{"report_id":"9dce05eb-657a-4d18-923b-52f567ed8029","version":6,"status":"done","tags":[],"date":"2026-03-21T18:40:26Z","url":{"schema":"https","addr":"metaplay88u-amp.xyz","fqdn":"metaplay88u-amp.xyz","domain":"metaplay88u-amp.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.116","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.metaplay88u-amp.xyz/","fqdn":"www.metaplay88u-amp.xyz","domain":"metaplay88u-amp.xyz","tld":"xyz"},"title":"METAPLAY88: Situs Game Online Inovasi Terdepan 2026","dom":{"size":70919,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (46741)","md5":"1d4c8e80ef6efbdcf4588899eb6cea18","sha1":"3b95d25fe11fc3057662166abd6efbd4bf6d104f","sha256":"45b91242368194e49e2f9e3cf04a42901eeb40822cdb12212e1fba89c86a9afe","sha512":"5962396062b3c6376204aa598ab438312104cebbbdca0e8b712685c8a25818b98ee846de189d8e818c2193974e86d814cb9465e9cef305eecb44d3dac2f9a843","ssdeep":"1536:baZ5F4g5A4WR2vMLD1ZFYxGBYGk7txKkADr3MEwNGn3mFT:bRFYxG2KE","tlshash":"db630833fa0c418e920b9340d4d1fa777c68c88bcb608e69d6555f9dea66fe2363464c","dom_hash":"domhashd906c638758b935cf75e380015e94b3f","first_seen":"2026-03-21T18:40:35.439489Z","last_seen":"2026-03-21T18:40:35.439489Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"metaplay88u-amp.xyz","fqdn":"metaplay88u-amp.xyz","domain":"metaplay88u-amp.xyz","tld":"xyz"},"ip":{"addr":"172.67.161.116","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-25T18:40:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-15T22:23:30.202114Z","alert_count":0,"request_count":1,"received_data":2126,"sent_data":599,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.metaplay88u-amp.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":24,"request_count":12,"received_data":194199,"sent_data":6761,"comment":"","tags":null,"fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"9996777888.com","ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2021-03-24","domain_rank":511014,"first_seen":"2021-06-08T11:03:26Z","last_seen":"2026-03-19T07:35:35.344839Z","alert_count":0,"request_count":25,"received_data":8314247,"sent_data":12039,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cdn.ampproject.org","ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2026-03-16T09:15:33.660878Z","alert_count":0,"request_count":6,"received_data":390086,"sent_data":2922,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"metaplay88u-amp.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-10","domain_rank":0,"first_seen":"2026-03-21T18:40:29.141458Z","last_seen":"2026-03-21T18:40:29.141458Z","alert_count":2,"request_count":1,"received_data":51008,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/v0/amp-loader-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7fcfc2dad8a5a21597675f84c0a2cec","sha1":"b43be391d0a3bf209b3f01cf0f29b68311c03ab7","sha256":"44c1a7b71b2869d83d2f5198514dfb2e60b49c51b1edad87daa2af977842b045","sha512":"cd2e09e595efa89578bc1b4358d69798fa62e91e52eb29ae72999b4136eb6a4d66a0a897d43ad136cb3070303e197a1c5421762c1348e6fff712ba30a49c8b30","ssdeep":"384:Eo39KdedznnHXcxZgulqaa5F4g5A4WR2vCk:F39KMdT3cLgulDa5F4g5A4WR2vCk","tlshash":"1a429360a50be2ac530342b488f5b956757ccd4fb8104075f0604eeedb8ae54bdbba6e","size":12361,"data":"","first_seen":"2026-03-18T09:15:17.817764Z","last_seen":"2026-05-12T10:22:31.882044Z","times_seen":792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-carousel-