61ddfb7aca873dca995799","sha256":"996bbffa52661216998b712c39b0bb7207d45e8f98211cafb3a7c5db0040ec29","sha512":"fb4562aa6f72f4680d73085310ccef27d4ce41e221679019b0c2b0d28ee219cafa2966d10dcf8872c0655ad1bea1f2d3e00cc6a3a346fca87220092c2e8d57fd","ssdeep":"1536:USCAKqw8hylWOdSf+km+XR0w10Ok+KNWHR0cR0uRGvfouzI:UnE","tlshash":"f83333c8f881ad8f7567753acc6f6b1d05377b4de0700eda818b656a1eb144da023be8","size":53049,"data":"","first_seen":"2025-06-26T03:49:13.147356Z","last_seen":"2026-04-05T13:40:43.917229Z","times_seen":1304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/manifest/qrcode.min.0d19c585.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d19c5856e872e3f6fb9d0f57bea8dce","sha1":"ce36bde12504b53d0baebd5ee359631cc5172bad","sha256":"03528877abcd8ec6452eac177f2750c551e57632ac2d855ad5bcd6343891bbc2","sha512":"188cde9b65214ec7d1a4508b462c4251bef7e9a1a9d945535d5cb07b1b07ff4e27988b3eaf5a67af999af17b2737ae04412bb1dce122d44f32590a1123ca4669","ssdeep":"384:2IKSnIPLflpMR++8OiXAAdTRZgMvu4nvqqHHHsglNov3m1xk0ZkGULMyzLyURyy2:GmXimr4niqPDzZuiDy2","tlshash":"0392c4e9f35403a6525d5cc5282e644aa4b0b4272c1641acffb5c4e6e8bcfd1b83af70","size":19442,"data":"","first_seen":"2024-12-01T04:34:39.996683Z","last_seen":"2026-04-05T13:40:43.927323Z","times_seen":1648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026co=aHR0cHM6Ly93d3cua2c5OTkubmV0OjQ0Mw..\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ato725tviiul","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"12a10b90a1172ff1672f92f3c2f33c5b","sha1":"71f5814c2013424327e9f310096b5a4a6545955f","sha256":"7ab9983510d384dd5a2ef25e6eb33f3f05134969156ec38ea85f72c550586868","sha512":"a4b82b52af723b52a94a0cd1dfc16fe0f2bf1fb0f55617c853bad8074670a02be606f030da2b9224197de5dd7e858d26df47f3dea62393ff95fd6625ef149f54","ssdeep":"","tlshash":"4a7000882c0c2000022a32a8088b000800aa00000000b800008023c00e30c2a8022c2a","size":22,"data":"","first_seen":"2026-03-22T07:58:52.501955Z","last_seen":"2026-03-31T18:16:21.295485Z","times_seen":1562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/aboutMerchant.js?v=19668","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"568403915c6cf2c3eecc0a299a35861e","sha1":"bdf3acedc4179c060a0ad0ec73032de39e7c4c0b","sha256":"a1e6867177e1d5a22d21ce39d9af84dfd9464457beb55b923f969f9c66057164","sha512":"4c8bf3dfab872448c88693036e62a98481f8ebc7add84670daab327c3e14142e0a4480d8e251943491346b47a9f88349cc7675c24eefcb85eaa0d858a0e45930","ssdeep":"","tlshash":"d941539eb14bebe205f620822ac56219647360d804b6e4817b569540b47ee4fc25f9cf","size":1984,"data":"","first_seen":"2024-12-22T03:03:41.35822Z","last_seen":"2026-04-04T16:58:22.975069Z","times_seen":396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/ac/v.1.0.1/manifest/decimal.min.b4a075bd.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4a075bd6623180bb38318dcf2542f58","sha1":"64207af61a67ff855fd152ca4dab1532973e5db2","sha256":"25dd4d16d5fd3c4ac796badcce3ec057d92c52255f8d8481570fb54549dac5f7","sha512":"f20bc2a23070cc656266fd0b654aa6270a0864a3c413fd4ece9bd3630423266829eafc39ef7f32728c97efdc5da834e89c840409e4adc0ed53004897f01341ba","ssdeep":"192:ZusyVYg81fsu05u9gpxe5afH5NVcvqfMNlkdOYiO5PjVYCrF1FVWJK5gDArHx:wsS4OogpxcGHjcwGO5PjVrrrFcJSAArR","tlshash":"1342c5d872b1f0d683f364e040db1406e13a6e49688e61e2f34985e23cb5ec6917ffa5","size":13043,"data":"","first_seen":"2023-03-07T12:04:54Z","last_seen":"2026-04-05T13:40:43.910647Z","times_seen":1864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/encrypt.js?v=8","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a13c4b84bd12677d141840e1c054c2f","sha1":"8531449afa5c7cb68a0868ffea7ecf0319b86494","sha256":"2bbfec12166bde1f5c3f5a404a943a47d586fe2a9ca7caf07d7a616d4a7b9160","sha512":"e254b09b707028580ec99d256eccfab7894fb0662eaa0565e28489b9f90606dce68ad2b43d15e12b9d46cf1034eeb37e00f79db781eab43f75aafe2f0b2dd8f3","ssdeep":"1536:0Vocr6cgfxlrX5BKlMR+shFxqlWz2sfD1zBee+2PY4O:0CmJgfxlrJBKlMRTT9O","tlshash":"5b63729157a06808c383ab6a771b71d2e06f7a9afdc54c47f318bf586a48717fad0930","size":71672,"data":"","first_seen":"2026-03-23T09:59:23.387654Z","last_seen":"2026-03-30T06:59:22.226829Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-03-30","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"www.kg999.net/res/encrypt.js?v=8","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/manifest/mc-control-shanshan.4e3be00e.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e3be00efe1b9f545bf3813de3ac763b","sha1":"c10a1cb3d1927891b83f951689f30874484dd420","sha256":"bb88f239cf673814b0e4de1de75dc8407f0f72f6cf636524cff379e994767663","sha512":"8f6f24fde4f08882783dcad8bc9882853ee9aa64b43b1797de2c37c70fad253d77c0b0dc1e9b33f8a5e881d5e3070821cf3f06b0f6ab7d7a32a27a42d839e819","ssdeep":"12288:dtyL+W2ElFndtzZWJMMC2msVEjZ2BLmNacum/4H1jKDkcah+ibCskUcprGQZROJH:dtWV22dtzZWX/zHRKNOJQwdZQVeJc7v8","tlshash":"7745194871e661e211777166a05b6605362a7e32c00e0851f2aec9f1afbdd85f333f7a","size":1257740,"data":"","first_seen":"2026-03-18T09:30:16.285796Z","last_seen":"2026-04-01T20:19:15.109249Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/9.14.0/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1133a24e73cc67fbf3a9002a2a8d2039","sha1":"08288a1be66c98dbd60f5d59b4e1b5ee23626085","sha256":"4fbb03aabc125045ee2d98be69199bcc01b9cb22aa2e438ab7422303622e0f09","sha512":"7b038fd80befe61ac54039577b161a7623cbef51f4485e6359c18d25c0d710686c2230def5ee72ea48d906292e2b76085a457c5813bdb6bd49c2d0c6d3bb6992","ssdeep":"1536:BCtUasrm5+7CClwUuDoYIt+/dpN/FZ6zeVjfPLXJpzKZyW:BCtvsrm5+7CClw5DoYIt+LN/FZ6z4jfg","tlshash":"4193a82d3bd5117206b253bc6f1ba486f72e822b2606a2d47cad83e40f7255942f5ff4","size":91683,"data":"","first_seen":"2023-03-09T04:10:18Z","last_seen":"2026-04-05T13:40:43.909195Z","times_seen":1952,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?\u0026onload=__rcb188048\u0026render=explicit\u0026hl=en-US","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1337555591b40a4bcb4e56bdacea730a","sha1":"c4fac4e75cb0f63bada94f0dd7fd6c7a9d7f8535","sha256":"6e6cb28b17293923bb12a22592642a4cd8323b9c6f9dad3652ed724d7b41454e","sha512":"b85562d962e4ce3f46ddfddc6942379a02919c09188394f4028424610776ba15fa2519a7e741dae2289b266f2074cf5ab5546eb6cf97669de3d4d9ff69362615","ssdeep":"","tlshash":"451132b31a18e0394f320de1e2facbb5f452742cb15885eca516dad41e7ecc7ce05885","size":1032,"data":"","first_seen":"2026-03-30T06:59:22.148797Z","last_seen":"2026-03-30T06:59:22.148797Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026co=aHR0cHM6Ly93d3cua2c5OTkubmV0OjQ0Mw..\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ato725tviiul","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"49499a7d9add7e38a07df4457e9979a9","sha1":"22d37da3d04f204bc4b8dc7dc19261ffaf5f5783","sha256":"289898c3238128dff0d4b2852bb844f42df9e5feac3ced22da0fc9b08c6e779b","sha512":"93fb64dcaad977dcfa3045ba1649eb0706a618126a4c7f905b9dd836079267a419305d2548a00406fc9f5462fc0e757bdeabc53a5b7da689c3ff817097b0cbac","ssdeep":"","tlshash":"3fa0220c2a00a0ae003023b23a0b000b203300022800af008080238003a038e3002e03","size":64,"data":"","first_seen":"2026-03-22T07:58:52.49501Z","last_seen":"2026-03-31T18:16:21.353595Z","times_seen":1561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026co=aHR0cHM6Ly93d3cua2c5OTkubmV0OjQ0Mw..\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ato725tviiul","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5ea7938a752b254513b19e7cb6db0cce","sha1":"3f052dee3d4921640a71957ce3d7e7a7c5669c36","sha256":"dc88cc9c9e0556e0ef68e6038ecc84133aea8b10160b111d876a921604b8471b","sha512":"5a23f2dffdb0b49c96361893864577c9af417394c7c707a1c9f33332a28a629c8996b9b3cafb99538d56f138cb489f7503bb95cd53e8c00b56a48d6de83b90fa","ssdeep":"384:9ybgL1Lu6AoiWu7MvePQW7nuScsjKtAplZ4v6naeuMLRja2uXF/QZ16:96gL16Xoi77geI8nuScsPpgYaeWHXtQ6","tlshash":"00a2d9d87662f03952b270f4553f151ee2fa2d62680c28acf050c6d57eb098ea16ff5b","size":22004,"data":"","first_seen":"2026-03-22T07:58:52.503343Z","last_seen":"2026-03-31T18:16:21.341878Z","times_seen":1556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-05T12:41:40.262347Z","times_seen":81353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/SPB-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/SPB-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 6007\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 06:20:53 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692be245-1777\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539712bc6568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6007,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"686ffc7a2853648a28e83c2bb26dd27d","sha1":"9ab2f0ed996937ca5f308d7527a24d117a84de74","sha256":"d4ad6346e2d16143d768a403f2d30a1789fd093b885f3280ae0cbd831df4de47","sha512":"fb616591aa53dbc520ba5486b2071957ca54923a4fb7fc4d86b5d40e34e23d755749ed3931c0aafb990c6d00cbf8b485058dd3e12697dde18f76bf5310aacf4c","ssdeep":"96:7ACVDfcEdelPc11PYzczHrQ4ZKHQw96rancT9Y9ZEFLOlf/+QoXnVbNQNkGZggTL:j00eVUbHKHDSpaZEdOlf/+z4zugNy2","tlshash":"8bc1aeec8c180847ec92b83e306f85ed1b81420f7d60e1ad625eea9f7996d0477c7598","first_seen":"2025-12-04T02:52:59.176552Z","last_seen":"2026-04-03T09:52:10.573431Z","times_seen":9,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/EP-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/EP-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 2785\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 01:19:59 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692b9bbf-ae1\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539738e0f568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2785,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 4-bit colormap, non-interlaced","md5":"a0dc3e289be4e96facae57e1bce29cc1","sha1":"e393cd600a756d7d803fe03e0e370e8a4c8b73e0","sha256":"28bb569b36051f33e099544f7b50f9c44b3bc7aaee6d85b160d789cb05fa5318","sha512":"4a61816546a37635da36e908d5a7b4b4c3f81d1a1f982013b1999cc6ecf0158a510ce924cafe671eafb93d58a32f8ae1fcf6b8b3fd54ce0d8af28aed8a19780a","ssdeep":"","tlshash":"84510b832585e4eac155e03615ba3b58023e75765c0b26639db1f0e4543cadcfe125e7","first_seen":"2025-10-14T13:42:02.079781Z","last_seen":"2026-04-04T16:58:23.091319Z","times_seen":200,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/JDB-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/JDB-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 7498\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 09:59:57 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c159d-1d4a\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539712bcc568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7498,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"f00226599e37f0b116e22bc9b24c0d4a","sha1":"7a454fbb4b2efef97e7527f9dc9b9c5caf38e769","sha256":"c9e92690620a34bedea550bc39257cd21a0a881ea0f5e05ce7980ca126fbf554","sha512":"e5ab069517e397fee8b5e53726446b3cbdb5bea00763382673b68a3c7bc27c32fb19599898bf110930d1f5e45b5a256bdaa119a278e3bbf3bddb0c2277623882","ssdeep":"192:kYjvJ59kqW0Fq3Edf8dUXw6gXmqpVhM7lD6hTG:kovJMqPcOIpHMleK","tlshash":"94f1af515d0d5e00cf4f8179b6eb92cbb731355217913fc2f64690289c350e32da8bab","first_seen":"2025-11-20T11:54:47.633544Z","last_seen":"2026-03-30T06:59:22.09369Z","times_seen":32,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/SG-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/SG-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 8899\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 17:07:22 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c79ca-22c3\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453971ac47568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8899,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"43340032747368984221d32e528ff1ba","sha1":"19b1d7d00c2b997c316b94f286c9830e746f9e5e","sha256":"3e4241c766251e7eb8ec3c4ea96797aacfdc8a9fd7dace1d6d5a87a5a8135ed7","sha512":"1545c10823b3e2f0a8f145702819251606ecd198255db0402ef87d840d6fcb8f10ae154493499692ac981a4b8c5a8c9260ad3ecb352b9da4456a838702a159d9","ssdeep":"192:g9hau00PqZ4+Namb0Alks4qephDPywzBKEEcOF5TV0KwzT:g98f4qZrlK9ZpUeoF5GK4T","tlshash":"3502ae7cfdc25169e4221674b4f2b5be5dbe2e7b58980241e5fb32a0a38c7500d0dabc","first_seen":"2025-12-01T08:14:06.301672Z","last_seen":"2026-04-04T16:58:22.891134Z","times_seen":117,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/BGA-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/BGA-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 4642\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 03:50:45 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bbf15-1222\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ae38568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4642,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"6f056ce52ed94b3f59cbd006ab6871a8","sha1":"cf6278ffe8ab2793d24638e1052e82dcbd14155e","sha256":"86fd9019b599112844907887b397b634d6b45f30875815c1c373133bb44029d1","sha512":"78b1d608d0a4637fcff7c5eb187122f293cda41542adcaf0f0b492456159cdc89ae562746ff88fe37ac24515146eb4753a55190c4cee282cb482683453744aa1","ssdeep":"96:i2fjAjrhQ6K3Sbt5yqpEmWW33Jnux6tO/PLmmGABWcDusw:i2fjAjWgy09bux6tOnLAgDuh","tlshash":"01a17e21ff161e98e79e773743754c654d31151c2c80c29fad32baf858386c224af794","first_seen":"2025-12-01T08:14:06.094011Z","last_seen":"2026-04-04T16:58:22.911766Z","times_seen":81,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/IA-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/IA-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 8664\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 15:11:14 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c5e92-21d8\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973fead568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8664,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"49bb9c8efb2a00f2df5788a6fc98244e","sha1":"650e6553d0cba0d5ec97efb009ae01a6f3d48318","sha256":"76fd91d71f43952d640cd67d8df65a20e0a2dba3a8e69c92515240ded3eab9b4","sha512":"de879ad4e51551d21e9363ca02976cb9713f57c8dfb4e7676f1dc2433bd77dd1eaf212e4d552da66d6da9d784244747826406066ddacc07f7a1f0d848f1061c4","ssdeep":"192:5hq1Ykox6i9/+S4PHpp9fkt6SgSthopJc9rOOfQbI+GF:5hqWkoL9/xQbktFTog9rizGF","tlshash":"8b02bf275742c8f5dd38c17212790af5484680e372bf9474a829fbab1a7f1c7d4f8a1a","first_seen":"2025-11-30T22:26:42.656304Z","last_seen":"2026-04-04T16:58:23.107721Z","times_seen":57,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/AVT-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/AVT-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 9703\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 19:25:57 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c9a45-25e7\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ee80568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9703,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 4-bit colormap, non-interlaced","md5":"b956953f3de97496e0847d136f1f3181","sha1":"34383cdd690a256c4a4e4cc43ee3aa923e5dbde9","sha256":"93803e3d31425caf18d71ff5255cd53bd937e416e1fe9ab0ace46ee05d6c24c7","sha512":"9794c2bf301094e042ee9faeb4b50ec3691b66893bda44b65874257f3167ebac99f05a0b1be2d819663997bfc56b9a2b2b8836f1a072f8c488efe21e3f5f73bc","ssdeep":"192:TUKgECIevc8GpEA6kFjNPvc7Eb6QIMM+E8H45K97rK/OdfDW:TUY3Cc8OTzvcwblIMM+E44KrPdLW","tlshash":"7912bfa9abce43f7f3a54af5c2c46f4198171181c191b2890e6d5abc2cccd49ed905ac","first_seen":"2025-11-26T13:23:39.443628Z","last_seen":"2026-04-04T16:58:22.935063Z","times_seen":71,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/VA-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/VA-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 9127\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 17:29:41 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c7f05-23a7\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539714bec568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9127,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"8dc6140eaeac498cfb064e2636cb64d7","sha1":"a3467f03ecd15a06d57a6bbcece4e14cf45e487f","sha256":"3dd80dba69e4aa06143ea00d3282ab68babc8bf3636a04e101f13a0237750afb","sha512":"0c25719d30a7864f4fd39c54c64a53dde9c014edfb19af2cdd87d36b4b2b82a9b6fb1f3167ffb9c3d5f5d88d5e428fa72627a8cbc59632fb0cdf6f6ae17af4cb","ssdeep":"192:KrhO8mwCk6N+N31WKBx7DZd5Y6detPwzDJbApBWaW:YhGwZM+NcU5jkE9bqWaW","tlshash":"3b12bffa0a04f87dc3d41b7a30559d1df4562ecca3164056ee3247b16cbd9864d0de8b","first_seen":"2025-11-30T22:26:42.763142Z","last_seen":"2026-04-04T16:58:22.945274Z","times_seen":90,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/BSP-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/BSP-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 7849\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 11:13:54 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c26f2-1ea9\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539718c27568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7849,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"ce4d107f1f810592756ce4f44ffb83b5","sha1":"395a3f51f6a1792e1655b55d3061b2cc8a334194","sha256":"bdb70ed877af82e8c92e23a8896921da0af16c7226f566fe55632b73c1f960b2","sha512":"c23b9ac91593edc33bc5b3ce90accd3f5f100c6acf39da11ad1f5919ebc97dcaf27dc4095a04a7bd6de6a92f32f00f044db0f2a7960c38d98e58882f2dc4a2d9","ssdeep":"192:PENWPcWVnw8ltn+CyFKB3Xdo64bZrVep/3lPC:cNjWi8lZf3NoL6/lPC","tlshash":"bbf19ecffec4341ed88da33be5e150aac8c175649ab843d269d24aac14bda53afc5940","first_seen":"2025-12-04T14:34:51.734539Z","last_seen":"2026-03-30T06:59:22.101008Z","times_seen":10,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/MAS-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/MAS-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 11678\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 11:42:38 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692d7f2e-2d9e\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973be46568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11678,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"2174ceca9b7ba47e632f0ca353c1a86c","sha1":"8bb720a8680653152250f21c13b6b9b1a0006423","sha256":"4a852621d4c0b5d35e18d6d1aa63bf21e337f4d2d82b5d7e0aa278143e7603a9","sha512":"f226ca3ab71eb4780ccde8192e8282886ef5dff725e2c649832ff981b7523298bb3703f00eab35f0f6d62e605d8d4cc6c4b3e957315e6c7d0cd46bffae1d178f","ssdeep":"192:6+vg6AIk9I83X3eBSsFTOFDNZalKu/xc7kkBi1KMqdU2sXJ1uCz9rX9u3l3kgWVi:6+vPO9I83X31MTOFjL7nBiMMMU2Xm9rG","tlshash":"d432bf90ecf7179c92a04e86741c6f31920ffd7a98f269d2c060e4d497b6ac46e37e60","first_seen":"2025-12-03T13:25:52.403861Z","last_seen":"2026-04-04T16:58:22.849919Z","times_seen":102,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766147003687_5.%E6%B3%A8%E5%86%8C%E5%8D%B3%E5%8F%AF%E8%8E%B7%E5%BE%97%20%E0%A7%B319%20%E5%A5%96%E9%87%91%EF%BC%8C%E6%9C%80%E9%AB%98%E5%8F%AF%E6%8F%90%E5%8F%96%20%E0%A7%B3300.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766147003687_5.%E6%B3%A8%E5%86%8C%E5%8D%B3%E5%8F%AF%E8%8E%B7%E5%BE%97%20%E0%A7%B319%20%E5%A5%96%E9%87%91%EF%BC%8C%E6%9C%80%E9%AB%98%E5%8F%AF%E6%8F%90%E5%8F%96%20%E0%A7%B3300.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 112482\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 12:23:30 GMT\r\netag: \"694543c2-1b762\"\r\nexpires: Sat, 04 Apr 2026 00:06:00 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976b969568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112482,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"6c3cc290c56b74057cbaa8f84994ee5f","sha1":"e129e3add8ddbe23acb255d37617fe31c2d209cc","sha256":"30963d00057548392e96c6e08501dfb70bdb65f37550b0880a2475b8766543a8","sha512":"2a28939d670f617436fbf86424c667f4a6375e5392e30054f27e06886d3e5bab35e54d78526cdd8c40f4d1c4685bdb73d622b22db29b3ec1acac196388738f7e","ssdeep":"3072:o1mUDKNiFD2rps4A2ViaGOqCOqh6zinHEg/q:oy8COORtqHqxEwq","tlshash":"7bb302755ed6016be01ea0ae4835db0ec2a706bf12365cc9e3493ed5d39e25ec90cab4","first_seen":"2026-03-23T09:59:23.450742Z","last_seen":"2026-03-30T06:59:22.104143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/common/promo-ui/assets/resource/GIFT.75c0150f.webp","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /common/promo-ui/assets/resource/GIFT.75c0150f.webp HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\netag: \"69c351a7-94cce\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\nexpires: Tue, 31 Mar 2026 06:58:09 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Wed, 25 Mar 2026 03:08:23 GMT\r\ncache-control: public, max-age=86400\r\ncontent-length: 609486\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 12516313523279648666\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":609486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"34d0db7bd69b3956225a7f49fc896b06","sha1":"8fb7628cb6c07055c28084310ff6da94407d0482","sha256":"f9e08440c7cd4fc4a19cf8f5d46057de56a6b3d9245855b34fe7e2cdefaef1df","sha512":"b6364a74ffc90f0c89e4fe6c381af2bde42d7443f047b6363c56a0022caf073141c5b5b7c324e27c4bfe51c5ea96ec5b149ca392552ab7fcb9d661b632ef3be1","ssdeep":"12288:Hmw3DC3q2hEhPZpx+i+Qd0Ie8Cuoprc0I7EFTqVUiOB:HmKu3hWXMx84rc0BFCOB","tlshash":"afd42355e39f99bac039e735e04fad61ce03e9c64895ef5d4899e2fb058f22bc140368","first_seen":"2024-07-11T14:40:33Z","last_seen":"2026-04-05T13:40:43.910098Z","times_seen":1595,"resource_available":false,"data":null}},"time_used":1613,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":503,"receive":1110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/MAS-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/MAS-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 8486\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 15:27:32 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c6264-2126\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539725cd0568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8486,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"44297c2020c86e72e3f28e7cfa8428ae","sha1":"830de6b46afefe462cf1722b06aace030203547b","sha256":"7687a9b9d1a1d726a7dfc380f4c7ca24e1efb09da6e0e609e4b2717da4e4b2f6","sha512":"14992b0fdfea21ceb08dd33c6b7ae1b277e8044bbcc1d58da781fbdd84c0f51b507a88548a565b42a7708b46141de01450f70b9aa07cb837a4c67debaada11e4","ssdeep":"192:HJjNoM1mzL43ioQdA1WEGYNObEp/+kt5kfyfe/ZodI5do2DoDRQ:pBoMFizdmrGY0bu9tWafSodIHDoDRQ","tlshash":"ab02affe403badcbe68d0a3650401f5499aa312ad44602587fb69e9d360b8f0427be5d","first_seen":"2025-12-04T14:34:51.790444Z","last_seen":"2026-03-30T06:59:22.105948Z","times_seen":5,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/TCG_GAME_ICONS/JDB/EN/JDB225.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /TCG_GAME_ICONS/JDB/EN/JDB225.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 18336\r\nserver: cloudflare\r\nlast-modified: Sat, 15 Nov 2025 03:05:20 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"6917edf0-47a0\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e45397e385a568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18336,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"af23e69b8eceade4a4e19b7d991338c2","sha1":"ebbc6def2c07c55e02453f2447ed048fc7c31026","sha256":"c926e5e3f8af288d3a6555f5b4eb761199009441d367457bcb862bf8ce0d7978","sha512":"a0d1fb3777e0b47005c6f42b8a5158e129c72c348765c2fb0cffa1a5b49cd9f35225d9c397240278a00a8cd6d2fed3b5e4de130f9d770654efe8f1c586fda8a1","ssdeep":"384:Y5PeeSBjtevw0tK8cC7lp8gyFfjU/hkbwLNkpBYS8flBiQbAMu1C:YoeSBIB08cHuhYwS7SBVAC","tlshash":"7182cf9ea28a82828f62823e5d34e25b446f354c5173b5ed3b8784b6c7e1d1d6d2f2c4","first_seen":"2025-12-05T20:28:36.923347Z","last_seen":"2026-04-05T05:42:42.57164Z","times_seen":123,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/system/country?_=1774853888764","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/system/country?_=1774853888764 HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: hrz09fs115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 1\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 17002052334359905588\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14559,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (13540), with no line terminators","md5":"1c5bf9c918e01dfb8c4dd422fe766901","sha1":"76896e2fd1154a6d992ba227174e56ab0cba77c5","sha256":"3bc436dc233f47dfbb248f0e1d8c01b4ab3fc023c41d4e3a410a8232adf4c4ee","sha512":"a6b6fdf3299ed7e35d5f5f68bbc0e4d65c7338c7b931a4a8bb8e45f0a0f49b94de43606eb39289b4d8a7debfc646612f96b01bf93406b62b4c53bcafa598ad05","ssdeep":"96:YjOZwkPVnUSDUx5hxFDHxk5ViPDFthda8fTL6lkD+kavc/o9Md2aWPaCKxm5OGeh:UYNgSHwxwwV51RmS/ZvL","tlshash":"d1526b3e640ddfaefd36ffd9b04f362554362904d2b8240acac05b727b95afd21210a8","first_seen":"2026-03-18T06:53:02.361227Z","last_seen":"2026-04-05T13:40:43.904264Z","times_seen":39,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"identitytoolkit.googleapis.com/v1/recaptchaParams?key=AIzaSyAYbbom8htY36mh6PM4gmKSy76ey2Lvk_w","fqdn":"identitytoolkit.googleapis.com","domain":"identitytoolkit.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:14.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /v1/recaptchaParams?key=AIzaSyAYbbom8htY36mh6PM4gmKSy76ey2Lvk_w HTTP/1.1\r\nHost: identitytoolkit.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Client-Version: Firefox/JsCore/10.12.5/FirebaseCore-web\r\nX-Firebase-Client: eyJ2ZXJzaW9uIjoyLCJoZWFydGJlYXRzIjpbeyJhZ2VudCI6ImZpcmUtY29yZS8wLjEwLjggZmlyZS1jb3JlLWVzbTIwMTcvMC4xMC44IGZpcmUtanMvIGZpcmUtanMtYWxsLWFwcC8xMC4xMi41IGZpcmUtYXV0aC8xLjcuNiBmaXJlLWF1dGgtZXNtMjAxNy8xLjcuNiIsImRhdGVzIjpbIjIwMjYtMDMtMzAiXX1dfQ\r\nContent-Type: application/json\r\nX-Firebase-Locale: en-US\r\nOrigin: https://www.kg999.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Mon, 30 Mar 2026 06:58:14 GMT\r\nserver: ESF\r\ncontent-length: 261\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.kg999.net\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":299,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"444780deda16fc9ce6b1590f9cb762a2","sha1":"2738b068567007d1c95dbd47569d26830ebc03c2","sha256":"effc81c91681ff66dc78175109b66d4774c3455203f1063a03e1695792e59413","sha512":"3e56e17a70e195b035c8e83480558681a809f6b04cdef7861a853027cb6ef488ba5a4a3159048266a7fb962ec82b30d67cab770680473bb4baf7b40789881a39","ssdeep":"","tlshash":"87e0e731c4f300351f4d86483c650cf6ccd00c0ed2110937155246c103df8b75ec086c","first_seen":"2026-03-30T06:59:22.116784Z","last_seen":"2026-03-30T06:59:22.116784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/favicon.png?v=19668","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:07.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/favicon.png?v=19668 HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 19 Mar 2026 10:48:42 GMT\r\netag: \"69bbd48a-5c5\"\r\ncontent-type: image/png\r\nserver: EdgeBot-CUSTOM\r\nexpires: Mon, 30 Mar 2026 16:53:50 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 1477\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:07 GMT\r\nage: 50657\r\neo-log-uuid: 3670584455132402775\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1477,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"3aad9670dbb83c27a51dc1a9970270f6","sha1":"a8325df71a25f74480784ec0bfd4f43fbfafa8d9","sha256":"634d31d35b3241f0a421d139ec1ea9e08f9e8c9cffaba06500cee35e5d6c2583","sha512":"83065715415eeba525972410084762b5396fb3f42c1778b7edf64b80937221fb67cad5f2ba7212bc64149c897996e9b85f2f006ee788a3d43d4c080d24acafbc","ssdeep":"","tlshash":"94311947c9fd3584fe201ab68fd00fd2d86c22f2ec7557f210800262861bdce8455d3a","first_seen":"2026-03-30T06:59:22.119145Z","last_seen":"2026-03-30T06:59:22.119145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/COUNTRY_FLAG/CIRCLE/BD.svg","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/COUNTRY_FLAG/CIRCLE/BD.svg HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 06 May 2025 05:04:59 GMT\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-origin: *\r\nage: 3791\r\ncf-cache-status: HIT\r\netag: W/\"6819987b-1d6\"\r\ncontent-encoding: gzip\r\ncf-ray: 9e45396758dc568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":470,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df5e01f2b21b13ad562afff2d9b93463","sha1":"27c1b49003c35424943968168003576367e6f55c","sha256":"6285f7980bea1e17606383d972911e852fa31b4402c9afdc78f1f598e7ac3924","sha512":"1077d0dbd4e699c7c18701afd13281476b90dd25dadaf7da0a59b195c6047b7db4c06879acf56f613fd0a7d4b5da5f6d6f61284c25989e6fe9d2f73c1eb5c499","ssdeep":"","tlshash":"daf027e8739cda09cb040751db0820a94266a5d6524c4560f6c5ae586e6857b5e40adc","first_seen":"2025-05-15T08:59:23.825178Z","last_seen":"2026-04-04T16:58:23.108349Z","times_seen":459,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/MNP-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/MNP-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 8659\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 17:56:16 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c8540-21d3\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539737deb568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8659,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"f65db2be1f1f7b774485150bf8f5e062","sha1":"4559cd6f782bbdda00ce4c6208ba19912a751d50","sha256":"8b6abb4ca6edc29d5f65255e261cf96a55601ceb001ac592173356d2f02af0ba","sha512":"dc31830440dd032bffecab4e718c2c8458965b582b7e6678b0c03d3b1c0506d81ec229f062b8e9384b064472b66fb2a35e9d79f40c4d269c4ffbaae947f23ab7","ssdeep":"192:eAGsgu5mKvaGdnPG60baebWOvXaEnPN7cz6lVpAorOHCbF02i/RdA:eYgu5m75PbNWqXaEPlcz6lVpAox/i/vA","tlshash":"d702af9c210480e589e5723185d0eb7973003540ce731eb7bc496a2946ced51ebeefe9","first_seen":"2025-12-01T08:14:06.042847Z","last_seen":"2026-03-30T06:59:22.122883Z","times_seen":82,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/MAHA-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/MAHA-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 4187\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 03:08:23 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bb527-105b\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539738e13568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4187,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"00b07c9a01aa42dea39e4f76fe93b958","sha1":"00c23f9455208e9279f3ffb4850b6f504581ec77","sha256":"5f09ffca1ab22c264b4aeadaa9166e269f68bab8bc0560c49ca098d97cdd18f5","sha512":"9c193e9af047abc5949abde5a0d067da608adbe4846f7626c0076a1be76a83f03f7186ccb77f27bea15546fc257bae26ddb266667ad322dab7ce820cb9c267ce","ssdeep":"96:rsb1I/hLJ9BZqL7tXBU2xIvYqFCABIT579:rsK/0L7tXm2xuYqFpQ579","tlshash":"31815cc95fb89d269af15174a05d0048adf6b78c0598f22b1619deb762a32ba39001e8","first_seen":"2025-12-01T08:14:06.287001Z","last_seen":"2026-04-04T16:58:22.904887Z","times_seen":75,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/BTG-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/BTG-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 11211\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 09:19:32 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692d5da4-2bcb\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973be48568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11211,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"5dd7e0cef8809c93afe5971aebcb4f24","sha1":"fe9654a4f8eabc3e53105d033ce7b5d4b7e46744","sha256":"d166caff12746337f3422f842f11d7b464d6bbd5d505fa766393438bbf7f722d","sha512":"5faa3d4898de5a4613ecbce856c8bd75aaeb5aa8007fd640e0095c0f3d4e24460b0e44db99c2960396deab0f4d9e28d84e4523ee371d4d28a3dcba8d119f4472","ssdeep":"192:9kNBsb0Qtc4u9tiyJFBjGFfHT7VEUDm4eutN50tChts8tcwNScfMN:9kNB+0QtkiyJ2dXHVTKC3IcfMN","tlshash":"b632d13a650e6e98fe950bb1dcf61d8eabe290a9d7d4c088d7816c2c30339943349810","first_seen":"2025-12-01T17:59:39.954807Z","last_seen":"2026-04-04T16:58:22.900575Z","times_seen":83,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766147240846_12.%E6%80%BB%E5%85%85%E5%80%BC%E9%87%91%E9%A2%9D%E8%B6%8A%E9%AB%98%EF%BC%8C%E8%B5%A2%E5%BE%97%E9%87%91%E8%9B%8B%E7%9A%84%E5%87%A0%E7%8E%87%E5%B0%B1%E8%B6%8A%E5%A4%A7%E3%80%82.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766147240846_12.%E6%80%BB%E5%85%85%E5%80%BC%E9%87%91%E9%A2%9D%E8%B6%8A%E9%AB%98%EF%BC%8C%E8%B5%A2%E5%BE%97%E9%87%91%E8%9B%8B%E7%9A%84%E5%87%A0%E7%8E%87%E5%B0%B1%E8%B6%8A%E5%A4%A7%E3%80%82.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 111256\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 12:27:27 GMT\r\netag: \"694544af-1b298\"\r\nexpires: Tue, 31 Mar 2026 19:30:11 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976c97e568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111256,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b07468a7ce9fcfbee6413d5acc21bc42","sha1":"7717b8980b80ffb022034300bf277281b95ede02","sha256":"215788c3ad9eacdd26f19d738c43c8bc0972231a1f350e69801bbb04c47c79c9","sha512":"e7ba68be83b1875df9baf3a50139423c32c435e9dd42a992f9d6c2d1c655bf94ebc12fe559173f8cc412ff5d9c2f44c9decbc4510cf15f7c1bb4418f37fb0fca","ssdeep":"1536:2rYkZfRV/ZFyB5HCC+LYvXVXGfaoOMZCzhG6HIyragHjXzK2QVkFWC2rQnH8qxcU:QiCcFGftOMZcFH/HjXGLqh+48qxc4Zyu","tlshash":"f0b3134d190ad8c96a80baa9c0b5cd29c9b7fdfdd71470afdd01c98e306446d15a3caf","first_seen":"2026-03-23T09:59:23.511877Z","last_seen":"2026-03-30T06:59:22.125457Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/WPSCORE_getDownloadSetting?domain=kg999.net","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/WPSCORE_getDownloadSetting?domain=kg999.net HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: application/json; charset=UTF-8\r\nx-error-code: TOO_MANY_REQUEST\r\nx-app-trace-id: s3x7ymi115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 0\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-length: 227\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 997477086706097379\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":227,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f61aa6d0b958ff09c31e1d70a95e88b3","sha1":"05dccb77bba6de0f4ae70aa9210c748e84120ebc","sha256":"c6053a9ec930a9232dff63bec0941ea878eae1185d22e350e239d635a95855cd","sha512":"8eb1ead7df31969cf700d46f9e3313e21346df61b2a74bc76e6db4b41f42edf25f6d5c2fea66669cc04ac2faedb6037b1baf799e35a78caf1acfe7e2ae186025","ssdeep":"","tlshash":"80d02228184d9d33165388810b0ca3009500aec8ea82f70ccc0f312d7aedc3c983bbe8","first_seen":"2026-03-30T06:59:22.127378Z","last_seen":"2026-03-30T06:59:22.127378Z","times_seen":1,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/wsd-images-prod/kg999bdtf1/fe_setting/web_logo/wps_Logo_20250708175923.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /wsd-images-prod/kg999bdtf1/fe_setting/web_logo/wps_Logo_20250708175923.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 477229\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Jul 2025 09:59:23 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"686cebfb-7482d\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e45396768e5568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":477229,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1983 x 889, 8-bit/color RGBA, non-interlaced","md5":"d1329990dca9ee5a963f0e2e0cd8a16f","sha1":"5ff2507bee5e3d023c8f0cf6483f0cf6ea4c9dd2","sha256":"93a3ee0bcddedd33416eccf0caf1ab9ef03d40c4f550ef0c39e7773992be4527","sha512":"0402c809310f26219a60649b8a88981e5e86f9dd5b675f43ed44c57a7f04ba53e459e7c0c5bb076e703c8e1b31768f854510efa766d25d26177495cf978e25d0","ssdeep":"6144:vfa+OVlUQMz2wCWqIuJMt+XjH9Pz071H3PllnXdvwvkA0BrYsWfkrT5Ck42gO+R8:3aVOtiwPrCzG9lnX5htdT5C/4O5/JE","tlshash":"d7a423d5fd7e0464dfa6143043162ec29af97b2807a59ca836dddfac061c18d9ee334a","first_seen":"2026-03-23T09:59:23.570038Z","last_seen":"2026-03-30T06:59:22.128774Z","times_seen":2,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/img/live-banner.4e78c03.png","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/img/live-banner.4e78c03.png HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/res/css/index.38ab758b4a1dae584a62.css\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"69bbd48a-c9a9\"\r\nserver: EdgeBot-CUSTOM\r\nexpires: Tue, 31 Mar 2026 06:58:09 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 19 Mar 2026 10:48:42 GMT\r\ncache-control: public, max-age=86400\r\ncontent-length: 51625\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 13925157745786095418\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51625,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 580 x 220, 8-bit colormap, non-interlaced","md5":"4e78c039c2ba8775f39b9ac0701d8245","sha1":"43d38e600b0e1c6e18f4ddcf876bfd576f5d62bf","sha256":"7a5b970db535c7b26d3a867ab33e0e29b901843e3043ffd4eeb77441c38db240","sha512":"d832c21d33c8dc110763c48d05062975e084eec52d97c397661baf32d8049d0090a896e0974dc461d1aba8aa2ffe474baa12efa8521067479bc49f3da44e7862","ssdeep":"1536:cvFWkQ6/Rt0z2GiqAfoRfgbyWOSr3ODD7uqK1:IgkQ6IiqWjbyWmI1","tlshash":"0e3302c57d12695b1fe94fc782e4de4ecfa35e21862ead1e8012f3c12ca2812d69c4f5","first_seen":"2024-12-30T10:25:05.204285Z","last_seen":"2026-03-30T06:59:22.130069Z","times_seen":4,"resource_available":false,"data":null}},"time_used":910,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":362,"receive":548,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/NLC-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/NLC-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 4447\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 03:44:59 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bbdbb-115f\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539728cfa568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4447,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"9030caa95f2b38d4aa1b4d244a8aec89","sha1":"216daac7ca0edfd7e3ee2b3254a8f88cb33dc5de","sha256":"28a4d33bbb44d2295bb39317515aae8f1f10509e6e8c3d6aa1e46725a446d48a","sha512":"b2e971254b72f7af40b88f58cc9fd6036b21c365bcbe7dfa2d90bbdef7863b5b7f32043d21238bfc8f9b58368fe2beeba2b0e7636c0602d6f5eab35bb991100e","ssdeep":"96:pojosUeQdTjOg0iEfA/czTWsL0ThIpWtu2eDr8tAmyMBPP0j134t:gUlRjOg0iirL6V4YaUPWi","tlshash":"c5914b79f4615093e4439578c890cccb90dd2ac399d7bca3a09832ac65e7e24ee34537","first_seen":"2025-12-04T14:34:51.885213Z","last_seen":"2026-03-30T06:59:22.131195Z","times_seen":4,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/AE-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/AE-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 8363\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 16:24:00 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c6fa0-20ab\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539736ddb568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8363,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"8eedda570e72a1673e359a4cddea69a9","sha1":"81a563fa876e2ddb16e58ce8f225cc451c65df6f","sha256":"b5673b0f926466c4f6436cf602053ac0d95f7729ba6ed735e3b6cdafd4d4246e","sha512":"caf02daa29122fdf740cc075dce66f396f9f0d614d8e73568e98c42783a2800d4824253d84e555370670ddb09b7ad3355b0ef86468a76cdfc4f50c601d92e607","ssdeep":"192:LaJ8oRNktLtQGJi4SB8a6yQxrVJiiVgJ+1pa8Fqg:OHNktQeMia9QxXii8+1o8Fr","tlshash":"a7029fd0283f06dacd3f33b047b042e62970b4effb2dc69116dfa96527045a6360da98","first_seen":"2025-11-30T22:26:42.647181Z","last_seen":"2026-04-04T16:58:23.119217Z","times_seen":111,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/YB-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/YB-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 7120\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 10:10:33 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c1819-1bd0\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ae2a568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7120,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"2a854edc738a57558a1f3e1cc826471e","sha1":"d3a5fd07ef3e0ef720e4b2b79953ec6bf610f77a","sha256":"68a97dd751c2828a97f98668a8e699e96e1bc388f818a2f997d721747bf5a1a8","sha512":"a8cab31d07bac7cb10a3a408d1a6b1c420495bd837b26276719a27cc9b5fc48043d255bbb82045684052e7089f56c1019bfc703155094c76cfa8a4e0fb76e01b","ssdeep":"192:i4UB8fIXTh3/lE5I0x82uYsEQ+r40YAF/:VUB8f8Eu0x8HYsEJ47AF","tlshash":"2fe1a0533a6c5c9beb7117702ee602730d89a01c6045a3fff6230ebcdd91416aee3946","first_seen":"2025-11-30T22:26:42.725216Z","last_seen":"2026-04-04T16:58:23.070913Z","times_seen":105,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/NLC-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/NLC-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 5707\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 05:42:44 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bd954-164b\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ce62568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5707,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"8da5148e80db4903d033733157fece82","sha1":"a8c6a3f7da166da605e01c2a802c7c239ccf9fc4","sha256":"f302927d729acfc1ffdfa89c49e1d86c5f9fc6892a56f41192f1f2ba21798d6a","sha512":"99858d45e700bad587b734dc6b6699db7e49934ee224e6160b8fa3a5661dc4ab0522a8d084d4ac74a53762fbd0f6a498fc2b791833ab39ec4f382ef8b83111e2","ssdeep":"96:D4madfoAmURUPx2tpMWw5J36Gu/H6S1/KWQyIodRgJWZIVd79h2dHjD0Qm2IqiqZ:EXfNOxN/z6Gu/H6SM21zMacxSjDw2NzZ","tlshash":"4ac17d4dd6f1287adfec67724f7848d456183680ad1d08c3462a2168ae673edcc2854f","first_seen":"2025-11-30T22:26:42.658539Z","last_seen":"2026-04-04T16:58:23.077818Z","times_seen":94,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/KP-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/KP-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 13335\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 06:10:34 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692e82da-3417\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539741ed4568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"2080d3603bd7a17c7fb6d28db28fd486","sha1":"90b0bb8fd3ce8d9bbdc8d2044aa788bc16e9642e","sha256":"dd64b8a71daf18e0406c4d8f7e9ce1e7bf79110a4a46ac208c815b5a8c946786","sha512":"1b1f98f77c331b5cb955c6d391416ba6fbbc0b84d24b0d4fdefeb0117551b3d2311cbf9fe4ae1c1ae5aa1686293a40ebba10cb2e30df1b8d42b469cfca8e8186","ssdeep":"384:d2mUhFbOsj3WHzPuglNzcUkTSHj53Q4ptkvcL:dPGv2ug1DxTL","tlshash":"e652b0f21fb4088ef6c2ad3f5032d4dd758a8dd9de2864dc42fd8017726a6d44e94640","first_seen":"2025-12-03T13:25:52.411058Z","last_seen":"2026-04-04T16:58:22.928273Z","times_seen":82,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/system/country?","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/system/country? HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: b3gf6hw115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 1\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 796794767238954744\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14559,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (13540), with no line terminators","md5":"1c5bf9c918e01dfb8c4dd422fe766901","sha1":"76896e2fd1154a6d992ba227174e56ab0cba77c5","sha256":"3bc436dc233f47dfbb248f0e1d8c01b4ab3fc023c41d4e3a410a8232adf4c4ee","sha512":"a6b6fdf3299ed7e35d5f5f68bbc0e4d65c7338c7b931a4a8bb8e45f0a0f49b94de43606eb39289b4d8a7debfc646612f96b01bf93406b62b4c53bcafa598ad05","ssdeep":"96:YjOZwkPVnUSDUx5hxFDHxk5ViPDFthda8fTL6lkD+kavc/o9Md2aWPaCKxm5OGeh:UYNgSHwxwwV51RmS/ZvL","tlshash":"d1526b3e640ddfaefd36ffd9b04f362554362904d2b8240acac05b727b95afd21210a8","first_seen":"2026-03-18T06:53:02.361227Z","last_seen":"2026-04-05T13:40:43.904264Z","times_seen":39,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/html2canvas/1.4.1/html2canvas.