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a0c74e3ee31db74256943a8712d1feb","sha1":"b3bb013c70fd53f2ee29b1c7eb7f3f5a0b7ad13a","sha256":"c1281f0d57ecaa7bbb3422c13a361ce10ab89b42816097e1b35c8c0488a38053","sha512":"a3bc73b6c412451ec40f605aa06143f4bb3d6e48d22a1154453a0f0830c3952ff270d9e5937741267afe4ce818b806364fcbb2d23c3dc1bd6eef022829edb02e","ssdeep":"768:vhMeyJaongtXq3yoSae/2yyEV6ocJRMdYDZ8PL1Wdq8NQQEd1/i+E0xCq7rzRqC8:JM5iK2zYixzGdB","tlshash":"cce2e8e0b242643a07e649b440675105e62ca9557106482cf4fddfcbfeaad9632bef3c","size":33481,"data":"","first_seen":"2026-03-19T22:31:53.49773Z","last_seen":"2026-05-10T22:43:05.864725Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe1b81f958d86c98e88b86960a4dc246","sha1":"eb7c9593cf4980bd7774efec7f9579a9227d021f","sha256":"958c3f227881fbb4eebfe70f950f16384382a519ac0b708a073ae809205e312d","sha512":"bd2a0e6ce8551a58f83c095f7c1c071b061ac495337f58fda6b7e175344003a4687de1185d9ec87b1bfd4dd44fab2d6d54a6081b884c034bca5d6dac989a45da","ssdeep":"3072:dHxofahpFRKNAtM0sK8NQgU9SutUvDK3p9Pd+g3:XofahpF+At5s2gU9SutSDK3p9F","tlshash":"f524c5a53296b03247e154f5d4774002e3296998340b816cf8bceecb7ca9d86b1b6f7d","size":228175,"data":"","first_seen":"2026-03-18T09:15:17.810072Z","last_seen":"2026-05-12T10:22:31.89447Z","times_seen":888,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/v0/amp-auto-lightbox-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"364f24641942c93e6ede683ab3923a22","sha1":"04ce01df7c7881dd0225267d3eb2d94180f647b0","sha256":"505be43b956f29f4ff07f46c36713c5f2945da74563628ac9a87b4a7beb6d0ea","sha512":"264cfdc8dd027c968c2a8fc492a2737e577b8b1ae9da02ed086ec056c7af4f4e6e8375c69b452152d106fcf77a5de71e573bf30c55e368a9589b7cba1516a4e5","ssdeep":"192:/WEifFyiH0GLDl0koh7qvnp+lmlLgA/laQ0:/WEQyc02Dl0kUYp+mgalar","tlshash":"f1e172e876c2b5355baa69b2d17b8006e33da955700f8020d17cfd853dba186d2b3f2c","size":7095,"data":"","first_seen":"2026-03-19T03:48:05.555623Z","last_seen":"2026-05-10T22:43:05.867626Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-analytics-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e033a739d6c1d9901b3d3f8aa5b25d5c","sha1":"efa19dfdc8b7873a266cbeca746493db42b038ad","sha256":"6b03d0078cefd454dbf4121ed662175ed8ea3a4cfc4b74dde43ac19df134a94e","sha512":"35504e42985cb6eb84cc75757b40ad4be0d2101572c7ee93c381aaaaaa70693c5e699c79b0b902a8b57b487da8467165acccd29e7ae86d74be38a60b330fed8a","ssdeep":"768:4LnJL1fv/k1Ut0QVSCFVfxuOCJywJqOHEjn8CTx0DrfdSGyQNxxl6imLKuUctxGg:4b31HKRoVGkFKZBLUwT9NmDUzltSiKJ","tlshash":"f393e6a63292f03643d659fa98374002f3296944300a887cf4ecadd7fd6b94671b6f79","size":96788,"data":"","first_seen":"2026-03-19T03:48:05.533626Z","last_seen":"2026-05-18T11:36:27.034242Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.metaplay88u-amp.xyz/Ekster-Regular.woff2","fqdn":"www.metaplay88u-amp.xyz","domain":"metaplay88u-amp.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:05.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaplay88u-amp.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 16:12:22 GMT","end":"Wed, 10 Jun 2026 16:12:21 GMT"},"fingerprint":{"sha1":"E0:37:C6:F4:CF:F5:3D:90:02:87:5B:55:5C:14:C2:54:70:A8:A4:3D","sha256":"2C:1C:62:1F:CF:E8:BC:4E:BD:B6:62:B0:10:B1:8B:AD:DB:F0:B2:CE:E0:10:51:CF:1B:4E:0F:6C:C2:CD:EE:F4"}}},"request":{"raw":"GET /Ekster-Regular.woff2 HTTP/1.1\r\nHost: www.metaplay88u-amp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nCookie: INGRESSCOOKIE=78aa1dc8a4959606c34537687472d937|db944ac23b94b266e3d8846b952a9968\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 21 Mar 2026 18:40:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Next.js\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BVSnus6nVl24yizlnv8RZj4h8ixdbC1RGD2nrtImYbycr62VbT0phRfWXXVpf%2BY6%2Bz%2FtAlvg5wJm4Z5WrD2Rqsqe1x7aR%2FUaofVtRu277%2B25QAuZKwPi\"}]}\r\nserver: cloudflare\r\ncf-ray: 9dff15408f6d48d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2352,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1241)","md5":"5f730d57a08c326257dbca77c30ebacb","sha1":"c0194be65e380d00f2f38570f559df81c01d3ef4","sha256":"1f538c287e232265dfcd3bf5ab1aaf59200acad1f2df1597c4b1229f629cf75a","sha512":"2da382590760b467b5d1fc54d1cde99e4574c5e11145d937f18c67d6bba8403fdd07ab31645825155bbfb7bd54091333ca39c81b3a9c0cd733c85157bf3b63c8","ssdeep":"","tlshash":"6d418456dd26de0514329c987035939c3056c72bc1b6cd98ffcc6a2c8b813ea8f08d85","first_seen":"2025-11-17T13:33:03.991853Z","last_seen":"2026-03-21T18:40:35.443569Z","times_seen":9,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":703,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.metaplay88u-amp.xyz/Ekster-Medium.woff2","fqdn":"www.metaplay88u-amp.xyz","domain":"metaplay88u-amp.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:05.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaplay88u-amp.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 16:12:22 GMT","end":"Wed, 10 Jun 2026 16:12:21 GMT"},"fingerprint":{"sha1":"E0:37:C6:F4:CF:F5:3D:90:02:87:5B:55:5C:14:C2:54:70:A8:A4:3D","sha256":"2C:1C:62:1F:CF:E8:BC:4E:BD:B6:62:B0:10:B1:8B:AD:DB:F0:B2:CE:E0:10:51:CF:1B:4E:0F:6C:C2:CD:EE:F4"}}},"request":{"raw":"GET /Ekster-Medium.woff2 HTTP/1.1\r\nHost: www.metaplay88u-amp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nCookie: INGRESSCOOKIE=78aa1dc8a4959606c34537687472d937|db944ac23b94b266e3d8846b952a9968\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 21 Mar 2026 18:40:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Next.js\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nzIDpmAsVKDKqSfzQ17bqGOsGDscp%2BwLUk%2Fi1Oy4uiwKAopUqFUrbk4gPkj7B8eKxPd%2BHikhDHiTIYQ3DI7kl8340j018pl4uDnCJuZMkzxx1kWaZNAr\"}]}\r\nserver: cloudflare\r\ncf-ray: 9dff15408f8448d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":2352,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1241)","md5":"5f730d57a08c326257dbca77c30ebacb","sha1":"c0194be65e380d00f2f38570f559df81c01d3ef4","sha256":"1f538c287e232265dfcd3bf5ab1aaf59200acad1f2df1597c4b1229f629cf75a","sha512":"2da382590760b467b5d1fc54d1cde99e4574c5e11145d937f18c67d6bba8403fdd07ab31645825155bbfb7bd54091333ca39c81b3a9c0cd733c85157bf3b63c8","ssdeep":"","tlshash":"6d418456dd26de0514329c987035939c3056c72bc1b6cd98ffcc6a2c8b813ea8f08d85","first_seen":"2025-11-17T13:33:03.991853Z","last_seen":"2026-03-21T18:40:35.443569Z","times_seen":9,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/common/provider/pragmatic/slotgame/active.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /common/provider/pragmatic/slotgame/active.