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/html2canvas/1.4.1/html2canvas.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 37629\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61ec4640-92fd\"\r\nlast-modified: Sat, 22 Jan 2022 18:00:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 324659\r\nexpires: Sat, 20 Mar 2027 06:58:09 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q45KRigFLJ%2BgCTuO5lhTEeq9IsLLap3njYRiM%2BNbSw2UAC2xRLsMTQnQfYz7ZOqjsF6e848F3Ga%2BL1NCc7WecbL2TBcniWSGoNg1AlaroebrN1qUiHrCgn8ZQS3ccZymCyYqa5QM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e45396b3c8956be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":198689,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64372)","md5":"d7530aa0b7587e627484c49fdf8f13f2","sha1":"b987dc0cc6cfcdc2e34499375f505470c5adb891","sha256":"e87e550794322e574a1fda0c1549a3c70dae5a93d9113417a429016838eab8cb","sha512":"04d6914276096223d2a871c36f9f01d3268f7c2bbe5a076cf06a7f814df792a06d80d4b8b523c7b8689bca87aa315fd326548a75ae855f3a04c981a34defaf5c","ssdeep":"1536:dLkw5M8eKEsqi5xpg+n1sPMecC9JmgxBQSFkkZQRlNM7IgeXzh:dLUtZSpg+aZmabZQz9","tlshash":"121457b46ba71cde0a7ef49b00172d838d981b67117fd1e8f24aada62d70702ceb1574","first_seen":"2023-03-08T20:20:59Z","last_seen":"2026-04-05T13:40:43.944258Z","times_seen":4563,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/WD-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/WD-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 4075\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 03:03:27 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bb3ff-feb\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539719c3b568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4075,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"ee6605ac2fba7835c298eeb9792bbe6f","sha1":"6cdee25210c26d4ae749ac89d6f472499d7c20a1","sha256":"96ad5bd4b50e990e9473b723dd4a4990c906bbbc1784242fc8059e66842e1c90","sha512":"d2fedca4a4f0f48e6042514755e1ea16c55dbc4e92f62686225fa3cb0c404e38b6646faf601fe6032d7f2f48ab1413513bdf6a0769919504179132cdf64545ef","ssdeep":"","tlshash":"12816cdf7988de01ee716137bd2c90b9400138b04b1928277b52e13ee64e2083ce874f","first_seen":"2026-03-23T09:59:23.403476Z","last_seen":"2026-03-30T06:59:22.135601Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/AUX-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/AUX-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 5312\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 05:18:16 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bd398-14c0\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539739e1b568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5312,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"fd2a8831915c1eb9fb8cefac008dfe0d","sha1":"2fc7f027c5bf9d4f6de8e537d72c1dc0e54885fb","sha256":"0e8024428b694eef3ca83214f94af6add4504fc59e00c81cb62c2721105c1084","sha512":"467a6038005aef7d46b3ac1086f75d718eebcee7ace1ba615c7c3e1dccdccc12ead98b85a87941fa9a313099f1455309e678e84d8836c5192b282c145efcfaab","ssdeep":"96:xjLDu+pf+lHWXWyaSyACr8qyAhFddrZD4JhLK1rAoujfw42J:JLDLpfWQWFS8zykdFQHoeo40","tlshash":"a6b17c1200c3ac1ac8b01fb24d64cdc89a7656e558bce15708fb92522e774cf3a6dec4","first_seen":"2025-11-30T22:26:42.637772Z","last_seen":"2026-04-04T16:58:22.933476Z","times_seen":88,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766147045859_8.%E5%88%86%E4%BA%AB%E6%82%A8%E7%9A%84%E7%8B%AC%E7%89%B9%E9%93%BE%E6%8E%A5%E5%B9%B6%E6%88%90%E4%B8%BA%E7%99%BE%E4%B8%87%E5%AF%8C%E7%BF%81%E3%80%82_.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766147045859_8.%E5%88%86%E4%BA%AB%E6%82%A8%E7%9A%84%E7%8B%AC%E7%89%B9%E9%93%BE%E6%8E%A5%E5%B9%B6%E6%88%90%E4%B8%BA%E7%99%BE%E4%B8%87%E5%AF%8C%E7%BF%81%E3%80%82_.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 105255\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 12:24:12 GMT\r\netag: \"694543ec-19b27\"\r\nexpires: Sun, 05 Apr 2026 19:21:48 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976b971568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105255,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"522e0741b5e4e00f882f36e2586dca52","sha1":"d739304911fd13bf4bc7c915530a507086c855d7","sha256":"1626370f39d64ae755bfd137699e21f6a2b0392e2f869ce6f77b7117e7edc2cf","sha512":"f26bb80441a036930ea6933d3ef23096aacd14c4e4fe21d4af9fc4becdb954f10597ba6c219ee701ee876dee0ee06ba141cef31e93a8f4e49d34a4c90c638709","ssdeep":"3072:qQ4tsxk5EPas0/I6PEdpmckwvNc7Y+HUVY6uufIR8tD3UxS:4uiLjh5wvA5HUVY6rfI8J6S","tlshash":"28a312502fa4a056c967f356294cdaf4dc45dd24040b6ffae4d871372336eaab084dec","first_seen":"2026-03-23T09:59:23.470086Z","last_seen":"2026-03-30T06:59:22.137308Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/TCG_GAME_ICONS/WD/EN/WD0180.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /TCG_GAME_ICONS/WD/EN/WD0180.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 15107\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 02:38:04 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692e510c-3b03\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e45397e4878568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15107,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"a2aef8e9fc960904ecba5802e5618106","sha1":"afdbe0d8258d789d0e792194260fc8244ec25721","sha256":"37510591a29f4a391b58a0a1450b9436feade37c1033c3d806949fc50f226473","sha512":"a4fa1d87183a852c25f79e0bd3a4cfc9d5ca821e414ba74187190beddbd472ed9d14fd5514b289b5c0bbcd0aeedbef5a20b3fc36aa76485d7e2d58c00548bb5d","ssdeep":"384:PKmgMT1Q2b1a4UNQUCPQWTSm6vENn3j8ebQ:CM5dhPQwS7M3xbQ","tlshash":"0962cf7495c41b3ed4346f7ed7821412762355d1ff44a3a2d04ba784f02c7b5b864a3a","first_seen":"2026-03-30T06:59:22.138233Z","last_seen":"2026-03-30T06:59:22.138233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/GCSGAME_getVendorEvent?ext=avif\u0026_=1774853888775","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/GCSGAME_getVendorEvent?ext=avif\u0026_=1774853888775 HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: pj08eww115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: REWCEN3\r\nx-elapsed-time: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 10688371430737777864\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3235,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d3e37cb20f1ada5a7ec1250366b8baca","sha1":"c952cf0f77e0101c173a88cf1b66e2238fd13a85","sha256":"65a75a108ebe1c8c728ab1e42f65a750119022e9fdb61378a72efdeea394b2bc","sha512":"77ed363e55b36ad79fb8d22f24fbacf07025c3a55bbe7792bbcf53da21f7b7d820969b99b7bc62755a959c465bc29410c38bb64bcea494b8f168bfde742a9628","ssdeep":"","tlshash":"6961af5a114e28eb9b2422c8324eba56d4f60c4f8fddcbc5dfd96c482af83be51165c4","first_seen":"2026-03-30T06:59:22.139133Z","last_seen":"2026-03-30T06:59:22.139133Z","times_seen":1,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/img/down-left.2a9e893.png","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/img/down-left.2a9e893.png HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"69bbd489-4d933\"\r\nserver: EdgeBot-CUSTOM\r\nexpires: Tue, 31 Mar 2026 06:58:09 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 19 Mar 2026 10:48:41 GMT\r\ncache-control: public, max-age=86400\r\ncontent-length: 317747\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 4423174449436037158\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":317747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1108 x 896, 8-bit colormap, non-interlaced","md5":"2a9e8936f1eccdf3bdc8ac3504d35f6e","sha1":"b0dd9ab640d304f882af74a3761020f69ccc4b8f","sha256":"092597e416940757ecd25d68541467c9c11b6128d493abb6cf56e284ccb72427","sha512":"c17e03e5cf14fa2e5e9b3d8e669adc6fabc1051ec777fd5dcd49c8b61b3a10c919d2a6924867823507d4d675c8ae8b093a2976c03cfefd782bba25cae54cfb78","ssdeep":"6144:5tPx8df10fdBYDeuBf2/WN7WNYhEwJ1E2XSv28lWTLuc+cH4ef0Tf:EGJu8geuEwXPqcLcf","tlshash":"1c6423c4eceb07d46cc11813f87bf5e41b4367699b895b86ae0882c2472d5d19ef2ee1","first_seen":"2026-03-23T09:59:23.645375Z","last_seen":"2026-03-30T06:59:22.140047Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":313,"receive":907,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/PP-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/PP-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 9055\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 18:06:49 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c87b9-235f\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539712bc5568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9055,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"5a071cf41b94a1b67311bb80fa0045f8","sha1":"de81cae0fdfef465abd68400fa91b43d80403059","sha256":"5d5f6346690f75431c292bb11421fc1b168fa4e94a431bf4e08eb54f082d8c8f","sha512":"70e191faab2d7a379f4a53d4ec6fbd7a0aa5edc63a2f354828568bac643651154bbb75897fd0217e41c0c761ee543eee8ec186d28a0fe148541cc8e2b8e592d8","ssdeep":"192:2j0inwmlOBw+7fl7JzExkAaELheAU242rdDD:a0iOBbfFJz0rf53","tlshash":"52129f2a36a5f369c610f03cd878cad395704eba3aa5c531d90ccfc4ac495e57e7822e","first_seen":"2025-12-03T17:38:12.981747Z","last_seen":"2026-03-30T06:59:22.141022Z","times_seen":9,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/TF-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/TF-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 11241\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:39:30 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692d2a12-2be9\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539732d9e568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11241,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"3edc2e195ee47178c20b318792ce3925","sha1":"ad4da9c6f37656b96e3906dc330830e47b8dc798","sha256":"4ae84c1a4626b6b65bc74027f6f874dcc0d47ea0a2ca932254cdce330d293bde","sha512":"0ee0998d484cbc6fb8ec3cf55cd28ed1310660092298dcbba6e7826275b3ba6734b558d273b52a293ce2258a491ddff2836dd1b580fc8bfd1267a4d339356c05","ssdeep":"192:vW7PxdDmQaoul7LTLWtR9n7JYuZBiKWIHwffVCoa9n1KosGOKUTPWBWgqXaA9xlE:vyPxIpe7JRkVeQCzOKULuqZxTmkq","tlshash":"fd32bf55858200f9d65cf13caf62350819ada20d57d9a82fd8387184bc8f7fe92ccdb5","first_seen":"2025-12-04T14:34:51.743099Z","last_seen":"2026-03-30T06:59:22.141885Z","times_seen":40,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/JDB-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/JDB-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 7737\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 10:45:57 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c2065-1e39\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539736dda568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7737,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"64752244d4ff8e36f1859ed300e5039d","sha1":"f64058cbf7326370c25e3572d7de92fe1c232fe7","sha256":"9f94158c5aef1007513895d2f9994c9e8e264db54d65219e10921dfbe6cd3484","sha512":"f2f12de2459e1ddce705e4807f7403d4fea615d0fbb244e8903475f5d1df38fb76bd1a6f99e6e6216ba36b09e6f56c80df93863a80efc04eaaa970905038dfff","ssdeep":"192:jSQHQmHVakSE85Oll4oRQADaI7b8RLCtGd5snRrADg4u:JHaF5QBRhDaImLIeD+","tlshash":"62f1ae3cc8319f69d0bff3732087ac638c44973a6593886ded7c56b408826a190d8ecd","first_seen":"2025-10-14T04:14:43.126562Z","last_seen":"2026-04-04T16:58:23.057694Z","times_seen":355,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/SG-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/SG-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 8899\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 17:07:21 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c79c9-22c3\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973be41568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8899,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"43340032747368984221d32e528ff1ba","sha1":"19b1d7d00c2b997c316b94f286c9830e746f9e5e","sha256":"3e4241c766251e7eb8ec3c4ea96797aacfdc8a9fd7dace1d6d5a87a5a8135ed7","sha512":"1545c10823b3e2f0a8f145702819251606ecd198255db0402ef87d840d6fcb8f10ae154493499692ac981a4b8c5a8c9260ad3ecb352b9da4456a838702a159d9","ssdeep":"192:g9hau00PqZ4+Namb0Alks4qephDPywzBKEEcOF5TV0KwzT:g98f4qZrlK9ZpUeoF5GK4T","tlshash":"3502ae7cfdc25169e4221674b4f2b5be5dbe2e7b58980241e5fb32a0a38c7500d0dabc","first_seen":"2025-12-01T08:14:06.301672Z","last_seen":"2026-04-04T16:58:22.891134Z","times_seen":117,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/YL-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/YL-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 3189\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 02:07:07 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692ba6cb-c75\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ee7e568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3189,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"7555488891af2f7b41b8d3c9675dde8c","sha1":"40b5464eb48f67d23c9b0e86c260232e90f086c5","sha256":"112ecfede07631b7759fe32e2c0ab02796bb0f85933b3a33a8a82f9b5548c06c","sha512":"013bbb40f2d5398c3a2892a4270fc3fe0c5e174baa8a19f77c0cde03b06ac9d76032038eaca837bf5ba4295e691321db94e8a0766785dd9ce9b62a85969f124e","ssdeep":"","tlshash":"6c6139eeb5898491d713de773b1fb8429b901d6189c3e2f104f3b64bb675397246401b","first_seen":"2025-12-01T08:14:06.142339Z","last_seen":"2026-04-04T16:58:22.910591Z","times_seen":100,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/TCG_GAME_ICONS/PG/EN/PG0113.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /TCG_GAME_ICONS/PG/EN/PG0113.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 12193\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 12:40:36 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"69318144-2fa1\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e45397e3863568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12193,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"97afcf1aa85a156f7cc735e262c276ac","sha1":"24d9d067d649c662d7a3ce3804d3e13138ecb9d3","sha256":"9f559ff615e5ecef37d75c31e245694418d06bcdad75944e1f219e612066c58f","sha512":"d0420f77fc38df4db21265bbd5f77928c220d68996345f7f227479e6f0716588f62c2ab8cdc0a79ac3b0800b5d8b157d6e88ddf383c71382c040a9ce04791f14","ssdeep":"192:+bFnDXRR3Onl6nT/7es4SVtjDB50XiF2R5c4t2wB3dCITVJxKxlK/J8hMzVXVwIn:m1El4lC5c4P3dCITdKxlqe0XjeKf1","tlshash":"1642cf72a315453cc46897ba89fbffee3648e5408186646e4bc379674888ed1d29350f","first_seen":"2025-12-06T04:49:52.190599Z","last_seen":"2026-04-04T16:58:23.117054Z","times_seen":114,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/manifest/dirty.4c13559f.css","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/dirty.4c13559f.css HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\netag: \"69b9122e-f3\"\r\nexpires: Tue, 31 Mar 2026 06:58:10 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Tue, 17 Mar 2026 08:34:54 GMT\r\ncache-control: public, max-age=86400\r\ncontent-length: 243\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 3592423950122563677\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":243,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"4c13559ff2cf62e58402ed844535c81a","sha1":"c24a7fb50a01cb7a0c1185f78f35d7ad413b99c1","sha256":"82408c1ad6ca2f96ca958f71a9269fcb7219f61268641c5840f7ee131d2069e4","sha512":"d1cc15f285da4413786a3d034d1e93884ee7650ed35e04e3081a4d03ad73a5ff066ffddf4ad8bb6669e97d766a4e683abe2c552a9856d31468db3f2fd3cf8b81","ssdeep":"","tlshash":"bcd05b7453c63916cb7396177634d744a172a5c1ce9b333c184b170754fa35106d41c8","first_seen":"2025-11-04T02:12:16.637511Z","last_seen":"2026-04-05T13:40:43.926788Z","times_seen":748,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/BT-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/BT-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 25820\r\nserver: cloudflare\r\nlast-modified: Sun, 07 Dec 2025 16:03:47 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"6935a563-64dc\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539717c1f568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25820,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"1273d738d141e79b0ccebb8da575560f","sha1":"45b1c3114edaf897c77ec671ad5878bece48b82e","sha256":"6ba48434652bd4cfe77680b9315863aa3ed6303afc6d8525c69107f211fec2a7","sha512":"077a5695b6f79b1e1fe694829bbfb91bdbe8d86229805525b977293e0065a6ef741b560e4ea5acc185fb2acfd6d27b9852d7c8160a3b80a6f1d2629617ed16a5","ssdeep":"768:1ejrKeKkBjzEBp4pOZfyazjexWOm19zQVH2ExJ:1ej2erdYTjFDzWM1OxJ","tlshash":"fcc2e05f1576b7d88dc9b29a6ba2468d608aec8b571fc24e449340e71fdbd08e34e0f1","first_seen":"2025-12-09T00:17:16.441969Z","last_seen":"2026-04-04T16:58:22.930504Z","times_seen":94,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/js/app.67c80ca.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:06.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/js/app.67c80ca.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 19 Mar 2026 10:48:41 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69bbd489-ca397\"\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nserver: EdgeBot-CUSTOM\r\nexpires: Mon, 30 Mar 2026 12:33:26 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: HIT\r\ncache-control: public, max-age=86400\r\ncontent-length: 297229\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:06 GMT\r\nage: 66280\r\neo-log-uuid: 16833053658812719184\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":828311,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65440), with no line terminators","md5":"24273ca14ef20e2629d3f95c77032704","sha1":"e67962f208317707fd7677d2de0052fa27ed1155","sha256":"5ddbba719f389796617a5e35d3e1dd0587de3338df68024bc605e5b61b26b474","sha512":"8638b8e02802001fd97f6bbbabae073890fead9720ce61766d7104a20d4c715ca110219ebbfb77a8bc5a78dc8590b53c6a6f616fae85e572a24283858b27f1b1","ssdeep":"12288:v/P39IwJDfx88Ir3tyGEtwu8jdlhjdQfNTRD0f:vn9IwJDfx88Io9+f","tlshash":"27054ba9a1cdf0f9864397e5522f2128b33f2ca6b915c540fe3dc5c8666dcbc811be64","first_seen":"2026-03-23T09:59:23.614326Z","last_seen":"2026-03-30T06:59:22.145434Z","times_seen":2,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/lotto/lott-common/lott-js.js?_=1774853888349","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /lotto/lott-common/lott-js.js?_=1774853888349 HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\netag: \"69a8023f-23e\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\nexpires: Tue, 31 Mar 2026 06:58:09 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Wed, 04 Mar 2026 09:58:23 GMT\r\ncontent-encoding: br\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 18218118601565916978\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":574,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (574), with no line terminators","md5":"043d2a44511a4448bedbe9de32317bf1","sha1":"40037e16cb721531834f6e905a0bc51348cb3b78","sha256":"7b164e9773888980ade1980e60495a6d23db6ace9bdb9c5c7535c048b175539a","sha512":"0ddca247a26261fb77e4d54135d01c1e446109c732ea4613a65341380a6280a4e37cbe08e142a20073396e9253c469537be82ae5e8131d48833f43931cccd41d","ssdeep":"","tlshash":"5cf0c22c2e60f936805f2c57767ee24832a215199011e00068cfe8186566edf8eb9ac5","first_seen":"2026-03-15T07:58:41.545609Z","last_seen":"2026-04-05T04:52:36.840772Z","times_seen":18,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/WD-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/WD-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 5104\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 04:28:40 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bc7f8-13f0\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973be3c568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"f3bd34091fdf12a295cdb58115ae38ac","sha1":"1acfb1dd9edcd5c00f80d8eede106f671a2494d8","sha256":"64e11e8c06f8351f7e57e8fe554d6a5409b9a1d14f1b6ef4f73f464488ddb21c","sha512":"5c76e78291aec1fd2d218e533a314a964746b61d78a94edd7fcdde1b6f8aa9f49b5a81bd94d52211a490506485350ef053045c0595dfd3e725f90e27425cdb8a","ssdeep":"96:pAi3RhdVFyhaX1nMNn8CUxvsZ3bprZYLvh2BfcI7kcg:j3RhdV0MXw8CMsZwLs57k/","tlshash":"39b16cdc1a1ae1a1d89ea5f2b0eb08c574c5a0213b1eb03ce8de752c2135758c0adc1a","first_seen":"2025-12-01T08:14:06.193468Z","last_seen":"2026-04-04T16:58:22.973458Z","times_seen":77,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/SA-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/SA-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 10344\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 02:15:13 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692cfa31-2868\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ee9f568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"0fc089c2db908f565aee6c38d698c15d","sha1":"491b1ba6bbc9ff0547c9b7227e9f0ec9e2721bf5","sha256":"42da732c8a9e4dc900ee8c4e3e7179712dce7910dd2320b1f21066752a360bd0","sha512":"93ea9cfed03c14ed920a41d3c46c765154b4405e0067c2ddf626ae3bae0bcc033ca9e92d16cdaca0924fa9494c157d9237adb28902098ed8e78f479e8aa1081f","ssdeep":"192:GQR2Q580+RVOl6TP+MBOjLWwVHSt4Ofs8WI2W0TOKj1OWqINNUe:G67nmV06TWXtVe4OfsnIl0TOc1OWqINv","tlshash":"6a22beb8ff9f2a74cf445ebe63862c20f15d0303350782689a6459345db82c34de65db","first_seen":"2025-12-01T08:14:06.213265Z","last_seen":"2026-04-04T16:58:22.829085Z","times_seen":79,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/PIN-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/PIN-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 5875\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 05:26:07 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bd56f-16f3\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973feaf568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5875,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"ec95c459772783244a711b3965bab6ad","sha1":"6ca934d2a5d4e3713ab3677e0695ac2703950446","sha256":"14e1642218f293cd2da960d24c9c8402e0225360609898cea387718bbeec572f","sha512":"2583a718644cbf06755b0980cf348d60b73fe703cf921456e3542ea23de16c27eaf04518e12d482f2d845dfdb71d1253a8cfa75661d0521372fed0c30099952b","ssdeep":"96:rhpgRfP4lPCYlpx7YUQZVNPUXRiZApNN2v6uVgERcdxTSfJBi/fviF+3X:FpgpYflL7xGPPUX7ZK62gHOyyF+3X","tlshash":"33c17db0f784a94eed2672793046810691e19800fe9c0fe34b6b0b965963900cdea47f","first_seen":"2025-10-14T13:42:02.118685Z","last_seen":"2026-04-04T16:58:22.847142Z","times_seen":171,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?\u0026onload=__rcb188048\u0026render=explicit\u0026hl=en-US","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:38:24 GMT","end":"Mon, 01 Jun 2026 08:38:23 GMT"},"fingerprint":{"sha1":"B4:D8:FF:18:25:9D:F4:3C:81:14:15:FA:FE:F1:C9:D8:BD:9A:AC:DB","sha256":"DA:45:8E:4D:FC:26:D1:06:BC:7E:55:03:F6:AC:CD:D6:ED:2B:5B:91:E9:13:35:DF:B4:EF:95:A0:EF:55:E7:C6"}}},"request":{"raw":"GET /recaptcha/api.js?\u0026onload=__rcb188048\u0026render=explicit\u0026hl=en-US HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Mon, 30 Mar 2026 06:58:12 GMT\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1032,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1032), with no line terminators","md5":"1337555591b40a4bcb4e56bdacea730a","sha1":"c4fac4e75cb0f63bada94f0dd7fd6c7a9d7f8535","sha256":"6e6cb28b17293923bb12a22592642a4cd8323b9c6f9dad3652ed724d7b41454e","sha512":"b85562d962e4ce3f46ddfddc6942379a02919c09188394f4028424610776ba15fa2519a7e741dae2289b266f2074cf5ab5546eb6cf97669de3d4d9ff69362615","ssdeep":"","tlshash":"451132b31a18e0394f320de1e2facbb5f452742cb15885eca516dad41e7ecc7ce05885","first_seen":"2026-03-30T06:59:22.148797Z","last_seen":"2026-03-30T06:59:22.148797Z","times_seen":1,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":65,"dns":1,"connect":8,"send":0,"wait":18,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/js/index.10.76c88d0.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/js/index.10.76c88d0.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"69bbd48a-b244\"\r\nserver: EdgeBot-CUSTOM\r\nexpires: Tue, 31 Mar 2026 06:58:08 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 19 Mar 2026 10:48:42 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 10206529495178507805\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45636,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45636), with no line terminators","md5":"38196b6b3322b1138659d362a6c96c25","sha1":"fd38ce914abb3ee596df330f6eed63587021273d","sha256":"33bc489e4fea4b3411655c0fc8f30b8fd9455864a00235a4afb78abfdac3a106","sha512":"a35d9efe9e5235f0f5e7115eaaa9b7a4f6dac34e1c6edfe39ef18e45f33b1d53d12817e0d5f9300de0a45b7161e5a825afa5119f17a1f764f0eae9e2c33a49f9","ssdeep":"768:zTyfanfXHvS/+HX9vvA+zmaP1UyDcP4WipGJ69h2x/cuFGC9z+kufm5W5Ihl9q:3yfSvSW39vI+iaP1LDcnismhEtMeql+i","tlshash":"dd23ae1ab0c7f6b846272068001f2339bc730f64a619d481f275fcd56ef4629523beae","first_seen":"2026-03-23T09:59:23.643978Z","last_seen":"2026-03-30T06:59:22.14966Z","times_seen":2,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/manifest/mc-wps.47b8a39e.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/mc-wps.47b8a39e.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 17 Mar 2026 08:34:56 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69b91230-f63c\"\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nexpires: Sun, 29 Mar 2026 20:04:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 9091\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 10312502793490246592\r\neo-cache-status: RefreshHit\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63036,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63036), with no line terminators","md5":"47b8a39e968333f563334503385a8d3c","sha1":"b1c1889c7ec3ad22b91fbeeaff686948a748ae57","sha256":"7b7a05b24a6c2f6b8b990a1fd37c0138b9eaa72d89911d9173e9f2b2b9f89cc7","sha512":"0e1e9a09449f953e4c0d8468d7a07f90b1e463aa0e75846e83e01d28f360be5c3bdea052bc17f9cf60b65ae8dd7ecb0855464fc5f099426cc8535571dcf8be2a","ssdeep":"768:3J58ixoo2kPZ+Njhts/fiEhiaiOhiBOfJa0A2RfbVd:3J58ixoo2kPZ+IfiEhiaiOhiBOfJL9","tlshash":"ff5366c974c2e8cebb33f53bcc5e7b152935be6945284870415121aa2cf998c9263fed","first_seen":"2026-01-11T02:47:35.36856Z","last_seen":"2026-04-05T13:40:43.900784Z","times_seen":394,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":693,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/AE-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/AE-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 8363\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 16:23:59 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c6f9f-20ab\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539712bce568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8363,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"8eedda570e72a1673e359a4cddea69a9","sha1":"81a563fa876e2ddb16e58ce8f225cc451c65df6f","sha256":"b5673b0f926466c4f6436cf602053ac0d95f7729ba6ed735e3b6cdafd4d4246e","sha512":"caf02daa29122fdf740cc075dce66f396f9f0d614d8e73568e98c42783a2800d4824253d84e555370670ddb09b7ad3355b0ef86468a76cdfc4f50c601d92e607","ssdeep":"192:LaJ8oRNktLtQGJi4SB8a6yQxrVJiiVgJ+1pa8Fqg:OHNktQeMia9QxXii8+1o8Fr","tlshash":"a7029fd0283f06dacd3f33b047b042e62970b4effb2dc69116dfa96527045a6360da98","first_seen":"2025-11-30T22:26:42.647181Z","last_seen":"2026-04-04T16:58:23.119217Z","times_seen":111,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/FB-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/FB-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 5491\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 05:14:03 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bd29b-1573\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539740ecc568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5491,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"f50ed038c1226ff94759e1b1e210f122","sha1":"3870b92e398b0e94d7a7776d5683ca75b6090e30","sha256":"42a14acab5508694265ea66a94e577e1322c7a6353ebdb3e1b872df8b9f82bf9","sha512":"f7a341e8acf7be11002963c2881777cf68cbecef497398e8bc225ef2945d7511a4304afca216a7e0143609ab4679828a0fcf3c6d23079a43a8660572f90bb636","ssdeep":"96:6ujsQTGhNUjeIPen8Ot8mNR312ehTMIAm65X/yrF3Tvk1FhsmpBxJ/oHGtC:1sQKjdI2n8oP2L265+81zsOgHR","tlshash":"6bb16e1d64974d94ec91f4f2951c3bb3af89b248ec9266b19421f1326bb02e5430ff9a","first_seen":"2025-11-30T22:26:42.762011Z","last_seen":"2026-04-04T16:58:23.102946Z","times_seen":60,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/lotto/lott-common/bettingCompress.ee38aabb.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /lotto/lott-common/bettingCompress.ee38aabb.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 04 Mar 2026 09:58:23 GMT\r\ncontent-encoding: br\r\netag: \"69a8023f-35f\"\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\nexpires: Fri, 06 Mar 2026 16:36:17 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 477\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\nage: 41360\r\neo-log-uuid: 15808530086964441373\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":863,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (863), with no line terminators","md5":"aae371d012e7e15fc3c56a84a93314a2","sha1":"f668d0e39eca318fadf8ac6c95119415258ee0c8","sha256":"c7c2b77ab05cf5420f27a27bf032a33e41319da2610deed796eb32f930ba2070","sha512":"c20eae8400e3696bfb4d7eaeffc6e14b38e53ba560f2b761d35611233503ed9c0e89aafe6e79084987b8de5db0b65345f7324afe461df12fe5cb2f51bd7638e8","ssdeep":"","tlshash":"4911ab6930c1699a1292f568c90fb31e44664e2011cae058ca1ed88cbe355fa85a69a8","first_seen":"2024-02-19T22:44:21Z","last_seen":"2026-04-05T04:52:36.998919Z","times_seen":202,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/BNG-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/BNG-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 9348\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 17:40:15 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c817f-2484\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ae31568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"c5f92ba7f5bef256e9d5daece51afaca","sha1":"fd88060451848e1082867582e09290d9676b30af","sha256":"68185ed5c7bbac77b13da244e1e69cb2010100f8224141925ec9d847d6573c7f","sha512":"62b234c30144b8bb22386b9b8ebdae00c881196c75031bfd7c78a5e944e4011ddf801cabbcc92aa264d09771d04d79543732c750af4f1e3e2ece809b2f5dd357","ssdeep":"192:GoLg5WWPF3A3Rgz1eMj7edC/dQzkqnV/depWRbMgzDnV37cI7+FaTZxLL:GoLVWt3Ugz1Lj7/SIqnvqW13VAI7+Fan","tlshash":"f812c0fe3dbc9849dd50e93134310d063a884f3682d7b527cf50145c862aad7aaaeeb5","first_seen":"2025-10-14T07:55:25.432398Z","last_seen":"2026-04-04T16:58:22.855699Z","times_seen":310,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/PAS-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/PAS-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 7972\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 12:55:34 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c3ec6-1f24\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973be43568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7972,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"18c2abf962a2061289dcfe10a673ad51","sha1":"0c3fdd658b490305fc710bf74d9dd269646907d6","sha256":"569c8afe3799b3e09ed9da707022b0a6664b728bad6afd42c41075b8d53396e9","sha512":"4f279b2fc94cb276595611d8def7a96c0dbcacba5905405b3df5ca77663f89bb9310521303d9b75e102cb8839dabec93e4650958009542cc2a1dc90ffbd42014","ssdeep":"192:EZ3xlU6kd7DkCAB563gra/fqC+hvAS6dj:EZBkdTsA3icavALj","tlshash":"f9f19e3067e1f1f1e4d989b31e067065f9e3050774109e1a8e0db95c9a18ff68a1fab7","first_seen":"2025-12-01T08:14:06.126399Z","last_seen":"2026-04-04T16:58:23.021927Z","times_seen":139,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766147308002_18.%E5%85%B3%E6%B3%A8TG%E5%AE%98%E6%96%B9%E9%A2%91%E9%81%93%EF%BC%8C%E8%B5%A2%E5%8F%9699,999%E5%A1%94%E5%8D%A1.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766147308002_18.%E5%85%B3%E6%B3%A8TG%E5%AE%98%E6%96%B9%E9%A2%91%E9%81%93%EF%BC%8C%E8%B5%A2%E5%8F%9699,999%E5%A1%94%E5%8D%A1.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 105733\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 12:28:34 GMT\r\netag: \"694544f2-19d05\"\r\nexpires: Thu, 02 Apr 2026 23:29:45 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976c992568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105733,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"67211ae8e51e3a2a2c58eefccb06627e","sha1":"6518a6244453dad41f87a3e12d99549fd03cc749","sha256":"dcfc92486e467a443f4817e23523dd98ff703eb62db3d2aa366a27b413da90b5","sha512":"dd06ec20e4fa5ada980541eac2893b8c12e4f53edf09ae9d58aa5d5cd73e7df091caee78dacc0529d9fddd994ca26481d9e6f91a4e41372403b8c8cedc6c10fe","ssdeep":"1536:1B1AvmE5/FQekZFJhM6XsElUmeehgpcZ5kKDHQz6LkvN9/dmIwEahjdrRcR:v1AvmE5/FfMrXsElUggpKCcQBdPhkti","tlshash":"a8a3127bd02516f7f971d0b25ee66a3006840582ad3a9df4a97ab70f0a5e4f9430edc3","first_seen":"2026-03-23T09:59:23.497596Z","last_seen":"2026-03-30T06:59:22.153598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/MCSFE_getAvailablePromotions?_=1774853888633","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/MCSFE_getAvailablePromotions?_=1774853888633 HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: application/json; charset=UTF-8\r\nx-module-id: REWCEN3, REWARDPROMO3\r\nx-robots-tag: noindex,nofollow\r\nx-app-trace-id: 0x8ccer115\r\nx-error-code: not_exists_user\r\nx-elapsed-time: 3\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-length: 239\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 5070168534498732110\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":239,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"405cbaad53e77b5823d64da8f852227d","sha1":"49caa7aacf7b5a681dfa4c355c6ad9925aabb06c","sha256":"b1bc351c86c1e63b88f72542ba7891500210afbbe77688cfd030f1e372214b91","sha512":"a1a5de3bd697cdcdeb39a86685f612d33f3d87362f10ff30a144398652764e1ab2151c78128444e283da74fb89b93849cc01755fae7e2a34c7ec68f1541505a9","ssdeep":"","tlshash":"58d0a9a208be09bab9d09ec952080220a2428c4ac3a0f304cd22c18ce6dfdf8489e224","first_seen":"2026-03-30T06:59:22.154443Z","last_seen":"2026-03-30T06:59:22.154443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/GCSGAME_newGameVendor?platform=html5-desktop\u0026ext=avif","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/GCSGAME_newGameVendor?platform=html5-desktop\u0026ext=avif HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: kxbqxrk115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 6\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\neo-log-uuid: 7349224490838519153\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87960,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"197e37c541f99088913ef8932cb357ce","sha1":"145290bd67279bd11ddca666e45c7c7741317668","sha256":"196f386724676cd080fc268d4abf3f109630e5913bce971ebcc5c0406c5039c5","sha512":"044c1640d2bc6ac4542e9d990eea93280445ef722c86bc2cb81981ae4cdcb2f56e847c04ff7240374a078051f642af89bec0367529ff36c58c902ab088631b8d","ssdeep":"768:/Y98/kjFn2quHuXMX8X+Xu7kaZt7Mii4e6:/Y98cn2qBXMX8X+Xu7kab7Mii4e6","tlshash":"61830d6bf1a9b8a7173107c4328f764d952f580f6ed4f794f5d84e09a8e8bb853242e0","first_seen":"2026-03-30T06:59:22.155225Z","last_seen":"2026-03-30T06:59:22.155225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/PG-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/PG-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 7559\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 11:54:57 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c3091-1d87\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539735dcb568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"80b47600b91e461540319b91bfa8588e","sha1":"ea6887ceebf40a81ba0f1195f3006b5fc0ee1455","sha256":"4a8de338a3dd23b22ff3501309c46cfe0cebdce7503be4952e25683cc1a400b7","sha512":"d96ae63bd7f474c9f88e97055594774447b7d176440c41b9c9d22b5825abce96dd8b347cfbfc3855228ef032f070699794c113e7ceb2a5b8e3e18634b1870e3a","ssdeep":"192:lqx3tk0djEqhjPRlO4w2h84k6ysVG9LFUv9ie:YkOEkREvU84dyj9up","tlshash":"9ff1aee4c362e614fb4a403f6a8c8c1e7f2c80603f6b174a12f9946f614d4199ee63ad","first_seen":"2025-11-30T22:26:42.743305Z","last_seen":"2026-04-04T16:58:22.98034Z","times_seen":143,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/BGA-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/BGA-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 4044\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 03:23:25 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bb8ad-fcc\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539718c2e568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4044,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"8e206cabe0d4325cfa09d032017e4fb3","sha1":"f43099c10f978de7bc451b6fbaafae42d76862fb","sha256":"ffc61406b5cdca85f255b29c666eebe04765d584bd75b536debcd4d574bd25ff","sha512":"1635cf202c79e0986fb2704f3e116bffd3a24277ce9e3aa6c6be4215fad22284fce7f88468102f47a3eee63a2b3e0a0ce1b6bd33e0785941d773efb8542046e6","ssdeep":"","tlshash":"4b816d3794882113f9923476a8c78d733909e39d0fc073ce922345ee0fdb72014a4ba2","first_seen":"2026-03-23T09:59:23.448926Z","last_seen":"2026-03-30T06:59:22.156501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/GPI-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/GPI-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 9141\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 19:00:35 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c9453-23b5\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9e4539725cd5568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9141,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"3a0c95a514bcf456592b8e2cc56623d3","sha1":"6d159866069c7692180bc8e1278d1f9617b62403","sha256":"5237bc7235f3a051274416c81400713cd2b9317794776fa4cfbbc2f5aa2b2e85","sha512":"5799c48f02f477acd0a7adfdaf9d0fda0014280ab588e6a84ee4b89ac02e9a0863c7414bcd349ea52ba9d2987f16f7207d9a9ec5d3f4f9b53dd9db6f1c4d2274","ssdeep":"192:Z8BZmxUJ8nfi6EOJr3T3td0eaIMToq65c6N5n6Gq/5Snp:Zk8nfiwrztVaIMT+m6NDU5m","tlshash":"2812afa4cbc6d52affeca0360a7d43f039f161626585fce8572565b72ca2e05a63c301","first_seen":"2025-12-04T14:34:51.709939Z","last_seen":"2026-03-30T06:59:22.157431Z","times_seen":3,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/WJ-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/WJ-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 29551\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Dec 2025 09:25:30 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"6936998a-736f\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453972fd6a568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"b319a6c7bf9b4dded2fdde68f4a392d0","sha1":"cf87cb459d68e849f3babbfecaa6d50de44e53a3","sha256":"0fd5425c17b548c6d6212fde906c6cb06853750eebc6b5fb7d168620277e354f","sha512":"c8286227f83b9c81b9bcdbdd2031847a8946782318d6c5a1b9471b43fa3b8ee53c6bb9409f751a78c1401105c337de1e5b73d38318746bbdc86053b19fd97b0b","ssdeep":"384:GmtizDxQCU7cgjTmUDLyvNbCYv7qxgmwdbr88Wj3O1XxyyxVf0wdSgmsbDxZtNwj:7tinxsjTuv5CYDqBWr81+NdVfSyfx/N8","tlshash":"fdd2f197b922d94d301651eff1ac19324fe8166489260ccacbf7692574c57cebc06f07","first_seen":"2025-12-09T00:17:16.482661Z","last_seen":"2026-04-04T16:58:23.079144Z","times_seen":72,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/BT-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/BT-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 25820\r\nserver: cloudflare\r\nlast-modified: Sun, 07 Dec 2025 16:03:48 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"6935a564-64dc\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ae2d568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25820,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"1273d738d141e79b0ccebb8da575560f","sha1":"45b1c3114edaf897c77ec671ad5878bece48b82e","sha256":"6ba48434652bd4cfe77680b9315863aa3ed6303afc6d8525c69107f211fec2a7","sha512":"077a5695b6f79b1e1fe694829bbfb91bdbe8d86229805525b977293e0065a6ef741b560e4ea5acc185fb2acfd6d27b9852d7c8160a3b80a6f1d2629617ed16a5","ssdeep":"768:1ejrKeKkBjzEBp4pOZfyazjexWOm19zQVH2ExJ:1ej2erdYTjFDzWM1OxJ","tlshash":"fcc2e05f1576b7d88dc9b29a6ba2468d608aec8b571fc24e449340e71fdbd08e34e0f1","first_seen":"2025-12-09T00:17:16.441969Z","last_seen":"2026-04-04T16:58:22.930504Z","times_seen":94,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/ac/v.1.0.1/manifest/numberSeparator.01b17b54.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /ac/v.1.0.1/manifest/numberSeparator.01b17b54.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"69703773-526\"\r\nexpires: Tue, 31 Mar 2026 06:58:09 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Wed, 21 Jan 2026 02:18:27 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 6149421633666917537\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1318,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"01b17b549ad285136b8cb7ec0c7ec291","sha1":"7c721fd5c8da887f7c067a488d88f5fa538e3029","sha256":"959a2c44941d0318df9e0a3776c30393f74d50c9e46d113ea911360c49a621d5","sha512":"296a7cd6d1d6741ca17d884989669b2563ff352143111629947c93892d784738d772de8a00ea99d6c2758f13065e775ab232be33fa7020f7dc4493c2a6372db2","ssdeep":"","tlshash":"d0217d5836b700124d7fb0e98b8f52025b2126577484da8fb62cda947f02c2be2d36fd","first_seen":"2024-04-23T23:35:41Z","last_seen":"2026-04-05T13:40:43.92999Z","times_seen":1746,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/manifest/qrcode.min.0d19c585.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/qrcode.min.0d19c585.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 17 Mar 2026 08:34:54 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69b9122e-4bf2\"\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nexpires: Thu, 26 Mar 2026 11:14:27 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 6906\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 9615018570442104913\r\neo-cache-status: RefreshHit\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19442,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (19442), with no line terminators","md5":"0d19c5856e872e3f6fb9d0f57bea8dce","sha1":"ce36bde12504b53d0baebd5ee359631cc5172bad","sha256":"03528877abcd8ec6452eac177f2750c551e57632ac2d855ad5bcd6343891bbc2","sha512":"188cde9b65214ec7d1a4508b462c4251bef7e9a1a9d945535d5cb07b1b07ff4e27988b3eaf5a67af999af17b2737ae04412bb1dce122d44f32590a1123ca4669","ssdeep":"384:2IKSnIPLflpMR++8OiXAAdTRZgMvu4nvqqHHHsglNov3m1xk0ZkGULMyzLyURyy2:GmXimr4niqPDzZuiDy2","tlshash":"0392c4e9f35403a6525d5cc5282e644aa4b0b4272c1641acffb5c4e6e8bcfd1b83af70","first_seen":"2024-12-01T04:34:39.996683Z","last_seen":"2026-04-05T13:40:43.927323Z","times_seen":1648,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/B2C/libs/gt/boc.js?v=1","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/B2C/libs/gt/boc.js?v=1 HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Oct 2025 00:35:47 GMT\r\nstrict-transport-security: max-age=0\r\nvary: Accept-Encoding\r\netag: \"68e06be3-3429\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 3477\r\ncf-cache-status: HIT\r\ncf-ray: 9e45396738bd568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13353,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"845e2236627b939e57fb462ea29ec554","sha1":"9e3bf49321d552ec26777a8c6d9bf71530f47bef","sha256":"cf2e948263c1ca01e8f6e163439d99a176345e0a41bc93104608f675b2f4145c","sha512":"b3f6919c720eae8d2aa4f12a9657d936c5c52206ca2bcec44920c2d76be5fce6be8e2c5bf1dab20aef890fc11a149321c7199a0e44296f51e7d77878d6dbda39","ssdeep":"384:OcB6Y6+HiaWSXauU058DIml6yDwFJQqVqB:OcB6Y6+H9HII22ze","tlshash":"1852114d68f7609385a3b428ca9fa114b9788a57002ccd85bd4ce3589f9447c9bbbfdc","first_seen":"2023-06-14T14:59:52Z","last_seen":"2026-04-05T10:50:17.513834Z","times_seen":349,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/manifest/external-module.cb963217.