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWyQ_LU2eWnR0lJUQD_LscODSISNW7BVYr0y7ijHPKQ55efi99PvuoRWAvHOs6gy2RJ1pBBWN80\r\nx-goog-generation: 1666320291377440\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 12678\r\ncontent-language: en\r\nx-goog-hash: crc32c=+Q490w==, md5=s7D+TzIS4msXnkRCx4vKvw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 12678\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\nexpires: Sat, 21 Mar 2026 19:40:06 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 02:44:51 GMT\r\netag: \"b3b0fe4f3212e26b179e4442c78bcabf\"\r\ncontent-type: image/png\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":12678,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 116, 8-bit/color RGBA, non-interlaced","md5":"b3b0fe4f3212e26b179e4442c78bcabf","sha1":"e3592dd28b22cc8b6df9fcbc6cec81439e240abb","sha256":"be46b53eb10733fd4e5a44d01fbe9c8f36256dccc46bcfc7a7b59b849c84f91c","sha512":"6ee95d48f709ccc2bd692437df8bca51059ca1cfd51762feb8a092287bda3b73887c21f7715dd7969d82a00c98cb3d0dfe903d73bf6a1018306d5a2e5f924339","ssdeep":"192:3T4YZMRg4fbUwIp3nGSJspNQEDTTbzpZ4E0Y7z8zDbzWnIl+dDIPdSF4He2zKvwC:3ej+XmDQEHT3zNXeDHWVdkPdLe2rnEwg","tlshash":"3042c0fe9262d06a80e642c5b54c1eb90797a8db8972b004777a831a4e83cf15d95ffc","first_seen":"2025-06-28T20:53:27.284595Z","last_seen":"2026-08-17T21:46:42.69352Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1150,"timings":{"blocked":353,"dns":61,"connect":16,"send":0,"wait":419,"receive":1,"ssl":278},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/common/provider/aegaming/slotgame/active.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /common/provider/aegaming/slotgame/active.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWx5b5h4GW3RKBR0j_OnhEpZwf6raUJVcS7ZisLSfU3mo5g8y9Mw78gmCnuTZnWKQ0mYGnfUaL8\r\nx-goog-generation: 1666320291265216\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 20025\r\ncontent-language: en\r\nx-goog-hash: crc32c=Gce2Vg==, md5=yyFcCIR6gJzDiAbHagFa+A==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 20025\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\nexpires: Sat, 21 Mar 2026 19:40:06 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 02:44:51 GMT\r\netag: \"cb215c08847a809cc38806c76a015af8\"\r\ncontent-type: image/png\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":20025,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 116, 8-bit/color RGBA, non-interlaced","md5":"cb215c08847a809cc38806c76a015af8","sha1":"0a1185c6d4b204e54f36d669f1a6afdacc98adcd","sha256":"914e63a62fa2e8f1433d7b4128ce28e8baff04094acafb1e127dac5063eb10e0","sha512":"55530c1dc09dfc9963573323d16e0fdcee58c0c8d9681f00c70bd95a5ca77da3b3325f89e77022d6d6225188eab6856897d800a0472d9a6ebcdb85ad269b1fa9","ssdeep":"384:mixVJ7vYxY75+RIQR9SwUUjnGGvckrmsfpi4KIrMsQ2yN/Mvs:mwJ0K+RIQjSwUUqGvcQ5SnX/Gs","tlshash":"7992d149327cbc5fff6c8cbb1d4644d45caa28bc4af4170d69d4ae231d768b24c1ad19","first_seen":"2025-06-28T20:53:27.303418Z","last_seen":"2026-08-17T21:46:42.705344Z","times_seen":13,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":328,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.metaplay88u-amp.xyz/Ekster-Regular.woff","fqdn":"www.metaplay88u-amp.xyz","domain":"metaplay88u-amp.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaplay88u-amp.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 16:12:22 GMT","end":"Wed, 10 Jun 2026 16:12:21 GMT"},"fingerprint":{"sha1":"E0:37:C6:F4:CF:F5:3D:90:02:87:5B:55:5C:14:C2:54:70:A8:A4:3D","sha256":"2C:1C:62:1F:CF:E8:BC:4E:BD:B6:62:B0:10:B1:8B:AD:DB:F0:B2:CE:E0:10:51:CF:1B:4E:0F:6C:C2:CD:EE:F4"}}},"request":{"raw":"GET /Ekster-Regular.woff HTTP/1.1\r\nHost: www.metaplay88u-amp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nCookie: INGRESSCOOKIE=78aa1dc8a4959606c34537687472d937|db944ac23b94b266e3d8846b952a9968\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Next.js\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1eRCsUtSqRL80RXUAvABidzVHyklK8hA4F3o99a2P5a2YiLNLfcW4HFCWX3i1n2aGNW6wAkqcZ2Ii%2F3t6Y7rJtGlpwMlxs48qqT4XK%2B6QS1JcfvNZJw\"}]}\r\nserver: cloudflare\r\ncf-ray: 9dff15463eb048d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2352,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1241)","md5":"5f730d57a08c326257dbca77c30ebacb","sha1":"c0194be65e380d00f2f38570f559df81c01d3ef4","sha256":"1f538c287e232265dfcd3bf5ab1aaf59200acad1f2df1597c4b1229f629cf75a","sha512":"2da382590760b467b5d1fc54d1cde99e4574c5e11145d937f18c67d6bba8403fdd07ab31645825155bbfb7bd54091333ca39c81b3a9c0cd733c85157bf3b63c8","ssdeep":"","tlshash":"6d418456dd26de0514329c987035939c3056c72bc1b6cd98ffcc6a2c8b813ea8f08d85","first_seen":"2025-11-17T13:33:03.991853Z","last_seen":"2026-03-21T18:40:35.443569Z","times_seen":9,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":745,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/V1003/images/banner/31/1722411176.377998_banner_desktop_a_id.jpeg","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:12.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /V1003/images/banner/31/1722411176.377998_banner_desktop_a_id.jpeg HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWx7xq1_B51KG91XnhS1Sg2DmHuRVYQ_NtxwGZOxswNwZRTrv0HCqqhqVCzg4B3h3P_H\r\ndate: Sat, 21 Mar 2026 18:40:12 GMT\r\ncache-control: public, max-age=60\r\nexpires: Sat, 21 Mar 2026 18:41:12 GMT\r\nlast-modified: Fri, 06 Mar 2026 12:51:23 GMT\r\netag: \"c5575aa3909cab0774912a3f9d8bf8b1\"\r\nx-goog-generation: 1772801483350463\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1092658\r\nx-goog-hash: crc32c=R/V5UQ==, md5=xVdao5Ccqwd0kSo/nYv4sQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1092658\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1092658,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1261 x 450, 8-bit/color RGBA, non-interlaced","md5":"2341c5c2e6538ca355f4bb915dc4d284","sha1":"8b6401a8675b87ed63339fd7b6f4149bce74be30","sha256":"f0184db7b407001622ca37d9220c2e50f15606b9066e59bde803b759872fe500","sha512":"7be50d0e3efd5462fb61436db07cd9915a93d9a68ddfe8d61f501e43c4bdebf3c5835b1c3e506d96284c1d5b4920fa1074a25f9580d3c4ae60a2d95c8a711229","ssdeep":"24576:/DrNXJffjzKXI7+v+EFdjkqiQ9pQ5RBAxdb9ImXA:LZ5DmXSqifRBydFQ","tlshash":"6f25338fa06be2520bb0f80f49f6c85f7edc75b16f66ad06c44d39716228d5cc623626","first_seen":"2026-03-21T18:40:35.453034Z","last_seen":"2026-07-11T05:45:02.473075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":323,"receive":952,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/V1003/images/logo_icon/web_logo/light_1688749967.590835_logo-metaplay88.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /V1003/images/logo_icon/web_logo/light_1688749967.590835_logo-metaplay88.