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/external-module.cb963217.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\netag: \"69b9122e-1aa\"\r\nexpires: Tue, 31 Mar 2026 06:58:10 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Tue, 17 Mar 2026 08:34:54 GMT\r\ncontent-encoding: br\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 10075535182022097019\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":426,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"cb9632171bda82b786fbb89531ad45f4","sha1":"1b36a6c329ac24c7adfe0e10959f04f4bb325969","sha256":"b7760263cba6848749e6cc9376f0d4dfc3485878240848a526ef56ebd804327d","sha512":"3474e573bae0212524c2a9d4f3a9f76bf7c6c558d6ce004ec307c589d18228b7cf9a51365cc778022dc8dbed81e0d8e43b5683d9f7ed23f2e12fd88a7ba8a4ba","ssdeep":"","tlshash":"e6e055ab0247e5015d32bfc7f003b161b92a1735aee8a8c2055449b297140a3f2da818","first_seen":"2023-05-26T03:36:06Z","last_seen":"2026-04-05T13:40:43.922912Z","times_seen":1846,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/BSP-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/BSP-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 8374\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 13:03:39 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c40ab-20b6\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ae34568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8374,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"ba11d2d33b220fa8e2eea68d743522eb","sha1":"0aa2429c64bc82a8b1661752954b5d8faf6f8a4a","sha256":"eea2ba418bf0aa1d46e4b18c355e7812da7f8d47f5f6a296fd6f5b6b62ef0edd","sha512":"e62b958522c2bc8e120c2be54bcad0790ac17faf193596901a1706b0f338484ff56714884b71df31644d5fad5bff3f505e56dba736dc673a849f5f73b212ad22","ssdeep":"192:5ipOErNvG8JNhrcTsn+HXmT4f/ibqNGlaQtDmcRBpzu/45NCf:QEENG8XRg3/f/dGlBBCuk","tlshash":"bc029de10aa10e89ed0e98f51c18a76c5cc25eed0714b01a59a83ad594f980cfa2edf3","first_seen":"2025-10-24T12:44:03.075343Z","last_seen":"2026-04-04T16:58:23.041789Z","times_seen":169,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/CG-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/CG-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 12651\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 23:53:15 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692e2a6b-316b\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973be3f568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12651,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"2bc5f3bd65f145176669dbb321a93749","sha1":"5935788e5c0d3f9cd7f38dbdf2aaf030f72fa25d","sha256":"6b4b096210e5dddced2ebe1ef96e35ef4b6928c013cb4ad07716e7db8cd8565b","sha512":"c65a64185292d78f4b5f2905071a1af265fa9414b97c881ac122ce8bc3ed68d7fb3c43f5cced9947332e2c510703da6fb25bc7600cea663ac550187c1dc321bb","ssdeep":"384:eJ/fzDKIaTTTFObCn08X8VqIQqglzBj+ikCcD:eJ/PKPTPASrqmBjJm","tlshash":"9d42c00102b82af2cd5ad1361f5e7767bd397141c98b4ca2f43041755f33b4eb5a6869","first_seen":"2025-12-03T13:25:52.351783Z","last_seen":"2026-04-04T16:58:22.883572Z","times_seen":79,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/9.14.0/firebase-auth.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /firebasejs/9.14.0/firebase-auth.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.kg999.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 33722\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 29 Mar 2026 23:33:24 GMT\r\nexpires: Mon, 29 Mar 2027 23:33:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 26688\r\nlast-modified: Thu, 10 Nov 2022 21:00:29 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117350,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3e80f5800c11d19d455627966a2262f8","sha1":"c66be704649d09d8c567533662f30e8c071bd68f","sha256":"77eb87926cbc4ca21f9da2a1d9290abe1cc08683d401d0e08a7aabd6447b3982","sha512":"386fa224fdbc774a9541c9181b32293a1de7440c1f2516ea43f847c371b0edae019d5b24af80b9a2f0bc1c3e69274b21c30e35a4d346be0ae61caa3e476235e8","ssdeep":"1536:Tt0/Cwwg21Lrb9KhZs4+3WRO/uFnO89uYkXQIv3pW/HM2QFu7F7kE6+qXcw9p+3L:TtqwgMLHNgrFgEmkSCeoh","tlshash":"e5b3098573e7e03286e988ebf0770103e32d5958795d806cb22d9dda3d5b885b637e38","first_seen":"2023-03-12T16:30:31Z","last_seen":"2026-04-05T13:40:43.931887Z","times_seen":1847,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":126,"dns":6,"connect":10,"send":0,"wait":10,"receive":4,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/css/index.38ab758b4a1dae584a62.css","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/css/index.38ab758b4a1dae584a62.css HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: W/\"69bbd489-49b5\"\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nserver: EdgeBot-CUSTOM\r\nexpires: Thu, 26 Mar 2026 01:46:38 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 19 Mar 2026 10:48:41 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400\r\ncontent-length: 7125\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 12848768930299590391\r\neo-cache-status: RefreshHit\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18869,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18869), with no line terminators","md5":"aab1f3ea059e3a83f16ab2975ecb5997","sha1":"6e9885ddf0923f404f57b88dfa56049c2d559c29","sha256":"e2bf44a87c27db77f713c617128a1d4876156a5cf773cb5e707c49d20de355c3","sha512":"9db4980b40831f388ceb678ac4000d5082dd093e4e044ff3d8c534c85abf1c4e638711dd5b4b4a1a41233d28f8cac4baf9a89cf25eb343c544447e535c6ba037","ssdeep":"192:nxZcijdnRDcLnUvpVU/T0fqomPdHA/kq/ANq1VRMQIGmiS28lS/5eka84xr/5T:nsijdNCMp3qtG/RoNqfRHciJAS/g3xtT","tlshash":"fe8208712549343cb67fd69eb4c4618e3c25f127f2260e68b980a178cfc775637a628e","first_seen":"2026-03-23T09:59:23.591859Z","last_seen":"2026-03-30T06:59:22.163662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":851,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/B2C/libs/device.html?deviceId=","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/B2C/libs/device.html?deviceId= HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Mon, 08 Dec 2025 00:37:05 GMT\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\netag: W/\"69361db1-3ba\"\r\ncontent-encoding: gzip\r\ncf-ray: 9e4539621b63568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":954,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (656)","md5":"da348ed5600d807a6cfad06194240779","sha1":"47da2ae97020e1c8458582fe2c57235bba7b4b5c","sha256":"c39a5ce87ea916686e621ccb11e4b73ca57fcc2746fc56a86a51754e1addc8b1","sha512":"5c9adf5e2386ad5d3cec04fc8e24b0f49b4c1a171538590f400a80a180f9190ca6bf269613e04978032e5a09fcb57bca0fefe4212bb15e6154e81904d5647056","ssdeep":"","tlshash":"4e11d00f38415445c2f28559f5ba7719703a78d0b4c689906a4164eb2ce4f4fc96fb8e","first_seen":"2025-12-08T11:29:18.408405Z","last_seen":"2026-04-05T13:40:43.940316Z","times_seen":693,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":77,"dns":34,"connect":1,"send":0,"wait":177,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/aboutMerchant.js?v=19668","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:06.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/aboutMerchant.js?v=19668 HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 19 Mar 2026 10:48:42 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69bbd48a-7c0\"\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nserver: EdgeBot-CUSTOM\r\nexpires: Mon, 30 Mar 2026 12:33:26 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 1017\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:06 GMT\r\nage: 66280\r\neo-log-uuid: 8829461000433936653\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1984,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1890), with no line terminators","md5":"568403915c6cf2c3eecc0a299a35861e","sha1":"bdf3acedc4179c060a0ad0ec73032de39e7c4c0b","sha256":"a1e6867177e1d5a22d21ce39d9af84dfd9464457beb55b923f969f9c66057164","sha512":"4c8bf3dfab872448c88693036e62a98481f8ebc7add84670daab327c3e14142e0a4480d8e251943491346b47a9f88349cc7675c24eefcb85eaa0d858a0e45930","ssdeep":"","tlshash":"d941539eb14bebe205f620822ac56219647360d804b6e4817b569540b47ee4fc25f9cf","first_seen":"2024-12-22T03:03:41.35822Z","last_seen":"2026-04-04T16:58:22.975069Z","times_seen":396,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/system/country?","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/system/country? HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: g5s3pux115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 1\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 10386368604765522334\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14559,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (13540), with no line terminators","md5":"1c5bf9c918e01dfb8c4dd422fe766901","sha1":"76896e2fd1154a6d992ba227174e56ab0cba77c5","sha256":"3bc436dc233f47dfbb248f0e1d8c01b4ab3fc023c41d4e3a410a8232adf4c4ee","sha512":"a6b6fdf3299ed7e35d5f5f68bbc0e4d65c7338c7b931a4a8bb8e45f0a0f49b94de43606eb39289b4d8a7debfc646612f96b01bf93406b62b4c53bcafa598ad05","ssdeep":"96:YjOZwkPVnUSDUx5hxFDHxk5ViPDFthda8fTL6lkD+kavc/o9Md2aWPaCKxm5OGeh:UYNgSHwxwwV51RmS/ZvL","tlshash":"d1526b3e640ddfaefd36ffd9b04f362554362904d2b8240acac05b727b95afd21210a8","first_seen":"2026-03-18T06:53:02.361227Z","last_seen":"2026-04-05T13:40:43.904264Z","times_seen":39,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/AMBS-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/AMBS-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 9532\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 23:27:19 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692cd2d7-253c\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539713be5568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9532,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"1ab5eee58d22e255a61312a1274ae6ad","sha1":"43d25d647e5d42704ecacb89a56d2f634237b14b","sha256":"e424442eae791dea83082cd7c913153810957a8f888504107558a8fd2073d0c9","sha512":"62f8b9d15f993f72d71e0c934388e975c18ec5bd06550688d77115a5c012a09b3cbfbb56d027a0c70a09cf6c74f5dddbd4632b3797856961dea39c655b66004d","ssdeep":"192:nUO5SOrVO9+5ffqYWXPUePuTLYqBodkA6t4tzpz88xmQ4Pn5w:nlrnucePuTU2t4tz188xmQEnO","tlshash":"df12c01808a74491e82e33ff0eb9ff2164a50c72029d66f7a4d6b0ccc5b4954c978edd","first_seen":"2025-12-04T14:34:51.817651Z","last_seen":"2026-03-30T06:59:22.165881Z","times_seen":3,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/IA-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/IA-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 7793\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 11:01:33 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c240d-1e71\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539732d9a568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7793,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"804a0d72b1fb93f472b489f4dd814a3b","sha1":"8ddc74700df0c9e4b7d77c744e8e7403fcb83dcf","sha256":"e2f7f86bc1b910c8852ea5092f70c56570de50571b20dcf803eeef71cda652fb","sha512":"dbb7412d252442aaf6a954e3c999323f98282b2d58cbaea7ebdd578d411e7522d5e0f40881269ae9d26b93c804115e83d994354023132719c91046d64cfbd9b2","ssdeep":"192:TWXAWQdZyaRAwynCDLOJDn8cG7/tAJ3feX/ov:JVynCDLOJDnLG7g3feXQv","tlshash":"c6f1af647bcaeb2ef7cb54346051c340d3d19b583fe2c76ba84e3590a914873c356229","first_seen":"2026-03-23T09:59:23.652808Z","last_seen":"2026-03-30T06:59:22.166489Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/TCG_GAME_ICONS/FC/BN/FC0045.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /TCG_GAME_ICONS/FC/BN/FC0045.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 17814\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 09:55:12 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"69315a80-4596\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e45397e284c568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 170, 8-bit colormap, non-interlaced","md5":"80b9158df0b49c725fe1b16b94dd48c6","sha1":"565936e0296a03947d97acbf8ad01d644b224ed5","sha256":"5701240616afc8e280c5ff5cd2115601fa3699f833444a4fecd369f81a2ebc50","sha512":"87c9c760c8a21492d9f975d64b000844d35245b39e9b8bbae39a2e6ce689ed4ba202ef055fa3e50df76de103f4fae67d334522cdc4d3c6540b02ac1f55257c2d","ssdeep":"384:XVB1GIuH1UKzGu7bRorhiju4AclGd51fDkmGnXg7dLcztK6ynjicGxjWR5R:nLNKZyWTblGZBGcdx3GFWRb","tlshash":"9082d02d7274a7110de50cadbdfb83a90d9bd28d06513b7b15234bfb8448ae8ed4cd52","first_seen":"2025-12-06T20:48:33.87954Z","last_seen":"2026-04-04T16:58:23.118568Z","times_seen":28,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/GCSGAME_gameList?clientType=3\u0026platform=flash%2Chtml5-desktop\u0026channel=kg999bdtf1\u0026merchant=kg999bdtf1\u0026gameType=RNG\u0026vassalage=PG\u0026gameClassify=\u0026gameName=\u0026minBet=\u0026minLineNum=\u0026language=BN\u0026page=1\u0026ext=avif","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/GCSGAME_gameList?clientType=3\u0026platform=flash%2Chtml5-desktop\u0026channel=kg999bdtf1\u0026merchant=kg999bdtf1\u0026gameType=RNG\u0026vassalage=PG\u0026gameClassify=\u0026gameName=\u0026minBet=\u0026minLineNum=\u0026language=BN\u0026page=1\u0026ext=avif HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nLanguage: BN\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: nr9mc38115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: GAMELO3, FREEPLAY3\r\nx-elapsed-time: 502\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 7222164298505709669\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2cb5b593debfe98402e2d75455523149","sha1":"a190bcbceaead662695fee8f2418bb5f202150f9","sha256":"08f0cf617fc185c85e8791c3928537433a0214dcf93699663a1f2a0621abe297","sha512":"2ccdab14006233fb165428dea6a7cf8bca1571d73bccef503695ff29fd9ff7bdae303470071320f942e67098f662443d3d8ff3a1eb9614f2051a700d2b70c156","ssdeep":"1536:c5K+crOOt8guA0cd7PrJEkHv7aYC7JPOsn5FRF1prv5:KB","tlshash":"6d23752cd5596ff5a32283b4219f7fdad18d162b6ccdcb34e7e18e0886f7a384219146","first_seen":"2026-03-30T06:59:22.168379Z","last_seen":"2026-03-30T06:59:22.168379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":785,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/WPSCORE_checkIfAppDomain?rootDomain=kg999.net","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/WPSCORE_checkIfAppDomain?rootDomain=kg999.net HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kg999.net/\r\nMerchant: kg999bdtf1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nx-app-trace-id: uncsdim115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 1\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncontent-length: 30\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 14410825141318782003\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3e87820a66f1829249ddd1a29f83c331","sha1":"d286adff496089234f911f647d33594b6c04da46","sha256":"6b73520ba2d5379eb9e88ea386fb92e3ac95f622eb8b719b39632bb5fafc2120","sha512":"5275dfc6d5eec79fdcd7054104224e2747bdfbe451b1779e063fdc104319f316c1d3e0e9e0aa3e979839b5339579b40ea7a60998bb557d9d89169c3e9db614b6","ssdeep":"","tlshash":"5b800002200008fbc00223002a382f0038ac00aba000a088e00c8088bea2802208388b","first_seen":"2025-08-21T08:43:15.406553Z","last_seen":"2026-04-05T13:13:38.960839Z","times_seen":1006,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/manifest/mc_shanshan.7fda8bd9.css","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/mc_shanshan.7fda8bd9.css HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"69b9122e-e6cf3\"\r\nexpires: Tue, 31 Mar 2026 06:58:10 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Tue, 17 Mar 2026 08:34:54 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 4917297716448290148\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":945395,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0b39ab316e978c53cb8a704226fe0813","sha1":"6a6f32899a8db9664ae32080d86b5687eb0de9b2","sha256":"933f9ccbd9274c6623118d0c0ecc36d50cf47cdef4e8b2f30b947baa7b14ca14","sha512":"2f02b9ca1fb33f0114a30e5083f32e8f3d8c7b1031bbf162291ad281c4226a9b437a77c02edc7d3a7751004aaa652f2044941b973be014a4dd033b486dba3992","ssdeep":"12288:o9UkAVi9gHYaKlepqOuGYF/EzEk4V0g4gCAPta:o9UXVi9gHYaKlepkZczEk5g4gXPA","tlshash":"b615e8255f12213df16ed83e76a4f6cd2e28c413c6572e7db246f1adc3ea2b119b1206","first_seen":"2026-03-18T09:30:16.176814Z","last_seen":"2026-04-01T20:19:15.031633Z","times_seen":68,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/HS-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/HS-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 6952\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 09:09:09 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c09b5-1b28\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539715bfb568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6952,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"54c600ecf22c5bac7fc528fc319e5041","sha1":"6f740b89fcc9e9adb1c4095f673549b5238d14a0","sha256":"87374fdce17f1d67d906d3f90bc2f87f96a12a9c9915042d5d9868b473e5cc8f","sha512":"bd62c752927e61917670481392eabb37198fdf4c2dcb5d91a71102ca15f962631334b861373af5d77fa470eb2f866b7f0216220532be6686eef76573c4e94908","ssdeep":"96:hCxwpg0W13HiklKGJ1+vlwKgu5N1gFGpEKuB2+S3kr2Px7S9X+nFggnnbEl:Qxwpg93Yq1+vauFE2+s1RF/b4","tlshash":"c1e19fc8ea423dc2f73f21fb23249da040ae2c811a4f75d17225f6f71615889c8152c5","first_seen":"2025-12-21T01:35:41.206542Z","last_seen":"2026-04-03T09:52:10.68918Z","times_seen":5,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/PT-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/PT-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 9568\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 04:42:30 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692d1cb6-2560\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539718c35568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9568,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"58650251eb4cc912cb9b2d90d5454e7f","sha1":"68084e5b3e7d1b7b2f2ade9c55d5795eb5850012","sha256":"4b6ab13ba136f9a0820c852a2e58d32f3f39b7afcd372ea35ef320536c3fa82d","sha512":"dafde0b55614a1900465781cbd043993d1f3b181b3c2ec921e0e16e11bb59fc3d98a784611076939cf13a9a8e49056df34c868b53b87687f6f8b58a8bd2c975a","ssdeep":"192:9kACFGVwMBR0vtoGPnfE0Ji5CQRgLkanKPqq4ZCKwMnCVgESkb:qnkwMYvHPfE0goNPKPqq4ZCKwOHEJb","tlshash":"ca129d48d671bab2cc0a05f91b62c7b5c2598afc1cd00aa3e57365d09f85442ebe0fe3","first_seen":"2025-12-04T14:34:51.602702Z","last_seen":"2026-03-30T06:59:22.171507Z","times_seen":5,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/5G-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/5G-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 5510\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 05:24:49 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bd521-1586\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ce5b568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5510,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"8d1e3da6bc282bf66045223e5d30ed16","sha1":"ef75baf4e2af8a02a9ec34edeb2806a7702994ff","sha256":"239e293a922776bafc7303300c5323ca0f946f0f3edfbe0bc2782e37e98b8157","sha512":"56246ce9ed85f982b576ac3391bdf2356a52c228e2553a24e088817e8ba2822f74e2a3d156c4a791f41ad320f0d8a5565dc85353f7ea7e0c02d4d82bef06f4b9","ssdeep":"96:JAKgWME1f/xR7yeDa+wUM/6ApKvNrDjlcDHXdkaexs2w8XU7RKcvDexbWNSYK:CQ3X7yrUMirdsHXdMlk7RfvM","tlshash":"74b16bd9b43e4d00d8356a771338e21ac172cdef9b44b034a1a9bc841d67c8705e9832","first_seen":"2025-12-01T08:14:06.037055Z","last_seen":"2026-04-04T16:58:22.945763Z","times_seen":79,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/SV3-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/SV3-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 15357\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 15:52:59 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"69305cdb-3bfd\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539741ed7568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15357,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"fcbd94feb350909d4b3cc3603c7a0144","sha1":"9fd81713c715abec6d946a654d26fba2d345608b","sha256":"6ba34d1462924cc4cfb1851a2210a51810a201936dbbf0be16afce45b473fae1","sha512":"89c5eaed5b27339086c19612ffa292ec63e61c5e60c6e24c3442b486c9f343e86d6b81c4b07b6b338c1f8615943f697a28ba1e38cca638f6a9c2dbe047bf841a","ssdeep":"384:dKq6efWaW81SINkZ16TsWSEcyLi9P7QNOxR7+gw0yVBI44:XnWwBOyOZ8NGVzVGM","tlshash":"dd62d08f6903faaacc2a24bfebaa71157e5203435a2757662065f0b16e5108c8f11ddc","first_seen":"2025-12-04T17:41:40.194848Z","last_seen":"2026-04-04T16:58:23.058226Z","times_seen":59,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766146595560_2.%E6%96%B0%E4%BC%9A%E5%91%98%E9%A6%96%E6%AC%A1%E5%AD%98%E6%AC%BE%E5%8F%AF%E8%8E%B7%E5%BE%97%E9%AB%98%E8%BE%BE%20%E0%A7%B31,999%20%E7%9A%84%E5%A5%96%E9%87%91%E3%80%82.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766146595560_2.%E6%96%B0%E4%BC%9A%E5%91%98%E9%A6%96%E6%AC%A1%E5%AD%98%E6%AC%BE%E5%8F%AF%E8%8E%B7%E5%BE%97%E9%AB%98%E8%BE%BE%20%E0%A7%B31,999%20%E7%9A%84%E5%A5%96%E9%87%91%E3%80%82.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 109227\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 12:16:42 GMT\r\netag: \"6945422a-1aaab\"\r\nexpires: Wed, 01 Apr 2026 05:07:37 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976a964568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109227,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"456fb54182d1494b87a4c817aff35f0a","sha1":"e703859af9596301c4af00367540ee481205df80","sha256":"fe1eed0e8b7e92a94c6bdf621f8a851b318b0bc3a18c85465b9ede98091b5344","sha512":"731a6b56ad176ae8335748957b230b75a4a6ba9d58910bbe18ff13e6b0e0e52f36d4d8be96dbdb73c3fecb38a0e0b5111c46189c3a1c494b27a4ca514683b30b","ssdeep":"3072:Gb5HXrvOYxXBtTPee/Sl5yALCFJD+zmvB8puxDSTR7v8W:2RrvjxxtTPeKgNe+zsB8pQSTx","tlshash":"68b312182f2f0999d379273601851c7df2ba10be741a787636773a3816f27a1be11e2d","first_seen":"2026-03-23T09:59:23.406074Z","last_seen":"2026-03-30T06:59:22.173162Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/GCSGAME_getRankList?gameCategory=ALL\u0026language=BN\u0026limitNum=50\u0026ext=avif","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/GCSGAME_getRankList?gameCategory=ALL\u0026language=BN\u0026limitNum=50\u0026ext=avif HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nLanguage: BN\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: dirkxyt115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: FREEPLAY3, COMM3\r\nx-elapsed-time: 3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\neo-log-uuid: 7090040028736428373\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9932,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2692ba0fceb0f869b25b56c4bde065bc","sha1":"5fa6fdd19edf868fd4d6ae43f5c1559fd8a4a0dc","sha256":"5668be06bae72de6da53ed70604fa3c29b43510716e3f231deab67416b1bcb06","sha512":"87774d9c94aa6b44a8026c56e72c24fe50de427a7be192b186578a8b78e3b0b6126837d8dfda871706a718a719c293e0f4528e5a5663e60ad5de952e2628aa0f","ssdeep":"192:7vybvlvivCvBvp/v0LFXvtvTvjfvJGvlvU7v7vyOVp8gv2v2dv+YvbvpvCmv/:76bdaqZR/MLtlbbfRGN87T6OVp8geOd7","tlshash":"8522ae44a1da6fdb52a536907fcebcdca9edb64b42c58f4d77953e280ccc67ea811080","first_seen":"2026-03-30T06:59:22.173902Z","last_seen":"2026-03-30T06:59:22.173902Z","times_seen":1,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/FC-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/FC-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 7386\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 11:36:28 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c2c3c-1cda\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539712bc9568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"2c9130d34a76d363ba0c272f4dee2b89","sha1":"802bdd7f7e5688e75f28f86eeeffe60ea5e0f395","sha256":"8ef9eb704325f071c548835d48bb08fadc18177145a6ac7f4bd11a925a38ae30","sha512":"92a8ea7ff7aae17a331aa5cc7691dfd6173d7d0931cfae5ece330a7c00f8724e777fbcd1eb9e6b09a9d2d40843adc8407296061183fd733e6658793d304fbf8d","ssdeep":"192:urVXj5LivCMx3xO+AY7fOOUGM+dOUtEcBM:urVXjdiaMxzfOOUGoUC","tlshash":"62e17cc9ba7918efeb9a13bda5045a7ad42cb44fa022642406493133a9f955fcc7d4c2","first_seen":"2025-11-30T22:26:42.684141Z","last_seen":"2026-04-04T16:58:22.970018Z","times_seen":147,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766147014211_6.%E5%BA%94%E7%94%A8%E4%B8%8B%E8%BD%BD%E5%A5%96%E5%8A%B1%2059%20%E5%A1%94%E5%8D%A1.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766147014211_6.%E5%BA%94%E7%94%A8%E4%B8%8B%E8%BD%BD%E5%A5%96%E5%8A%B1%2059%20%E5%A1%94%E5%8D%A1.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 107677\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 12:23:39 GMT\r\netag: \"694543cb-1a49d\"\r\nexpires: Sat, 04 Apr 2026 05:59:28 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976b96b568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107677,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e28eccca8dbf42a7ab7614a4d789b31c","sha1":"3a645b2a8a5a9f5cb1a3c3a8caf19ad051ef5770","sha256":"436663e8508a9e04f25ccdb14a77d8652679b168ca196682759fefad2314f4e1","sha512":"94a4451e946b6042328a4383ed0e584061cbecedd80f7a080f3e21207de6ea800c414a0a71f0dabe143e81ad2fc529d0e9d21aab28b76dd14400cbb5867b8d4d","ssdeep":"3072:uOzHMx0hLIB2Gx8jHWTdDVKsur37rhnKtMPU34Hovr:uJynHWTlVK7PRNIvr","tlshash":"91b302ebc00dd4d3548d39e7c7e221c568b6049d56b118bbfe2cfb1f259e6290a2b1b0","first_seen":"2026-03-23T09:59:23.456244Z","last_seen":"2026-03-30T06:59:22.181807Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/lgw/games/popular?count=20\u0026prizeMode=SEA\u0026device=WEB\u0026language=BN","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /lgw/games/popular?count=20\u0026prizeMode=SEA\u0026device=WEB\u0026language=BN HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nLanguage: BN\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 8979109015996333640\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14210,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"03e4dca7db9be22fd42ffd0a47678a21","sha1":"cdd6d216c1f0443e5e6bc13b16da195224a812a3","sha256":"58849ad9c8d1398274b0782870ce6b523ea4c92a6f9dc7922083fe129b6b0196","sha512":"c7fd2d40487401843ed96f7cf738abc77b4ae605577134db7f3aab071b3668cff041e13fdc04fbe7454a6c30d503edb27d736bc596f8beb30e0685ebddbcc1e5","ssdeep":"192:hXjnB1lLXQpo/ci0VXfPuJFvYb1i8agi+6+jB5Z8Z5HUet5GCyBBRBQ:Hx7gDaq54","tlshash":"a552211f8a0904bdc9a029c451cebd84c55c32bf29d8abe5c19aad940fca3af75350a7","first_seen":"2026-03-30T06:59:22.183227Z","last_seen":"2026-03-30T06:59:22.183227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/JK-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/JK-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 19489\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 10:54:23 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"69340b5f-4c21\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539717c16568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19489,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"a18cdb43f78e0da9f5b70e417d546ef4","sha1":"701e897fc5d06317388c9058a469172824a67ba8","sha256":"9cb664f17c040c3e90b52dce6c8bee1751010f372077d9e064d87c487ea80757","sha512":"5694f005c224701cd201a4f1caf4c7545abea669d555421dc4cfd86a942d7ecb917216ce6b5525647a6849834c6c8a3c391055f675e3365ae4d8f573bcf42c7e","ssdeep":"384:pqvLfR42mVx/gkbA+E0+XYg7yU3ch0dnWx7vFo2FKh0H9B:ALfRaxgkbAfvu4ch0dWxfT","tlshash":"a592d0f6b0d04aa4fab1647d42b50867cc2ac138ab8a8dd07e57609c34f779c36de684","first_seen":"2025-12-07T15:50:47.701631Z","last_seen":"2026-04-04T16:58:22.875797Z","times_seen":57,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766147289358_16.%E8%80%81%E8%99%8E%E6%9C%BA%E6%95%91%E6%B5%8E%E5%9F%BA%E9%87%91.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766147289358_16.%E8%80%81%E8%99%8E%E6%9C%BA%E6%95%91%E6%B5%8E%E5%9F%BA%E9%87%91.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 96572\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 12:28:15 GMT\r\netag: \"694544df-1793c\"\r\nexpires: Thu, 02 Apr 2026 04:41:25 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976c990568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96572,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5b4e901b847f6bd79a2e53e19278acac","sha1":"d686df657f7540d55bbe8ffe431ce3dc483d3265","sha256":"dfe9d95aafbc94afc468aa2db1d3a5e4d7298307eedaa23d73816e35e134cfcb","sha512":"a329e9481a0cdfbc98d0b9deede360ebc84d4202078d05d45aee69acd85d5524a29ebc4429357400893f53caa39249a52b69e030b91b8225ec77465df7ac1974","ssdeep":"1536:Q1DAOqAKXVkMtX0qn5naAQUScK1vFbL5B99X6BQTpGipvYBmhbmKvU:NVAKXVd2qn5nGUpK1db9B996QFGisgbK","tlshash":"619312a4934b340770408ced8d0335845ca75ba225ecadfff7a0a44d988eb9f96f7552","first_seen":"2026-03-23T09:59:23.531508Z","last_seen":"2026-03-30T06:59:22.186191Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/TCG_GAME_ICONS/BNG/EN/BNG007.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /TCG_GAME_ICONS/BNG/EN/BNG007.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:13 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 15253\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 09:31:12 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"69300360-3b95\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9e45397e3858568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15253,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"cb0ab0c68a1b7b9944a9feaf7094499b","sha1":"a5f4203c986ff8fc534e8f3f45a971c3e3f36c3b","sha256":"0ed0c8d01078d7ded1e941cb308c3cc681f941dcb991e37f0a7785dd7dd10c06","sha512":"7248c78030d40e66aabf4738ae420cd4c6625b44de921ccf88633a7303123875ddaa796382d86a2b6be776def265c7f667f6d50cbf5e6f4142327c8a516cb383","ssdeep":"384:UPl/W06mcmEjETmA/esVyh8IFtEN17WZgRa:x0uwD/q8ILEN16Oa","tlshash":"ee62c004873e9845f0042ff3e4a7497ddad5e35a13c47a9d8ddf2788a420998f782e54","first_seen":"2026-03-30T06:59:22.188409Z","last_seen":"2026-03-30T06:59:22.188409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026co=aHR0cHM6Ly93d3cua2c5OTkubmV0OjQ0Mw..\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ato725tviiul","date":"2026-03-30T06:58:15.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 18:14:15 GMT\r\nexpires: Sun, 28 Mar 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 132240\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-05T13:46:35.773788Z","times_seen":716719,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":64,"dns":0,"connect":22,"send":0,"wait":46,"receive":11,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/common/v.1.0.1/manifest/lib.core.min.c9934762.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /common/v.1.0.1/manifest/lib.core.min.c9934762.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 05 Mar 2026 03:56:44 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69a8fefc-a0c4a\"\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nexpires: Sun, 29 Mar 2026 20:04:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 178584\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 15064051050518550789\r\neo-cache-status: RefreshHit\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":658506,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (58057)","md5":"e1a01dd99c771ffd210ea6ceb50d4bd8","sha1":"c0f95605d076dd18c198f5413a1fafd07b53a462","sha256":"2241bf2d2791c67718f1e1b68f74347402c23e237e55c1065ba9c08800fc01a5","sha512":"d50e4f236a2c8145a164678574732a3d48c973c647d08e3b63d022be9c2d4e4daeff3154d521f10bd99fe9ca5a63e05a6e55563ce582031f3528433ace287dd1","ssdeep":"6144:vlTERvtO7hrpJyfa0pwgrzOuL7c5aCm728C5/yb37ti+VTm7ETiwfXG9+:vFktO7dpku8728C5aj7TLT1/","tlshash":"9fe43a8db201746242eb61b5003f1a0ba237552aa40a84acf57ccdde6e7cd4d61bbf7d","first_seen":"2026-03-04T21:43:56.598328Z","last_seen":"2026-04-05T13:40:43.925696Z","times_seen":143,"resource_available":true,"data":null}},"time_used":496,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":492,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/img/sports-banner.5e1ecae.png","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/img/sports-banner.5e1ecae.png HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/res/css/index.38ab758b4a1dae584a62.css\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"69bbd48a-dcb8\"\r\nserver: EdgeBot-CUSTOM\r\nexpires: Tue, 31 Mar 2026 06:58:09 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 19 Mar 2026 10:48:42 GMT\r\ncache-control: public, max-age=86400\r\ncontent-length: 56504\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 7937959371339742703\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56504,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 580 x 220, 8-bit colormap, non-interlaced","md5":"5e1ecae5e629ff8e7a757a2b14198c53","sha1":"92101f6cd32fd12ffd7b6eac98f79ae413fe8ba1","sha256":"a52f4202a538eb9c34f4b8a655bfb534d791cefef4f37f3886821d1221368742","sha512":"9b47b21b66ea0a2b4062584c5d3e3c5617dc6eddfff466824313af5d0ddf07509a66126a0f58e3eddec015819ee7153008f7e2bee53987bd629edf643c7b9349","ssdeep":"1536:ceVN9rquL/z5RdNSkbRSfd369xr3wUBcvrr:RxFz5rNzRSfR6wUGrr","tlshash":"e3430220186b81e6b93f5156c11159f893f37e66e09c933c4d39cbadd0bf2c9abd9441","first_seen":"2024-12-30T10:25:05.205939Z","last_seen":"2026-03-30T06:59:22.192915Z","times_seen":4,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":430,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/YL-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/YL-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 3962\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 03:35:06 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bbb6a-f7a\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539728cff568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3962,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"2df06fb942d82b008e6e0de7181c8d6a","sha1":"a9ab0b2e358863577dc5d22a7bee9445e62ff64a","sha256":"73d4f8a88251c68f9781e61590c3f1e91b3af9275870333691fe7ac848988985","sha512":"ec5d485aa68765ac0f2a96d79e496923ee8bc54bd4a3f1504ead3361483c7ef25be82c42551a7dd98f14645d5016e0a4106ef04d2d9077cfae69999d5a59a31a","ssdeep":"","tlshash":"fd816c4a3fcfb5c8d525e8b906c306800e4917e51baa00277fd17ab3971d688a44b10a","first_seen":"2025-12-04T14:34:51.825563Z","last_seen":"2026-03-30T06:59:22.194426Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/GCSGAME_hotGamesV2?merchantCode=kg999bdtf1\u0026isPlatform=2\u0026vassalage=\u0026platform=flash%2Chtml5-desktop\u0026language=BN\u0026ext=avif","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/GCSGAME_hotGamesV2?merchantCode=kg999bdtf1\u0026isPlatform=2\u0026vassalage=\u0026platform=flash%2Chtml5-desktop\u0026language=BN\u0026ext=avif HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nLanguage: BN\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: bbvftwr115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: GAMELOHOT3, FREEPLAY3\r\nx-elapsed-time: 388\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 12854162640759833405\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40930,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (39690), with no line terminators","md5":"6d53fb9f4cba70b0d62502e359088dad","sha1":"d2c79a172a1140bf91fffd7f748c209bd389516e","sha256":"6bac645483fe6abfa5183150677b947c32a34a18a846b10bcdc516bdc7839e7d","sha512":"236710ba8f56d360d7299f5abed0cb289bd5898d8788d7b853924a2470ec8f393ff7a5b05e36d707f4682ec4ae692afeb2210754795a1ad9378e59727e2cf8fb","ssdeep":"384:9sFg8n3mQsCOcH2BZ8VQ5n7kbwOA7gyh2v7k64zGu5TSLj2jsi+pwQgrXwCgnv2h:RHqKyTWvh2T94iu+djlbdIzJD5","tlshash":"9f03f549e2186cca17790af431cffee9e4bc099f85c4ceb466949f1509fcb3c621a658","first_seen":"2026-03-30T06:59:22.196133Z","last_seen":"2026-03-30T06:59:22.196133Z","times_seen":1,"resource_available":false,"data":null}},"time_used":904,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":903,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/manifest/mc-properties.21cf1498.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/mc-properties.21cf1498.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"69b91230-2d4df5\"\r\nexpires: Tue, 31 Mar 2026 06:58:09 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Tue, 17 Mar 2026 08:34:56 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 3619458625771616983\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2969077,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53936), with no line terminators","md5":"f28b2ff5541ea60baeb9fd404288c651","sha1":"4a2761b8516230ec2906d45b6d87829decb54d8a","sha256":"c704a5d9bfd842542a224a5ad1d29cfdd376e7397e3e849b43158d37aa7c44cb","sha512":"3912756662a4bdca8c9b14ac56b4e12a3b1a8d45b6c4bc9e744711f91856a65eef1912bf7d7c341884757359b947abdba55e7773241b213059705cd334c28ea5","ssdeep":"12288:z6/sPs7w0NpmKEB6EE4WHWBCrugngBWMCfX6hCwBCz+bWyP8Qyam7z2JG+X/5MSU:z68R6RHWBC3j","tlshash":"6c65f7580e5fabb184eeb643708e393080a9be23d675d5c1de2d4eec19c8d7c8246776","first_seen":"2026-03-30T06:59:22.197444Z","last_seen":"2026-03-30T06:59:22.197444Z","times_seen":1,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/dev-images/GCS_VENDOR_EVENT_IMAGE_ICON/8206.webp?t=1772078781009","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /dev-images/GCS_VENDOR_EVENT_IMAGE_ICON/8206.webp?t=1772078781009 HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5120\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Thu, 26 Feb 2026 04:06:20 GMT\r\netag: \"699fc6bc-1400\"\r\nexpires: Sat, 04 Apr 2026 16:01:09 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 140221\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539702a68568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5120,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"542ade1eacaf76a8e175a2d21c1445bc","sha1":"927bda154c55d4f17ab0ec0812de971415de232e","sha256":"c4a517d8554d54593627813e5b241734f1e87f020f4f5185a6a6879c1317a869","sha512":"6064fa2a881f84a527f5dd897eae3a55c9eaf67155336a0ea83e5930dc6b0cf737c37b43d1394c0b8c5c052175d4d411ea0ccde76681bda6c551837e8a91a09a","ssdeep":"96:u7xViyCr88z9tm9zWC1htdmoArgLk6nDkQTUTjSHrIzJseHk7k8:u7x1bSexrtd+8Q6nDkQgjrzJssB8","tlshash":"13b19e642d543de8936df31bee7813c6950b170ab8967fc8391f198222ecb902be8465","first_seen":"2025-12-13T06:22:54.435297Z","last_seen":"2026-03-31T15:35:44.631037Z","times_seen":284,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/5G-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/5G-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 5510\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 05:03:26 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bd01e-1586\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539726cdf568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5510,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"6d50b7b83525aaef4c965725ddbc5765","sha1":"565208f50f5edb9035af859b99725a8ff8f5cdf9","sha256":"96cbe4e716e4ccea6fc0591aeef84c028bf414bcd54b295085cbda64d0c4349c","sha512":"af1ed20688b4e630f0c74c62e9dcf6c89654186459e2f623c14fc271e6852a4bacdc13c7afacf263fa5f8b35a6c691796e1d40f2833b536072c6179db98fec4a","ssdeep":"96:DD+77pSxYZelYq9RHigwvk+z7dTmwGm73ekcQp7KAxi47:DD+7Ax6eaq9RHsvkSJpRcQpDxiE","tlshash":"e9b1af2822d60a32c49fcd70b0c47c9d55d15ad6276728c93fc4b57a5c671f6e743234","first_seen":"2025-12-04T14:34:51.778525Z","last_seen":"2026-03-30T06:59:22.199036Z","times_seen":3,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/L22-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/L22-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 32491\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Dec 2025 23:49:24 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"69376404-7eeb\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539737de9568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32491,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"f7e63ad6f944467fbbd61f739b260cad","sha1":"9d9e4ef4651ab5abc7ffd2c2b14f9d0668ff7d9c","sha256":"045b5c6f8b3a2186619764bf8c58f6be3596507d2880987f4b85748387f03322","sha512":"462e05739a3e810b705072540ac5a55a286c1ee9df9fcd335ea8e85b15e7ef43345cbf413a2389585dcc19aa8d396aed382ef34384d606a057a3f1b30ca8537b","ssdeep":"768:YH6WL5xxUFDoW23nQapOvCY7Bcf2yVOhEcbQxBWFtI/vDIw:/WLVUFDoW23nQ9z9cOpnb6WcMw","tlshash":"31e2d07741843f7389962ce932b60936f44d8ab039044a71769cc78fb69b1061a2fa9d","first_seen":"2025-12-09T16:29:30.96808Z","last_seen":"2026-04-03T20:09:42.932377Z","times_seen":83,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/KA-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/KA-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 12442\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 19:15:15 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692de943-309a\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539728cfd568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12442,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"c4889aa9bce14bfbd790405f06dbd959","sha1":"6abc35af2517c71811d72594529f7cb575e14f87","sha256":"dcd28a7d2719aead906f71c14c675dd0dec3ccdd2c987a93a45f33cabcff77eb","sha512":"356939126ae5dd014746ec76e77ee170c1b3f54d985a34a716497832562474568d253819191f3822cd566cf8b126253d26440406cd617c2e15feed318cb171d9","ssdeep":"192:R5V/8KsdME0a127uU6QfixI96YDC3EEwBAUe1B/v5PJ1VlNLaHHHRdZa3JWBlofU:/x8g6HQfi9YDdfBAp5h19OHH1a3JW2U","tlshash":"6a42c0e7df1f7db5c8cb423f0efe90953808785f8409a7afa2903957b89c800a105a5d","first_seen":"2025-12-04T14:34:51.870651Z","last_seen":"2026-03-30T06:59:22.202213Z","times_seen":4,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1769519708832_4.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1769519708832_4.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 194153\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Tue, 27 Jan 2026 13:15:14 GMT\r\netag: \"6978ba62-2f669\"\r\nexpires: Tue, 31 Mar 2026 06:48:23 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 518989\r\ncf-cache-status: HIT\r\ncf-ray: 9e45397c8eec568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":194153,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 615 x 823, 8-bit colormap, non-interlaced","md5":"e74be712d91d41aaf93407e7a8ef7512","sha1":"f32574c49de394e801b05cb30cb838ecae2a4312","sha256":"3cee8bc6d4a5e0311aa16902e418427c499b48a2c3c8b23987891c2992a15c50","sha512":"58d83c15ed45ba9d5201ff5ae5d6d069870e949d4fb2c22853aceabc6bcd3a7aff7ee4c2169766fd61aa57d9db515bb05f194d0b487fb48ab6ee0fad996a13f6","ssdeep":"3072:2B4btUgFt1TpK4NvHiQA0jei4gi03Z4JvCYU8pto+3pRG/yQasa68JYFGxwbqm0a:20iqvKDQAiaCUq/8pto+ZQysgxwAIgPK","tlshash":"021423de8440d98c6defd7ec0087614ca34a5af1e238512cfa5b5912d77198f28cafda","first_seen":"2026-03-23T09:59:23.580199Z","last_seen":"2026-03-30T06:59:22.203145Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026co=aHR0cHM6Ly93d3cua2c5OTkubmV0OjQ0Mw..