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWxn9C6oNWVbZmQqCecBVuNPFe3vrNi8HSHdrCVAUxxeCkI1DwguIEQj-sz00fobw1L7HJKiqC0\r\nexpires: Sat, 21 Mar 2026 19:40:06 GMT\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Mon, 20 Nov 2023 02:49:35 GMT\r\netag: \"22567ea704d101bc44b78c07dcb64784\"\r\nx-goog-generation: 1700448575177000\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1782\r\nx-goog-hash: crc32c=zgNqlg==, md5=IlZ+pwTRAbxEt4wH3LZHhA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1782\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1782,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 32, 8-bit/color RGBA, non-interlaced","md5":"22567ea704d101bc44b78c07dcb64784","sha1":"8d2ac520d1f0e8844f7714ba893874408ade8ffa","sha256":"5b16023e3e2cc513aa2fa238133ca8d9b3273e1f69feb23393bc05f3e5a1f716","sha512":"f7b5ed3286814b0d5af13f279da4cddd54d1e4bb7b62f2af5f5df619636352f670c294bde3273f4c99568e790fcd00042a8353bcf27522665b3cf3790f254094","ssdeep":"","tlshash":"cc310b82b886040e67bd2d75891d50255a666b481ad62a3fb911201a801fdf5a1d1d7d","first_seen":"2025-11-17T13:36:15.89595Z","last_seen":"2026-07-11T05:45:02.418926Z","times_seen":3,"resource_available":false,"data":null}},"time_used":984,"timings":{"blocked":296,"dns":58,"connect":16,"send":0,"wait":342,"receive":31,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/common/provider/joker/slotgame/active.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /common/provider/joker/slotgame/active.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWz5MVWp3QasuIyk84LuW5mJx8TtNkFSkaguYuFOzbsDTeFcmwnpcu5O1qc41qLy19EfGgT2GRg\r\nx-goog-generation: 1666320291254043\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 15026\r\ncontent-language: en\r\nx-goog-hash: crc32c=x03hxA==, md5=xCqwkBl13pzJdfQ/KBDCBw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 15026\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\nexpires: Sat, 21 Mar 2026 19:40:06 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 02:44:51 GMT\r\netag: \"c42ab0901975de9cc975f43f2810c207\"\r\ncontent-type: image/png\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":15026,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 116, 8-bit/color RGBA, non-interlaced","md5":"c42ab0901975de9cc975f43f2810c207","sha1":"337009f01cd3f12c9ef8d22e3659b661f63eb723","sha256":"c4dcf020f099e8b5da38bca53e28cb2dfed1e907aab56846bee0a8c5c07c98e3","sha512":"3ea92359cc9e8c84da7bdf425ddfeb38fbc5179b8a80c0a97ddb6fb1fe07fa342d9a059b7dbcb4c601e7f3b4ee21605237094c1eb8d773c4bb8ba537fcd4b73e","ssdeep":"384:vnIldRuh+yR50tgp+TMkmK57Wu7uPk7I+026N9Qoz5ZLynC:vH4tgp+vNWuok77b6N7OnC","tlshash":"6b62c0d0e51eb44462ccef1cbed8025356bbb369cf80bc257de749469ac14739e950c6","first_seen":"2025-06-28T20:53:27.301008Z","last_seen":"2026-08-17T21:46:42.697562Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1073,"timings":{"blocked":318,"dns":56,"connect":36,"send":0,"wait":416,"receive":1,"ssl":233},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/common/provider/advantplay/slotgame/active.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /common/provider/advantplay/slotgame/active.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzYx-6pVMf7nPGyl9EQbiy23Unp1ppUht_aqlyhmUNmOal8yY701d_TYbBIbNLRUMdKojAhKII\r\nx-goog-generation: 1707967305648731\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 8660\r\nx-goog-hash: crc32c=+ZzCyA==, md5=X8Fx8oPX+gkNN+Bi3ENhcw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 8660\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\nexpires: Sat, 21 Mar 2026 19:40:06 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Thu, 15 Feb 2024 03:21:45 GMT\r\netag: \"5fc171f283d7fa090d37e062dc436173\"\r\ncontent-type: image/png\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":8660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 116, 8-bit/color