\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ato725tviiul","date":"2026-03-30T06:58:15.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42575\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 30 Mar 2026 05:56:15 GMT\r\nexpires: Tue, 30 Mar 2027 05:56:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 23 Mar 2026 04:01:54 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 3720\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83366,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"24ab119daca047e256b1ef36d6a0ec02","sha1":"4bd663653b55f8448c6c58c02b28851c41f64a4c","sha256":"952367c39542f1f7a7444b1d38c94fb932299aa63315ba204e71448695bd11c2","sha512":"97bea09c2fecf0111048194cb47b59d35968bcff1a34877bfe7344b157461ca1d84fa7119a1c7cac7a85c709a9e2289338cf8f26a76fe10d523dffd3c952742b","ssdeep":"1536:h7Rpgh9C9ToL9gTNfWNfK4RxrDldthXwW5l1Dx7:h7ArC9ULiTYNC4RhLX1","tlshash":"27838e7338913a1afc278b616196bdfdf21cc923e5515bfaa5497a20c3cb0978213747","first_seen":"2026-03-26T03:15:39.037579Z","last_seen":"2026-04-05T12:53:22.593567Z","times_seen":10407,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/img/jackpot-bg.905d95c.png","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/img/jackpot-bg.905d95c.png HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/res/css/app.6528ba341614bb6707dc.css\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"69bbd48a-13a8a\"\r\nserver: EdgeBot-CUSTOM\r\nexpires: Tue, 31 Mar 2026 06:58:09 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 19 Mar 2026 10:48:42 GMT\r\ncache-control: public, max-age=86400\r\ncontent-length: 80522\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 9445672567890462241\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80522,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 438, 8-bit colormap, non-interlaced","md5":"905d95c0214d2547e9b1537cdefa0092","sha1":"663c6260e92aa55b97df039a01515ad4a19eafd3","sha256":"3bfcc35fac221888fa65d9c4851ee4797ba4dbd2b84812ee8936fd4a287cda0b","sha512":"01185f2420da00c3936e4f495e9c8c507bffeb2b6de9eb668a14df63a91516b477a344a77ad11bc00806a17aa8a31c68d68d830d94bf366a3df74101bc6e81bb","ssdeep":"1536:+bC2W59+JIBKomKgRcZF1E4O7RkgEVvRmvjTLyRHMdoa:cW9/mN41E4GevRmvjTLxoa","tlshash":"ae7312e97603e79fab4ab3d31e86ce9c128238625d903ccdc05171980368df78c575b1","first_seen":"2024-12-30T10:25:05.2025Z","last_seen":"2026-03-30T06:59:22.204519Z","times_seen":4,"resource_available":false,"data":null}},"time_used":961,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":622,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/FS-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/FS-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 6152\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 06:48:40 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692be8c8-1808\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539714bef568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6152,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"6543d44b872f988fcba46dfe9bf7dd69","sha1":"f097c6412af60174d759c3aee7f598168111efb8","sha256":"aafa1ae602bdd66f4e3ee13e9e51309ff497092fa1ed18913ca50b7f4aa3c443","sha512":"57e579eb074e723a7578328d2c9cc0d2c02ae1cff04a836c12f2adf33105c3ce984dfa5062a0cf8daecbb41d4169813519cf8e4673d1fd6c3e2fb85dc719deed","ssdeep":"96:RXQl981GGcmnl1nlWdeWJ/TMi9P28IREFKwI4Ted3HsaBEFm2I+O1Pq4H:xQE111lWdtWcP29E0wBTUpEF9lOt","tlshash":"b0c18cf9a11a8cc4d2e572b9e90c459a0a12dbbecd0461c0c7d38b1763040722fa855a","first_seen":"2025-12-07T11:07:16.442691Z","last_seen":"2026-03-30T06:59:22.205409Z","times_seen":4,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/BTG-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/BTG-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 11211\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 09:19:31 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692d5da3-2bcb\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539725cd2568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11211,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"5dd7e0cef8809c93afe5971aebcb4f24","sha1":"fe9654a4f8eabc3e53105d033ce7b5d4b7e46744","sha256":"d166caff12746337f3422f842f11d7b464d6bbd5d505fa766393438bbf7f722d","sha512":"5faa3d4898de5a4613ecbce856c8bd75aaeb5aa8007fd640e0095c0f3d4e24460b0e44db99c2960396deab0f4d9e28d84e4523ee371d4d28a3dcba8d119f4472","ssdeep":"192:9kNBsb0Qtc4u9tiyJFBjGFfHT7VEUDm4eutN50tChts8tcwNScfMN:9kNB+0QtkiyJ2dXHVTKC3IcfMN","tlshash":"b632d13a650e6e98fe950bb1dcf61d8eabe290a9d7d4c088d7816c2c30339943349810","first_seen":"2025-12-01T17:59:39.954807Z","last_seen":"2026-04-04T16:58:22.900575Z","times_seen":83,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/FB-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/FB-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 4709\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 04:23:21 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bc6b9-1265\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539732da4568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"29ca5d1c0e6b97d8f65f7d568c08bbb6","sha1":"f89f5e2236e2360553b54f449e4c9fcf47d02604","sha256":"2aa1b98f65f192b2b7a13baebfdbc845dee5cead655eea8cc19724d856f8b9c5","sha512":"e14645e826f51466ae422e8a3d356719d3046b471fc4751a010c975032b5d8c530c91c195c7fc79a911929d6baa51751e1957792dd8137d30941b2c5181c99af","ssdeep":"96:7TR0CoSACz0HeZogygdtNL7Pl4VaBNX7DhrHyLSMTjrXRm:x0wfz0+ZofstNLJXrNSFTfXRm","tlshash":"d0a18d8917e4e06ec9f5973680819734f7b35a1ee34080ae1cae627e3da064588dfcf1","first_seen":"2025-12-07T11:07:16.284276Z","last_seen":"2026-03-30T06:59:22.20598Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/MG-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/MG-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 13930\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 12:27:48 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692edb44-366a\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539739e14568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13930,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"478422baa1f078c7b661ada335f34195","sha1":"e94ce1796ed556f5c99bf55c6877450cecb19e0e","sha256":"06b738e734dd8d97a3358f9b8445aeeff7dfeac3527d84bff97e3e63ab7f1bfa","sha512":"e0f718b1bd9b9bd4e1b9bc1d81a73b99bb87f5e1aa854c1e36adf2a74f5ea2b8d165f78e0a2773e86bd89c1b44aea81a2937da6f31539f18c993d390c608f707","ssdeep":"384:5wEvv5INRoDK3Fs1/dmSrAYrCMJyp01W9:5rX5IwkFs1prAYM0W","tlshash":"6e52b0e2488d623bef91c27ef12917696ef756b738f35a32491c0472a44063f5460747","first_seen":"2025-12-03T13:25:52.512438Z","last_seen":"2026-04-04T16:58:23.013567Z","times_seen":115,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/common/v.1.0.1/lib.js?mc_t=shanshan\u0026ac_t=shanshan\u0026version=v.1.0.1\u0026ac_v=1.0.1\u0026mc_v=1.0.1","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:07.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /common/v.1.0.1/lib.js?mc_t=shanshan\u0026ac_t=shanshan\u0026version=v.1.0.1\u0026ac_v=1.0.1\u0026mc_v=1.0.1 HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"69a8fefa-1956\"\r\nexpires: Tue, 31 Mar 2026 06:58:07 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 05 Mar 2026 03:56:42 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:07 GMT\r\neo-log-uuid: 5073089173056362860\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6486,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6484), with no line terminators","md5":"3aad2612dfcd43b8dfed1ca072aa5c21","sha1":"d3d97c5ae4454416d627ad3e9c5ed7856085b981","sha256":"8da0cbe25140dff92f08b7d1ecebd3da8c2f47c9d414dba6cc5bdcb4f7006de3","sha512":"206f426ea79f4ae420686a5a40e2ecf9ccabf1b6970a125ddc66ccb65e584c089622163fdc4ef94054734cd0869a2d1090fb66980418de0b23887aa0805d229f","ssdeep":"96:fYr5C14peqd/VyZ2N+dE+sf14D55gBmBEZQRZlgPhanvxiKLKH6aDVAG0:S5C1G/Vy8Id5n7gBmMQ/nJiGWVAp","tlshash":"1dd1504d7525f494a2c7a1a4c27f5c0fad37246e2829c034f5c1e9e2ad78e4d812bf5a","first_seen":"2025-06-14T14:10:40.274801Z","last_seen":"2026-04-05T13:40:43.942908Z","times_seen":1518,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/common/promo-ui/assets/chunk/GIFT.Pam_fORI.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /common/promo-ui/assets/chunk/GIFT.Pam_fORI.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/common/promo-ui/assets/entry/main.Bpc_8MB9.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\netag: \"69c351a7-5c\"\r\nexpires: Tue, 31 Mar 2026 06:58:08 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Wed, 25 Mar 2026 03:08:23 GMT\r\ncache-control: public, max-age=86400\r\ncontent-length: 92\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 16599620455187671907\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"6851acd306cf3dbdc40823c829d6199d","sha1":"d2925c8057e00ba1f0d23ee1b18ac0643d5711cc","sha256":"a9c33ca4ecded6e675ff76be1503ad875b9d74a750108e452f2aaee368a5ad3e","sha512":"a34c07a5f3a260523b7f7b4447a810fe69f7ac6ea820a1f428c6c4597d6ece419cc1d67b91238de5ed028b4955212911dd656c3ae4cc43721a1076880be3ba75","ssdeep":"","tlshash":"b0b0120714a5ca18482271c401789657b2094b10743515544048454237a3d2400409b0","first_seen":"2024-07-11T14:40:28Z","last_seen":"2026-04-05T13:40:43.933623Z","times_seen":1735,"resource_available":true,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/SEX-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/SEX-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 20545\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 07:17:29 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"6933d889-5041\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ee98568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20545,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"ce869dd15028cc8f9ff072f695ea10b2","sha1":"9eff1bc0a3a0122c075b13c5f1c7f003c76f3a73","sha256":"4e27ec5da38965d3e0ce1169c748817d84c69d9c849e9c2f62225c9e8caed501","sha512":"6685d4e2f223005353ec015b1b5f8e604f2385851eadffaca4b180430a57df462f2ed126fde6243acd8093edb8af07080fb617f631f648c7ad9f69cb5a4b3290","ssdeep":"384:u3IHxy3N71qyeEjUTTFTqJEFkHIWqiNPsXanCDGWq1AqSPmmVoW:u3IHxydhKTFOJ/oKPsXaEc1Az+sX","tlshash":"2292d10c69999b9a2ce4010bcb57fb3ea615a735b130a3641757329cc472e19e23e37e","first_seen":"2025-12-07T14:33:16.170231Z","last_seen":"2026-04-04T16:58:23.101374Z","times_seen":81,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026bft=0dAFcWeA5FtZFmYg0wwpmLXHCpASBXeMh08kUr58CfuuOGo1wKeaaYNlKFoyfayLJEX7yhNOoDGdOETnEHBCq-LNKOIRSBRIoRVQ","date":"2026-03-30T06:58:16.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370674\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 30 Mar 2026 05:03:38 GMT\r\nexpires: Tue, 30 Mar 2027 05:03:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 23 Mar 2026 04:01:54 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 6878\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870412,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (703)","md5":"b55b90c630ad899c694dc42582979708","sha1":"f08949879387eb8dd6553c8b0c548c701b5f0db9","sha256":"eb297967f5005eb95dfb369ff9f780a436a67144be372260b6f86f6fe37b917f","sha512":"eb9945688c1c7a4847df769bd9072f9f3be532c697c1b11185b48345162ab6a22c7ac2b8a251c9835e81ad8a8b155d67f0885a1986908cd69b3f9370f5a030d3","ssdeep":"12288:Epo+RhFDORIh355fBjbFOsAi6dhTOLtl5dlV3EZm9eyVbI:UhFDsIZ55fBjbFwZItXB3EZAhbI","tlshash":"ea053bd879127be16372b4f510673009736da826d88c086df6a5d8f02eb194d70f6ebb","first_seen":"2026-03-26T03:15:38.916554Z","last_seen":"2026-04-05T12:54:27.610989Z","times_seen":11757,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026bft=0dAFcWeA5FtZFmYg0wwpmLXHCpASBXeMh08kUr58CfuuOGo1wKeaaYNlKFoyfayLJEX7yhNOoDGdOETnEHBCq-LNKOIRSBRIoRVQ","date":"2026-03-30T06:58:16.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42575\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 30 Mar 2026 05:56:15 GMT\r\nexpires: Tue, 30 Mar 2027 05:56:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 23 Mar 2026 04:01:54 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 3721\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83366,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"24ab119daca047e256b1ef36d6a0ec02","sha1":"4bd663653b55f8448c6c58c02b28851c41f64a4c","sha256":"952367c39542f1f7a7444b1d38c94fb932299aa63315ba204e71448695bd11c2","sha512":"97bea09c2fecf0111048194cb47b59d35968bcff1a34877bfe7344b157461ca1d84fa7119a1c7cac7a85c709a9e2289338cf8f26a76fe10d523dffd3c952742b","ssdeep":"1536:h7Rpgh9C9ToL9gTNfWNfK4RxrDldthXwW5l1Dx7:h7ArC9ULiTYNC4RhLX1","tlshash":"27838e7338913a1afc278b616196bdfdf21cc923e5515bfaa5497a20c3cb0978213747","first_seen":"2026-03-26T03:15:39.037579Z","last_seen":"2026-04-05T12:53:22.593567Z","times_seen":10407,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/ac/v.1.0.1/manifest/ac-wps.89824b45.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /ac/v.1.0.1/manifest/ac-wps.89824b45.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 21 Jan 2026 02:18:26 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69703772-cf39\"\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nexpires: Sun, 29 Mar 2026 20:04:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 7053\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 9522894672539192036\r\neo-cache-status: RefreshHit\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53049,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53047), with no line terminators","md5":"89824b45a2b94e9b1cc8c694c33f1a67","sha1":"29107254ad8a5c612c61ddfb7aca873dca995799","sha256":"996bbffa52661216998b712c39b0bb7207d45e8f98211cafb3a7c5db0040ec29","sha512":"fb4562aa6f72f4680d73085310ccef27d4ce41e221679019b0c2b0d28ee219cafa2966d10dcf8872c0655ad1bea1f2d3e00cc6a3a346fca87220092c2e8d57fd","ssdeep":"1536:USCAKqw8hylWOdSf+km+XR0w10Ok+KNWHR0cR0uRGvfouzI:UnE","tlshash":"f83333c8f881ad8f7567753acc6f6b1d05377b4de0700eda818b656a1eb144da023be8","first_seen":"2025-06-26T03:49:13.147356Z","last_seen":"2026-04-05T13:40:43.917229Z","times_seen":1304,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/RT-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/RT-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 9571\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 01:13:22 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692cebb2-2563\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ae3b568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9571,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"0da534f9834d76d4886251f6c10b0ced","sha1":"d71b10d5a2a16d03fd0b51c338c9b5314cd8cbf2","sha256":"fbc84b585e4df8b9b974f9d428cb8f8b0350dd55efeb4d81f657001f6a1a7ef1","sha512":"912a0a80e587145af22c33a8939f6bf89b7bd465b26d3b96ba909e70ddc7dc85268639ab22362162a336dfbe44c9425d3814d3e7e3a081ff8ccecbe08af2cc12","ssdeep":"192:Ed9lx8hNXkjUXTXMWthT4uxoKT2EiAVDxwn28MuEHLHsR8G+:EnlxC0jUXTcW7TJxa76DK28MuEH7PG+","tlshash":"1312a0039287d4e6d520b7bfa45951557b080e2043b26cc19fd85659c0e7fd29de6bc3","first_seen":"2025-12-01T10:04:00.986862Z","last_seen":"2026-04-04T16:58:22.946267Z","times_seen":100,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766146944780_3.%E4%BB%8A%E5%A4%A9%E5%85%85%E5%80%BC%EF%BC%8C%E7%AC%AC%E4%BA%8C%E5%A4%A9%E8%BF%94%E7%8E%B0.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766146944780_3.%E4%BB%8A%E5%A4%A9%E5%85%85%E5%80%BC%EF%BC%8C%E7%AC%AC%E4%BA%8C%E5%A4%A9%E8%BF%94%E7%8E%B0.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 99569\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 12:22:31 GMT\r\netag: \"69454387-184f1\"\r\nexpires: Sun, 05 Apr 2026 19:21:48 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976b965568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99569,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"df9ff2878059262d395370380edb4207","sha1":"87c967b9a840fc39e5946db971732f489fe06b7d","sha256":"9738e89f1657aeb1527fd3848fac12211f42ba8682a5e2ca1de41ba991031fd8","sha512":"f6b5753eec073177ecf6a20597d709706357e1716084c84f95d70d939edf77d2a8539094acde1c82b80dbdb99b91454e86af3b8a48b24035bbcb8e3d4a6861df","ssdeep":"1536:pjutXFqJCwd329sHd8u011ZgPwm6db4ZxUpcON8IQNKViSevUziqrG0ta2T1oXzm:FQ5wdWs9nArD4ZSCn7oVm0tOzXWH","tlshash":"b3a312a471522893d9a988a3cce35855b7358f92cc17138eace5c14473de1ffc1b4eaa","first_seen":"2026-03-23T09:59:23.462933Z","last_seen":"2026-03-30T06:59:22.210648Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/img/icon-jili.e5a60ee.png","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/img/icon-jili.e5a60ee.png HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"69bbd48a-2d1d\"\r\nserver: EdgeBot-CUSTOM\r\nexpires: Tue, 31 Mar 2026 06:58:11 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 19 Mar 2026 10:48:42 GMT\r\ncache-control: public, max-age=86400\r\ncontent-length: 11549\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\neo-log-uuid: 9271928147423870660\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11549,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 80, 8-bit/color RGBA, non-interlaced","md5":"e5a60ee5daf84cb8eee9519530941887","sha1":"ed9ab77891332d8cd9e570b0a384c7a57ddbe42b","sha256":"a73f437b03955a993fcaf8fe7f578ea761a4eeea59c866f919c590c9df9575d0","sha512":"98fc62e8c3e96ff177c7d510e39f4fb0697e089370ddb1a62288636f26b883ba1e775e38d0744505761978a49f4f878d9f64189a941d1e210e213d3f47ea05e5","ssdeep":"192:UoEyNoTNXH+bBJw0lYLvW1o0U2TV/Wj2Ej6y8r4lE4CwY1V99oKPORIRg2r8:UVTFHN0lYLvcU2TV/WyEC+ZC7R5Tm2r8","tlshash":"8132b0bef441117e9a5c8221aaf1489c181445d8187b85cb8dc1b2fe0941f3bd0eff8d","first_seen":"2024-12-30T10:25:05.587916Z","last_seen":"2026-03-30T06:59:22.211581Z","times_seen":15,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/VIA-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/VIA-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 22566\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 19:36:25 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"693485b9-5826\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ee9a568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22566,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"f046ca1ca3f2d78c27e700d070d92226","sha1":"41f6922d2b21a553ac89b8e86ccd6b2d88ff75d4","sha256":"4743b5355db7a2ffb811beb79550b7c917846c15744a5cf7e868333833c687d9","sha512":"e5767d0af2d61752a36965c250ecf8ecee90e7a58b85d52e5012599279fe0c7ca0fb10fbcdb3fc32f60a9fbb5a4e0377d8828f15c53b5d5ac9e67c3c40b5b51a","ssdeep":"384:ruAwBcROlI2Z3ZJ64oUhlgd8TokcROqdj6usPlvfRKJ28wmRGEq0qKbLoz4Zc:rQcRj2WUhqd4BcRON9nIcGRGEqZTJ","tlshash":"b4a2d051100faf93556722673b6f6ad2057c624e6e84ba2bbd047e60b400fc3793d67b","first_seen":"2025-12-07T15:50:47.652918Z","last_seen":"2026-04-04T16:58:22.982314Z","times_seen":73,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/common/v.1.0.1/manifest/manifest.json?_1774853887929","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:07.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /common/v.1.0.1/manifest/manifest.json?_1774853887929 HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\netag: W/\"69a8fefa-891\"\r\nexpires: Tue, 31 Mar 2026 06:58:08 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 05 Mar 2026 03:56:42 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:07 GMT\r\neo-log-uuid: 8701826852858739533\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2193,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8f46dd29b6b0667d949674eedd810b84","sha1":"3c7ca218501dffa637ec753c82a5446075168b16","sha256":"2930eff4621e2ac7348c79a0922320b09bbd4ac87fd10b430d501c2224e51fc0","sha512":"bd3e4281371226081a2880f4498ba30db6bcac28d1f0d23c05ee098bb8bed9368b0f20d96077c03ca834ea74e0441621da9e4a6568a3c8bd32db69f13c864ae1","ssdeep":"","tlshash":"2741361c41650f9b74f53d58a8971e952db25c13b821b22d93172188cc3d6ae50fb0bf","first_seen":"2026-03-04T21:43:56.592492Z","last_seen":"2026-04-05T13:40:43.912776Z","times_seen":146,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/GCSGAME_newGameVendor?platform=html5-desktop\u0026ext=avif","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/GCSGAME_newGameVendor?platform=html5-desktop\u0026ext=avif HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: i7ewkms115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 7\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 9196353729087963033\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87960,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"197e37c541f99088913ef8932cb357ce","sha1":"145290bd67279bd11ddca666e45c7c7741317668","sha256":"196f386724676cd080fc268d4abf3f109630e5913bce971ebcc5c0406c5039c5","sha512":"044c1640d2bc6ac4542e9d990eea93280445ef722c86bc2cb81981ae4cdcb2f56e847c04ff7240374a078051f642af89bec0367529ff36c58c902ab088631b8d","ssdeep":"768:/Y98/kjFn2quHuXMX8X+Xu7kaZt7Mii4e6:/Y98cn2qBXMX8X+Xu7kab7Mii4e6","tlshash":"61830d6bf1a9b8a7173107c4328f764d952f580f6ed4f794f5d84e09a8e8bb853242e0","first_seen":"2026-03-30T06:59:22.155225Z","last_seen":"2026-03-30T06:59:22.155225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/GCSGAME_gameList?clientType=3\u0026platform=flash%2Chtml5-desktop\u0026channel=kg999bdtf1\u0026merchant=kg999bdtf1\u0026gameType=RNG\u0026vassalage=CQ9\u0026gameClassify=\u0026gameName=\u0026minBet=\u0026minLineNum=\u0026language=BN\u0026page=1\u0026ext=avif","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/GCSGAME_gameList?clientType=3\u0026platform=flash%2Chtml5-desktop\u0026channel=kg999bdtf1\u0026merchant=kg999bdtf1\u0026gameType=RNG\u0026vassalage=CQ9\u0026gameClassify=\u0026gameName=\u0026minBet=\u0026minLineNum=\u0026language=BN\u0026page=1\u0026ext=avif HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nLanguage: BN\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nx-app-trace-id: n0ere9e115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: GAMELO3, FREEPLAY3\r\nx-elapsed-time: 3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncontent-length: 361\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 13506343346641347710\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":361,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"22ce922ab6ead92213af4d3fec4a8c7d","sha1":"6309580abeebd6dbff8aeecab4c46f1b7404401d","sha256":"e199e8d5cbc5ec31727ef6ccd76379e1b42ba52fb2815f9b5ce6ce95721b69fa","sha512":"489e69f9e8343833078cea6336869e6bcd1af55222fcc21abedb9853cb6bb7f4bfd7b069ede9847c01c2bc5642410062806af30d5efaa4eeea384ba3b2f0868d","ssdeep":"","tlshash":"f2e0c00881701df3a3b35166be5f3ac07eedb39fe4890419e6bdc54c4a2190405d2a00","first_seen":"2026-03-23T09:59:23.512956Z","last_seen":"2026-03-30T06:59:22.213099Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/ac/v.1.0.1/manifest/decimal.min.b4a075bd.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /ac/v.1.0.1/manifest/decimal.min.b4a075bd.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"69703772-32f3\"\r\nexpires: Tue, 31 Mar 2026 06:58:09 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Wed, 21 Jan 2026 02:18:26 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 12141892709958613509\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13043,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12960)","md5":"b4a075bd6623180bb38318dcf2542f58","sha1":"64207af61a67ff855fd152ca4dab1532973e5db2","sha256":"25dd4d16d5fd3c4ac796badcce3ec057d92c52255f8d8481570fb54549dac5f7","sha512":"f20bc2a23070cc656266fd0b654aa6270a0864a3c413fd4ece9bd3630423266829eafc39ef7f32728c97efdc5da834e89c840409e4adc0ed53004897f01341ba","ssdeep":"192:ZusyVYg81fsu05u9gpxe5afH5NVcvqfMNlkdOYiO5PjVYCrF1FVWJK5gDArHx:wsS4OogpxcGHjcwGO5PjVrrrFcJSAArR","tlshash":"1342c5d872b1f0d683f364e040db1406e13a6e49688e61e2f34985e23cb5ec6917ffa5","first_seen":"2023-03-07T12:04:54Z","last_seen":"2026-04-05T13:40:43.910647Z","times_seen":1864,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/ac/v.1.0.1/manifest/ac_shanshan.674a8f9a.css","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /ac/v.1.0.1/manifest/ac_shanshan.674a8f9a.css HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"69703772-da165\"\r\nexpires: Tue, 31 Mar 2026 06:58:09 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Wed, 21 Jan 2026 02:18:26 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 5695473161536356543\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":893285,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3fad8d33bc4469a300a55a7d0fc364cd","sha1":"2b6c4c4f44f32bc9dea2ff41f4da4a4a74525921","sha256":"7ba6913afae9e2414849a046933ff163d5cc1c6547cf0e420e0602b05b474089","sha512":"bd67bf6da70b82e2f274b4763749f889d4cb1eede747ea8dfb0f850b1d34cd1815a52681c72937bacfe5afe8693dc7df8600c0d0238fda6d2f566ab7dedb7adf","ssdeep":"12288:bxCOMik+aIdFqO5DfO2+oGiHBu667HQ0JhlaMkihweT:H5ndbrO2yihu667HQwD7T","tlshash":"8215e936eb47307db62ec11fbe48e1cf2f15c003d50b3e79b940a695c7ed4a42a62a56","first_seen":"2026-01-21T14:43:40.621875Z","last_seen":"2026-04-05T13:40:43.918069Z","times_seen":330,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.0/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.0/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.kg999.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27437\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"659afac8-6b2d\"\r\nlast-modified: Sun, 07 Jan 2024 20:26:00 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 131408\r\nexpires: Sat, 20 Mar 2027 06:58:08 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5VOMw%2Ffo1%2Fi5Q%2Fb6mq0qRUfxnUFMdRFT8C%2FDbEaHD3XCI9jRwQ%2B6ACnd7Q2Z7Qsgkcdy0amYGxns2j%2B4HZFsFTrfizx5gxvgNYhuj7IKcQvIwm4YSxTrodWMf72jz1%2Fo%2FpyEvf%2F1\"}]}\r\ncf-ray: 9e453961cdfab4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87462,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"e6c2415c0ace414e5153670314ce99a9","sha1":"5a9eeac34d86e92e5660e0f4f87204f1ed0c8ff6","sha256":"d8f9afbf492e4c139e9d2bcb9ba6ef7c14921eb509fb703bc7a3f911b774eff8","sha512":"de027062931edd07b01842eff24fc15fdbdcaa1af245dcd133155faba9e0c965f0a34dc6144ce3b149bc43b4597073c792cb6dabbfc6168c63095523923bcf77","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKV:/u1zNwcv9qBy1HOg8SMpQ47GKV","tlshash":"9f83f8df77ca702247ab30b9006f550bf276199d684d4400f259d8e9bc78a4a823bf7e","first_seen":"2023-05-12T23:07:48Z","last_seen":"2026-04-05T12:59:18.361286Z","times_seen":23749,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":15,"dns":0,"connect":1,"send":0,"wait":11,"receive":2,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/common/promo-ui/assets/resource/CASH_VOUCHER.de07402c.gif","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /common/promo-ui/assets/resource/CASH_VOUCHER.de07402c.gif HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\netag: \"69c351a7-753c7\"\r\nexpires: Tue, 31 Mar 2026 06:58:09 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Wed, 25 Mar 2026 03:08:23 GMT\r\ncache-control: public, max-age=86400\r\ncontent-length: 480199\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 17698420050171552769\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":480199,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"b37c4bf2a7dbb9f77d06dd432864a7b8","sha1":"32c34b2fe3e519fe7e4bbce966b0477fff61ed25","sha256":"46ed3fc4723e5b202d269dcb5b9c2165df51ae3dfd6a4e9bba825792c3dee020","sha512":"645a1c830c7542ba3678d639e8066a8cf2920d4845e8e6b3d262e33c875927666c868fcfdc5da2cd1fe2720b7a2a7717e7ec63bb6aa2bc106152cd065b5614ea","ssdeep":"6144:QbVo+HnBZbztBvOBcbSBBH+Bxi6BBH+Bxi6BlvdgHIWVd0GYFHBSbWbpfTR+kUq4:gHBZVBbGvwIWVdZ6h4W17TXeUDKovJHk","tlshash":"03a413ca73fec0934d18fa861a871174075c8fcc05d8c27b562a65a658527aaf7b23ec","first_seen":"2024-07-11T14:40:33Z","last_seen":"2026-04-05T13:40:43.936008Z","times_seen":1611,"resource_available":false,"data":null}},"time_used":1596,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":530,"receive":1066,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/SV3-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/SV3-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 15357\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 15:53:02 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"69305cde-3bfd\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539733db3568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15357,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"fcbd94feb350909d4b3cc3603c7a0144","sha1":"9fd81713c715abec6d946a654d26fba2d345608b","sha256":"6ba34d1462924cc4cfb1851a2210a51810a201936dbbf0be16afce45b473fae1","sha512":"89c5eaed5b27339086c19612ffa292ec63e61c5e60c6e24c3442b486c9f343e86d6b81c4b07b6b338c1f8615943f697a28ba1e38cca638f6a9c2dbe047bf841a","ssdeep":"384:dKq6efWaW81SINkZ16TsWSEcyLi9P7QNOxR7+gw0yVBI44:XnWwBOyOZ8NGVzVGM","tlshash":"dd62d08f6903faaacc2a24bfebaa71157e5203435a2757662065f0b16e5108c8f11ddc","first_seen":"2025-12-04T17:41:40.194848Z","last_seen":"2026-04-04T16:58:23.058226Z","times_seen":59,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/manifest/mc_icon_s.0fd68d55.css","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/mc_icon_s.0fd68d55.css HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"69b91230-bd5d\"\r\nexpires: Tue, 31 Mar 2026 06:58:09 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Tue, 17 Mar 2026 08:34:56 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 17374363020182568698\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48477,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (19771)","md5":"0fd68d556c238d7b30cfdb73444776a4","sha1":"044896b598ab35d3dfa9b60da362259f7e32d599","sha256":"58d51b59248c18d27839d3073ffc1d6e5f5077d53edefb17bc375561ee5350d4","sha512":"4ab66990d9b20b1f5a5ff20bc02211c8c349518331ccc0ca8f409f803605701e60e6c30787fb3d96665855b0bdb344bc723b2d7600980f0aa5b35dd75768f4bd","ssdeep":"768:2AGSz4TYCGRYZazCrr5H3EcvlV4ehTP5uO8P3m7MF7MNP0w6Bfw9rnsiPuxY:2SKYCG2NUGV4eh5uOE27MZMiw6IrnsiJ","tlshash":"3d238f37890b7c902a2c2dfbcf673c5c5f69e18395934bc4e5dd4ce8a41a6261e0976c","first_seen":"2023-06-27T02:10:19Z","last_seen":"2026-04-05T13:40:43.930524Z","times_seen":1707,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/MG-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/MG-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 13930\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 12:27:47 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692edb43-366a\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539715bff568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13930,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"478422baa1f078c7b661ada335f34195","sha1":"e94ce1796ed556f5c99bf55c6877450cecb19e0e","sha256":"06b738e734dd8d97a3358f9b8445aeeff7dfeac3527d84bff97e3e63ab7f1bfa","sha512":"e0f718b1bd9b9bd4e1b9bc1d81a73b99bb87f5e1aa854c1e36adf2a74f5ea2b8d165f78e0a2773e86bd89c1b44aea81a2937da6f31539f18c993d390c608f707","ssdeep":"384:5wEvv5INRoDK3Fs1/dmSrAYrCMJyp01W9:5rX5IwkFs1prAYM0W","tlshash":"6e52b0e2488d623bef91c27ef12917696ef756b738f35a32491c0472a44063f5460747","first_seen":"2025-12-03T13:25:52.512438Z","last_seen":"2026-04-04T16:58:23.013567Z","times_seen":115,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/LUC-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/LUC-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 11822\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 10:40:31 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692d709f-2e2e\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539732da1568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11822,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"f14dee2938eb5b102f2c207d422e456a","sha1":"9b030c7505a665dc89592928ba7718d09a3c17a4","sha256":"f1c4b4108f52308be30747c39ab77151d3dff1f758c15e0193653c119ac1479e","sha512":"57e397fd9dc14a9728aa9b316a20954cb470929977dc5a2e4b6a2e438ae18a618e2ac7bb424fd9151e01c57af90152058daaa5705c0f2c750def424488744488","ssdeep":"192:cnIYZfgv2IkBOpCahWh1QI1gpOoiu5F9e7Nw/2Og8e/VS04iBJRJwk71Yq+oX+8K:cI8o2JBOprhI71z49x/PgAqJX71T+oXK","tlshash":"0332b070648ceb9ad9c0860a060294f8935aaef25a7b0be731d754f507e9722e04c875","first_seen":"2025-12-03T13:25:52.361265Z","last_seen":"2026-04-04T16:58:22.89311Z","times_seen":51,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/IO-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/IO-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 8304\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 13:23:16 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c4544-2070\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ee86568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8304,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"4da569af3ec1ff2df6faf26ecc135aff","sha1":"f3a40db0a5c178b209994d4451b7944aa0d0a454","sha256":"ad41cea42cdba8e48d3b33d47dba810bd120334ff2b88cc89de296e1389ada1b","sha512":"1fa9abcdfa677d040f20f81934412558fb69402e95a31924321125d59e875c8b982ce57f646b812fc561f519542194c6c52d3351c491a346ef89c42f19f287bd","ssdeep":"192:Wd0fMX9pgtA04CDa4CzFHj15hVXGNhKkyX6xTJB95ZfnehQ4D:ANNpgppa4ifP2XIXaZ35G","tlshash":"fd02c0b8f7296c93cbdffd7a0960649a0b800e6636cc27c076a7531194b7950cb60c62","first_seen":"2025-12-11T00:04:29.646678Z","last_seen":"2026-04-04T16:58:22.825505Z","times_seen":43,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/wsd-images-prod/kg999bdtf1/fe_setting/favicon/wps_favicon_32x32_kg999bdtf1_20250708174112.png?v=1","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /wsd-images-prod/kg999bdtf1/fe_setting/favicon/wps_favicon_32x32_kg999bdtf1_20250708174112.png?v=1 HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 1012\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Oct 2025 07:38:41 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"68e8b801-3f4\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539793bdc568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1012,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"b17bd099034a4123128ed05b3e8069c9","sha1":"ba82507331f0c1ff9393c2fa4ab50cec6bdf8523","sha256":"d18b4c8e5fe9bb0a7900975377eae672c1ade5f4e91629617555e87a699b40b0","sha512":"cbfe3d25c5df0930a05772e689ca93c22397e73df077942ee414785c5198b00e193517f4fdb9f777ec7cb1a648b6ccf2bc315d7768a44c1135c8ec3be3687db3","ssdeep":"","tlshash":"c811a5eed179f4b2494a07ba628706194c838e3597bd48da4318a8b4d1cdc1a6d74af8","first_seen":"2026-03-23T09:59:23.469175Z","last_seen":"2026-03-30T06:59:22.217558Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/VIA-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/VIA-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 22566\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 19:36:26 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"693485ba-5826\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539730d7b568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22566,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"f046ca1ca3f2d78c27e700d070d92226","sha1":"41f6922d2b21a553ac89b8e86ccd6b2d88ff75d4","sha256":"4743b5355db7a2ffb811beb79550b7c917846c15744a5cf7e868333833c687d9","sha512":"e5767d0af2d61752a36965c250ecf8ecee90e7a58b85d52e5012599279fe0c7ca0fb10fbcdb3fc32f60a9fbb5a4e0377d8828f15c53b5d5ac9e67c3c40b5b51a","ssdeep":"384:ruAwBcROlI2Z3ZJ64oUhlgd8TokcROqdj6usPlvfRKJ28wmRGEq0qKbLoz4Zc:rQcRj2WUhqd4BcRON9nIcGRGEqZTJ","tlshash":"b4a2d051100faf93556722673b6f6ad2057c624e6e84ba2bbd047e60b400fc3793d67b","first_seen":"2025-12-07T15:50:47.652918Z","last_seen":"2026-04-04T16:58:22.982314Z","times_seen":73,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/KP-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/KP-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 13335\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 06:10:34 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692e82da-3417\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539733db0568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"2080d3603bd7a17c7fb6d28db28fd486","sha1":"90b0bb8fd3ce8d9bbdc8d2044aa788bc16e9642e","sha256":"dd64b8a71daf18e0406c4d8f7e9ce1e7bf79110a4a46ac208c815b5a8c946786","sha512":"1b1f98f77c331b5cb955c6d391416ba6fbbc0b84d24b0d4fdefeb0117551b3d2311cbf9fe4ae1c1ae5aa1686293a40ebba10cb2e30df1b8d42b469cfca8e8186","ssdeep":"384:d2mUhFbOsj3WHzPuglNzcUkTSHj53Q4ptkvcL:dPGv2ug1DxTL","tlshash":"e652b0f21fb4088ef6c2ad3f5032d4dd758a8dd9de2864dc42fd8017726a6d44e94640","first_seen":"2025-12-03T13:25:52.411058Z","last_seen":"2026-04-04T16:58:22.928273Z","times_seen":82,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/css/app.6528ba341614bb6707dc.css","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:06.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/css/app.6528ba341614bb6707dc.css HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 19 Mar 2026 10:48:41 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69bbd489-36573\"\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nserver: EdgeBot-CUSTOM\r\nexpires: Mon, 30 Mar 2026 12:33:26 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 75309\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:06 GMT\r\nage: 66280\r\neo-log-uuid: 1316162236661766872\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":222579,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7b1a737c5c79995a27ba94c065cad227","sha1":"0bb7b17093041611741c4294077282d70c56c49e","sha256":"70078a3c5e200aca984e51e264085061734c5726a7560991ba146e11de1af51e","sha512":"40157413fbec9c08048ec337491f209992d4834ee7ef934ce415e1d94d7be831284d592cda6800a416bf499b2bacf93d599e400d87053fb3aa3a02a378561fec","ssdeep":"6144:yCU5CUjONNworHTqOd5O7JM5O7+LxWbkXxV5XP1:y1/ONLrHTqOGtJiwkXxPt","tlshash":"5b247d32561ab91ab477d65724c4168d2d2ae223c2b78f6cb7513128cac75f32bf234d","first_seen":"2026-03-23T09:59:23.546347Z","last_seen":"2026-03-30T06:59:22.218397Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/VA-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/VA-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 9127\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 17:29:40 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c7f04-23a7\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539738e07568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9127,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"8dc6140eaeac498cfb064e2636cb64d7","sha1":"a3467f03ecd15a06d57a6bbcece4e14cf45e487f","sha256":"3dd80dba69e4aa06143ea00d3282ab68babc8bf3636a04e101f13a0237750afb","sha512":"0c25719d30a7864f4fd39c54c64a53dde9c014edfb19af2cdd87d36b4b2b82a9b6fb1f3167ffb9c3d5f5d88d5e428fa72627a8cbc59632fb0cdf6f6ae17af4cb","ssdeep":"192:KrhO8mwCk6N+N31WKBx7DZd5Y6detPwzDJbApBWaW:YhGwZM+NcU5jkE9bqWaW","tlshash":"3b12bffa0a04f87dc3d41b7a30559d1df4562ecca3164056ee3247b16cbd9864d0de8b","first_seen":"2025-11-30T22:26:42.763142Z","last_seen":"2026-04-04T16:58:22.945274Z","times_seen":90,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/img/loading.97ee6a5.gif","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/img/loading.97ee6a5.gif HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\netag: \"69bbd489-e8b5\"\r\nserver: EdgeBot-CUSTOM\r\nexpires: Tue, 31 Mar 2026 06:58:12 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 19 Mar 2026 10:48:41 GMT\r\ncache-control: public, max-age=86400\r\ncontent-length: 59573\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\neo-log-uuid: 14411873011571237185\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59573,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"97ee6a5759d511832bc1e0184f8549dd","sha1":"5eb54f4a06c64d3d7aafc21d50388ed6f564f2d4","sha256":"59746b73e1cc27b96715d9e6a8ced482e62ca12281385628ffb532e69b8f8787","sha512":"ba8d21b04b72781a240fd23a6045d2ed6b3d75dffe4cb3bbd16d5a0f6825004651a339515b16bbf2f3a2ea21b7771a4d4ab42a545979f0b42c89ba4812068df6","ssdeep":"768:vqbg3trEgDc0u+BFg47WlUg3KKHhZL7noYM4t4gphwSTg9gPgVMcHlz:ykrWm0lYGhh5V/pMgsfH","tlshash":"5743a590fcbc9ad7e272057135553218688ae2cfe79fc29b340227e467b6f841868d7d","first_seen":"2023-05-15T07:23:47Z","last_seen":"2026-04-05T10:50:17.364175Z","times_seen":1412,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":315,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/js/vendor.0.61a1e47.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:06.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/js/vendor.0.61a1e47.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 19 Mar 2026 10:48:42 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69bbd48a-206e8c\"\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nserver: EdgeBot-CUSTOM\r\nexpires: Mon, 30 Mar 2026 12:33:26 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 651019\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:06 GMT\r\nage: 66280\r\neo-log-uuid: 14267818940409792459\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2125452,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5c26c474b54f0f8643edb2da4839508f","sha1":"490be7579dd3895a4a6e5bb6c44e90c51e65b6c9","sha256":"574c790d3863cdbb3bdb7c4c6d08380a15f092f690447060c5b60b18db2c144e","sha512":"0f3e593ec6004241ee1a4147a2ef7b922b548a10d140de3e5b5baf577c553edf02ec337c4aa3fb0a8fe29370b22ec30b2cd9f38b3b71a978c10e4cf5da2ca0a3","ssdeep":"12288:D8XbQSNRg1GUKkJfLijN/iB6nnxfmz1zN6w3tIFZnkn4G/FPW1x5uyQc3nEGwzfc:IXbQSNRg1xz1zN6w9IFZnQrsznBRRJ3","tlshash":"15251a9eb2c2f0b207e361a6502f104af33a6958780e8454b539c8d6bd7d94e527bf7c","first_seen":"2026-03-23T09:59:23.408527Z","last_seen":"2026-03-30T06:59:22.220089Z","times_seen":2,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/system/status?url=www.kg999.net","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:07.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/system/status?url=www.kg999.net HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: db3sp2i115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:07 GMT\r\neo-log-uuid: 6927576301252222371\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39337,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6ed8f1be6f24b284e9d9a55ba7bfb52d","sha1":"4e21fb496ecff2f9a28337dcf46fba0418c75b7a","sha256":"4e5df3254847236f8381aee15e77ebae54726a41b81bc59a90e392bb21bfff8c","sha512":"9bfa8734ed8c15895632dd8787b44f1975848a5fbf6b98ed846bd1311d9d35aee1cc4e87a877414fe939cf35f50bd03512874a272fdf85cf8ff33055a7c46e12","ssdeep":"384:fihuIZ9n2wx55poMjlCnZVaChB5CrsW3AlCnG:Vu2MfjOnW3Az","tlshash":"4903af09a420e9af2d4ec0c5e4fd990b49bd8e7ad5fd10718c0c28ac12db9b50757af7","first_seen":"2026-03-30T06:59:22.221046Z","last_seen":"2026-03-30T06:59:22.221046Z","times_seen":1,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/GM-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/GM-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 11253\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 10:06:12 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692d6894-2bf5\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539716c04568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11253,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"5b1bc849cd353985e09d11ba6504c9ce","sha1":"f6634bff2c2210b322529b232254536c0bb8dcce","sha256":"82b71a95b10d2c388891f08c0027007f78842b5769fc94de123139d56e2bda0d","sha512":"ec0e2d410d1e28db6bc56b599e36c68312d6f553c5ab2949d2604f903f4941a8e1b9ba7c1cbd2877e4bdcf1de79b9eb206ea47a5a8c456993a26f3d178ada12d","ssdeep":"192:rcRRFu7YB/eAYwTLft+OZxu9oA8ryaG3szN6fmmhOgMkcSK6hx7W:rxpwwgLS3szo2kcSK6hx7W","tlshash":"e032d0e67ec094cad6ce35b0e09e9ecb54e31c660502a824ccc5793dd9bd34c6ce63a0","first_seen":"2025-12-04T14:34:51.794728Z","last_seen":"2026-03-30T06:59:22.222214Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/FTG-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/FTG-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 3699\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 02:19:51 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692ba9c7-e73\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539718c29568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"867231b3cd3f66e0eca9b2e4a93f812b","sha1":"513a9adf38b1629ff3c022bd0b6ce20ec0d6f6fd","sha256":"e13c84d767327dd52dc2697d5f3c13812c7836c65661c2eb6c9b60fe45df760a","sha512":"08c6c0e588568c1e0cd600eb2a6451c4b8c381bdfd682d860ee0550335914338f123107fdb6870358640393a55048a609234f79c90607192dd642ea365a6eed9","ssdeep":"","tlshash":"0b713c831c81dc34f5a01f7ad89aa325fd6639d5a8611027f84c9ae8ccd247893a6b71","first_seen":"2025-10-21T09:59:40.387831Z","last_seen":"2026-03-30T06:59:22.223084Z","times_seen":10,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/img/pvp-banner.b36cfea.png","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/img/pvp-banner.b36cfea.png HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"69bbd48a-72fe\"\r\nserver: EdgeBot-CUSTOM\r\nexpires: Tue, 31 Mar 2026 06:58:11 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 19 Mar 2026 10:48:42 GMT\r\ncache-control: public, max-age=86400\r\ncontent-length: 29438\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\neo-log-uuid: 6785337534620625463\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29438,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 250, 8-bit colormap, non-interlaced","md5":"b36cfea108df8b8f0f03b87d80b8f23d","sha1":"4154f2130a5cf8fff7ce33894cfdf30e7b748a8e","sha256":"b3c038cb661157d65f1c4551623750de252685eb03b70494b67538fbddfb78ff","sha512":"a0a20b0f356e4edaf8c1691803d1a9e50b5bf9a2bc5adf96dec4669e8bb7e257277fcb24c1058d4857d5cb663fc7cdb826801f1abd0cb3eb168c2bf32447ea47","ssdeep":"768:Jkf1S7qIVlOx+toMVx3O/RnlY4VQFnETKOaErM83i9:J82vfOx+eIaRlY4QETKOFAZ","tlshash":"ddd2f0dc07f7e26bccd4d7108328e5e43a286a98f617b3d28d59ee059257fa46cd01c8","first_seen":"2024-12-30T10:25:05.482436Z","last_seen":"2026-03-30T06:59:22.224272Z","times_seen":4,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766147278969_15.%20%E5%8D%B3%E6%97%B6%E7%8E%B0%E9%87%91%E8%BF%94%E8%BF%98%E9%AB%98%E8%BE%BE3.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766147278969_15.%20%E5%8D%B3%E6%97%B6%E7%8E%B0%E9%87%91%E8%BF%94%E8%BF%98%E9%AB%98%E8%BE%BE3.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 101583\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 12:28:06 GMT\r\netag: \"694544d6-18ccf\"\r\nexpires: Wed, 01 Apr 2026 05:07:37 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976c98d568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101583,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3bc34e44c3a9e25c073fa66e4dc6a79f","sha1":"8b6f54e95d85e1d03613308003d9188aaa5c30dc","sha256":"608f9b4a1cc4f497ff361a0c5098bf82f33b2a2adfec3e2dbe866bde1912bcda","sha512":"e60b09cc7d8cede2a4d2528db1b817f23892a8d6fd7cdd076a078effbfba7bba384db248c14bc1bc2f4cd7febb74961da43e943eaa548a4a6276dc7a346e3f3b","ssdeep":"3072:bjbVocd4wf52WGsqsPKlisiLFvTquX7jG1Y:bnVTwWGsX6s4qG+","tlshash":"c6a3127b80726aaddda2005d30be0e827898d74a6e7e8ac519ecf4e3f5f10755c17ac1","first_seen":"2026-03-23T09:59:23.651854Z","last_seen":"2026-03-30T06:59:22.225024Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/GCSGAME_gameList?clientType=3\u0026platform=flash%2Chtml5-desktop\u0026channel=kg999bdtf1\u0026merchant=kg999bdtf1\u0026gameType=RNG\u0026vassalage=JL\u0026gameClassify=\u0026gameName=\u0026minBet=\u0026minLineNum=\u0026language=BN\u0026page=1\u0026ext=avif","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/GCSGAME_gameList?clientType=3\u0026platform=flash%2Chtml5-desktop\u0026channel=kg999bdtf1\u0026merchant=kg999bdtf1\u0026gameType=RNG\u0026vassalage=JL\u0026gameClassify=\u0026gameName=\u0026minBet=\u0026minLineNum=\u0026language=BN\u0026page=1\u0026ext=avif HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nLanguage: BN\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: hiwy2kr115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: GAMELO3, FREEPLAY3\r\nx-elapsed-time: 525\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 15435902683026307809\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48836,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (47150), with no line terminators","md5":"2b384694a81bf962a418af43e07acf49","sha1":"811508bdb59e4f0f267ba246fbaca03a0c341a76","sha256":"fc9277d166517a68bfacecd0ea2588206b8c70486578cc7f8381811b2a4de957","sha512":"01e3f304c1e83b41a9d711c62273ba49cd1fa9b7adb20d98651eb63dca4624ff96fe2d094c0520061919e10f77267c037aeddc3a7e7828c2659f60aaaa74ecfa","ssdeep":"384:kliysytdbIaeCbwUC8MgpbIxm2dVTKVlcwhiZbwSMjESCVgj9XtfvE9eR:kNTcVTFwb2KjEW","tlshash":"3b23752cd5497ff5a72383b4215f7fdad18e1a2f5dc8da20a7e18e0885fba7c4209146","first_seen":"2026-03-30T06:59:22.22593Z","last_seen":"2026-03-30T06:59:22.22593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/encrypt.js?v=8","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:06.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/encrypt.js?v=8 HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 19 Mar 2026 10:48:42 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69bbd48a-117f8\"\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nserver: EdgeBot-CUSTOM\r\nexpires: Tue, 31 Mar 2026 04:17:58 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 19829\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:06 GMT\r\nage: 9608\r\neo-log-uuid: 14054002645525405219\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71672,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65474), with no line terminators","md5":"5a13c4b84bd12677d141840e1c054c2f","sha1":"8531449afa5c7cb68a0868ffea7ecf0319b86494","sha256":"2bbfec12166bde1f5c3f5a404a943a47d586fe2a9ca7caf07d7a616d4a7b9160","sha512":"e254b09b707028580ec99d256eccfab7894fb0662eaa0565e28489b9f90606dce68ad2b43d15e12b9d46cf1034eeb37e00f79db781eab43f75aafe2f0b2dd8f3","ssdeep":"1536:0Vocr6cgfxlrX5BKlMR+shFxqlWz2sfD1zBee+2PY4O:0CmJgfxlrJBKlMRTT9O","tlshash":"5b63729157a06808c383ab6a771b71d2e06f7a9afdc54c47f318bf586a48717fad0930","first_seen":"2026-03-23T09:59:23.387654Z","last_seen":"2026-03-30T06:59:22.226829Z","times_seen":2,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-03-30","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"www.kg999.net/res/encrypt.js?v=8","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@thumbmarkjs/thumbmarkjs/dist/thumbmark.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:07.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@thumbmarkjs/thumbmarkjs/dist/thumbmark.umd.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.7.6\r\nx-jsd-version-type: version\r\netag: W/\"7941-xbrF7keF+EYPlCKgEfCWNQ7Pnmg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 30 Mar 2026 06:58:07 GMT\r\nage: 3663\r\nx-served-by: cache-fra-eddf8230234-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 11700\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31041,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30929)","md5":"ed7067efd903d31263e2f9e2a7b3589d","sha1":"c5bac5ee4785f8460f9422a011f096350ecf9e68","sha256":"a2860dcd2bd0590aef5daec500203b8bf4615e1ce0b5e8e15f36a2b3611a6407","sha512":"1ea8a648de4ce99fe8c58ed07d0ce9a1dd990697a421c79632001cd91d3d99a1f95ef72285c15e6e22763fe1b395e5f851ee7b47738c53e4d4a73802c9148b55","ssdeep":"768:ltNLn7XywGbxLuFvgaZEpjy4mqXn352YJvWbFfRwpyu37eNlo2FFRTn2PxY2:H4NysDyE2ne","tlshash":"42d24cb972647027037a2d97a03b5007953567243a5bc040f22d9d577aa7e8f23bbf6c","first_seen":"2026-03-21T18:39:49.443492Z","last_seen":"2026-04-05T13:40:43.915611Z","times_seen":125,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":64,"dns":1,"connect":26,"send":0,"wait":28,"receive":2,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/L22-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/L22-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 32491\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Dec 2025 23:49:23 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"69376403-7eeb\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539713bd6568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32491,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"f7e63ad6f944467fbbd61f739b260cad","sha1":"9d9e4ef4651ab5abc7ffd2c2b14f9d0668ff7d9c","sha256":"045b5c6f8b3a2186619764bf8c58f6be3596507d2880987f4b85748387f03322","sha512":"462e05739a3e810b705072540ac5a55a286c1ee9df9fcd335ea8e85b15e7ef43345cbf413a2389585dcc19aa8d396aed382ef34384d606a057a3f1b30ca8537b","ssdeep":"768:YH6WL5xxUFDoW23nQapOvCY7Bcf2yVOhEcbQxBWFtI/vDIw:/WLVUFDoW23nQ9z9cOpnb6WcMw","tlshash":"31e2d07741843f7389962ce932b60936f44d8ab039044a71769cc78fb69b1061a2fa9d","first_seen":"2025-12-09T16:29:30.96808Z","last_seen":"2026-04-03T20:09:42.932377Z","times_seen":83,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/AUX-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/AUX-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 9216\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 19:31:35 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c9b97-2400\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539716c09568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9216,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"77f9ee1a2ed03a993dd86a430c726849","sha1":"04bbc71d5c19aedbd8dad118ecb898e47d98f4c2","sha256":"71cb53aa2a247ee31a0a78ad330b033184ad2d4c74d4f7563a429bed51807fb1","sha512":"92ecb6bc6976e1482520dbaee3dc524dd40d68c15f764e15479a4364a8439864d582e7814c574dc26003b82527faa683fa14e0775ce0ff4271b9faeca961e183","ssdeep":"192:TiV577JH0ijQV+yUeRIeU5+MoNuGF9d2Fz0u508OmsrI4H2kFKp:TiJHvQVbUAIL8Mord2x1H34WGKp","tlshash":"e1129e7a16c19bf2deda5478b3fa2afcf40001a8d403539eb18977b008b68459a9f536","first_seen":"2025-12-07T11:07:16.50801Z","last_seen":"2026-03-30T06:59:22.228169Z","times_seen":4,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/NG-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/NG-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 8161\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 14:24:46 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c53ae-1fe1\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539736ddd568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"e05a15f1867004ca34e0c72c791101a3","sha1":"7ef34ea9c9b6a1b46d5aefe7f344d23466c79877","sha256":"91ee76758bb047a4af79f84e296ad33fad4a4e41a1809bdf525085b515e318f1","sha512":"8b831162de01185b7741ac3a6a94ed9a45ed65ffa355284e83e7d9526b59bca4bf19ab31883c1aeab6bf1df121903ac145259540ded19e3c95b493d0b89c08b8","ssdeep":"192:ty/xAFhOMZ5bdhcB3+7OJsj+PsLf7AhmjmKP:HFhjZddCBO0o7A+","tlshash":"c6f19e4e60092eba25e8038cd2b6de307686ecb81fbe50d255a17a250c70b5c68dc7df","first_seen":"2025-12-01T08:14:06.148586Z","last_seen":"2026-04-04T16:58:22.906523Z","times_seen":86,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/9.14.0/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /firebasejs/9.14.0/firebase-app.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.kg999.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 20513\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 29 Mar 2026 13:29:13 GMT\r\nexpires: Mon, 29 Mar 2027 13:29:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 62939\r\nlast-modified: Thu, 10 Nov 2022 21:00:22 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":91683,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"1133a24e73cc67fbf3a9002a2a8d2039","sha1":"08288a1be66c98dbd60f5d59b4e1b5ee23626085","sha256":"4fbb03aabc125045ee2d98be69199bcc01b9cb22aa2e438ab7422303622e0f09","sha512":"7b038fd80befe61ac54039577b161a7623cbef51f4485e6359c18d25c0d710686c2230def5ee72ea48d906292e2b76085a457c5813bdb6bd49c2d0c6d3bb6992","ssdeep":"1536:BCtUasrm5+7CClwUuDoYIt+/dpN/FZ6zeVjfPLXJpzKZyW:BCtvsrm5+7CClw5DoYIt+LN/FZ6z4jfg","tlshash":"4193a82d3bd5117206b253bc6f1ba486f72e822b2606a2d47cad83e40f7255942f5ff4","first_seen":"2023-03-09T04:10:18Z","last_seen":"2026-04-05T13:40:43.909195Z","times_seen":1952,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":63,"dns":7,"connect":8,"send":0,"wait":9,"receive":2,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/TCG_GAME_ICONS/JL/EN/JL0033.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /TCG_GAME_ICONS/JL/EN/JL0033.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 27517\r\nserver: cloudflare\r\nlast-modified: Sun, 07 Dec 2025 23:22:04 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"69360c1c-6b7d\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e45397e385f568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27517,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"234e32318fdc8509c51a53424658adb2","sha1":"906a5a2fdf85a69848b4512cc02d069bd6a54d4e","sha256":"2f0da70292582c019eeecde9fa999cead17726b7f86e051a50f4ee9c148ba5f4","sha512":"7971bf213bcccd9e3a7f30208fede63b09d93f4e190050e590b947cade3b7f7f67c869bd64be5385af208791a765a3c0a7f827cec378ec9390655c061c8d3de4","ssdeep":"768:F3CEd9ZT8GpIhCBFkQm2qFT5fZHHuEWDwJg+MCEutjZo0A:FSEvx8GoCBF426T5fxuPwSNu3o0A","tlshash":"83c2e08a2e55a4fcffb2bb780b9846d627716eb11a0465246e376272133c08d2fdcb44","first_seen":"2025-12-09T00:17:16.529302Z","last_seen":"2026-04-04T16:58:23.122095Z","times_seen":114,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/ac/v.1.0.1/index.js?_=1774853887391","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /ac/v.1.0.1/index.js?_=1774853887391 HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"69703772-4b49\"\r\nexpires: Mon, 30 Mar 2026 14:58:09 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nlast-modified: Wed, 21 Jan 2026 02:18:26 GMT\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 11194818051364216891\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19273,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19272)","md5":"2e7ca135044dd1fbd97ccf3298d0cb84","sha1":"bcf5c83439a66cbc56813f48493857e7cb6a6cd7","sha256":"35132558673cb74430e124e8f346f40442ab02422d47a9cde2e9ef7974609d85","sha512":"f3512ca29fa25e521713912e2a3ea671207b06384d7327568cadbf75e392204a2450790b9ff3db3a042295b95f36024fa6f047be8768cc7dd2fe6a9f8e8c5d4a","ssdeep":"384:ljOIzhu7En2roI1k/WaHjnFw73LeH+whSwoxzYMNwU30CkCPJi4axcNayjL+4ljn:4sBCg6l5CRn5a+AjwE69G","tlshash":"068233562d0f512d0689f5ab78804d6d7eff4ab21ac41d2db2ac8e7cc06d90fa9c93d1","first_seen":"2026-01-21T14:43:40.798717Z","last_seen":"2026-04-05T13:40:43.896501Z","times_seen":338,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/COUNTRY_FLAG/CIRCLE/US.svg","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/COUNTRY_FLAG/CIRCLE/US.svg HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Apr 2023 07:21:45 GMT\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\netag: W/\"643cf389-2d3\"\r\ncontent-encoding: gzip\r\ncf-ray: 9e45396768e2568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":723,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1454bbb5b13a30a70af5851b3aaa8a4","sha1":"cdc1916569d786fd6257533cfd9f37e499a382a2","sha256":"7f3012f520e4aefcff6acbb8cc7198fee604f3f806fd228f59c94077437bda82","sha512":"861016405d433d407ac6723b115ab093a010e528ab7911600d0b23afed4dc426fd56973174107eb08bcadced3859c2f5800dce8536c463fea06b0ea3d118f75d","ssdeep":"","tlshash":"3401704be7345d155edd8b94662df693547b30ca614403f930330454d34e2edf54b5b8","first_seen":"2023-05-16T13:21:28Z","last_seen":"2026-04-05T13:13:38.745519Z","times_seen":2062,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/RLX-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/RLX-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 5572\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 05:20:31 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bd41f-15c4\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539726cde568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"6350a1e8437aab82b2f7978936ed0847","sha1":"8528e70abd910ea683fd74c4e9b7e341dc4cfd6e","sha256":"20dfc7f9573b4737c1416f3ff155de6a7912a437379428b92d43df0dffbabd12","sha512":"186476529ff581d7dcbb33fdc76cf374b0a0fd3329de4b9b6f2f84b66fed7b2afc2249040a3aa1622404a34ff21c1909d45f7d295c4e7cc66ff64c4c0210576e","ssdeep":"96:IAYn3dO/vaVyDm9WlVZHulfAEgClqfAEwhEn14lRMKSDHsSjBcpFFIlE2:DqO3oyDm9WZuSEDNDhhvMKSDHsSj4Faj","tlshash":"f3b17d75ef172e3ecd276033527043612c94ea8399143f19acfac2d4ac1d35a8f52385","first_seen":"2025-12-04T14:34:51.622291Z","last_seen":"2026-03-30T06:59:22.231115Z","times_seen":5,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/EG4-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/EG4-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 5784\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 06:08:44 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bdf6c-1698\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453972dd4f568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5784,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"d29f267885144ffa461afaaa937fb545","sha1":"81bae9446a66835ded78b8e0d944d354c97db3d9","sha256":"106924f82b8a68391c5782c79934437827c9e2cb454123f635918e0867f756dd","sha512":"a049b8572ef85304358af61af3208dcd4b1c2a98d223bf4e69a061526bd0396c730fa7a8ecbda161d1b40a01c7cb59c925bfac08b4ba146bb64213a59bdd2094","ssdeep":"96:UYUcRGQjCunv2aUrV5vvsp/lUjcU8aGTM4v/GCf1yiu3ADkT620YIMN:UYV92aUTvEBajcU8HMGGC9yZ3AoGC","tlshash":"07c1ae4fbc0c5d02e9a622b043534ab51e05c5960a55bba870fe2274e8066cbff6f164","first_seen":"2025-12-04T14:34:51.59362Z","last_seen":"2026-03-30T06:59:22.232345Z","times_seen":6,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766147066922_10.%E6%AF%8F%E5%A4%A9%E7%99%BB%E5%BD%95%E5%8D%B3%E5%8F%AF%E5%8F%82%E4%B8%8E%20iPhone%2017%20Pro%20Max%20%E6%8A%BD%E5%A5%96.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766147066922_10.%E6%AF%8F%E5%A4%A9%E7%99%BB%E5%BD%95%E5%8D%B3%E5%8F%AF%E5%8F%82%E4%B8%8E%20iPhone%2017%20Pro%20Max%20%E6%8A%BD%E5%A5%96.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 113808\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 12:24:33 GMT\r\netag: \"69454401-1bc90\"\r\nexpires: Sun, 05 Apr 2026 19:21:48 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976b975568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113808,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"554c5ba192b050ddf1e8e1d1b60c4fde","sha1":"a75b0b40dd08d7968d393ac4e71e28cf8fac8636","sha256":"a26e008b773180a10070b82608f574a5ff93612baaf93c1b73fd23f32a0cecaa","sha512":"48d130dd59e46db3f295e4084c043e619c5c37dde8f3a4c545aaa695b1e14ea8fbfe242690e17c640ce9151178f09db3bf2e9fd25dc14d72ebf53e6e8d0a990a","ssdeep":"3072:0oxDWG9JXkISm73lW6LOMFH6n0SD1AGz9YcWV3:TxDdJXFS/6LfC0C2GRgN","tlshash":"14b312cd974add5edbcf103dba8aa4d37dd4b1ab195128b1cea970813b745b88008cf9","first_seen":"2026-03-23T09:59:23.541823Z","last_seen":"2026-03-30T06:59:22.233221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/MAHA-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/MAHA-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 4187\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 03:08:22 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bb526-105b\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539715bfd568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4187,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"00b07c9a01aa42dea39e4f76fe93b958","sha1":"00c23f9455208e9279f3ffb4850b6f504581ec77","sha256":"5f09ffca1ab22c264b4aeadaa9166e269f68bab8bc0560c49ca098d97cdd18f5","sha512":"9c193e9af047abc5949abde5a0d067da608adbe4846f7626c0076a1be76a83f03f7186ccb77f27bea15546fc257bae26ddb266667ad322dab7ce820cb9c267ce","ssdeep":"96:rsb1I/hLJ9BZqL7tXBU2xIvYqFCABIT579:rsK/0L7tXm2xuYqFpQ579","tlshash":"31815cc95fb89d269af15174a05d0048adf6b78c0598f22b1619deb762a32ba39001e8","first_seen":"2025-12-01T08:14:06.287001Z","last_seen":"2026-04-04T16:58:22.904887Z","times_seen":75,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/SEX-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/SEX-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 21573\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 16:28:44 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"693459bc-5445\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539730d75568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21573,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"3839867b88b10e19a4027e3eb3a76326","sha1":"030ed18f67228854f4592e65e0342e3ef47548ab","sha256":"1e729e5b9e1c25f1be9ff920179a50527ff65e8e2a7588195b668327096cfc72","sha512":"ec019c7c37a6946714bb5790bae608b169927e49dbec09090a5c0620b19136649f79622a51d9b9edafc0bba727e426cfbaced3883ef23d83eed90284569b6f58","ssdeep":"384:6ibT1ns7DyP/Yu+cQwP1Quiz+t9pEq9r1KbwbVfnOsoyL/unTwsL:Nf1ns7WnYuVTm5zM9p5LlbFnOLy7unT1","tlshash":"25a2e0a13c066dac9fbe69d4d11b21e2aed30c6b05758d495c921e6df8360235f4d4ca","first_seen":"2025-12-11T00:04:29.882432Z","last_seen":"2026-03-30T06:59:22.234133Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/AIL-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/AIL-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 22438\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 21:03:50 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"69349a36-57a6\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539731d83568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22438,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"2ae01e7efaf630a06ce6503d806b3551","sha1":"142fc11ca3c045b6a399f0ed1a5cd861a71e5b59","sha256":"e9345d14c890eb94f340169b562d86815f03ef230e04e6bcab4418f04e748910","sha512":"b6fbbc4e00ef10ed03e3678ded9838da0ea95f0b87ea3204ec5d504c729205f26af45741ac64f916829e92c6afd04ea229f69b7b82fa7faa8dfc5cbc38e82fdb","ssdeep":"384:UVtwTuCxnZ97g5tVYMbfVRBR30u7bbXor38EgGq4CnBCJ088V9YtX/e6:0wuCrt8YMpRBRku70pgGJABS08I9GX/D","tlshash":"d7a2d1a68d2e2511592c100b22b44a8f3255c8a5037526a53bc457fbdf32ffc11bbe2d","first_seen":"2025-12-07T15:50:47.703127Z","last_seen":"2026-03-30T06:59:22.235049Z","times_seen":55,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026co=aHR0cHM6Ly93d3cua2c5OTkubmV0OjQ0Mw..\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ato725tviiul","date":"2026-03-30T06:58:15.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 30 Mar 2026 05:17:42 GMT\r\nexpires: Mon, 06 Apr 2026 05:17:42 GMT\r\ncache-control: public, max-age=604800\r\nage: 6033\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-04-05T13:46:35.749816Z","times_seen":542742,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@9.3.0/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@9.3.0/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 39763\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 9.3.0\r\nx-jsd-version-type: version\r\netag: W/\"221af-Y8Fk6ieasqc10zeyVaJWvuedoKk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\nage: 2589725\r\nx-served-by: cache-fra-etou8220046-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139695,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65285)","md5":"4570fef97846ca636c3c49463f861552","sha1":"63c164ea279ab2a735d337b255a256bee79da0a9","sha256":"4651353cb061bc4c99cd04687a305193ecc7d4842aabf453914a59eab46781f2","sha512":"bf569392feb91f1548af4f4ccd5e9e30ad9c7580e34bd4a5231c5b91c2a7dc8a4d316d8cf31640e50e2e929f8f4ba74c1f34cb4b1962b35543ea87003f55319a","ssdeep":"1536:EIJAfGWjLP8NE6WG/KxXzbolxU/yBkt+TSD8wkvtnTClvwSmp8Y7CjGEG5/AsVuL:HJjNi+CyBkoBUvwNp8Y7Cji5/5cp5v","tlshash":"7ad309896221b57546e316db93e4c621a3b50540b80ac8f470bd4c9f597ec9813feffa","first_seen":"2023-05-08T16:47:31Z","last_seen":"2026-04-05T13:40:43.943818Z","times_seen":1920,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/AMG-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/AMG-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 10163\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 21:54:52 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692cbd2c-27b3\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539714be7568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10163,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"70f205e404fabebaeed5d079d60e3489","sha1":"05d50a93cad4d9ad9c988b1c716a6f81586c4566","sha256":"abc6a3ac563ebf13d031bb6db731b519538b0c03cfa92a355b77ce1d6952a288","sha512":"acbe1e5bc3902be3047a791fa309c69247e07904bd89b62b352a18d8f0922a19786c61a57e72b8355ab0ad35de469127f43458dffeea0f88fb87b9981065a2a8","ssdeep":"192:XRNRCeUOHb4LvfMyUZa+l5uvOdWFK6rnw/BrKdPDpxIcvtT:XRJYSqFK6rwJWBD51T","tlshash":"7922c04ae66a1530dcf590bf2d3f6e99f48d1052d9693917166f505b0ee1a0080fe93b","first_seen":"2025-12-04T14:34:51.765736Z","last_seen":"2026-03-30T06:59:22.236586Z","times_seen":7,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/POLY-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/POLY-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 9623\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 22:21:31 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692cc36b-2597\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539733daa568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"451ab0d873e741646cd01136d14c4963","sha1":"b9790e0bf62c478cb23f53d845eda0e3fd41cd73","sha256":"a010c4128d500bff935f1413b75b6a1af13c0b1ba25897874260f02c8f44a3ff","sha512":"9397eb1bf418908e76178945490170e91344153687d494c7dcc204a9f48917838169c07e6a3c19b2b7f9ce520978d0a5a3bea5423ae0e1e8e194d3c249ed7526","ssdeep":"192:JLf93HRgL+l60O2Va2kJtXNZ006eHB8dLy3UGvAQiwWFZyzNhAlg/4:l13xnl4qkDH6MBRUk53WFQk3","tlshash":"fa12c0102e124349ca2af39b1ef1616e8fcb767d2ecf49fdd7a3361118b1aa105ea540","first_seen":"2025-11-30T22:26:42.712106Z","last_seen":"2026-04-04T16:58:22.850462Z","times_seen":55,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/TCG_GAME_ICONS/BNG/EN/BNG084.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /TCG_GAME_ICONS/BNG/EN/BNG084.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 16584\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 22:58:24 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"6930c090-40c8\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e45397e486c568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16584,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"bf930bfd1ad47a789ad46af339443254","sha1":"f2756ab2001a612b74c05b24a32bb271b98e32d3","sha256":"0eb0d4609c6e8cf0957fcd97259103248eafa22ac33cf627598503514caafd77","sha512":"6b8bde7f1f0193b5d8b20ee74e657957aae5a44bacff7c8016bb812ea126bec854da877868af15d8de4c34728b0c018f0edcb41cae966c691b5bf1c7d4d64ad1","ssdeep":"384:6b7OCEVxj/fGlBRw837ZDjtM5DYX757VFmfuni21PJhVV:67IXW2KZBMFY97+U7JhVV","tlshash":"4972c0ab3e1afc91bc9bf3b7ed71d40a8695f014a1fc17db0c218b9795b0e580291256","first_seen":"2025-12-06T09:14:01.782479Z","last_seen":"2026-04-04T16:58:23.068382Z","times_seen":16,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026co=aHR0cHM6Ly93d3cua2c5OTkubmV0OjQ0Mw..\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ato725tviiul","date":"2026-03-30T06:58:15.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026co=aHR0cHM6Ly93d3cua2c5OTkubmV0OjQ0Mw..\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ato725tviiul\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Mon, 30 Mar 2026 06:58:15 GMT\r\ndate: Mon, 30 Mar 2026 06:58:15 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"8461de2ea2f2601eaf21ad5931e74681","sha1":"115fa39dad73b3bedfd6778a27122aa30d2826a8","sha256":"9b81e9a5eb8a2c4f7a3c7d22dd92bebded7d4471ee300444c67c678b4a893cc8","sha512":"1ab5c97bd41c499b2b1e71f740c493d889e0fe35046f77755a34c7aba0f0ced418610881c01148055d7470698e2332cf375a543cf87313d0cc5b5ff0de5ff3fa","ssdeep":"","tlshash":"e3b012731575c43c0c020203d627a7ece0435074d650c8f841347fd841690e7522d500","first_seen":"2026-03-26T03:15:38.909416Z","last_seen":"2026-04-05T12:53:22.638975Z","times_seen":9881,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"identitytoolkit.googleapis.com/v1/recaptchaParams?key=AIzaSyAYbbom8htY36mh6PM4gmKSy76ey2Lvk_w","fqdn":"identitytoolkit.googleapis.com","domain":"identitytoolkit.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:14.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"OPTIONS /v1/recaptchaParams?key=AIzaSyAYbbom8htY36mh6PM4gmKSy76ey2Lvk_w HTTP/1.1\r\nHost: identitytoolkit.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-client-version,x-firebase-client,x-firebase-locale\r\nOrigin: https://www.kg999.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.kg999.net\r\nvary: origin, referer, x-origin\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-client-version,x-firebase-client,x-firebase-locale\r\naccess-control-max-age: 3600\r\ndate: Mon, 30 Mar 2026 06:58:14 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":103,"dns":1,"connect":21,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/PS-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/PS-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 3065\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 01:39:50 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692ba066-bf9\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539713bdf568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3065,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"c3ff79a2b8debb269e7a41c481ed6fe4","sha1":"2ca2f17b72bb35d3e662c892f4a4157fccb87998","sha256":"59664ee5542a5a4a22e80413ab6f7237a06230163ea0cef560745512ddeaadcb","sha512":"9734e89ac5d1f410ca93d137d8d9e5415ee0d5e0697e5d3df6736c174f1303bb4ee04d4f3472e9dd3bf2f0a9a2cd03e0747327f3afd7646f8cf462996cd2265e","ssdeep":"","tlshash":"065119d8be520580c8ad53f65adef24bccd2e715a6eb1ed77ed4d892e3c01466284c50","first_seen":"2025-12-04T14:34:51.561331Z","last_seen":"2026-03-30T06:59:22.240164Z","times_seen":9,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/RLX-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/RLX-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 5991\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 06:22:38 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692be2ae-1767\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ce59568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5991,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"f8777eb7702c51da5c6eb18dc4977465","sha1":"239d7b25de814c69bdd446c044a116b30e0d55ca","sha256":"da347f03ccb7ff2f8c080fe45eb420e851c868730a37c122dfd52756b11d8e5b","sha512":"806bc50c7cec8b11fe60a068bb18f8eb53eeb094d4b73fc8a2ced4783959c35d7c7bd93e323695264c406c23c745394d82ca405d21c5558967aee27f1e21a815","ssdeep":"96:Yo6MaPwm6zEUUoId4ishhYwa66SOEkBdZpJ3tqJ6+CFyh0ghnzG0S:XaPazEUUoODA6pBd53tq0+C0h5Rk","tlshash":"f1c18e805ce4e300cd18a27999a96c8459c60e7928708ae7d1f4f37e313881a590f48f","first_seen":"2025-11-30T22:26:42.586128Z","last_seen":"2026-04-04T16:58:23.046337Z","times_seen":98,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/img/fish-banner.8d6a906.png","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/img/fish-banner.8d6a906.png HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"69bbd489-576d\"\r\nserver: EdgeBot-CUSTOM\r\nexpires: Tue, 31 Mar 2026 06:58:11 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 19 Mar 2026 10:48:41 GMT\r\ncache-control: public, max-age=86400\r\ncontent-length: 22381\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\neo-log-uuid: 3876538624925654808\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22381,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 250, 8-bit colormap, non-interlaced","md5":"8d6a906476b89234907bac1812aa563c","sha1":"50a510e71bdbb3e2ffae4cd39aea4752a8968238","sha256":"72fba8856ec98a6e6ef9677cc16184aa8750e6945c5ef5a858ac8883d6f4194d","sha512":"3f464af87b019ba3ba11699b064cf7e4a8520ed1714bd1720bb8d35f920135321c01abd5236a4d3f0518a1ae4b4645dcdb22fce9a392c42b830e903df61f825a","ssdeep":"384:Hy2f/dnC2go6TQnMVQsfJjJyOtpcgFD6L/QVuLl8h0S:S2f/dnE1TpQsfJjDVF2QV8lG0S","tlshash":"a8a2e1d35ab2648a54f6e961196c5025842cd94eeffc44cc39f008735f7614e1bf06be","first_seen":"2024-12-30T10:25:05.477786Z","last_seen":"2026-03-30T06:59:22.241593Z","times_seen":4,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766147298368_17.%E8%80%81%E8%99%8E%E6%9C%BA%E6%8A%95%E6%B3%A8%E5%9F%BA%E9%87%91.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766147298368_17.%E8%80%81%E8%99%8E%E6%9C%BA%E6%8A%95%E6%B3%A8%E5%9F%BA%E9%87%91.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 91072\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 12:28:24 GMT\r\netag: \"694544e8-163c0\"\r\nexpires: Sat, 04 Apr 2026 12:18:13 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976c991568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91072,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1dce109817621883000f9f2a8f5bd312","sha1":"96e9231492e43c0c7120a92fe215fbfd7418bc48","sha256":"abf8fe3dd69016c50f0ca01f9209398c8c2166ed48c35823029430e675e4d8b6","sha512":"5768ea1b196bf422636ad8feb90d700b7bd8f46188480f93e7269475113c2dd0ea82e0ce0819b62ac491058aa0ec2d9fcb27b7a8661e9b1b199b8c2330078e84","ssdeep":"1536:Szilj8t08CccejoejvPcbioRAi2fC7dmYVD+UJLVUjoX+pQV/1sbK5zkKkIXDW:EiljLcxMej3loiCoO+UhVU0OpQV/1sbD","tlshash":"3f930241736ee306d6af62641cc7724a5397c1e52721b93e17736aea8bd3072643af0c","first_seen":"2026-03-23T09:59:23.582084Z","last_seen":"2026-03-30T06:59:22.242488Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/EZ-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/EZ-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 8544\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 14:29:29 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c54c9-2160\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453972dd54568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"7ecfd072d233abd441647caf8038e7d1","sha1":"e5de9b5dabea1b192b2e5d628d0965b716bb535f","sha256":"58a1ee8b2c35b055c793d86691be61203d80b18a31f79bb996e6a5a18357bd54","sha512":"d33540e691caadd8f75b7c06241d611f1f79829ac87e5d9015f1efd562fbb0a9aa23e708845763f3cfcc355cfc19a543871cd65e084019fd1e1f7ccdeaba7dca","ssdeep":"192:EFDIa8nvZayHoxlDG4oeJoB1u+kUdDkOuhbx4AaVMA:EWa6vmxY43JoDuNUiOuhxbA","tlshash":"19029e0c5c9f1225dcfbb93ca441e2c06ecc1039bbc16b1c4a16bb52c836cb2e1a93d5","first_seen":"2025-12-04T14:34:51.776238Z","last_seen":"2026-03-30T06:59:22.24368Z","times_seen":8,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/SA-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/SA-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 7454\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 11:33:21 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c2b81-1d1e\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539730d82568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7454,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"8ccfef0b3c148bbccd40ab08b14a4558","sha1":"9a239a69023e5e0a2f0cf5e1124a50ebd6119f17","sha256":"2204ba3f78369c5277f7b0cfb1ceb4386568f05a8f3045677906e6fa03fd927c","sha512":"0fe251a503c1292b2183e9ad7ace1f08580ff1b387a69c1a349f6a2d4db67a47da9fdf5da8e2841e41c58e7ebb9ff2f2376fb9ed4caaf0215afe5ee164617b67","ssdeep":"192:wyCb4OsFqYiWHQKXKX5gFxYHz3wRJ+QhOoGN:kbsMWvaTHz3gJbhOJN","tlshash":"5ff19e0849613dfbfa75573687e69ebb9b64886e6daad730c74c9c89413148ef42cc02","first_seen":"2025-12-04T14:34:51.590499Z","last_seen":"2026-03-30T06:59:22.244579Z","times_seen":7,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/PT-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/PT-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 5767\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 05:14:28 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bd2b4-1687\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ae3a568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5767,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 4-bit colormap, non-interlaced","md5":"4e1c5b305aea30bcb9279faec86d913d","sha1":"790c1f21636d9642224e23614ab8b0a2e6aad5dc","sha256":"aa1173b082b719f0e326acb9460330117d5f9c87de9e47f764ba43e96046a4fa","sha512":"ed6ddaef9a1fc0989a5604079da0307bc2f23572b010825f94591dc5caaed9177cf63d39b01697e85fa32a5d85664a2e4023e1bd17147e227bf9c118bea67959","ssdeep":"96:rIuv3FDxaCrIhX1OCCG6zuTRrMHEVxPEcggrYcAj1ai+H+O5+zkp+oR48yVpuScz:JqCrIhFP36aZMHETPEcgg8NJD+H55rpn","tlshash":"85c19e45b333847ecd63d5f190dd290b4b9d6032564b3d8ae28812aefe5628cc319cd3","first_seen":"2025-10-14T13:42:02.434164Z","last_seen":"2026-04-05T13:13:38.885347Z","times_seen":275,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/TCG_GAME_ICONS/PP/EN/PP0262.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /TCG_GAME_ICONS/PP/EN/PP0262.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 21343\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Dec 2025 04:47:28 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"693263e0-535f\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e45397e083a568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21343,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9c5e1d0a6c3ca28544a8c42a2720f14b","sha1":"2bcc8d0536ad472e4bbcc3a9ea96e25ac9c4243a","sha256":"b378b2756deaf049e2ec8b05e9bcf3da138d97aa04da591c2574615e198e11b5","sha512":"b5e72eebf34d16d30eb0db1993cfe56c1bc7da900bb4ba734bfbe689e23c41a1bfcf97096011189a69c92d7919953a236b358d1c745b4f86be75c41869a16533","ssdeep":"384:Hq+og6nEcTAwEWerO8W2+UI2Cf5vedRjmzV7Sv1iAMk91U6H:Hq9EcTGO8h+UFCf1ezhhpvUQ","tlshash":"41a2d1d8a4f54d09fb2307b14d1c235911bfd49a244e3d39bb89f6a1ee620d42e1c4aa","first_seen":"2025-12-09T00:17:16.471423Z","last_seen":"2026-03-30T06:59:22.245548Z","times_seen":7,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3","date":"2026-03-30T06:58:15.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370674\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 30 Mar 2026 05:03:38 GMT\r\nexpires: Tue, 30 Mar 2027 05:03:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 23 Mar 2026 04:01:54 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 6877\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870412,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (703)","md5":"b55b90c630ad899c694dc42582979708","sha1":"f08949879387eb8dd6553c8b0c548c701b5f0db9","sha256":"eb297967f5005eb95dfb369ff9f780a436a67144be372260b6f86f6fe37b917f","sha512":"eb9945688c1c7a4847df769bd9072f9f3be532c697c1b11185b48345162ab6a22c7ac2b8a251c9835e81ad8a8b155d67f0885a1986908cd69b3f9370f5a030d3","ssdeep":"12288:Epo+RhFDORIh355fBjbFOsAi6dhTOLtl5dlV3EZm9eyVbI:UhFDsIZ55fBjbFwZItXB3EZAhbI","tlshash":"ea053bd879127be16372b4f510673009736da826d88c086df6a5d8f02eb194d70f6ebb","first_seen":"2026-03-26T03:15:38.916554Z","last_seen":"2026-04-05T12:54:27.610989Z","times_seen":11757,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/MCSFE_getMerchantAvailablePromotions?","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/MCSFE_getMerchantAvailablePromotions? HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nx-app-trace-id: b4gkrkq115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: REWCEN3\r\nx-elapsed-time: 3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncontent-length: 87\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 11518727833642086556\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"484e66f112e7d0b73fc477c4fad435f1","sha1":"4be93b860ca462ceedba54baa09d411e63ce6959","sha256":"8e36e490a37c8149cb1e4fdad4fd53d481f1258f2e4026396405d91f56d406c6","sha512":"161b60d9ed3ce358744f09441ec4b6cd7fc2c5f0a6b60fb36c514ef0063e5a80dd2d175237cd814cb7dd9861baab912a2c90f1385d8f91b32f6c4a7da32cef53","ssdeep":"","tlshash":"04b01207050020a18291c004d23c3f032075483346033018c208912ca97f92903cf866","first_seen":"2023-11-24T20:05:56Z","last_seen":"2026-04-05T13:13:38.762252Z","times_seen":1284,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/PROMOFE_getPromotionAnnouncementCategory?","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/PROMOFE_getPromotionAnnouncementCategory? HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: izi6j0p115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 1946370273097174164\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1288,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2ebfa8bc65a7f888694bbed8b9f5dce5","sha1":"14ea63d3a1b1464f2bdba3a5a63a8d3371bcde98","sha256":"b14bba60254362bb2736977c992676e7d4fb17a5291219c3bd696e830fd53951","sha512":"37a0b44811fdc7d73352238c976241bc2e811446d0293c1ec8604cd32a4fbfe49d8030b264e06f45f7741bca3ab849c67c9a1a82c022c38e4bff29ac6485661f","ssdeep":"","tlshash":"1b21bb6558698cf4837c79d065c37db4926c3b43faf41e60519cc6b881e9ba0a012b7b","first_seen":"2026-03-23T09:59:23.453228Z","last_seen":"2026-03-30T06:59:22.247848Z","times_seen":2,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/manifest/numberSeparator.598de917.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/numberSeparator.598de917.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"69b91230-1bf6\"\r\nexpires: Tue, 31 Mar 2026 06:58:10 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Tue, 17 Mar 2026 08:34:56 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 1705413272312201799\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7158,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"598de917c7a1390e1b4cc5e65be75eb6","sha1":"8de5f9ebfa6b92d1b42d0086066ba653e094f3dd","sha256":"bdc44edeb986790b38c4c64ee36e5e1fa7b39ffaf89e4e4799f4f315da9a0a0a","sha512":"9895abf61392894b5b8746a0e145a578898c55081c8f3242223986500813fde1aca1f574f01d5dface7710cab4382a132cd861bd99a9b21d2a734933c375a391","ssdeep":"96:GIOVuXQTvvHfyiwCJd+SYgyquFWqSqyEcdpy5FMRSrbEonLmmOKVrxYSEB0:GIOcXYF1JJYTqGCqyZy5FtHEoBtYp0","tlshash":"afe1cd5972e720728a3f30aa5bdf80016531255bb088d9897b1ccf44af52c79c793abe","first_seen":"2025-11-06T02:56:03.081794Z","last_seen":"2026-04-05T13:40:43.927866Z","times_seen":768,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/lotto/lott-common/lottTranslator.4d57696c.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /lotto/lott-common/lottTranslator.4d57696c.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 04 Mar 2026 09:58:23 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69a8023f-12a2c7\"\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\nexpires: Mon, 16 Mar 2026 05:36:56 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 246897\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\nage: 50658\r\neo-log-uuid: 3993779995757542288\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1221319,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"85076039ee524769b50575ae59d24c0c","sha1":"c7716b2d4bc180fbb27d0b1634e9ac331f177d09","sha256":"bcb38f691af0d9121b52637725a69edb6ffe3ac53c6a98776700ebaebb0af407","sha512":"112780e49144c77d20944608caa0bc075f1968008e889cb9887fbae393ad0eaf0514b72c913e9c4ba6e0a2ead1e2c4b9b0f6e6d1ddc19fa53edb7e3dc7abd4ca","ssdeep":"12288:P/99+7HZXxlPZkSGH31cuSaJaTbKm6JiTFxZl27TEi4hGQcCSD:+7H5+3erMm6JUFxG7Yi4qD","tlshash":"e7453bbe93a62aec0d5e735b5e9b30a1153d0508acf537c2cdac1e18778cd1da072a67","first_seen":"2026-03-15T07:58:41.642779Z","last_seen":"2026-04-05T04:52:37.090581Z","times_seen":18,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/RT-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/RT-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 9571\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 01:13:23 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692cebb3-2563\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539719c38568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9571,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"0da534f9834d76d4886251f6c10b0ced","sha1":"d71b10d5a2a16d03fd0b51c338c9b5314cd8cbf2","sha256":"fbc84b585e4df8b9b974f9d428cb8f8b0350dd55efeb4d81f657001f6a1a7ef1","sha512":"912a0a80e587145af22c33a8939f6bf89b7bd465b26d3b96ba909e70ddc7dc85268639ab22362162a336dfbe44c9425d3814d3e7e3a081ff8ccecbe08af2cc12","ssdeep":"192:Ed9lx8hNXkjUXTXMWthT4uxoKT2EiAVDxwn28MuEHLHsR8G+:EnlxC0jUXTcW7TJxa76DK28MuEH7PG+","tlshash":"1312a0039287d4e6d520b7bfa45951557b080e2043b26cc19fd85659c0e7fd29de6bc3","first_seen":"2025-12-01T10:04:00.986862Z","last_seen":"2026-04-04T16:58:22.946267Z","times_seen":100,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/NE-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/NE-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 9332\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 20:35:44 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692caaa0-2474\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539725cce568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9332,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"19c449a93377a25753578a1612e60bb8","sha1":"7b3cd9a09b2a07d1cefd27eb347279a0528b482b","sha256":"362be881e2866e32be73df7b8e3b5434a724deaf596272d6cb33ffd12aa69b22","sha512":"567d5bd47bb9860b2416f8593315f41d84487b6b3ca4faa257624209c24fc2a133778289fdab83d9803d18bcf5322cd69d4f4027c67af896779b4035d83ef4f4","ssdeep":"192:fOuqvTgI1mG9pL5CFhCWjJnF728KIVV6AoMxzhL6rNyMSfo1dVLEX4DY+dOqbspU:WHcIMG9pL5chRjJF7284seY5o17LEX4P","tlshash":"3512aed4dd3bc0d4fcc640b30f3f061da2d75639890bb93e994a0fa96b612a19388525","first_seen":"2025-12-07T11:07:16.372011Z","last_seen":"2026-03-30T06:59:22.250527Z","times_seen":4,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/BOM-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/BOM-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 7368\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 11:52:12 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c2fec-1cc8\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539725cd4568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"8d991551be97d039ed4c067a6f1d0b00","sha1":"dd9dc17baa0f13b29ef72f54322177f92821ab2f","sha256":"b89302933da4d9bc04df1a894e9de49287b65077c3558e71adcb083f4240fbdf","sha512":"4d58c59b0f96d1d9f204f724d4a5132f012e53df882eb64e714151f0f1ee66cd7618e1b9c3a12533d913aaa63e69a231f9ee559f05314d1ff4d1bca89d1a78ef","ssdeep":"192:Vmz07U0gTjWWGNpzw/dE/XKr1gaCKp6+wpw/+ly:VpU0gvGzz0UXm1gaCKpcpwF","tlshash":"4de18f9283352bebe0a8247f6c179660a6fcd9ec01494a4e0b90859cd2c595bd76f221","first_seen":"2025-12-04T14:34:51.763003Z","last_seen":"2026-03-30T06:59:22.251171Z","times_seen":4,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/css/vendor.d8e6b30357043383182e.css","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:06.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/css/vendor.d8e6b30357043383182e.css HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 19 Mar 2026 10:48:41 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69bbd489-367be\"\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nserver: EdgeBot-CUSTOM\r\nexpires: Mon, 30 Mar 2026 12:33:26 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 67409\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:06 GMT\r\nage: 66280\r\neo-log-uuid: 14472714592969028542\r\neo-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":223166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f98d16be697c5519899fe90a376ba196","sha1":"85e0cbf55ff212d505bce2eabee29927185f9d8a","sha256":"65d9a5123fbc1fe8214ee27c9fc13edd5bb3f85d03dc392a42659abfa4e7d54b","sha512":"96e408e805f51bb3e8cbbde403f5d7adb466f5f58ba2edae2400f11bd85d31e55cdb1b27dc2f9bdd957bd128b5b5d8cbf30869012c098ba50309b03ba6d839da","ssdeep":"6144:NrkH33dYje9CB+R4UXkdYLLY0TyQv/fRk9TMnk+HW2UAsfi5oCXjB:Nwx9CB+R4UXkdYLLY0TyQv/fRk9TMnkc","tlshash":"05243c2359403218a037ce2667d866995539c223d1233fee7da13959cbcbdd722b728f","first_seen":"2026-03-13T11:40:16.275341Z","last_seen":"2026-04-04T16:58:22.867913Z","times_seen":11,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@antv/g2@4.2.3/dist/g2.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@antv/g2@4.2.3/dist/g2.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 214841\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.2.3\r\nx-jsd-version-type: version\r\netag: W/\"d82c5-eSJeFdMsBDXE0ShH9a6Jvs4xKt0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\nage: 1805272\r\nx-served-by: cache-fra-eddf8230181-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":885445,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35280)","md5":"38ac8e4d3bdf9e4d4590f90f572b57ea","sha1":"79225e15d32c0435c4d12847f5ae89bece312add","sha256":"2cea25f3456374b0b3c31f35c6d9b78e638bc26710e8373d9a383ce703c88d4e","sha512":"dcbcdba45f623d55bc6dbb213b120645598396ffb7da40672d32ebed498b6b16788d2e999783e8b27e76c59d18b39ed5d3f4c69fb312b68ae54e4ab48ef10211","ssdeep":"12288:mLSlPBQyGSFzPOMKwnYgNsJsD7AzcFe4zqWf:m2a3IFfX","tlshash":"d215d9a8719078b1829361e8043f050af23ba86d604f65e9f7a5d9f3ac7d84f1076f76","first_seen":"2023-03-07T12:04:53Z","last_seen":"2026-04-05T13:40:43.905535Z","times_seen":1876,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/JL-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/JL-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 23429\r\nserver: cloudflare\r\nlast-modified: Sun, 07 Dec 2025 03:26:35 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"6934f3eb-5b85\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539735dc8568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23429,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"da692404e1728e67eeafd85b8c18fe27","sha1":"b9de2d7c611fb754b8b6cd48e3891efed616ad17","sha256":"99fc368cba6b1fb77e143add92aa66034c90eac40e14d48c398130344341485f","sha512":"230869fe90660306565c9fd4a55e49cee7ec7b26219bc575af2d6c9b760196bffe61a419963763e3486337fbe93819e818a32d6fd0201cbe86c13b5381291792","ssdeep":"384:WhNJKRJOBQGHvKmxr86gN2EE7CmVzd4BQOK+9IFvJ7GDdRLj0XAsWaLqr8a+:GKM1PKuI6g+DVYQOK+W5J7GgvWaGQa+","tlshash":"3db2c097d6233ba6d4ca0b3c776f48e555cf48ea4051578ac03f9ef78d9087e6400d9a","first_seen":"2025-12-07T14:33:16.104283Z","last_seen":"2026-04-04T16:58:23.002015Z","times_seen":131,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/YGD-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/YGD-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 4557\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 03:41:08 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bbcd4-11cd\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539712bd2568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"f3210bfd7fc4413d37dcbe16172bd5ca","sha1":"041999db8ee536a1be55ae3c24e0fa9b9ed9a5b7","sha256":"d7847b670be9e265efc4197844f352b77717ddb08137b274ed707b67cb1f2bab","sha512":"3a04234446f999baa926fd31712308f5697b92ca2b949640b7586cb93ea8bd34af4b65fa8927bcd713d3e733dd9a8d58f0b89e955be45b8ed5acc5f380eda5a8","ssdeep":"96:0PL2ElzUC0dX/YOAyyfXzaNULwNvaX/dFgZQjiWC:cLWzXQOAyyfDhM5ZQeWC","tlshash":"7e918d72dac05df6ce78eb72028d1abd92a68c108ed247c481289bb5897df890f81957","first_seen":"2026-03-23T09:59:23.623273Z","last_seen":"2026-03-30T06:59:22.256148Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/AVT-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/AVT-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 9703\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 19:25:57 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c9a45-25e7\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539728d01568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9703,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 4-bit colormap, non-interlaced","md5":"b956953f3de97496e0847d136f1f3181","sha1":"34383cdd690a256c4a4e4cc43ee3aa923e5dbde9","sha256":"93803e3d31425caf18d71ff5255cd53bd937e416e1fe9ab0ace46ee05d6c24c7","sha512":"9794c2bf301094e042ee9faeb4b50ec3691b66893bda44b65874257f3167ebac99f05a0b1be2d819663997bfc56b9a2b2b8836f1a072f8c488efe21e3f5f73bc","ssdeep":"192:TUKgECIevc8GpEA6kFjNPvc7Eb6QIMM+E8H45K97rK/OdfDW:TUY3Cc8OTzvcwblIMM+E44KrPdLW","tlshash":"7912bfa9abce43f7f3a54af5c2c46f4198171181c191b2890e6d5abc2cccd49ed905ac","first_seen":"2025-11-26T13:23:39.443628Z","last_seen":"2026-04-04T16:58:22.935063Z","times_seen":71,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766146955514_4.%E6%AF%8F%E6%97%A5%E7%B4%AF%E7%A7%AF%E5%85%85%E5%80%BC%E5%8D%B3%E5%8F%AF%E6%89%93%E7%A0%B4%E9%87%91%E8%9B%8B%E3%80%82.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766146955514_4.%E6%AF%8F%E6%97%A5%E7%B4%AF%E7%A7%AF%E5%85%85%E5%80%BC%E5%8D%B3%E5%8F%AF%E6%89%93%E7%A0%B4%E9%87%91%E8%9B%8B%E3%80%82.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 95525\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 12:22:42 GMT\r\netag: \"69454392-17525\"\r\nexpires: Fri, 03 Apr 2026 17:20:21 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976b968568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95525,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"a907f96c2052bc3ac05fe892341114a7","sha1":"bbeee77c8a890a525826d4acd844af24517a9e9d","sha256":"3b797493e537514881591d10b0ddab332cf734c33a5aba9d9dc6ea2b49f4bc3b","sha512":"cbaa41ad5a360d9c24e018d24eac71c15b4a4129abe4e3b9c0fd0b4ff34824784d584d5e96f2ff188f144f541b7d178cf53b41df187a8b3bbe5cc90667e70f45","ssdeep":"1536:TtQDDSIySMasocA6tJK9VpG1QBbNYOzd4N7GaRhI8inM1MY2ZADhOHjPpPHI7q:+DKBaso8tJCpmQBbNQ7hdMF6MHjPpw+","tlshash":"5693124ca3160936c6958530e9323f716fa6d06865ccc63fca250639ede357b5f82bc8","first_seen":"2026-03-23T09:59:23.65741Z","last_seen":"2026-03-30T06:59:22.258746Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/SB-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/SB-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 16918\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 20:55:57 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"6931f55d-4216\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539733da6568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16918,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"8c1dc5207fc416a21778c5840215b6e7","sha1":"3ecdcfd1a211a4a6e5528e4f4cb6e158033eeb2b","sha256":"d7a297a55bc598a13e5cb29f2cad029830c62a20f30c50dddeb4d8c03945610d","sha512":"103d527243eb8c17e2263d286cf2cc995b2e31aaecbcee1f464fbf03099ca59580e4e266f0b60167a174bf4dd53a5b8eb50803ed6b50be22fbb3c20a23c80648","ssdeep":"384:f3ZVAJTmPvvpxMrmr/HmrJXBUZRtzzxQMmEnZU+DM3LnjPmWS6uGh:v3AUPvvp7r/GFXuvtzzxQhEyXjOq","tlshash":"ab72d1cb655761f4fbe1cc70e14305e48de7292f7c6410bbda1b94f2a4529948d3ad38","first_seen":"2026-03-23T09:59:23.642472Z","last_seen":"2026-03-30T06:59:22.261314Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/HS-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/HS-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 7049\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 08:59:09 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c075d-1b89\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539738e11568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7049,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"d9035a4500402d899b7fde752eeb7e65","sha1":"4119598f75ac60cd1ed32a131858c14e313b1073","sha256":"e9f23b87e514eaf05c22266b58bce2eb5ac1bbc930247dce226f4ee9aed40123","sha512":"26739e8b622c2da999840b21c42525ee2b39f3139e4c146353a8c6fbf02e91cb873c0e6cb6b0e4b097eadeeb76d374c03263e1cb6b7cbe8c93dbcf722274709b","ssdeep":"192:pqapvyn5xT2XXq4qdpZuJImcYPo5c+MgA8VqOHd:9pvsn6o6SLMgAAn","tlshash":"16e1b0cb93a4b02ad5b8517552343822ea9c6e71e8062707971c723dd0f55289facb66","first_seen":"2025-12-01T05:19:45.375049Z","last_seen":"2026-04-04T16:58:22.931724Z","times_seen":121,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/common/promo-ui/assets/entry/main.Bpc_8MB9.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /common/promo-ui/assets/entry/main.Bpc_8MB9.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 25 Mar 2026 03:08:22 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69c351a6-1dde07\"\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nexpires: Sun, 29 Mar 2026 20:04:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 462654\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 18443764903879443929\r\neo-cache-status: RefreshHit\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1957383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (616)","md5":"e7b8925886314d0f961f119f4922f3da","sha1":"535c8aaa498e9789b670f90671ea1b290d51db9b","sha256":"41cbd5a6285a7a01a7026c8388372e60bbe99a50735b1428e981608ca7ce6c68","sha512":"32d21d7f7670868286147071dc17e155e6c7b4bff75cd12b04a413be77387956eeade41140382aa5f699202ec22bf83b60bf615cd8f3c7267f11a731725033d2","ssdeep":"12288:AeZdbvl+CinD8zkO/+j/MZOzO6B1lNoBSRmcYEq3imBw+c9Ywb9fv53wvCv2zHBm:AeZdbvUFnD8zF/c3mBw+c9YwbyicG","tlshash":"f135f9055ae65c30916bf15a565fe920612050031e08fa98fa1e4eb83f9d73cf6f6bec","first_seen":"2026-03-26T01:53:22.753916Z","last_seen":"2026-04-01T06:18:41.127676Z","times_seen":8,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/qrious@4.0.2/+esm","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/qrious@4.0.2/+esm HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.kg999.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6640\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.0.2\r\nx-jsd-version-type: version\r\netag: W/\"459c-FGDl5OysMllgYz55EYyWgp8d+F0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\nage: 1492022\r\nx-served-by: cache-fra-eddf8230052-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17820,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17476)","md5":"3f0602cee23a7b0377062a1a341d01b1","sha1":"1460e5e4ecac325960633e79118c96829f1df85d","sha256":"8478c77637d268ea9f88e1aae84dacd031256fb67063a8d94d222cd3eff8f84c","sha512":"7c1c6533f0e924a56239bb1395f6d4fd26cb9e718e355fc5448008da6fa6ca980d9a57e6d427e71e751cb66120dcfe5af1ce80d6b093d5336ab82ea63c0b9dec","ssdeep":"192:NMSJOPXg7hZv1fpYoE8GS9GLhgbHcj/13BBenIhG8+f3/pSq3c/WJBS7SEzonxKl:eSJOPX6wl8GfYUfhpfwcqEhwdlmRvki","tlshash":"a182859673a19269639669d5083f244f82f6e4193418429cfbb2c9dfbd3c4c96039f3a","first_seen":"2025-04-04T11:34:30.82088Z","last_seen":"2026-04-05T13:40:43.918591Z","times_seen":1566,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/JL-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/JL-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 23429\r\nserver: cloudflare\r\nlast-modified: Sun, 07 Dec 2025 03:26:36 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"6934f3ec-5b85\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539711bc2568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23429,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"da692404e1728e67eeafd85b8c18fe27","sha1":"b9de2d7c611fb754b8b6cd48e3891efed616ad17","sha256":"99fc368cba6b1fb77e143add92aa66034c90eac40e14d48c398130344341485f","sha512":"230869fe90660306565c9fd4a55e49cee7ec7b26219bc575af2d6c9b760196bffe61a419963763e3486337fbe93819e818a32d6fd0201cbe86c13b5381291792","ssdeep":"384:WhNJKRJOBQGHvKmxr86gN2EE7CmVzd4BQOK+9IFvJ7GDdRLj0XAsWaLqr8a+:GKM1PKuI6g+DVYQOK+W5J7GgvWaGQa+","tlshash":"3db2c097d6233ba6d4ca0b3c776f48e555cf48ea4051578ac03f9ef78d9087e6400d9a","first_seen":"2025-12-07T14:33:16.104283Z","last_seen":"2026-04-04T16:58:23.002015Z","times_seen":131,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/YGD-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/YGD-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 4612\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 03:51:52 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bbf58-1204\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539737de7568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"3b431e8c52e9faf316693f0f5a867117","sha1":"b8866be1369f566babc186a2036383f59ce37e69","sha256":"53fad7b6fbd29bdafa821b0717aa29aeffe3da8c2ecc79385bab5793258b0014","sha512":"0bd58fff34576f15b1b693ee547cdc930847c1ff2b2aaf02fff5befd87181455e45eed457a7850f0a63f8b3817a49294b5fc521fb0f5846aac5879a2e3489ed4","ssdeep":"96:AI+Rte+r2kWB10D1Sb21xd1vVXd3LtPDDCJvMBeyXRc1ugMNhoWFSq:t+Rp2kWBenvTOvMBrRWu3t1","tlshash":"b6918d58a59ca5fdf04c5331332d902ccf7e1c2a7fa069ca2e39f91cc6000644e78a63","first_seen":"2025-12-01T08:14:06.181884Z","last_seen":"2026-04-03T20:09:42.88357Z","times_seen":98,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/BOM-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/BOM-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 8382\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 15:46:44 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c66e4-20be\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973be4d568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8382,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"ec95d1071bc98f92b592bfe224b037bb","sha1":"19527052200928179868c71de8e6f89b57ee33bf","sha256":"6fe543cc492b3d207755b842b7de3781fc33bc679c5aa2250e23c721dd65079b","sha512":"409fef222ac154da53e773c77c12c08eb474ce01d42b66435dc16aab56e8f22554d4971816ab36750e2a4f6c1f6d3056ced1a2c1a29b97e7387294ae04c52022","ssdeep":"192:JCSfSoPAmLtEiKwnDar4NhceWJ0ti0xWMTQ:FFL2iKgur4bsBOQ","tlshash":"a5029f5629f0b156d34770b7922992fff86c4208e34216348f4998dd2abd63c72fdc91","first_seen":"2025-12-01T08:14:06.307396Z","last_seen":"2026-04-04T16:58:22.942283Z","times_seen":96,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/KM-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/KM-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 12603\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 22:48:08 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692e1b28-313b\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ee7f568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12603,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"935d96420ddcd46684271e572317afaa","sha1":"b395acf90eccbab477437a218fc54a27a4ce9bad","sha256":"97e714a609cf86414aabbb5b87e4ff4358d5c46b2aa8cd0e267c88cfc88db805","sha512":"718e90ec8902fc7789404ae63f4d1767efd83ecf345825ec5d04d5a8842fa53bfaf7be5f2da6f54af14a67e2bbfc31ce27d99b0dc3cea2b3c77a68f56ef97951","ssdeep":"192:9uJuSMHRAUma08Y7K1o3NPtcm4174pivVOS+rd0md2vzWJ5p60hXakVgUjawF87:6zkR8aTYOcNPf4+pivo3YKJ55f6UTFe","tlshash":"dd42c0eb53bf12f8ede864b1017088264079dc369d3f09657386e2607e956f798a20cb","first_seen":"2025-12-03T17:38:13.274699Z","last_seen":"2026-04-04T16:58:22.846582Z","times_seen":68,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/ac/v.1.0.1/manifest/ac-ui-shanshan.4fd61a57.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /ac/v.1.0.1/manifest/ac-ui-shanshan.4fd61a57.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 21 Jan 2026 02:18:26 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69703772-6a8ff\"\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nexpires: Thu, 26 Mar 2026 11:14:27 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 51967\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 13212966157105058829\r\neo-cache-status: RefreshHit\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":436479,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1da33a96e9761bbfb926c723229b5926","sha1":"746a0bcc7b5072738ce22a11b7033d7b9fa8da00","sha256":"f2ce6a063526275629adcc9b092d2a945ed92477b03093bf7cdeaa5da5a54826","sha512":"35b2ccaa82820ed5f9828de80fd67552315731c62b9b605b3ef9e0578c75caba4520d2c2418809a1c2c328783f011248fd6a77263d69b2dd2cd20b9f1bb175fa","ssdeep":"3072:vjh1RDXBzXrEd+y/cBDiWiiTn6AXvcyt8nmwsTbNi5bSSSSSa5Sbi:rh1RDXBzXr25Sbi","tlshash":"9d946f14b6e70d7254b7d0d99bae2d147a20c337900ace1e3a8c9bd58fc9c29a5f4739","first_seen":"2023-04-19T14:52:23Z","last_seen":"2026-04-05T13:40:43.904953Z","times_seen":1852,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/EP-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/EP-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 2826\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 01:22:47 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692b9c67-b0a\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539715bf6568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2826,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 4-bit colormap, non-interlaced","md5":"6b1652e32caba1b6699a6470c7c45028","sha1":"099d43817f355ebfc0e0d59f86a6d8343af6a3d4","sha256":"675c47162574e9350131349fc195e46470b7790c4df2008f2a18748ae3a02ed3","sha512":"e12863070aba4ec9887af5675e8ce7006eb267fc1b93c8e3b7b332e05ff75b5e695749370e4ec571213534e60b1ffb81d4323d4a45c7a8a6870452626059ef00","ssdeep":"","tlshash":"44510a48d403e221d56a9abc2bcb8e5886727e5859290409529acc2dfde65cb2944c7d","first_seen":"2025-12-04T14:34:51.726831Z","last_seen":"2026-03-30T06:59:22.267275Z","times_seen":6,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/OCT-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/OCT-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 8901\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 15:50:16 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c67b8-22c5\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539719c43568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8901,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"7274c311620a4f1e4a0377eba6be7b83","sha1":"9e392be940677ffdc1c6c25d196b84e13350b15f","sha256":"d4b7f090504aeaf5d7b8c4931d59adff795a42c36665c0ba78984c27ab5c2f6a","sha512":"dd6970aa0c9dc95d5b03265c634385368af951a5fd9e904790d91c3b1094c0df9f501361ba5273e7e892d90ca988c575458de30f3f5274849fcb2c1ea319e86e","ssdeep":"192:lqx6QJZ1JwhYoKDX7eMpD89PcXjwb7SMVYMxw24Sb/3lD0pJqJIyi0:lqxn1qhqBiUMVYMxw24A/3lDIAJ/","tlshash":"27029ec541946405dfac8c7f1355cf90ae36db9c5abd219e60801ac3756b6a21d173c6","first_seen":"2026-03-23T09:59:23.54975Z","last_seen":"2026-03-30T06:59:22.268286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/AMBS-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/AMBS-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 9145\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 19:12:30 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c971e-23b9\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539737e02568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9145,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"2c32d5a82c71683eda165b80ad799f75","sha1":"b884950a7d5188ea473789a5f2ff07f238ebfc59","sha256":"c5926c5ff670bf29d79e7117a2cedaa2987045015d563b624183cbdda27ae57a","sha512":"35791a97e702cda4a5f1649664e5038828f4690bff18abca83da0ed1f612cd3e07c40afc26f686ee8a2db97002574c75b771d245c4273ab53b320fc26aa7d1a9","ssdeep":"192:sLL165vn26E00X4EMJ7982TBZVvL0qZ2MdPZcqgobwKVM2T:sv1ynrf0k/8yBrvLvMeVMi","tlshash":"071290c71762d14fd2b78d351e10b9b022138d2523212dea9778b600d17a169d05f7d6","first_seen":"2025-12-01T08:14:06.106205Z","last_seen":"2026-04-04T16:58:23.002607Z","times_seen":98,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/AMG-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/AMG-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 8707\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 16:41:21 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c73b1-2203\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539738e04568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8707,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"cc27f4b730ea58e820e9c18b9f232922","sha1":"c30ff907babfcc6607f813810d31200d893482ae","sha256":"b1c6fb849eeb685b7e77a9076ff0301b6bd285b1edabe53a2fbdbfbf041f14e0","sha512":"916e0d837b0141c1de212784cd361f76aa7357267df74aa45a3828b387f1abb0a9e88ffc9afa5bbd5dab1084aa877307a62810bf81e80c009dc95dd0bf2adce0","ssdeep":"192:hTYGs7EKbj0ljrrBMacBG/YX0DqrISo3ex1mmQR/n0v9/1EZecMj:psPbj0lX9iGwhZcevgn0v9//Dj","tlshash":"9402bee4c5286a09d09a6a740e7ecc17f9249f6bd21174566822748794bfe92dc0f4b8","first_seen":"2025-12-01T08:14:06.124892Z","last_seen":"2026-04-04T16:58:23.073138Z","times_seen":96,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/EZ-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/EZ-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 9746\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 19:39:39 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c9d7b-2612\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ee94568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"9a1fcd21c4cab257c5e8b4640d6b7fd3","sha1":"61115ab81ed7c39e5f05a8df0e7f362a9d019425","sha256":"b5625cede175a7d2bf0b89416d83cd71199f97636aa24f634040bfcbe0376e38","sha512":"a6bb47a9b13cc80c816e1d4b51f9bb2c6dcbe896e03bee79d27fc072367e0c8a7e1318b6736502c708cb99e817409deba7d75aeac06a8eead8a18e956b5d14af","ssdeep":"192:Bs7Ctllx7bYExkqYmVpQqJb4IgPQZl1TgwqDdw1hfttZnrHiiiZm1SV+/KFk9RmY:BsOQmY6l14s/1TS+1XnrCZPV+/lsmnws","tlshash":"19129f968f45024a3b3485fe86cc44a7fda41ee825df0add195133062ff2527a414a6e","first_seen":"2025-11-21T16:34:41.43502Z","last_seen":"2026-04-04T16:58:23.102367Z","times_seen":186,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/TCG_GAME_ICONS/JL/EN/JL0232.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /TCG_GAME_ICONS/JL/EN/JL0232.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 18133\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 00:52:21 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"6930db45-46d5\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e45397e1841568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18133,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b2169a32d765120cbe95e616c5e22ce6","sha1":"5c18016a70bf81f6f031809bfe6fea76f8e76f3a","sha256":"ad3c609baf89f827164f145435845763ef2c7853480e071e902b501f57efa003","sha512":"a36f05f0d9bed982051bfedc70594ff3d82ea393e68b8dd2f4918d4bf2a6fb79f705969b3163b43e347438610f2c6a57912b3a3d09af9e86ceefc6421c04a9eb","ssdeep":"384:g7mxZOj8nUgr16MDfdwlf+/0fZMc5oyec+G94mjlRnFlg:g6ZOwfr162feV+/SZMc5o2emJ/lg","tlshash":"e282c039f5dbe581f44a8832fdc3c62aa0825af9da5505c71fc0b8b84b6928f0854dac","first_seen":"2025-12-06T01:53:50.191157Z","last_seen":"2026-04-04T16:58:23.040513Z","times_seen":19,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/common/v.1.0.1/manifest/animate4.min.acc54486.css","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /common/v.1.0.1/manifest/animate4.min.acc54486.css HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"69a8fefc-11847\"\r\nexpires: Tue, 31 Mar 2026 06:58:08 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 05 Mar 2026 03:56:44 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 13583863393389361966\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71751,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65348)","md5":"acc544860202ca85bd85dc0429880450","sha1":"ab2e786b8f411e124e9fbcbc02f323269beff034","sha256":"721fd25fad2ceea766b483f7692fc840097de75bb54185273920adf62da63e15","sha512":"c1622f9f6e9a38f6e7dd2b5ff0fb6a188f432d8f2d9670b98f7c842190fb3b7faa29b54f66e87ff15c7b741d7c65f52deda428d8bfc76d9027c4cedaf1b16655","ssdeep":"1536:h6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTy:AkZgwh1nAukdDO3Xyr5Ir5eh0dTy","tlshash":"3a6329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-06T01:49:24Z","last_seen":"2026-04-05T13:40:43.913292Z","times_seen":2126,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/system/settings/consolidated?_=1774853888764","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/system/settings/consolidated?_=1774853888764 HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: 7p4srrk115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 6130808632401501042\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39076,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1e7b7bc6594314baf1ce678997f1641d","sha1":"4a088d5479707e8181bac2df17f3c752ca61d3d8","sha256":"3ca9eaa1f941c1e7e72be4e975f677c786731079ec4db0731f83a8386ca30bce","sha512":"d97a3d9ef06f093527db8303977f3127bb42c10e80216c4d61be1401a4d7fabd4107e487a89d2ca8977bac74af1b8ffa9629edba5faba05714954255a676622c","ssdeep":"384:TihuIZ9n2wx55poMjlCnZVaChB5CrsW3AlCnR:Bu2MfjOnW3A4","tlshash":"9503af09a420e9af2d4ec0c5e4fd990b59bd8e7ad5fd10718c0c28ac22db9b50757af7","first_seen":"2026-03-30T06:59:22.273157Z","last_seen":"2026-03-30T06:59:22.273157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/dev-images/GCS_VENDOR_EVENT_IMAGE_ICON/8403.webp?t=1772427014378","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /dev-images/GCS_VENDOR_EVENT_IMAGE_ICON/8403.webp?t=1772427014378 HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6744\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Mon, 02 Mar 2026 04:50:14 GMT\r\netag: \"69a51706-1a58\"\r\nexpires: Thu, 02 Apr 2026 07:29:02 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 343748\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539702a6a568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6744,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f363777ac3374daff5a8b4731e1e9259","sha1":"17e6c3d3b456fb1a6601307887669391d9868d85","sha256":"eb6ea9b8e696bfd39a9a70cce819d123e92f6864bcb7f05ae2860c1406d049d9","sha512":"059f093c513a31fb703197ef47dcef34615adba1dcfbc38c2c216e126e77760cf908f60932d58d0820b3a458289ac70316cfe25b12f18c8ea5ae0aef669bdde1","ssdeep":"192:8J9ehnX8chU+vXsxznseIA03vQuoAD+8BYh:IehzU51se8vBlyQYh","tlshash":"fbd19ee021061b62aa6265bba1ff5876c5d53640f7862fe05324fe9c10e4638ccb5e6c","first_seen":"2026-03-03T21:36:06.873231Z","last_seen":"2026-03-31T02:13:00.329233Z","times_seen":56,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/SB-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/SB-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 18037\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Dec 2025 16:12:45 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"6933047d-4675\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539740ecd568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18037,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"4ed6af3b0225d2fa8a684ab007023f5a","sha1":"457d25a270be3decc2592f523a8182311d94904c","sha256":"7020df7ff9a7fbd62cede10dadbcae5e07fff74dc22d8527a64d2f60259fa1ef","sha512":"a06c323df016422cf6b62574b1c5fab98916a9bf65d50ad829c8f3c61d1c8b3eaa8835f436605320f93771d4e54b1bc517ccd9e47921d2560dac246fec00f67f","ssdeep":"384:5reoanfqv6zeMaVyb9a14NJKwttzXvuM8jIj1si++7lxj8rHHmIuD457ASPYVr:J2niv6iBVybwjw3zX2MMIj1t++hiiIuD","tlshash":"2b82d09c2b8a6603d6a7183c7c98f39b8c105acf8515c2692706c8225def26f56d5b3b","first_seen":"2025-12-07T15:50:47.690627Z","last_seen":"2026-04-04T16:58:22.873108Z","times_seen":51,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/img/sports-banner.af1a499.png","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/img/sports-banner.af1a499.png HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"69bbd48a-69e2\"\r\nserver: EdgeBot-CUSTOM\r\nexpires: Tue, 31 Mar 2026 06:58:11 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 19 Mar 2026 10:48:42 GMT\r\ncache-control: public, max-age=86400\r\ncontent-length: 27106\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\neo-log-uuid: 6947408202991561163\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27106,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 250, 8-bit colormap, non-interlaced","md5":"af1a49996966668a15a80e0e0f1e95df","sha1":"5e351895ab89b6151729589c82a65109ffa989b9","sha256":"093c98a7b65a99787e4e2319e3d0b59cc588aab53b570f1edf01ef2e8f897b5f","sha512":"4824a0bf6c4b642cb3bf85a6a91dda6d190bf70bb6d356615ffe21c4386a652f0e53f080b405e820f8fe820990fc5af07348c51b33e1e8acd57f79151b59e670","ssdeep":"768:zLzjHzqebdN5TyMJauAcBvwuVC9L48jF5cGExzu:3fT35OMpHKuVCMSIxzu","tlshash":"52c2e14f274c68f532e8336b034949cda62ddadb00c1a03f696a7ad7438e458b922d97","first_seen":"2024-12-30T10:25:05.479361Z","last_seen":"2026-03-30T06:59:22.27553Z","times_seen":4,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/index.js?_=1774853887391","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /mc/v.1.0.1/index.js?_=1774853887391 HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"69b9122e-32f6\"\r\nexpires: Mon, 30 Mar 2026 14:58:09 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nlast-modified: Tue, 17 Mar 2026 08:34:54 GMT\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 16562679685893738111\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13046,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13045)","md5":"5333decd2392f78eda64dbc25fc94e12","sha1":"e445f4c676244d14c1bb78f1209e09c207db79ad","sha256":"994936c25c4400dab7732922c77df83af89bca1cd115ec948f76afe900e9504f","sha512":"507b68b0db84460f0768c09410d772d9047c75af4bbb6c1d2dd220105c01f52a48d076c0e033fa01405918234a0a70c3161f2a4d4f771d9bc72493a888b506e7","ssdeep":"384:ZbhNNKg5/885YHtkLhm4yNHFeFWipjrQ8WFaLjLsu5HNaFrsrwZ7BAhqZs7WudXt:flF+lSjWkPjqs","tlshash":"3f427d171c1e856c168de5bda8a54e4c6fef8eb24fc51e2db2ac897d042d80f49d93c8","first_seen":"2026-03-18T09:30:16.180643Z","last_seen":"2026-04-01T20:19:14.122422Z","times_seen":71,"resource_available":true,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/ac/v.1.0.1/manifest/ac-control-shanshan.b7303e36.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /ac/v.1.0.1/manifest/ac-control-shanshan.b7303e36.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 21 Jan 2026 02:18:27 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69703773-dd6c2\"\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nexpires: Thu, 26 Mar 2026 11:14:27 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 168782\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 9857635176646796315\r\neo-cache-status: RefreshHit\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":906946,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65522), with no line terminators","md5":"b7303e36dd26c4eb1aae7dad46b56635","sha1":"e8bdbedf8692d0e5be85ecd4ac24026fb9fe6337","sha256":"06f9d9892319f817c918afc4b73a6b568497693062b5f32c91e83e1c3b3227d5","sha512":"301339103c9ee7bdaf527ca96bdce855b2f7fd908ea38cbd5b4d566d2b00dd6a6a4fbd81fa3373b7816f412ea93ed0facf3f3affa694e3f772b609ca4506c8db","ssdeep":"6144:qtDthvN/EL4SfNQUQysILiOMjJ1tA9wRh1TRAzD/Xp8w1PLaqmci7F9Y3YbCOGAE:RiUQzA9wRh1G/Xp8w1n8K7","tlshash":"d0150a08b16715e222bb1172a49f670271666a7bd40a4c95f0bea9f11f7cc887373f36","first_seen":"2026-01-21T14:43:40.774011Z","last_seen":"2026-04-05T13:40:43.92949Z","times_seen":332,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/RP-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/RP-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 24445\r\nserver: cloudflare\r\nlast-modified: Sun, 07 Dec 2025 06:22:45 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"69351d35-5f7d\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539728d04568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24445,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"3417b09df8b678695d66064c132cff27","sha1":"ba501a1d2ab73cec231ce8cb4fe23f7fb3e94106","sha256":"6ec8ff5c8f8d6eda76134184f73a2da17e28665abc3e41c9fc885f341f988c47","sha512":"1684682e6b3a7ce774e5f3cae0f37d955c674cf6ae0e7297b19e17eb9fd37506297aac28b3ccf98c15e827337f758e5c2ba0b05f3aa590e2a88cdd54a4ccf368","ssdeep":"384:Ik1Igu/nup5JsQ0KBvKwb3GE1oZtSfW3eUG9pNXXfpZJgBdI1bg+a7eFrf8Q7+rk:M05J9dVjGECSW3LG9jHfTWdISH7eFoS7","tlshash":"0cb2e17b422687a5b3d02534b15b237a6fd30320577225f83f4971aae0d59e52371c9b","first_seen":"2026-03-30T06:59:22.277383Z","last_seen":"2026-04-04T16:58:22.876362Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/FS-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/FS-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 6155\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 06:35:00 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692be594-180b\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539738e0c568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6155,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"607bc5916f45108612522a44c7fcad60","sha1":"69ca2a534cc1c74d96105c74395694e68340860c","sha256":"dac6a80a4b8e096ab711354bcb8f3cb8565f7cd5f5b45773f039ccd89d94cb1a","sha512":"81bac79376ea435b1432288ffeb006c0ce6d9e25d3565ec740deb70e5f1ed2e0275a67854b42c06fef689b5d1757d0d6a1ade7840e8e1ca9845da7a430f11ef8","ssdeep":"192:EvoYpCTwt6jVgWzbO7ODhsaykSMAa/inA:EvoYpqmWzi7ODskSMyA","tlshash":"8ec18d920fa766fadd186a30135de41b31b5dd1a2426d946d9ceb063c8fc8b8b4633e1","first_seen":"2025-11-30T22:26:42.580098Z","last_seen":"2026-04-04T16:58:23.071825Z","times_seen":91,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/RP-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/RP-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 24445\r\nserver: cloudflare\r\nlast-modified: Sun, 07 Dec 2025 06:22:44 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"69351d34-5f7d\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ee8c568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24445,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"3417b09df8b678695d66064c132cff27","sha1":"ba501a1d2ab73cec231ce8cb4fe23f7fb3e94106","sha256":"6ec8ff5c8f8d6eda76134184f73a2da17e28665abc3e41c9fc885f341f988c47","sha512":"1684682e6b3a7ce774e5f3cae0f37d955c674cf6ae0e7297b19e17eb9fd37506297aac28b3ccf98c15e827337f758e5c2ba0b05f3aa590e2a88cdd54a4ccf368","ssdeep":"384:Ik1Igu/nup5JsQ0KBvKwb3GE1oZtSfW3eUG9pNXXfpZJgBdI1bg+a7eFrf8Q7+rk:M05J9dVjGECSW3LG9jHfTWdISH7eFoS7","tlshash":"0cb2e17b422687a5b3d02534b15b237a6fd30320577225f83f4971aae0d59e52371c9b","first_seen":"2026-03-30T06:59:22.277383Z","last_seen":"2026-04-04T16:58:22.876362Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/TF-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/TF-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 11368\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 10:56:01 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692d7441-2c68\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539740ec8568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"698ac07326194507ed20152023ce5d8f","sha1":"61e2041daf65b84f1e6ca6e4714a84c18593d8c9","sha256":"1c781f845d261e2aa1756323b143f0b84e288ac4964899b6b336a71af8719d66","sha512":"e76f5ce319f0fe9ed36e0bb90d286f2f95823356367f897ea715b47cf2ea60ddf89de8581193e0a0604d5995d31932c7df212c68539b5b7cdc9b49dbfa78740f","ssdeep":"192:S4k73e7NfxQe6xoLD+ODIFJdBVX3A4KhpoA3Xz6JzNRHPI40T0:+uxGjCLDRsHALXoEXzqAJ0","tlshash":"7e32b090aa0558c4e454c57074b0fd0b5b6e3256bb05bcbbff0a79acc91d26ff630991","first_seen":"2025-12-01T20:48:44.32773Z","last_seen":"2026-04-04T16:58:23.083513Z","times_seen":71,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/RCB-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/RCB-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 23050\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 21:46:28 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"6934a434-5a0a\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539740ed0568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23050,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"ecd263b3349fb322a3ea3a38298e580c","sha1":"a3465b1c00bb3456b057e7a9c9d220f84f126b09","sha256":"993b8db011708902a8e579348af3cc58c5b2fcb2821e171812f27c5d99b26fd7","sha512":"2307308932ac308caa6b2652720e9396778f0a4f60a52fa5ea0a0c4da61ece2b3f6332486de136f4e5626f61d78d4e5560bd28f697b7f53f5ca3e2a8750ec70a","ssdeep":"384:UJo2NWfA1R/kgXfLUceNjbgwlywQwbjxKJ8jOdiDVK+g4yuqe8aBjw1ym:Ue2NWfA1rffexbg9YpQ8jOdtrduqfGjO","tlshash":"e0a2f19126f404693ab0c7b60f82bd3ffc32b1e50b5536bcc9bd2500e4ddb22a06ea44","first_seen":"2025-12-07T15:50:47.661808Z","last_seen":"2026-04-04T16:58:23.111225Z","times_seen":53,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766147269117_14.%E8%B6%85%E7%BA%A7%E3%80%90%E6%B4%BE%E5%AF%B9%E3%80%91%E6%AF%8F%E6%9C%8824%E6%97%A5%E5%A5%96%E5%8A%B1.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766147269117_14.%E8%B6%85%E7%BA%A7%E3%80%90%E6%B4%BE%E5%AF%B9%E3%80%91%E6%AF%8F%E6%9C%8824%E6%97%A5%E5%A5%96%E5%8A%B1.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 99633\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 12:27:54 GMT\r\netag: \"694544ca-18531\"\r\nexpires: Sun, 05 Apr 2026 00:08:27 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976c98a568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99633,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1cbea47650e6f49958d7d07c711c30be","sha1":"8639eff6af24720a269ba20b004224c47f4f8eb1","sha256":"12ab85a28c6469941b6ec15147b217fc31926a68b77103967bf1e75cedefe8ef","sha512":"bd61d4d6400b27879b69e4a986ee386e4fc88bedac0adba544d89026d8b4b2962f6c10fecbbcdeff4fbcf59dccc7486783c555d5ff7aaea68e09fd1362fd91c3","ssdeep":"1536:OGh0RkgyMU15XUKQ941aXmtwJR7Cj0aMcjcIcC6IxgsJ9hWU0d+G:OGh0aF1inXmtwJRHaPvciucHj0dR","tlshash":"b5a3128f4e8b40e8d26bbeb4c82707613733c4b56a515945b4d3f352f94baa3c4a3d26","first_seen":"2026-03-23T09:59:23.416715Z","last_seen":"2026-03-30T06:59:22.280685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/GCSGAME_gameList?clientType=3\u0026platform=flash%2Chtml5-desktop\u0026channel=kg999bdtf1\u0026merchant=kg999bdtf1\u0026gameType=RNG\u0026vassalage=TP\u0026gameClassify=\u0026gameName=\u0026minBet=\u0026minLineNum=\u0026language=BN\u0026page=1\u0026ext=avif","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/GCSGAME_gameList?clientType=3\u0026platform=flash%2Chtml5-desktop\u0026channel=kg999bdtf1\u0026merchant=kg999bdtf1\u0026gameType=RNG\u0026vassalage=TP\u0026gameClassify=\u0026gameName=\u0026minBet=\u0026minLineNum=\u0026language=BN\u0026page=1\u0026ext=avif HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nLanguage: BN\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nx-app-trace-id: bb8v696115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: GAMELO3, FREEPLAY3\r\nx-elapsed-time: 3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncontent-length: 360\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\neo-log-uuid: 8046168760908725446\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":360,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f9e90c64ef9e1b1e240774466e18f36d","sha1":"3195196fbeeb67b49f7a0beed921d00c95f4aaf5","sha256":"096f3eb5cacd0c12cb29cc42090e78ac34afeb89dd4656c11291bca25da62c5e","sha512":"ec9c5c4a559a7c6605261596170d58202fa8ddea05eb967eb5b9daf866a8e1cb2742ee1186290f5e3c8b4673d2d84e4adafcbd0bcdf207c21150240776aec421","ssdeep":"","tlshash":"f1e0c00c81701df3a3b35166bd5f3ac03eedb39fe4880408e6bdd50c0e2590415d2a00","first_seen":"2026-03-23T09:59:23.622372Z","last_seen":"2026-03-30T06:59:22.281826Z","times_seen":2,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/MA-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/MA-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 22934\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 23:24:46 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"6934bb3e-5996\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539726cdc568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22934,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"74f2b3ba62f685abaa94efcb23125685","sha1":"61b2ec993d73182a3f1799837d7643ec9f5d4c69","sha256":"3b7252a1ab2017a3a13832b472abd9f1f36b761f78b3f16d892d2981c504c493","sha512":"6b8a590ce9e9421cea211de045c9888662c3b06abd849e4c1affa94616bbd53175dab58b12cc2f0d5559e7b4f49ef784be2475cbc32575f5162337f0842df6e8","ssdeep":"384:QyJ64ZgfpJd1NxKHmmk4tKwYUZxWgt0J6Rq44IrozgGmPwyZnKgVR:2ZxKf7W5JawM1lKk","tlshash":"eea2e10de877d625fb41ec79676a8883cc4c24582ab68e8ccec09b15311c5f222b03fb","first_seen":"2025-12-07T15:50:47.578152Z","last_seen":"2026-04-04T16:58:23.017978Z","times_seen":87,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/LUC-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/LUC-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 11822\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 10:40:32 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692d70a0-2e2e\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539740eca568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11822,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"f14dee2938eb5b102f2c207d422e456a","sha1":"9b030c7505a665dc89592928ba7718d09a3c17a4","sha256":"f1c4b4108f52308be30747c39ab77151d3dff1f758c15e0193653c119ac1479e","sha512":"57e397fd9dc14a9728aa9b316a20954cb470929977dc5a2e4b6a2e438ae18a618e2ac7bb424fd9151e01c57af90152058daaa5705c0f2c750def424488744488","ssdeep":"192:cnIYZfgv2IkBOpCahWh1QI1gpOoiu5F9e7Nw/2Og8e/VS04iBJRJwk71Yq+oX+8K:cI8o2JBOprhI71z49x/PgAqJX71T+oXK","tlshash":"0332b070648ceb9ad9c0860a060294f8935aaef25a7b0be731d754f507e9722e04c875","first_seen":"2025-12-03T13:25:52.361265Z","last_seen":"2026-04-04T16:58:22.89311Z","times_seen":51,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/TCG_GAME_ICONS/JL/EN/JL0162.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /TCG_GAME_ICONS/JL/EN/JL0162.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 14727\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 08:04:17 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692fef01-3987\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e45397e4867568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14727,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0875de87521ff03c53e4ba0d88e281c2","sha1":"177206e0d64174fa90f9a8f4dc59a41b1c6d6417","sha256":"28e1dcbafb0710a9a2a26e12e902f70dfe5f12ac76077ec3cb65bf2b237507d6","sha512":"d6e29193130c83edb2f7a01ccdfc808a440c8110c8eebe7ed59039ba99429faea876c00f83256173f500a19f010f60c2753c8c3f38c179c6d891b96693e1b267","ssdeep":"384:2AyCp6sBIy2w9u+Vd/skH+wh/aBeZiBMa5RLjkwf+:/6xy2oBtsdcyEZiSa51jkO+","tlshash":"ef62d0039e9b33dac444eab960487863b9db599464638c725f6afe6004333f0ae55e20","first_seen":"2025-12-05T16:05:15.565024Z","last_seen":"2026-04-04T16:58:23.095925Z","times_seen":84,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026bft=0dAFcWeA5FtZFmYg0wwpmLXHCpASBXeMh08kUr58CfuuOGo1wKeaaYNlKFoyfayLJEX7yhNOoDGdOETnEHBCq-LNKOIRSBRIoRVQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:16.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026bft=0dAFcWeA5FtZFmYg0wwpmLXHCpASBXeMh08kUr58CfuuOGo1wKeaaYNlKFoyfayLJEX7yhNOoDGdOETnEHBCq-LNKOIRSBRIoRVQ HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 30 Mar 2026 06:58:16 GMT\r\ncontent-security-policy: script-src 'nonce-jit6oztzKSHHgWKGQzNgOg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17035,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"4b1e52e11fd48dcb738db5c0acea6df0","sha1":"a41716e453b03897554a55d663da400a81c3ec84","sha256":"886a09b06b8fb36fd7c6be0ac032560be272eeb5c0617cc7dbf4513d46555ba8","sha512":"d7e55f0d9437c0f4d99a6495d670b949b4f2edd12a2a28d445e6ad2cb38010b19ca63e1f0a1389c324c7cefc33910f91a6422fc2059be9268b1fa414773eac58","ssdeep":"384:EjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/E:EFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+1","tlshash":"8a720f50041744009b835ce223ce7f30fe4e92517142d0b1abfdab6beedbda6926939d","first_seen":"2026-03-30T06:59:22.284089Z","last_seen":"2026-03-30T06:59:22.284089Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/system/settings/consolidated?_=1774853888350","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/system/settings/consolidated?_=1774853888350 HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nAuthorization: \r\nX-Timestamp: 1774853890227\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: thd2spc115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\neo-log-uuid: 12674371003697978770\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39076,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1e7b7bc6594314baf1ce678997f1641d","sha1":"4a088d5479707e8181bac2df17f3c752ca61d3d8","sha256":"3ca9eaa1f941c1e7e72be4e975f677c786731079ec4db0731f83a8386ca30bce","sha512":"d97a3d9ef06f093527db8303977f3127bb42c10e80216c4d61be1401a4d7fabd4107e487a89d2ca8977bac74af1b8ffa9629edba5faba05714954255a676622c","ssdeep":"384:TihuIZ9n2wx55poMjlCnZVaChB5CrsW3AlCnR:Bu2MfjOnW3A4","tlshash":"9503af09a420e9af2d4ec0c5e4fd990b59bd8e7ad5fd10718c0c28ac22db9b50757af7","first_seen":"2026-03-30T06:59:22.273157Z","last_seen":"2026-03-30T06:59:22.273157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/system/helpCenter?lang=BN\u0026device=WEB","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/system/helpCenter?lang=BN\u0026device=WEB HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nx-app-trace-id: t29rhh0115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: \r\nx-elapsed-time: 1\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncontent-length: 27\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\neo-log-uuid: 5940190597406302616\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ca238b915bf4f6f06b0b52568a504a8c","sha1":"3cad0b9a14d384d688a38f30a7680b8969535d70","sha256":"41d208271b07d58d6af07f067fb749c58fa723b2d22de24495d5477c7366e6af","sha512":"5c70f6094ca2a044f332bb4f895f7c1db53d811e4477d1c30a4a6ac105d56f97cda14ec8b1385fc6c7025c00966a64e7235293a6059806bab4949e701ceda09b","ssdeep":"","tlshash":"8180000a208000b3c002a200a8382e003aac00ab802000a8a00c808aaf20802288388b","first_seen":"2023-06-27T02:10:16Z","last_seen":"2026-04-05T13:13:38.893219Z","times_seen":1054,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/YB-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/YB-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 7120\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 10:10:34 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c181a-1bd0\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539717c17568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7120,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"2a854edc738a57558a1f3e1cc826471e","sha1":"d3a5fd07ef3e0ef720e4b2b79953ec6bf610f77a","sha256":"68a97dd751c2828a97f98668a8e699e96e1bc388f818a2f997d721747bf5a1a8","sha512":"a8cab31d07bac7cb10a3a408d1a6b1c420495bd837b26276719a27cc9b5fc48043d255bbb82045684052e7089f56c1019bfc703155094c76cfa8a4e0fb76e01b","ssdeep":"192:i4UB8fIXTh3/lE5I0x82uYsEQ+r40YAF/:VUB8f8Eu0x8HYsEJ47AF","tlshash":"2fe1a0533a6c5c9beb7117702ee602730d89a01c6045a3fff6230ebcdd91416aee3946","first_seen":"2025-11-30T22:26:42.725216Z","last_seen":"2026-04-04T16:58:23.070913Z","times_seen":105,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/NS-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/NS-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 7131\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 10:52:08 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c21d8-1bdb\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539725cd3568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7131,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"240374c4556ddc6211d17c654b9bec50","sha1":"4e06a88b509b97138c6a46c0aaa06772497007f5","sha256":"8505ff25b7b3753be65e224dde409c527fc97db156145df7ff651a3f4383a8e8","sha512":"6a338ff2048cd7e93ee8e21e4c1de001663e55840d6239875e636979c1ed737e377e7d8b3ca567768710c0677cf47d2f08ea678b2515bbd96f7580cc3474264a","ssdeep":"192:rkMidMCGI/uGGhzvaKCTKQeL0RVeKXn0El5HoGq5h:4juCGI/Ehzv30KQ5wa0Wo35h","tlshash":"63e17d3b0324c3b5fbf9a5b39932aa0a9db102883eb54d94ceb051f558161b5ab7c743","first_seen":"2025-12-07T11:07:16.26221Z","last_seen":"2026-03-30T06:59:22.285907Z","times_seen":5,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/EZG-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/EZG-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 14704\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 18:42:08 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692f3300-3970\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539728cfb568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"e790a9c63762c12f7dc3d2bb25bf2814","sha1":"8b4c0b8a1283f2e9b8f2ce624b93073da56f471e","sha256":"29ea22cb91270c8c65316311055bf00eb87ecf347c7357e36b4edfd8088e6510","sha512":"2a5e203a8281843ae2b4baf65cf6f386faafa054fa28264aa9c9263e355c6cd43d7c237c34c436148aba84617a0e83452ef281886207bd6a032e586d1f10a2e3","ssdeep":"192:rG/RqW4VRwLmd4LH//t92QS+d1OCQjBlKAz9Rs2sVw12HWgKN6kGD7p5XbPsGC32:iJqWWwvLHH++0nFfJsOIW7SppDsD2","tlshash":"2362c0403bb69cf2cbbe29b7c2adeb94d211e8175127673c36e95da49c5183480ed60e","first_seen":"2025-11-21T16:34:41.401838Z","last_seen":"2026-04-04T16:58:23.046952Z","times_seen":181,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/IO-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/IO-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 8128\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 13:58:52 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c4d9c-1fc0\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539728d02568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8128,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"15fe94ea4eecc19c14f92ef4d3635ff4","sha1":"f887d3cd8e48d189f60e9a7692af3b6a6a82575d","sha256":"d1f0ad02eaee1f7e241fd330c397dfa30d20bfdd89f9adf9e16f00a5435154cb","sha512":"1d1178d730cee845a0b3ea3dfe1e11c8449963a154d81543e7d80627c60762c0d11e596b7def1009ae3c49a51dde6770ee052a909913af24fbbfbd6bfa35f53b","ssdeep":"192:ZCzzH4pXQniBri1J4Yy2FUN2n1z33sreu/zrgIao:ZCnYtQiBmny2FUN21Hsrp/zrFao","tlshash":"0cf1af77302dd9a6e95c34be3e324fb6710a8c20e909172a911c5c6b5f1ae07223e6dd","first_seen":"2026-03-23T09:59:23.5927Z","last_seen":"2026-03-30T06:59:22.287868Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/JK-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/JK-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 19489\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 10:54:25 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"69340b61-4c21\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9e4539739e28568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19489,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"a18cdb43f78e0da9f5b70e417d546ef4","sha1":"701e897fc5d06317388c9058a469172824a67ba8","sha256":"9cb664f17c040c3e90b52dce6c8bee1751010f372077d9e064d87c487ea80757","sha512":"5694f005c224701cd201a4f1caf4c7545abea669d555421dc4cfd86a942d7ecb917216ce6b5525647a6849834c6c8a3c391055f675e3365ae4d8f573bcf42c7e","ssdeep":"384:pqvLfR42mVx/gkbA+E0+XYg7yU3ch0dnWx7vFo2FKh0H9B:ALfRaxgkbAfvu4ch0dWxfT","tlshash":"a592d0f6b0d04aa4fab1647d42b50867cc2ac138ab8a8dd07e57609c34f779c36de684","first_seen":"2025-12-07T15:50:47.701631Z","last_seen":"2026-04-04T16:58:22.875797Z","times_seen":57,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/MA-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/MA-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 22934\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 23:24:47 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"6934bb3f-5996\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ce54568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22934,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"74f2b3ba62f685abaa94efcb23125685","sha1":"61b2ec993d73182a3f1799837d7643ec9f5d4c69","sha256":"3b7252a1ab2017a3a13832b472abd9f1f36b761f78b3f16d892d2981c504c493","sha512":"6b8a590ce9e9421cea211de045c9888662c3b06abd849e4c1affa94616bbd53175dab58b12cc2f0d5559e7b4f49ef784be2475cbc32575f5162337f0842df6e8","ssdeep":"384:QyJ64ZgfpJd1NxKHmmk4tKwYUZxWgt0J6Rq44IrozgGmPwyZnKgVR:2ZxKf7W5JawM1lKk","tlshash":"eea2e10de877d625fb41ec79676a8883cc4c24582ab68e8ccec09b15311c5f222b03fb","first_seen":"2025-12-07T15:50:47.578152Z","last_seen":"2026-04-04T16:58:23.017978Z","times_seen":87,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/EGT-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/EGT-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 6713\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 07:34:29 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bf385-1a39\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539727ce9568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 301, 8-bit colormap, non-interlaced","md5":"baba5d76f6c0ffada70e3ec272750412","sha1":"af580d1c93e7b2bf06c71cf74c0b6e111f0dddfb","sha256":"b649623b36296efe4a1e8472648070fe92a4c082f2b1625ce7413188fb41f4aa","sha512":"f0f5328e48b22d86858d9e244c59a4b22e131fdb7d01b8b03ce501d562557ee862723b6329c320843a4ebb3e7f8383f870b0af2d14fba30ff2d833a69d89de04","ssdeep":"192:L1cocjreYcjZB9Ouh5XByPfyuLG6jJ1QDkU7t:vsrKtB9Ouh5Yy49aDB","tlshash":"33d1bf7d84ea905dd5bff0bebe86196239cb1274a082c5044b5df08126572a802ee583","first_seen":"2026-03-23T09:59:23.611423Z","last_seen":"2026-03-30T06:59:22.289293Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/KM-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/KM-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 12603\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 22:48:07 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692e1b27-313b\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539728d00568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12603,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"935d96420ddcd46684271e572317afaa","sha1":"b395acf90eccbab477437a218fc54a27a4ce9bad","sha256":"97e714a609cf86414aabbb5b87e4ff4358d5c46b2aa8cd0e267c88cfc88db805","sha512":"718e90ec8902fc7789404ae63f4d1767efd83ecf345825ec5d04d5a8842fa53bfaf7be5f2da6f54af14a67e2bbfc31ce27d99b0dc3cea2b3c77a68f56ef97951","ssdeep":"192:9uJuSMHRAUma08Y7K1o3NPtcm4174pivVOS+rd0md2vzWJ5p60hXakVgUjawF87:6zkR8aTYOcNPf4+pivo3YKJ55f6UTFe","tlshash":"dd42c0eb53bf12f8ede864b1017088264079dc369d3f09657386e2607e956f798a20cb","first_seen":"2025-12-03T17:38:13.274699Z","last_seen":"2026-04-04T16:58:22.846582Z","times_seen":68,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/PS-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/PS-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 3074\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 01:40:11 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692ba07b-c02\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539737def568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3074,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"c533ecd332ff4dda8f3761c333c8dab4","sha1":"27ed6974cd06c2d7a1efaa5d565436056dfaffbd","sha256":"fbb51c3c75deae3c253b5982f0122b29b4d3e0da15a76ca12ebcf2fb6ec22d4e","sha512":"6e1db809a75c40ae23baebc3ddf12d3be4ba80668e880e25c7d3256dc5769ea3a153641b2b5571b2f0f42fc4fa276e376bedd1f28146dd9d7feba1d166f68272","ssdeep":"","tlshash":"de515cc87e192439efbb6038d463b01a0a53efc8614914e6f49975ac2f38d79217e272","first_seen":"2025-11-21T16:34:41.257959Z","last_seen":"2026-04-04T16:58:23.035116Z","times_seen":256,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/SS-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/SS-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 12619\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 19:09:46 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692de7fa-314b\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ce5d568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"273d3ed0ddc5ed9b7727a61ad97640f0","sha1":"7f589807de8fb4a5558bbd0864d53f949fce247d","sha256":"93c7fc4f1f3d61f8ea6e8be39bacbec28de48d04b13f63563c61e9fff2b42597","sha512":"04a469348b72bb0a6efeb5b7b4c91d3d83928d77cc319bdfeeb418af0dde38878ff8e91f91d2fcf7973d4dbd1b612462c25d27e63a2126f2b92d948e0af35e7c","ssdeep":"192:idBSg7Ghg5wgbivP4olO+HjVWwdPit4ToMxMjhZVgzMY/K6aRN+CNP9GE:eugKgua+HpWt4Be9mMY/KlRDP9L","tlshash":"5342c0aabd4a8eb3f0570e30a0bbcc6d1b95afc2e45b57a04954c8368fa71773462d41","first_seen":"2025-12-03T13:25:52.259926Z","last_seen":"2026-04-04T16:58:22.973986Z","times_seen":76,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/EG4-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/EG4-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 6176\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 06:58:12 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692beb04-1820\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ee91568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"f78b39b769e4aa91e19cc7e605da7661","sha1":"2258d0149a7b8c6302e1168419bc4883ba199d8f","sha256":"20ffebdfff595ad3195d5b37da4a0d9b77ed9754a6bb3deec0fe1e207808d240","sha512":"d5dd5b25f1e10e326064476e5f626bf27d0e2a0af18349561f4bddc098916de3198698c12aa7a1f2a8b1ff6ba66607983d44aa618fea811aeca9345b0a53eb85","ssdeep":"96:o0Fzuznja9RK1b/a1k/qzhQ7IKbowhKLUfBDFUU7vAULMQXH+G5Xz/:LFzuHa9RKFy1dWIKbowEUrZ74Ug2/V/","tlshash":"4fd18d1547870086d6dfb33dd818f62b29b70f442233796b28993a18a0728f5e8a0266","first_seen":"2025-11-30T22:26:42.595098Z","last_seen":"2026-04-04T16:58:22.884954Z","times_seen":102,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/POLY-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/POLY-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 9623\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 22:21:32 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692cc36c-2597\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539740ece568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"451ab0d873e741646cd01136d14c4963","sha1":"b9790e0bf62c478cb23f53d845eda0e3fd41cd73","sha256":"a010c4128d500bff935f1413b75b6a1af13c0b1ba25897874260f02c8f44a3ff","sha512":"9397eb1bf418908e76178945490170e91344153687d494c7dcc204a9f48917838169c07e6a3c19b2b7f9ce520978d0a5a3bea5423ae0e1e8e194d3c249ed7526","ssdeep":"192:JLf93HRgL+l60O2Va2kJtXNZ006eHB8dLy3UGvAQiwWFZyzNhAlg/4:l13xnl4qkDH6MBRUk53WFQk3","tlshash":"fa12c0102e124349ca2af39b1ef1616e8fcb767d2ecf49fdd7a3361118b1aa105ea540","first_seen":"2025-11-30T22:26:42.712106Z","last_seen":"2026-04-04T16:58:22.850462Z","times_seen":55,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:14.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.kg999.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370674\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 30 Mar 2026 05:03:38 GMT\r\nexpires: Tue, 30 Mar 2027 05:03:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 23 Mar 2026 04:01:54 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 6876\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870412,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (703)","md5":"b55b90c630ad899c694dc42582979708","sha1":"f08949879387eb8dd6553c8b0c548c701b5f0db9","sha256":"eb297967f5005eb95dfb369ff9f780a436a67144be372260b6f86f6fe37b917f","sha512":"eb9945688c1c7a4847df769bd9072f9f3be532c697c1b11185b48345162ab6a22c7ac2b8a251c9835e81ad8a8b155d67f0885a1986908cd69b3f9370f5a030d3","ssdeep":"12288:Epo+RhFDORIh355fBjbFOsAi6dhTOLtl5dlV3EZm9eyVbI:UhFDsIZ55fBjbFwZItXB3EZAhbI","tlshash":"ea053bd879127be16372b4f510673009736da826d88c086df6a5d8f02eb194d70f6ebb","first_seen":"2026-03-26T03:15:38.916554Z","last_seen":"2026-04-05T12:54:27.610989Z","times_seen":11757,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":9,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026co=aHR0cHM6Ly93d3cua2c5OTkubmV0OjQ0Mw..\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ato725tviiul","date":"2026-03-30T06:58:15.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /recaptcha/releases/79clEdOi5xQbrrpL2L8kGmK3/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370674\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 30 Mar 2026 05:03:38 GMT\r\nexpires: Tue, 30 Mar 2027 05:03:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 23 Mar 2026 04:01:54 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 6877\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870412,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (703)","md5":"b55b90c630ad899c694dc42582979708","sha1":"f08949879387eb8dd6553c8b0c548c701b5f0db9","sha256":"eb297967f5005eb95dfb369ff9f780a436a67144be372260b6f86f6fe37b917f","sha512":"eb9945688c1c7a4847df769bd9072f9f3be532c697c1b11185b48345162ab6a22c7ac2b8a251c9835e81ad8a8b155d67f0885a1986908cd69b3f9370f5a030d3","ssdeep":"12288:Epo+RhFDORIh355fBjbFOsAi6dhTOLtl5dlV3EZm9eyVbI:UhFDsIZ55fBjbFwZItXB3EZAhbI","tlshash":"ea053bd879127be16372b4f510673009736da826d88c086df6a5d8f02eb194d70f6ebb","first_seen":"2026-03-26T03:15:38.916554Z","last_seen":"2026-04-05T12:54:27.610989Z","times_seen":11757,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/BNG-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/BNG-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 9348\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 17:40:16 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c8180-2484\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539717c23568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"c5f92ba7f5bef256e9d5daece51afaca","sha1":"fd88060451848e1082867582e09290d9676b30af","sha256":"68185ed5c7bbac77b13da244e1e69cb2010100f8224141925ec9d847d6573c7f","sha512":"62b234c30144b8bb22386b9b8ebdae00c881196c75031bfd7c78a5e944e4011ddf801cabbcc92aa264d09771d04d79543732c750af4f1e3e2ece809b2f5dd357","ssdeep":"192:GoLg5WWPF3A3Rgz1eMj7edC/dQzkqnV/depWRbMgzDnV37cI7+FaTZxLL:GoLVWt3Ugz1Lj7/SIqnvqW13VAI7+Fan","tlshash":"f812c0fe3dbc9849dd50e93134310d063a884f3682d7b527cf50145c862aad7aaaeeb5","first_seen":"2025-10-14T07:55:25.432398Z","last_seen":"2026-04-04T16:58:22.855699Z","times_seen":310,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/RCB-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/RCB-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 23050\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 21:46:28 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"6934a434-5a0a\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539733dac568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23050,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"ecd263b3349fb322a3ea3a38298e580c","sha1":"a3465b1c00bb3456b057e7a9c9d220f84f126b09","sha256":"993b8db011708902a8e579348af3cc58c5b2fcb2821e171812f27c5d99b26fd7","sha512":"2307308932ac308caa6b2652720e9396778f0a4f60a52fa5ea0a0c4da61ece2b3f6332486de136f4e5626f61d78d4e5560bd28f697b7f53f5ca3e2a8750ec70a","ssdeep":"384:UJo2NWfA1R/kgXfLUceNjbgwlywQwbjxKJ8jOdiDVK+g4yuqe8aBjw1ym:Ue2NWfA1rffexbg9YpQ8jOdtrduqfGjO","tlshash":"e0a2f19126f404693ab0c7b60f82bd3ffc32b1e50b5536bcc9bd2500e4ddb22a06ea44","first_seen":"2025-12-07T15:50:47.661808Z","last_seen":"2026-04-04T16:58:23.111225Z","times_seen":53,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/WJ-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/WJ-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 29551\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Dec 2025 09:25:28 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"69369988-736f\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ee96568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"b319a6c7bf9b4dded2fdde68f4a392d0","sha1":"cf87cb459d68e849f3babbfecaa6d50de44e53a3","sha256":"0fd5425c17b548c6d6212fde906c6cb06853750eebc6b5fb7d168620277e354f","sha512":"c8286227f83b9c81b9bcdbdd2031847a8946782318d6c5a1b9471b43fa3b8ee53c6bb9409f751a78c1401105c337de1e5b73d38318746bbdc86053b19fd97b0b","ssdeep":"384:GmtizDxQCU7cgjTmUDLyvNbCYv7qxgmwdbr88Wj3O1XxyyxVf0wdSgmsbDxZtNwj:7tinxsjTuv5CYDqBWr81+NdVfSyfx/N8","tlshash":"fdd2f197b922d94d301651eff1ac19324fe8166489260ccacbf7692574c57cebc06f07","first_seen":"2025-12-09T00:17:16.482661Z","last_seen":"2026-04-04T16:58:23.079144Z","times_seen":72,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/AIL-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/AIL-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 22438\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 21:03:51 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"69349a37-57a6\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973fea3568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22438,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"2ae01e7efaf630a06ce6503d806b3551","sha1":"142fc11ca3c045b6a399f0ed1a5cd861a71e5b59","sha256":"e9345d14c890eb94f340169b562d86815f03ef230e04e6bcab4418f04e748910","sha512":"b6fbbc4e00ef10ed03e3678ded9838da0ea95f0b87ea3204ec5d504c729205f26af45741ac64f916829e92c6afd04ea229f69b7b82fa7faa8dfc5cbc38e82fdb","ssdeep":"384:UVtwTuCxnZ97g5tVYMbfVRBR30u7bbXor38EgGq4CnBCJ088V9YtX/e6:0wuCrt8YMpRBRku70pgGJABS08I9GX/D","tlshash":"d7a2d1a68d2e2511592c100b22b44a8f3255c8a5037526a53bc457fbdf32ffc11bbe2d","first_seen":"2025-12-07T15:50:47.703127Z","last_seen":"2026-03-30T06:59:22.235049Z","times_seen":55,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/PG-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/PG-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 9660\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 20:43:20 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692cac68-25bc\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539712bc4568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"2b7709943537bf1531d5665c55918c57","sha1":"eaa449098a66941671bdcf93376ec5f3f3963c4e","sha256":"564f983c5fd47ee4b61e57b614a32b66ff8189448521f49d9e069503cf4b0f51","sha512":"9c4808bc4b2e1dde72a7fd786a68471ed125b67426bc2106a5cbf618f7c0bc4f687d666ef8e7d5e5aed2044d35070c9342257eea6f7eeed197d5674be1a7911f","ssdeep":"192:5UT3mbS4nJ5f7snq6sqida4AIqGCub+Mu89f5lYpe6+yttc25cRkIuu:hf7sqDqiI4ALd2geKTc0cRk2","tlshash":"3d12bfeb6215581cd218d978d2c4fd6918630c969f895f82943f8e23dcd95f09df0d8e","first_seen":"2025-12-01T20:48:44.348419Z","last_seen":"2026-03-30T06:59:22.292691Z","times_seen":14,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/PIN-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/PIN-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 5261\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 04:44:41 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692bcbb9-148d\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539732d9c568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5261,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"ba9277d1915a169d0cd6bc1a1c7a9cff","sha1":"13cc530f606fe4e49d028a9d79d97d1bee395c0f","sha256":"46e4a909e5cc18f4dab6c4408901a508f09b01ab143d2b7393e5cf03a51d0bbf","sha512":"8ea39ffb12e72c69c00a860d65e037c2ac452da4d73324541713c7aca7499606a2f35fa8364a26eae5caa101e0f136559b580abace66c989cc2fab3d6fc2291f","ssdeep":"96:ZnmQUjXzBEcJCNY0Y8YvYYFBwLEQwlch381Zf9pCq05inC7OBzOXjTf4nj81a+7Y:NLUjjBkY5PnwdwlZHf05iC7O5e6+fw","tlshash":"f9b19ee8e2c9b7b8e9fa0ff9ac2a102e7c6d886751d08edb0f15013107bd8359150d23","first_seen":"2025-12-04T14:34:51.595216Z","last_seen":"2026-03-30T06:59:22.29343Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/GCSGAME_gameList?clientType=3\u0026platform=flash%2Chtml5-desktop\u0026channel=kg999bdtf1\u0026merchant=kg999bdtf1\u0026gameType=FISH\u0026vassalage=TP\u0026gameClassify=\u0026gameName=\u0026minBet=\u0026minLineNum=\u0026language=BN\u0026page=1\u0026ext=avif","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/GCSGAME_gameList?clientType=3\u0026platform=flash%2Chtml5-desktop\u0026channel=kg999bdtf1\u0026merchant=kg999bdtf1\u0026gameType=FISH\u0026vassalage=TP\u0026gameClassify=\u0026gameName=\u0026minBet=\u0026minLineNum=\u0026language=BN\u0026page=1\u0026ext=avif HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nLanguage: BN\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nx-app-trace-id: 7bcmvdi115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: GAMELO3, FREEPLAY3\r\nx-elapsed-time: 5\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncontent-length: 361\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\neo-log-uuid: 929729979127464084\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":361,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7cbf266c0d813bec50ea406e2872546c","sha1":"5a58f0a4aac59f7c0cdb202a2cecc5188d896961","sha256":"aca84e4ff2a62316ebabaebc3709a22369ae26b397afb1f95ab0d4f768dcad6a","sha512":"30d19c94d235ba6b6b61e9085af9c822ade489117280d6a15270e7484042483e77bb4a0cec85931320b956e5ef91ffa79449ab24e3f4eb44132f287073c56835","ssdeep":"","tlshash":"27e0c00c81701df3a3b35126be5f3ac42eed779fe84c0418e6bdc50c4e2190415d2a00","first_seen":"2026-03-23T09:59:23.656104Z","last_seen":"2026-03-30T06:59:22.294083Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766147251978_13.%E6%AF%8F%E6%9C%88%209%20%E5%8F%B7%20-%20%E4%BC%9A%E5%91%98%E6%97%A5%E7%A5%9E%E7%A7%98%E5%A5%96%E5%8A%B1.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766147251978_13.%E6%AF%8F%E6%9C%88%209%20%E5%8F%B7%20-%20%E4%BC%9A%E5%91%98%E6%97%A5%E7%A5%9E%E7%A7%98%E5%A5%96%E5%8A%B1.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 98158\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 12:27:36 GMT\r\netag: \"694544b8-17f6e\"\r\nexpires: Fri, 03 Apr 2026 09:47:19 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976c980568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98158,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c4785ef46957776e403aa548ddfd4a20","sha1":"b72658fe034b3a29e94bb9c283068bcb41ed3fc5","sha256":"7137a6daba97fd31f4d97f93276366678f80cea7e503b2937cfd1c40edab9bed","sha512":"5f8d5e3ca6b69487d093776819bc634a2bfd07db1bff155b11a6a4bb2df91196067bf31030903a267624247d910f78282fc74ab8fd6712393a9918b0e55d78aa","ssdeep":"1536:W8jnhn2ocbEkUQmKPEjuWKd7IGlqIkmJyUXhPvV1bmtVfgS0EyBe//1En9eYqg5H:WIn2REzQmIQuWKFnimYqhPf2hgjEyBeU","tlshash":"0fa302e97ad8818af8583c7ce5370fcdae92cd43862ae554bd4f639594b1000dca52fe","first_seen":"2026-03-23T09:59:23.64839Z","last_seen":"2026-03-30T06:59:22.295772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026co=aHR0cHM6Ly93d3cua2c5OTkubmV0OjQ0Mw..\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ato725tviiul","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:15.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"D2:1C:F1:0A:15:56:46:69:23:C8:CB:C9:43:56:AB:F3:49:D9:DC:8C","sha256":"12:10:E8:77:74:7D:E0:EF:96:11:A9:A4:E1:BE:36:B8:ED:01:E2:9A:F2:3E:42:84:96:5F:43:D0:37:C4:03:B9"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026co=aHR0cHM6Ly93d3cua2c5OTkubmV0OjQ0Mw..\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ato725tviiul HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 30 Mar 2026 06:58:15 GMT\r\ncontent-security-policy: script-src 'nonce-yp5qNnYPykHGA5JvetpKww' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96895,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (47148)","md5":"b2704b991aa2eb1c6998c3ec899a922f","sha1":"09e2ee31109ee893383172361b14a4065529ce89","sha256":"ea383c3c23321cbc664a95a3a84c6669e69790797d134119f75d595677993ca8","sha512":"d5448f1de8c7a9ef1c0fc195c91c952500d0dfe1880e8ef48c7e172a0693172b3f8d93b13a55479d9fcf786c788d53eef199d2e3374689cc45b277fab539f6bc","ssdeep":"1536:y+kaIgTrQ1UcwvTI9HmLiUjFZcGFjMA5JDMrheU0RHZRaE4Ugk1kWKvr18KLjEv4:y+kapJsHKZJZc+NYrhSRHZRGrr18PyH","tlshash":"6d93ae21d5032086dfab9e9157ea3b74a33f9106214340e567fe1293adabd87927d3cc","first_seen":"2026-03-30T06:59:22.297741Z","last_seen":"2026-03-30T06:59:22.297741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LcMZR0UAAAAALgPMcgHwga7gY5p8QMg1Hj-bmUv\u0026co=aHR0cHM6Ly93d3cua2c5OTkubmV0OjQ0Mw..\u0026hl=en\u0026v=79clEdOi5xQbrrpL2L8kGmK3\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=ato725tviiul","date":"2026-03-30T06:58:15.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 18:14:15 GMT\r\nexpires: Sun, 28 Mar 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 132240\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-05T13:46:35.773788Z","times_seen":716719,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":62,"dns":1,"connect":22,"send":0,"wait":21,"receive":26,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/BTI-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/BTI-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 14010\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 10:13:59 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692ebbe7-36ba\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973feac568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14010,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 719 x 271, 8-bit colormap, non-interlaced","md5":"971896c1b9dc957a7702e173d035475d","sha1":"25a9669f9b9c50fedaea400c2060b1826b97468c","sha256":"101189b41eeb2383b878f8a9ae28bb9ce2f085f52c9feff6f4dc315dcc4ac974","sha512":"f72f04019a63807da57539cae1b65a52168648a1eff9bb0fcffdfb7fc6eadb10865c91793ffc3111b4e5af145d318443e9c466e8d5aa05542ad369161c74c5ac","ssdeep":"192:GbU4PbXCwmjtGfETWVskk9csYPGxi1i2DVJl9jhFNgE597o51Jh4Sc97M92IWRED:stKGf3skbtux5WJ57g2oPcVMMIcrvcwe","tlshash":"1c52cf6ce882f970cde278ddb565c868b82b00e623c041cad41653b5b33b64c6f89d6d","first_seen":"2025-12-02T22:47:27.86694Z","last_seen":"2026-04-04T16:58:23.047509Z","times_seen":67,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/img/live-banner.3d82423.png","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/img/live-banner.3d82423.png HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"69bbd48a-7890\"\r\nserver: EdgeBot-CUSTOM\r\nexpires: Tue, 31 Mar 2026 06:58:11 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 19 Mar 2026 10:48:42 GMT\r\ncache-control: public, max-age=86400\r\ncontent-length: 30864\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\neo-log-uuid: 2171011065177869898\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30864,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 250, 8-bit colormap, non-interlaced","md5":"3d824238f279ade362c2ff9aacf3c8ce","sha1":"2d7c2a6d6f827cf97843801bfeca1c8d58dbab44","sha256":"435096462a908b1a1ff55d19bfb325ead37737f15f3e809077d149fd912272cb","sha512":"412dee7673261131b3a46d59e1c6805eb99319b2c3695c4454c503d3cbdc2416d847b285802dfda8ecb10a30dce53c865be18688d7f1491745d8b754b1a3a35c","ssdeep":"768:ELz5rddIq3b7APn5NMm3XqhoGxRSwYRxKgFTJ1AHlY:QqI3Av5NahBrSw8VJKG","tlshash":"9ed2f16032c1b71bb256c542c3faa3a1eedf10fe7eef94752913842098857e29e530e1","first_seen":"2024-12-30T10:25:05.476048Z","last_seen":"2026-03-30T06:59:22.300379Z","times_seen":4,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/TCG_GAME_ICONS/JL/EN/JL0214.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /TCG_GAME_ICONS/JL/EN/JL0214.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 18253\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 05:31:48 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692fcb44-474d\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e45397e4873568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18253,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c38d050c4e5ecbbea7807917e68cd5f6","sha1":"0b239499af8901d3f6af9bb690c193fa5ebb428f","sha256":"977454690524940dc8d7d39aad65fd6f497e3942b2a05133435eb044201b805b","sha512":"b92fd75b7bd4732e6a90c48171061b5b8b2893aa546ee28b580d492be7faec65cdd79b2c2d075dff82e7ed1e9d57e6e60ca8c60e8daa9eca141b3fc7cdbe2a24","ssdeep":"384:RK62dOLglT0vtdHktb0T3O6Xwx01IKpvQHf8Nvn4JwLDzDyTit:RudOST0PHwb0T3LXJ1IKp4ytzDX","tlshash":"9282e1bf91ed1c1bc41006b707315685a488535b539ef93b1ebc64468c4caea0fe375e","first_seen":"2025-12-06T20:48:33.826026Z","last_seen":"2026-03-30T06:59:22.301174Z","times_seen":20,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay//PROMOFE_getPromoCodeEnable?","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay//PROMOFE_getPromoCodeEnable? HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nx-app-trace-id: nnqavti115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: REWCEN3\r\nx-elapsed-time: 22\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncontent-length: 40\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 11429483278180294148\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"770069d5d9c9eb83e59cd64d221ad72c","sha1":"2b419437e5017b4dd1f5d064c566261175ab4120","sha256":"d873b292a305cb90a4efc68c82ae84fb75367eb177d45dd737824a52d9ce17f7","sha512":"d167de699e17587fa63fd9a79dcb1da9171f6a970ab5b7b87a05bb9fdbeba2ff0d3898d11d2cf7a512e5d9b4816faf8217b3c48663db6975d93018812ffff58e","ssdeep":"","tlshash":"8490040314101073c1035104153c7f10347c047741031055d14cd0dc7d71d0513c3c47","first_seen":"2025-08-09T04:42:20.162381Z","last_seen":"2026-04-05T13:40:43.900198Z","times_seen":858,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/MNP-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/MNP-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 8617\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 16:36:17 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c7281-21a9\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539713bda568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8617,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"79bbfd727b75b77614f46b5bce67eeed","sha1":"10f2fad0f1290cc1d00b3db85cf49131883a77bd","sha256":"1bce549812fadce3ede7ba79403a1169698d8f44b2de43ee094c6c586821e6f6","sha512":"a99c318842a446b9fd5660c60e6a780c37ee4082c337f3b73790895fa07155f142843aea7e65068f0aa3334ad439bdf2f3cce2eb24213b59175bb14ad068b59e","ssdeep":"192:3aY04RWLSOPNx45mH7yod5egfzTZPVol2emBzLl0+XFW7FDMwuGKOD3:BWLL7bbf5FfzTZPVomBzL6oY7FDMwuGj","tlshash":"b802bf5ed5d2eca36cd4f033da1909a86392836502a591afbf9058971cafe1a13f241e","first_seen":"2025-12-04T14:34:51.69464Z","last_seen":"2026-03-30T06:59:22.303651Z","times_seen":3,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/NE-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/NE-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 11455\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 10:25:16 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692d6d0c-2cbf\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973be45568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11455,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"1e53a5de10fc013cfb56f72c3a4734ca","sha1":"d8751e20585aeda231f14faaac3f393f1cb0dc46","sha256":"b397e98842c68a58a83ff512b01e1490192d3fcebfb9739c42674c105978aa51","sha512":"c0e20a3e684317df1982a5da83ceabc53ed6bbe1c2382310d04206e17aa3a90917a22fa68b080233efd49f4d87ab3b54949c0c7db816db8242b082162c53e684","ssdeep":"192:kQ6YxUFrnY85mKn5P967Z/tl4yfpUEXCwXN4D5YX1WtDw6Y8OxOX4KRWvpf6Kwr:4OUm8vPKl4umsC0Wd+1WtNGQICWv8Kwr","tlshash":"7832b078f3831407e40061365f0ab903bd7a91f5c7330b8685faabae945b9e831786dd","first_seen":"2025-12-01T17:59:40.008658Z","last_seen":"2026-04-04T16:58:22.892433Z","times_seen":95,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/NS-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/NS-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 8187\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 14:55:18 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c5ad6-1ffb\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973be49568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8187,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"15e67cd0798a57b77f1323993d5217eb","sha1":"d5052aa11f64893f57766d1a316c308f7a6adfbf","sha256":"63cd147218f3ebfe4c95a1c2f2fe765481d57821d0ed3868a24db8b263f03d2c","sha512":"b509b2a9199627cbb3a928a2ee282c6355565823552cbda24c70d250ccaecb3c248416292fb4a34ce476cdc30441e2f1692b91c964f8300242ac3c132f5b776d","ssdeep":"192:xlBgD77C/0NumSaOzHQI6euFq+7WA6F8IYX+ga2wVVTLRjk+Jc:526/K/OzHQI6vn7BIYX+gaHx6Wc","tlshash":"39f1bf678b37c335cd0903f447ab75ae3829bf1c7117e1ae9192f8a49c708b15965e90","first_seen":"2025-12-01T08:14:06.258025Z","last_seen":"2026-04-04T16:58:22.831333Z","times_seen":86,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/EZG-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/EZG-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 14704\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 18:42:07 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692f32ff-3970\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973de66568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"e790a9c63762c12f7dc3d2bb25bf2814","sha1":"8b4c0b8a1283f2e9b8f2ce624b93073da56f471e","sha256":"29ea22cb91270c8c65316311055bf00eb87ecf347c7357e36b4edfd8088e6510","sha512":"2a5e203a8281843ae2b4baf65cf6f386faafa054fa28264aa9c9263e355c6cd43d7c237c34c436148aba84617a0e83452ef281886207bd6a032e586d1f10a2e3","ssdeep":"192:rG/RqW4VRwLmd4LH//t92QS+d1OCQjBlKAz9Rs2sVw12HWgKN6kGD7p5XbPsGC32:iJqWWwvLHH++0nFfJsOIW7SppDsD2","tlshash":"2362c0403bb69cf2cbbe29b7c2adeb94d211e8175127673c36e95da49c5183480ed60e","first_seen":"2025-11-21T16:34:41.401838Z","last_seen":"2026-04-04T16:58:23.046952Z","times_seen":181,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/KA-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/KA-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 12451\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 18:29:15 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692dde7b-30a3\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973de67568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12451,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"16b845c05621a19e94d77538444bcdc9","sha1":"75573c5e09e807aec7891f973af09bcaf28cd5c4","sha256":"e8e83f5db0f0a25b4ba6f9b82334cf2ef6329b57e1ac3774fd155776c0205205","sha512":"e85a8cbb3b1b41c54ebc00acc946d1536513318c06d71c0d3382c8143ba35275c0a76c7f07f644b8087275405832be5b056853abb652b5e2300d9227c18da911","ssdeep":"192:YKou+oNRSKN1k5SFme58qs/ZK7R4Oa5hmfwtezDRjVp0uIxYgs88:lvv1D489wbowteyuIxYJ88","tlshash":"3042c03a8836fd02dc3174b0b6429a56b091161e622f417db22a034be5be774c1bb22a","first_seen":"2025-12-03T13:25:52.301101Z","last_seen":"2026-04-04T16:58:22.9361Z","times_seen":101,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766139125224_1.%E6%AF%8F%E5%A4%A9%E7%99%BB%E5%BD%95%E5%B9%B6%E6%89%93%E7%A0%B4%E9%87%91%E8%9B%8B%E5%8D%B3%E5%8F%AF%E8%B5%A2%E5%BE%97%209,999%20%E5%A1%94%E5%8D%A1%E3%80%82.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766139125224_1.%E6%AF%8F%E5%A4%A9%E7%99%BB%E5%BD%95%E5%B9%B6%E6%89%93%E7%A0%B4%E9%87%91%E8%9B%8B%E5%8D%B3%E5%8F%AF%E8%B5%A2%E5%BE%97%209,999%20%E5%A1%94%E5%8D%A1%E3%80%82.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 121192\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 10:12:12 GMT\r\netag: \"694524fc-1d968\"\r\nexpires: Mon, 06 Apr 2026 00:47:06 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976a962568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121192,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2170c2dea3d17830e2f49c5b5ea265bd","sha1":"d7708d415f7416b4c84c9d655d02a69f64731e57","sha256":"2fd1551e6a57f5e34c7ff5de2b0ddce836413cd26063cb946773f6949f32b5d7","sha512":"99298555e302828d600d4ad4d45fff3d34e549ee624fa9efd763bc8955c9ad18b9db60f1475a8e3d312d8e40a6d4950fdeb8779ed8fd9f1f8aff8c21874a4508","ssdeep":"3072:Hu6GpadqwfKIfd0I+fEyCYnauMPq3q56USy+vQaREy:O6tqiSImEUavy3UKvfRv","tlshash":"25c31242b4177bfef1bba27f28ec81e6895c558fbd93ada13d051592a4ace02e14f401","first_seen":"2026-03-23T09:59:23.527723Z","last_seen":"2026-03-30T06:59:22.306557Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766147077636_11.%E6%96%B0%E4%BC%9A%E5%91%98%E6%88%90%E9%95%BF%E8%AE%A1%E5%88%92.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766147077636_11.%E6%96%B0%E4%BC%9A%E5%91%98%E6%88%90%E9%95%BF%E8%AE%A1%E5%88%92.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 111385\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 12:24:44 GMT\r\netag: \"6945440c-1b319\"\r\nexpires: Thu, 02 Apr 2026 23:29:45 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976b978568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111385,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0fe0bfecb114d52b3161440e2c4abc2a","sha1":"0205d0812b1d9cbb59dab3c52cfd3c19e89a4200","sha256":"28219b234d7744a0bb40a96f39423bb7a210bea462118d5166412b5f9acccab9","sha512":"f44c3eaf5dd4683017e292b4597905c623ac7e56fa2a4f7f445e1fca8c38090111d0304eefbad2d07bc7b491f352e5c55bb6d8767f1f6009a291243ebb14b3b3","ssdeep":"1536:IpJqItw88PD+MD32pXuj1xgZRn7ghvz/DeI3BEGpGDNrszq0pbgT4m8DIl2dahyf:Ukyv87Hr0uj1xgZRn8DyNszq+nm24i","tlshash":"82b312d21ec1ee92f17798f12029cc73e514220255fab7218ce73baee990c07bee5449","first_seen":"2026-03-23T09:59:23.407645Z","last_seen":"2026-03-30T06:59:22.308238Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/WPSCORE_getDownloadSetting?domain=kg999.net","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/WPSCORE_getDownloadSetting?domain=kg999.net HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: yyacua2115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 3708522634417629797\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2130,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ffe1f6562fb9c5510df1d5909c286130","sha1":"b3d79ad61bd1ec87db1c52566c2189d6220ad1ee","sha256":"00cbd607ef8ddc4cbb92240b9bf46f5cd94ec81221b3ce8efc1a4dd024102998","sha512":"f5e9abe54570ab202e8321537baacf31dc6b8fa64e92e900cbd78cd2843a798a923c035e44c4556b8dbc06bb1c658591f55ddb7e8bdcfb25a20650026d05a844","ssdeep":"","tlshash":"b141e325280968f748c2c549a36c7b17201dce7b1196a97acc36d2a97cefc3c4703cba","first_seen":"2026-03-23T09:59:23.454335Z","last_seen":"2026-03-30T06:59:22.310001Z","times_seen":2,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/GCSGAME_gameList?clientType=3\u0026platform=flash%2Chtml5-desktop\u0026channel=kg999bdtf1\u0026merchant=kg999bdtf1\u0026gameType=FISH\u0026vassalage=JL\u0026gameClassify=\u0026gameName=\u0026minBet=\u0026minLineNum=\u0026language=BN\u0026page=1\u0026ext=avif","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/GCSGAME_gameList?clientType=3\u0026platform=flash%2Chtml5-desktop\u0026channel=kg999bdtf1\u0026merchant=kg999bdtf1\u0026gameType=FISH\u0026vassalage=JL\u0026gameClassify=\u0026gameName=\u0026minBet=\u0026minLineNum=\u0026language=BN\u0026page=1\u0026ext=avif HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nLanguage: BN\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: 8ygqhji115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: GAMELO3, FREEPLAY3\r\nx-elapsed-time: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 1858474354921056580\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18320,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (17532), with no line terminators","md5":"de431916ac1cc9ad5dfff3eaa75b4a68","sha1":"c5f95e0adb0c257d4064c522eda0994561351c28","sha256":"5eeb8a140eeda1b0170ddb2aa87830c9f845b1704e4f7c929683a1780b4a2282","sha512":"f34b69c11b806d1e0fe77fd10aa879a91b4776b87b251be72ed631069462e3ff90cf24102a40c3c688925555daaede337d465ca8b1f51d395441bf2792f9c6c4","ssdeep":"192:oPiTDo2OyOhXDw1v8D7dolrW+qOD7KaDKRg1sDoZV8jD0AwD38T+2DAtkHriSw1Y:omUhd1QZLOT6X2kQwgscBTexs","tlshash":"b182742cd5497ef6962643b4216f7fdac18e2e2f5dc8d620dbe18e0885ffa7c8209145","first_seen":"2026-03-30T06:59:22.311709Z","last_seen":"2026-03-30T06:59:22.311709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/NG-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/NG-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 10193\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 01:25:39 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692cee93-27d1\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539712bd0568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10193,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"a9dbfa2cca3c745410c8f2fe472e19a5","sha1":"93005a7c9424848e8e7ee5cf1d6450fba6a0c56e","sha256":"8acc4da6b59ebaa929a4f6f5a6bb8423f339f8bdb3209bfa69637059475a87b0","sha512":"a92920f7b5ccb1b7218dabcfc716fbb100b030bbb548da699592d4d86bd24c01353598b170e0b840d752282b9d78788478a3b623d8a158098522c6ad255e78a2","ssdeep":"192:xioDJCZWvreCP1iPQar/GL5QvzmYYJm5WAPVVlfJMXoHC8NSPa+bayLFg:Q6JzyCMoeOL0zKmDxJHCxPbFRg","tlshash":"ef22bf9263430858d4cfb2bf8948825681708ece699dd9e49a16f29b5b0d265f017f8f","first_seen":"2025-12-21T12:31:39.549991Z","last_seen":"2026-03-30T06:59:22.313412Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/FTG-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/FTG-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 3730\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 02:21:07 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692baa13-e92\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ae37568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3730,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"33ae4c68a735c3c0922d61057b845357","sha1":"7ac5fa76c5c959dd0b383aff83bb90fc39d28574","sha256":"9350ae8e819bf905ba4bd5b088a0e6432de82667bd02d9aa9d9658a2022bd9c5","sha512":"749891696c967e7111765c3d6ebe0bfb9b5945cfb9177c9dd8ffd8e43f0009c0cf56c4a40209d6959edb5b12183832e64e1bc94efc08b67cedfd13a27b9aef00","ssdeep":"","tlshash":"e1717cdabfca9124f2133236d20f04925e270115ddd26dcc5155aca51f36284e3033bb","first_seen":"2025-10-14T07:12:39.001098Z","last_seen":"2026-04-04T16:58:22.868483Z","times_seen":279,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766147058307_9.%E6%AF%8F%E5%A4%A912%E4%B8%AA%E5%85%8D%E8%B4%B9%E7%BA%A2%E5%8C%85.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766147058307_9.%E6%AF%8F%E5%A4%A912%E4%B8%AA%E5%85%8D%E8%B4%B9%E7%BA%A2%E5%8C%85.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 101652\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 12:24:24 GMT\r\netag: \"694543f8-18d14\"\r\nexpires: Thu, 02 Apr 2026 23:29:45 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976b974568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101652,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"fd97301c082e5512063d46e632951848","sha1":"3acc6ed5104d3a3a49b033908129df1399b8ee82","sha256":"1f6ceb5758e31352a1ddb54554b9be50bc35c0fcc8f08cc3479650db2b00ce3d","sha512":"615adbe6471b72d4985979bd69b6057e81ad7838b43781e5804f318175f8521152e07ef04fdb65401a337600c81daede9c00e071130121d75b56bcd7f43dc71e","ssdeep":"1536:u2Ou520muSWkDKPly1bzlr/j9amZ375+khSlukfmnNKxidlsskWyXVGobvtrCEr:uxuA1ay7/jr7/cluVWs7wDbFGEr","tlshash":"5ba3125c34adc0e5c41e9f7ef705aca8d7a2d31d09b4d9ea12b2648d891b90fef60b14","first_seen":"2026-03-23T09:59:23.590395Z","last_seen":"2026-03-30T06:59:22.315691Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/TCG_GAME_ICONS/JL/EN/JL0189.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /TCG_GAME_ICONS/JL/EN/JL0189.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 17126\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:31:37 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692eb1f9-42e6\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e45397e4870568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17126,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ba08188fcdf104b7517921e1b6cd1727","sha1":"383a2e4ffc6186dfae79a160f017485d54ce8d4e","sha256":"b3d7e6c42f21b75540876831d9268b8b0a9d7d44cc2b59873a443b1f0ff1a416","sha512":"943ba32a445f75958de15d1b11419a720d4bbe53cb025f28388a13cff28c29bc55229ffd0bc4a7e89e9db5ae12e1349dc005c4dd14b825c6d043e10c3827e101","ssdeep":"384:pcYWTh9wtyYtR6rHkDoKcro9rxRhamcrPoD/48T1:pcV7GePE9Thamm+gs","tlshash":"7972c184faaa5f2ed693a335d0112d863955d2f6bb57c97db3f490480433208add36f8","first_seen":"2025-12-06T21:06:27.701885Z","last_seen":"2026-03-30T06:59:22.31727Z","times_seen":8,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/PAS-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/PAS-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 7993\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 12:17:42 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c35e6-1f39\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453971ac4b568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7993,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"205fdfdcc66f2ca4572bcc6ced41e164","sha1":"c3891fd96db84b6249ba5dcf86a8f9a686f1fcc2","sha256":"3aeb4471bc6235813940894909e5d76b86602863e9195485dbf1098a26c30d09","sha512":"c5b3ccf8816e02a3cbce3733b2e62c9447becff0a350dc0eae8eab0d62a019a0e203efe3098656b8c3c57b13cce2c605524c699acde07f44073c03d348d313e4","ssdeep":"192:sokOUn40fz48vj0RUT9r4XUoAISRK2t+Nh6pY+36FKt+z091x0v5:sl40fzH70Sd4XU/HRLeEC+3Xty0bx4","tlshash":"e9f18d4d66d0dc86eaf90a390da2b4c57235c1429ad619c28ec6bd048fd2be093907fd","first_seen":"2026-03-23T09:59:23.455325Z","last_seen":"2026-03-30T06:59:22.318905Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/GPI-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/GPI-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 9740\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 23:12:16 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692ccf50-260c\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ce51568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9740,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"fbb57d3071c2dd7d94544053e4dc2240","sha1":"253824c61f951b65fada407dfbc203af90288e65","sha256":"1f49e83aa9457484d604a4913958857c28c1d16ed0eeae819132aaa4972bd40b","sha512":"a26df3c27536da4da5cfcfb26fc226f58e05b7716cff8ec19e6f67cd35efb70040ce06dad5e1424762ae744b50584606e7fedda6d1af036efcc326ad3ac7260e","ssdeep":"192:3UDXa6OKRLykoSR17AimPmLLeZwYfcD6Bja54hmpkvAHT:+tRLVoSnAirLrYfo6BG5BkiT","tlshash":"e312c03b7866674bd570bb73fffe0430369c05b011ba19d9146a30f2232692eb99041e","first_seen":"2025-12-01T08:14:06.184666Z","last_seen":"2026-04-04T16:58:22.84199Z","times_seen":87,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/TCG_GAME_ICONS/SPB/EN/SPB002.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /TCG_GAME_ICONS/SPB/EN/SPB002.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 7630\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 09:10:26 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c0a02-1dce\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e45397e0833568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7630,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7aae8e54e43f7ca937dda3dd0dbfd586","sha1":"c3ef226b8fa82fb9a8861a04a7af664eff2fe0f0","sha256":"e6d6900ed70897bcdf546779e495138088f9f2c15a51a53cfb146b1da0c22056","sha512":"0600676534d8a0f7732ee9b73a22adc89c9a5fcea95da89ce999da9ec0686355e1049e634bc0599b9028f05ed7c01c0b719ba1f6eeb116232067a9e7128fb9e7","ssdeep":"192:+U8zVAns2/UJYDI9HyrvdOtLPlcCyvibZoM:0zV/bFyxOVGvOCM","tlshash":"19f1af7568ad80c2e0981c78d00c2846aad193763938ed5853b47aabda284770b888cf","first_seen":"2025-11-15T13:46:59.251591Z","last_seen":"2026-04-04T16:58:22.832239Z","times_seen":171,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/common/promo-ui/index.js?_=1774853887558","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:07.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /common/promo-ui/index.js?_=1774853887558 HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\netag: \"69c351a7-36b\"\r\nexpires: Mon, 30 Mar 2026 14:58:07 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nlast-modified: Wed, 25 Mar 2026 03:08:23 GMT\r\ncache-control: no-cache\r\ncontent-length: 875\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:07 GMT\r\neo-log-uuid: 15538849285728354767\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":875,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5cafe9f791ad40c05c74e2e19e6cf15f","sha1":"b2a069ff5d9a8366fbd7df423bedf98361ac196f","sha256":"b219dea63255472e6096e26d6a627d3e554159f73832eb98f88f5d65c5a5b5c3","sha512":"d9d22e31e79b5cb84017062a39e1bfcc7f740ce02db17ee3b79b48b0afebd19cc5e85fad914dd75660a460b4286682aaa77cf2c4e5d191501977fe097f713491","ssdeep":"","tlshash":"4f118c0a9ff39194647b309f97aa5444329182875121d591355cd8a2ff54d6402bdeec","first_seen":"2026-03-25T23:15:52.521881Z","last_seen":"2026-04-01T14:49:11.218283Z","times_seen":32,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/PROMOFE_getPromoAnnounceV2?types=B%2CPL%2CPU%2CPR%2CH\u0026platform=W\u0026execution=B\u0026version=1","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/PROMOFE_getPromoAnnounceV2?types=B%2CPL%2CPU%2CPR%2CH\u0026platform=W\u0026execution=B\u0026version=1 HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: j4b5men115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 21\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 1999652705274478821\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":170851,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2724772ddc0801f2071ceb9908d07e81","sha1":"f5c43bd76b993ce6fee0e983a5d0acb51916179e","sha256":"21421f3be7db5fe7952b75b8d62dfe64428a9a0c27b699a5d49d25573c2c294c","sha512":"69ca86722ad6089bff87f376c809897223ade2dc512d64016eb25bcac7d250f2895e24ae50c71af9f3b3b67390d17d673516371b30782b6af0943a097febac4f","ssdeep":"1536:cVC4ym6ymF+G+faEOaEGKbjKbJ+RIPYfHQ+RIPYfHsvPQHvPmmlm7eiseiAeGivp:we5","tlshash":"0bf35a20d97d80b1a5e5ccc8438e637181476e87cba1f74cdd1b9274b89dc3d68aade8","first_seen":"2026-03-30T06:59:22.32272Z","last_seen":"2026-03-30T06:59:22.32272Z","times_seen":1,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/ac/v.1.0.1/manifest/ac-properties.0a0ca7e7.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /ac/v.1.0.1/manifest/ac-properties.0a0ca7e7.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"69703773-1b7b05\"\r\nexpires: Tue, 31 Mar 2026 06:58:09 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Wed, 21 Jan 2026 02:18:27 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 3719724019619346497\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1800965,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (23841), with NEL line terminators","md5":"6bccdf7b40b9d2acf069d90ac9cee606","sha1":"cb40bf0bd3e891f268c07f07e8d9a3e50d4ca40c","sha256":"c25ea04595201a3069ff5b54e6e279a523b2fc68a669cddcbaba8d20db1dec92","sha512":"180f53e30598eab88e85998b66de543b245da47c579e0433905df30f8f1fc68a4a6c941d620fee6c72b045e061ccf9e04a8fcd340a2fe566a55eab3d8177ceba","ssdeep":"12288:P4udbu0XO0s1IeFeJQt2lxhXDFTEN/1EvyZTc9LfVem0ZFjTwDyrQLlQfcHDAfly:PneYlxhXDFTZtV","tlshash":"e365b2b48e3bc7158dee31816c87f7b47d592916c285ebdfe86e9e1e20c4c3c410966a","first_seen":"2026-03-30T06:59:22.324352Z","last_seen":"2026-03-30T06:59:22.324352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/BTI-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/BTI-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 11588\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 13:04:06 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692d9246-2d44\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539731d95568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11588,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"7bae2bd8cbcf7007ec833ca085049c4a","sha1":"20b4f9b6658e6b298ed2a0c100027ed59adc610f","sha256":"09bedcc19710c33391fb55ce8a46033e034aa89d762e684eca873b9eba0e8357","sha512":"169ba41779cdfd5cfc06b4bbee9d8daad6c9f683272b2e8187633e3be902bee50ea82d1b6fc157129d1aebe9cb97bdc7c3df74111d7120ee76eacf077ccc02b5","ssdeep":"192:S9/VyCbDZecZFC9lqY1ILI5iAxgyGa6QHbmCnTF72DNaqBK9XyKzwzD4ztsue4z2:cFtzjYCLIL6a60F72hw9XvzOD4xsu+7","tlshash":"dd32af8b26731c2fcb5de2b5f32dc3091d34191324e1fe8457a82baaface42a5b59451","first_seen":"2026-03-23T09:59:23.594716Z","last_seen":"2026-03-30T06:59:22.327878Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/TCG_GAME_ICONS/EG4/EN/EG4326.png?t=1774852600739","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /TCG_GAME_ICONS/EG4/EN/EG4326.png?t=1774852600739 HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 20356\r\nserver: cloudflare\r\nlast-modified: Sun, 14 Dec 2025 17:33:07 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"693ef4d3-4f84\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e45397e0832568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20356,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 170, 8-bit colormap, non-interlaced","md5":"93c7cd968400b2cc78df313ee6d1b847","sha1":"bbdbf31bc0663b432ae52afb47d62d233ef0205f","sha256":"48a90b543b95e74900649a9ffe7e0208d8aa2a484e1ec31c036cbf10c864faa1","sha512":"e65ff3d068d1393ddecd76c3a8c5b60f7df7f6fc24d4a4a6bf97eb01147a6eceb8655d5139cd5c80d898e623cba09157745b425073d48249479d00b3ca79df19","ssdeep":"384:6ucoj+KF3T9iLbMNc+5aMTJNZxtBkHK5mMz0q4V/OTF272N:JXZFD9iLk5a8JlaKQwX45M","tlshash":"0292d19c03b102bf84ffef844424ef664050559ad4bd5ef1ba0e42b665e788cd28467b","first_seen":"2025-12-18T20:55:16.590281Z","last_seen":"2026-04-04T16:58:22.83966Z","times_seen":19,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-30T06:58:05.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\netag: \"69bbd48a-2f8\"\r\naccept-ranges: bytes\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nlast-modified: Thu, 19 Mar 2026 10:48:42 GMT\r\ncache-control: no-cache\r\ncontent-length: 760\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:05 GMT\r\neo-log-uuid: 17906808665573487883\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (760), with no line terminators","md5":"c1c8321a9c262350efba49e0c076b36f","sha1":"30e067c93428477b9a37ae1c1070959938c0c909","sha256":"1c3f838085039cd14019d04bd9037fa2ad6c549fcad7aaf8424b86666c9a52c3","sha512":"a14d49f8a90e0336832a03cd7fef981472037f6cbb23da40be5d3d49f827a3dde58a5a1608b2f63f931d25f19152b05f1fbb36248b693e91ca95053038709c64","ssdeep":"","tlshash":"600110c35d9ac0be11502c4a6cfcf15dc04bcc169fa1cd2815e4483d4458fcc4cab8aa","first_seen":"2026-03-23T09:59:23.586298Z","last_seen":"2026-03-30T06:59:22.331594Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1344,"timings":{"blocked":373,"dns":236,"connect":19,"send":0,"wait":597,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/PROMOFE_getTicketGlobalConfig?device=WEB\u0026_=1774853888770","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/PROMOFE_getTicketGlobalConfig?device=WEB\u0026_=1774853888770 HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nx-app-trace-id: 0pyfxa2115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: REWCEN3\r\nx-elapsed-time: 3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncontent-length: 324\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 15163507367810854957\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9ad814fd358103e99aab0713e3ad1c51","sha1":"00188f3be244904db3d989741ac64ae68593787e","sha256":"4200ef7e21d7fbf0627d8083f49a39ec77022ec563229deff418d5b30cabeb6c","sha512":"5e215f4f7d1f5711d58b2a62fa5b7b619a92d4230fe7539b5cd0998ad9ec8354528d50bc021fc064aecafbbab5941841a21acdf939216b387355f1deb368655c","ssdeep":"","tlshash":"11e0723d30830d3384a382ea81a318c2f81e83b684888e084caa46163408b003cee68f","first_seen":"2025-10-06T05:49:41.424165Z","last_seen":"2026-04-04T10:39:35.527295Z","times_seen":37,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/manifest/mc-control-shanshan.4e3be00e.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/mc-control-shanshan.4e3be00e.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 17 Mar 2026 08:34:54 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69b9122e-13310c\"\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nexpires: Sun, 29 Mar 2026 20:04:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 265811\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 4925076002184540232\r\neo-cache-status: RefreshHit\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1257740,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65460), with no line terminators","md5":"3dc02c694e9de5a095573a9e6086ca05","sha1":"4b14e1385637eef6c0e91cb735d93299d3bf9e6b","sha256":"994de11f7d8440fcdc5b2034ca66d37fc62ea447a58206e4fc568d86ab40c077","sha512":"7eb72c8fda4c9f5b59289d6600c327b8279e29b63237f26791b399dd7fd20d99e9327a8731de6d992f8597f5aca7378a74da23edefc009d96494b33d8d4ea211","ssdeep":"12288:dtyL+W2ElFndtzZWJMMC2msVEjZ2BLmNacum/4H1jKDkcah+ibCskUcprGQZROJ8:dtWV22dtzZWX/zHRKNOJQwdZQVeJ6","tlshash":"74251a4871e661a21177716a605f6605262a7e33c00e0851f2aec9f1afbdd85f333f7a","first_seen":"2026-03-18T09:30:16.274062Z","last_seen":"2026-04-01T20:19:14.641068Z","times_seen":66,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/img/cockfight-banner.223a686.png","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/img/cockfight-banner.223a686.png HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"69bbd48a-7db1\"\r\nserver: EdgeBot-CUSTOM\r\nexpires: Tue, 31 Mar 2026 06:58:11 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 19 Mar 2026 10:48:42 GMT\r\ncache-control: public, max-age=86400\r\ncontent-length: 32177\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\neo-log-uuid: 10285213298618399392\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32177,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 250, 8-bit colormap, non-interlaced","md5":"223a686aa6a0458d2a655c3a40548b92","sha1":"9ac193e49cf539bb017b9f51eb218f3266f5452a","sha256":"3a17722f90562d167c76fd9e7248575f3570ebcbd542b7c5dd94bbaba3e2480f","sha512":"df24e219c2d659cad0a5e886ea9004b3d26c47b00680ad6921ec0ef7f1654c8febf7476c730c0e8a42fc10117397b04cdee599be5f1be8e3751c38633528a3d8","ssdeep":"768:5JK9lR3Zq3XmfQUKwy+y4adE8bTIKiUfKeTJVZyn8B+pb3GA8e:5JK9lR3ZqGfQ4y+y4rI0KikKiJfyBoAZ","tlshash":"d0e2e13b7acc19646468101323d2ed90d86f3ac5b34ef5928e7b87e268e56585eb0f34","first_seen":"2024-12-30T10:25:05.480827Z","last_seen":"2026-03-30T06:59:22.350122Z","times_seen":4,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/TCG_GAME_ICONS/JL/EN/512.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:12.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /TCG_GAME_ICONS/JL/EN/512.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:12 GMT\r\ncontent-type: image/avif\r\ncontent-length: 14982\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 20 Mar 2026 07:10:51 GMT\r\netag: \"69bcf2fb-3a86\"\r\nexpires: Fri, 03 Apr 2026 20:58:40 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e45397cff4f568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14982,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2ed9d7be000cc3634c11d085a6ee8b15","sha1":"94b1889294f9cb0906003ee9e988fb0340cdab0b","sha256":"d48cc8ecb9f645b367f1c78aeb110aa8c20c2164cc1641c60d2e9401ce9dec97","sha512":"a761956b941de15932bfcece1d1bfe352558ea28c872f78e19d7be9f77df87270c5229628d913dfaa425392c18cf1538e3a7086499abbb480eba8c4f504051b0","ssdeep":"384:/osSSXlGfqWMXwLtf7nVfroCSDusVylGcorzUsh:/ISOqWMXE7nNsSsVuGfrvh","tlshash":"9f62cfd91b887d6cd4cf25788e9fa6387523180d1b023e1b6ce73a437420894f996d8f","first_seen":"2026-03-30T06:59:22.351776Z","last_seen":"2026-04-04T13:40:26.557404Z","times_seen":4,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/common/promo-ui/assets/chunk/CASH_VOUCHER.Cn0Y36G3.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /common/promo-ui/assets/chunk/CASH_VOUCHER.Cn0Y36G3.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/common/promo-ui/assets/entry/main.Bpc_8MB9.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\netag: \"69c351a7-63\"\r\nexpires: Tue, 31 Mar 2026 06:58:09 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Wed, 25 Mar 2026 03:08:23 GMT\r\ncache-control: public, max-age=86400\r\ncontent-length: 99\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 647248678246610585\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"9e7feb8066f3d589458b5e905a356638","sha1":"af4ef890c2778b4930f769e48b8ef62e4ad22b5a","sha256":"1954786bf71459c5b7b08104275b89aba32f836971d3608ba243cfa75fea9fbd","sha512":"069db298dcd6629c546d8073c5e55f9fba28963c6c888ccdbd5c40268d2b5a8a907d801d37c736570fa584973eb01ef87674ea7def6ce24433edcd575cd71ee9","ssdeep":"","tlshash":"e3b0120154a4c216500eb30d5168d15e3e12af18bd2910e8804c950273d790584105b0","first_seen":"2024-07-11T14:40:28Z","last_seen":"2026-04-05T13:40:43.920561Z","times_seen":1734,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/common/v.1.0.1/manifest/lib.core.min.f61a81fb.css","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /common/v.1.0.1/manifest/lib.core.min.f61a81fb.css HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"69a8fefa-43009\"\r\nexpires: Tue, 31 Mar 2026 06:58:09 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 05 Mar 2026 03:56:42 GMT\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 3123568700692502859\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":274441,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f61a81fb0aab81d607fd1f0faa0c6ec8","sha1":"aeb84ec03ca975b50228c322785327132f3d3741","sha256":"fc2572f1760c2d9e7929946025af8093b20d1828c4af8fac29d0845714926e5d","sha512":"a96bbc97b60df69c4595c63fd22196e4e4c7dd50e6c4c8a516ed959699f70ee4373da19b11e567e7a8020ef470e3d370b98ba9813f1b5b2c5e59906079a83704","ssdeep":"6144:lHtsLOg1Dg34cIYhrSTaDgxo+/7zyISSaMrb5t9vz5aS9QF8gVSShYkZow91WAW4:SFDC/Iwr3DKN/7ASbr9EZow91WAWkgDc","tlshash":"e1441caa584222cfb51b4936d7c82ff4433dc65394621ded72c62c4ac785ffa62ea113","first_seen":"2025-06-06T19:31:09.879041Z","last_seen":"2026-04-05T13:40:43.928982Z","times_seen":1514,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/SS-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/SS-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 11650\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 08:45:12 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692d5598-2d82\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539727ceb568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11650,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"e4a76b267372f5cfa176269108bf5428","sha1":"57ccb2d292e813a822d19b5c761522770a195dd3","sha256":"a536c678e9d5afd671d4e12a540d149e83c0720b5bb60f946dc328288f6771a4","sha512":"f8bd3dcf38d406f9a42c4d088274a10f459ba47b3568a7b2d73c2056b2a338e31ed399a7c4a140a613944feaad84c2dce5883fc17326b582f0cbc889505af13b","ssdeep":"192:BJhf1U9t9nQ0hIU2AOySvvDBEZTDlupSIfhQbglY2eh+o72BrfHa5Sh:Jf1U9jnQ0hP2AxSvveZTBsSI60doaRiA","tlshash":"2b32c138b1277fa8c6b1263b06177f395e11e612f876d0c08384d14fbb6a0da61de1c9","first_seen":"2025-12-11T00:04:29.807151Z","last_seen":"2026-03-30T06:59:22.35914Z","times_seen":4,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/SPB-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/SPB-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 7152\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 10:00:04 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c15a4-1bf0\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539736dd0568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7152,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"ebe15eabd6c08b19d8d2ab24a0d1a98e","sha1":"501caff2d08317372e07646c463d8ee7b8badd67","sha256":"3a4d14059feb046b88699221e424cd875e76ace47dd380ecc1979cb49f354ce2","sha512":"aaf17837d95b39ccb69546520c9e7da101d0c5a3b4ee5c58a2c9a41825a2601e7f7ef584566ab1eeb1322c5bef26fd6f4847e3980ef5f0d769b588a7ca81fe5a","ssdeep":"192:pIY7IuaRFEXLvWKa3w9Rgddn3TiQNaeCD:pIY85EXLWKa3w9RyimaDD","tlshash":"26e19e5a1b598c48cf1b8638fd7f16af754560728b4bc134437e38a89f3a6028718a8f","first_seen":"2025-12-01T05:19:45.360354Z","last_seen":"2026-04-04T16:58:22.941017Z","times_seen":133,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/FC-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/FC-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 7386\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 11:36:27 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c2c3b-1cda\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539736dd4568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"2c9130d34a76d363ba0c272f4dee2b89","sha1":"802bdd7f7e5688e75f28f86eeeffe60ea5e0f395","sha256":"8ef9eb704325f071c548835d48bb08fadc18177145a6ac7f4bd11a925a38ae30","sha512":"92a8ea7ff7aae17a331aa5cc7691dfd6173d7d0931cfae5ece330a7c00f8724e777fbcd1eb9e6b09a9d2d40843adc8407296061183fd733e6658793d304fbf8d","ssdeep":"192:urVXj5LivCMx3xO+AY7fOOUGM+dOUtEcBM:urVXjdiaMxzfOOUGoUC","tlshash":"62e17cc9ba7918efeb9a13bda5045a7ad42cb44fa022642406493133a9f955fcc7d4c2","first_seen":"2025-11-30T22:26:42.684141Z","last_seen":"2026-04-04T16:58:22.970018Z","times_seen":147,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/OCT-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/OCT-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 8949\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 16:18:58 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c6e72-22f5\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973be40568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"5cded919f249e294b9b0908e96d6ea3a","sha1":"8eb8216c451b51f9c46d639c735021c411d521d3","sha256":"17306b92c84c0c3a48902714c2a56f93ab78c6feca809717d34d64d1a7278979","sha512":"7afcb41234801be294763bc978e7eb03892c81805a5506e65a6c30005ef691b8193ec992bbdff4474e596ce75663518fca8b0c198a89896eaa0481afa4dcfc40","ssdeep":"192:kNz4al63kH/lAsa9DUQsOwo5FNWhXD+ZfEj5uiW:kh4263u/lPaqOwo5FNWpD+Zf0ciW","tlshash":"ef02ae55a1111d9cc1b277733d29bed5be480e459d122b28a170bd74ca3ab2321aa8d3","first_seen":"2025-12-01T08:14:06.127812Z","last_seen":"2026-04-04T16:58:23.109993Z","times_seen":76,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/EGT-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/EGT-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 7006\r\nserver: cloudflare\r\nlast-modified: Sun, 30 Nov 2025 08:34:43 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692c01a3-1b5e\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453973ce5c568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 301, 8-bit colormap, non-interlaced","md5":"2409a52d5684eb710965ed76be3bd73a","sha1":"cc03c3210e4901c2ee4eceb089f6ef23f3f20b01","sha256":"74ab388aa3a942ede4c6cd3eb423cbd50c20122619e64a41cfaa33e936b9fac1","sha512":"f2b631bf79634ecd1f8307b2a4ea066a4c7f0b33ed2dde0dcf60e4050e937de18ed15fa219cb12d0a18788edd6d42021184b072a75f8801d9b15dc06bea3da67","ssdeep":"192:Cxdp5FusghEWo8M7gS2385AkPmOywKGjXFeu:CxTGsmegd3NkeRwKGYu","tlshash":"cce1bfff90f6a495e6e4473b2e61e86bf9310387a1139024cc582dbc1ad11cb3b46ac8","first_seen":"2025-11-22T23:05:03.961181Z","last_seen":"2026-04-03T20:09:43.010526Z","times_seen":77,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/res/img/rng-banner.fdddd47.png","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /res/img/rng-banner.fdddd47.png HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"69bbd489-5c08\"\r\nserver: EdgeBot-CUSTOM\r\nexpires: Tue, 31 Mar 2026 06:58:11 GMT\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\nlast-modified: Thu, 19 Mar 2026 10:48:41 GMT\r\ncache-control: public, max-age=86400\r\ncontent-length: 23560\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\neo-log-uuid: 13327270808403500859\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 250, 8-bit colormap, non-interlaced","md5":"fdddd47cb8d002e4e229df3bca634698","sha1":"4f35fda91b1a24fa24ed4e8002d0e7edc4acd7f5","sha256":"4a6dded0d4a73c777e2338e78631e46f9b0bd116fd5cb2cacec3e6eccd0be3fb","sha512":"0ef57112c2b68166bbfd5100e21d026421dbcf12f1c1b11fbb4db3172b85ac1d2362f35b80cbbc8c495a08480d482cdd9cb0798bed08705ca41fbe493b5b0541","ssdeep":"384:0JrYJAevtAZLEDMvjVCT3yreIOk4gBE6QqdXIeoTibLTuL4ImVza1F0tTHCamPDE:mUdvt0CMvaiMizZ3jyF0LmZJsP","tlshash":"1eb2f203b13e8425c572365bd3d63f84bf28672439cc5693428c5735ba9628a4727f09","first_seen":"2024-12-30T10:25:05.474103Z","last_seen":"2026-03-30T06:59:22.363265Z","times_seen":4,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/wps/relay/MCSFE_getListAnnouncements?types=B%2CPL%2CPU%2CPR%2CH\u0026platform=W\u0026execution=B\u0026version=1\u0026ext=avif","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /wps/relay/MCSFE_getListAnnouncements?types=B%2CPL%2CPU%2CPR%2CH\u0026platform=W\u0026execution=B\u0026version=1\u0026ext=avif HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: kg999bdtf1\r\nDevice: web\r\nLanguage: BN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-app-trace-id: my0q3dd115\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: FREEPLAY3, COMM3\r\nx-elapsed-time: 59\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 16609193237951148791\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":194199,"size_decoded":0,"mime_type":"application/json","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40039), with NEL line terminators","md5":"9cd4c339a43bd2400f98c46be2e8c6fc","sha1":"3ae94545f5cfd0b6a2b28ce3592044dce8031359","sha256":"5d698f76959580839983ce18184ccb3a15fa99168f04b1e05984d4ea82fe1960","sha512":"552b0e8094403ed00c8f8d3b6c44c54b12b3cc7aa2a75eac7ae714aecb774dacf6a076cad64df1bc9f64a27559207af699a9b8e8ab265aca59522ba66d4f5e32","ssdeep":"1536:gjgdId4ymwymv+zNCJA/5SA/52nJhwaAJzzJ/nJhwaAJzzJd5UwqbfH++RIPYfHM:Cgz3isY7","tlshash":"2234c911c33e43739575f5c436892ee4844c6e2b8390ef5edd7a923468ef87a7c988a4","first_seen":"2026-03-30T06:59:22.364387Z","last_seen":"2026-03-30T06:59:22.364387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/mc/v.1.0.1/manifest/slider.d420e4d3.js","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:09.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/slider.d420e4d3.js HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nCookie: SHELL_deviceId=51f97a06-77b3-4f2c-a5df-c47f60bf6d0d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 17 Mar 2026 08:34:56 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69b91230-7e10\"\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nexpires: Sun, 29 Mar 2026 20:04:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 6390\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:09 GMT\r\neo-log-uuid: 18351978681432799078\r\neo-cache-status: RefreshHit\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32272,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d420e4d388935ca74419f5edf6a4b3a8","sha1":"bacc1d0c5ab9314441b2cdf2943a292e4e579398","sha256":"7062323b9c3f6fbc07887ff7baaedb379d6836e7bfe70d7747025729598ab49f","sha512":"1669328f8a562f8be4195a3f484b2167f031d539fd07ae2d8566844e8d49f414438f0307dfb992f0286cbf2beda3fca20b11f5dacd8fe65b6bb96c064c4985df","ssdeep":"768:gXE3sT/57tbDWuZMiRPidEB5Sn55+3WjFQSjWDNGL:gUqWiV5Bm8NC","tlshash":"86e21f0a6bea6570a513b0aa5f5f984a7634419f8d06ed887d5c86c44f0dc3c92f2ff8","first_seen":"2023-03-07T12:04:53Z","last_seen":"2026-04-05T13:40:43.942465Z","times_seen":1865,"resource_available":true,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kg999.net/common/promo-ui/assets/resource/main.D4oMc46v.css","fqdn":"www.kg999.net","domain":"kg999.net","tld":"net"},"ip":{"addr":"43.169.27.5","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:08.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kg999.net","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Wed, 10 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:38:E5:D6:9F:EF:53:7B:9D:D6:B9:0E:95:7E:6A:76:67:A7:28:93","sha256":"59:65:96:C3:13:4D:D4:B0:A2:1F:5F:76:D0:04:CE:D7:D5:09:61:B5:8D:DD:2F:37:62:B5:FF:8B:B1:16:CF:E0"}}},"request":{"raw":"GET /common/promo-ui/assets/resource/main.D4oMc46v.css HTTP/1.1\r\nHost: www.kg999.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 25 Mar 2026 03:08:22 GMT\r\ncontent-encoding: gzip\r\netag: W/\"69c351a6-749b8\"\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nexpires: Sun, 29 Mar 2026 20:04:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: EdgeBot-CUSTOM\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-cache-tier2: MISS\r\ncache-control: public, max-age=86400\r\ncontent-length: 207407\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=16070400;includeSubDomains;preload\r\ndate: Mon, 30 Mar 2026 06:58:08 GMT\r\neo-log-uuid: 1872678053651157008\r\neo-cache-status: RefreshHit\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":477624,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7c88150c713da4bf622deb6635a6fdc7","sha1":"065d6f02519ccaa3652c5cf40bfae87751890da0","sha256":"11db4b71a0b76b30b9483d27e650b064665e80351581173a16594dd1ee322306","sha512":"c018dfd40b174fd8ccb2032e7618270b50ee67d2322fb3bfd6590dbe675f4a62919061c82e4b27ceecebc3843239cf82707a8615e09e2d55f0e012fc2c6a4869","ssdeep":"12288:xEul+DlWLxFxkiLe8knAVkYPyLjyzuwGg:xEY+5WLjqiLIAVNPyWuwn","tlshash":"31a47d339552331db07bde2857e4229a5228c123d1162afd6da27627cfc77c225f628f","first_seen":"2026-03-25T23:15:52.48942Z","last_seen":"2026-04-01T14:49:11.178467Z","times_seen":32,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"www.kg999.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/CG-COLOR2.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:10.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/CG-COLOR2.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 12651\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 23:53:16 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692e2a6c-316b\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539719c40568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12651,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"2bc5f3bd65f145176669dbb321a93749","sha1":"5935788e5c0d3f9cd7f38dbdf2aaf030f72fa25d","sha256":"6b4b096210e5dddced2ebe1ef96e35ef4b6928c013cb4ad07716e7db8cd8565b","sha512":"c65a64185292d78f4b5f2905071a1af265fa9414b97c881ac122ce8bc3ed68d7fb3c43f5cced9947332e2c510703da6fb25bc7600cea663ac550187c1dc321bb","ssdeep":"384:eJ/fzDKIaTTTFObCn08X8VqIQqglzBj+ikCcD:eJ/PKPTPASrqmBjJm","tlshash":"9d42c00102b82af2cd5ad1361f5e7767bd397141c98b4ca2f43041755f33b4eb5a6869","first_seen":"2025-12-03T13:25:52.351783Z","last_seen":"2026-04-04T16:58:22.883572Z","times_seen":79,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/PP-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/PP-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 11181\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 10:36:25 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692d6fa9-2bad\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539736dce568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"8e39590bcf1b390e206c855dc4a415c3","sha1":"d78c7ff5cbfb9608f5aa69cbd4c6d3e6186d9503","sha256":"e63f663ed2227db0a84bec516d96235e5d0f8431ab0f2d8b8e56a0fa8543c851","sha512":"99f782c6b853492e50aa4972ebe671475c90485a008374ff5cc4bc34eb94e60fbdc2cac73b0e7e8d762d07f015a427f828414142ecbba6a3e7d9ef2bd956f0b0","ssdeep":"192:kPyG38LUB4OjIC4qOduiZ/HfwJp0rBLAhUbaJyh1IX0Ugm1jJS40pq:AyDUBLjXOduIAqrmUmfN+q","tlshash":"cb32bf3fa03bd171fa299734d69b150e5ca35dc244097591f6acea076e55f0bc0d0d16","first_seen":"2025-12-01T17:59:40.048698Z","last_seen":"2026-04-04T16:58:23.014374Z","times_seen":122,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com//TCG_PROD_IMAGES/RNG_LIST_VENDOR/GM-COLOR.png","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/RNG_LIST_VENDOR/GM-COLOR.png HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 11319\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 06:42:21 GMT\r\nstrict-transport-security: max-age=0\r\netag: \"692d38cd-2c37\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e4539739e18568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11319,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 300, 8-bit colormap, non-interlaced","md5":"5a8d328f26f3a87accc1cf47deadc71c","sha1":"6ada6f1e14a496a6c0a5eb0ef19479a05467d9ce","sha256":"18005f2ecbf3568bc4f2efee0a7e406bc50ebcd67405738e5195ae49d28f9ca9","sha512":"9445dde48ae56eb198fc65e7c31b6854100cc3b9d8b028b8f4a10d434790588dd959b0db29e85e5b8f29b11169282a4be8282b5e4d3aa94b68c0f8e6598e7df7","ssdeep":"192:dQMpOwsBvlP8vAnZ6xl7bHlcn/SbAGwsdZO0aWWv8I9kcRATiH7kRAdKUAlyGOlj:dQMpOwsBhY7lG/wVdZJRNoaWDKbOyO","tlshash":"be32ce912acf8cb2ce229afb687b9d31d6df1214008d14049bbc4b7c552c09b5ba5dd8","first_seen":"2025-12-02T22:47:27.738111Z","last_seen":"2026-04-04T16:58:23.045002Z","times_seen":91,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.4033888.com/mcs-images/announcement/kg999bdtf1/1766147026170_7.VIP%E4%B8%93%E5%B1%9E.avif","fqdn":"images.4033888.com","domain":"4033888.com","tld":"com"},"ip":{"addr":"104.18.28.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kg999.net/","date":"2026-03-30T06:58:11.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4033888.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 19:11:56 GMT","end":"Sat, 13 Jun 2026 20:11:50 GMT"},"fingerprint":{"sha1":"6B:E7:69:91:6C:7B:83:3B:15:28:C7:43:A0:B9:45:28:67:18:5F:2A","sha256":"A3:1C:EA:6E:91:4E:D7:62:63:58:D1:D9:CA:55:F5:3A:EF:8E:1A:7C:3A:11:CF:2D:E9:14:D9:17:D1:9A:B6:2B"}}},"request":{"raw":"GET /mcs-images/announcement/kg999bdtf1/1766147026170_7.VIP%E4%B8%93%E5%B1%9E.avif HTTP/1.1\r\nHost: images.4033888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kg999.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 06:58:11 GMT\r\ncontent-type: image/avif\r\ncontent-length: 89237\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nlast-modified: Fri, 19 Dec 2025 12:23:51 GMT\r\netag: \"694543d7-15c95\"\r\nexpires: Thu, 02 Apr 2026 23:29:45 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9e453976b96d568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89237,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b1cf20a8970fca32399da97b99fb06ac","sha1":"2e69bc0d60b1e23abeac80de25354211a2a19db1","sha256":"c4c6a41730e6761146b1943d64175694b7713231703b7814e58f938bee3d4c75","sha512":"ac523baf14db9140c3e4aa52484e459380ba378710b1e55660e3850f9cbee8f2b0c711f07184967a84fc0e615f05c4a2fc53d65c977c03ea4fd641676cdacd16","ssdeep":"1536:wFMWi5gAZKpOof6zJv2/Yj7UPOfcZPYwq3NvKVO/BpCgH5P48Z/wkdN38P:cuKpVf8EAAO0ZwbNvKVO/BpCSioNb3c","tlshash":"3c9302715dcdbc6a4b4cc2fb13a5b427a8a73e4bd344e088060b837553f2160d69b99f","first_seen":"2026-03-23T09:59:23.585471Z","last_seen":"2026-03-30T06:59:22.384224Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}