RGBA, non-interlaced","md5":"5fc171f283d7fa090d37e062dc436173","sha1":"5f2a4db69825cd62155b37c5aa98e21e1613c0b2","sha256":"9529f5c36b0a7b6a8291e1c82810d0c29f6a4b48582e092ab5b03d004af0d516","sha512":"b5406a45a8e4d37ec2636fa723044da8340b6fb0b80427c68a5dd8d3809382407c009adca4cd4a89a44af333ec5721304a00db8b8efd49c69579041f3d490696","ssdeep":"192:ASHknEEbye6+tkQKyik7vkVns5XzaL1OiZ:nEnEIye67QKyi0vA2XzaYS","tlshash":"80026c59ff227662c7b54d8048f778ab65331b4ae6e2f2437dd604262c313f94b2a5c0","first_seen":"2025-06-28T20:53:27.288268Z","last_seen":"2026-08-17T21:46:42.680669Z","times_seen":13,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":239,"dns":0,"connect":0,"send":0,"wait":330,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/common/provider/asiagaming/slotgame/active.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /common/provider/asiagaming/slotgame/active.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWyJvK8RD5qYQ4n5cTstcWhHnf9cgGNofsH8vcmUY6aqbwxy7ImHzoEoXer0WC4TTcCKSIYDBZY\r\nx-goog-generation: 1666320291112577\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 8542\r\ncontent-language: en\r\nx-goog-hash: crc32c=hLNaiw==, md5=bn9Pa8cjHs3ooDMo0IsZdA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 8542\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\nexpires: Sat, 21 Mar 2026 19:40:06 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 02:44:51 GMT\r\netag: \"6e7f4f6bc7231ecde8a03328d08b1974\"\r\ncontent-type: image/png\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":8542,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 116, 8-bit/color RGBA, non-interlaced","md5":"6e7f4f6bc7231ecde8a03328d08b1974","sha1":"660dd518b8d250b2a2f004eb25af67dd2732b11b","sha256":"0d13cc7e7379803e4df7fbf27cdc93583eea44235eb6326051e13c6716f2e3c6","sha512":"2db40c4ede364df0899fc6c8afa1c731b308f9f24689abb379a753c8559423f06005ae3bfb09a6b439c75b8641a290946f64a37deec7d4e2a17f032b1335d2bc","ssdeep":"192:gXRdxSffY56g774kWyU0g8+ooXDX+hiRWmGZrCwIfov/o:2RS4x7sJy1gRVYiRRmugA","tlshash":"4e02af835a7f025f0fc149243659863c469ee05db0060260ab492ca60db3e8cbe2fb9f","first_seen":"2025-06-28T20:53:27.306844Z","last_seen":"2026-08-17T21:46:42.682268Z","times_seen":13,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":238,"dns":0,"connect":0,"send":0,"wait":337,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/common/provider/microgaming/slotgame/active.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /common/provider/microgaming/slotgame/active.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: application/xml; charset=UTF-8\r\nx-guploader-uploadid: AGQBYWyjLyOrJ0P6csdjbWOprSyV_mH3fVh1pk6nU14a_O2gzPc42_IB-Z9Verzr0bdQ8oPGM8x--yU\r\ncontent-length: 127\r\naccess-control-allow-origin: *\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\nexpires: Sat, 21 Mar 2026 18:40:06 GMT\r\ncache-control: private, max-age=0\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/xml; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":237,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.metaplay88u-amp.xyz/18.svg","fqdn":"www.metaplay88u-amp.xyz","domain":"metaplay88u-amp.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaplay88u-amp.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 16:12:22 GMT","end":"Wed, 10 Jun 2026 16:12:21 GMT"},"fingerprint":{"sha1":"E0:37:C6:F4:CF:F5:3D:90:02:87:5B:55:5C:14:C2:54:70:A8:A4:3D","sha256":"2C:1C:62:1F:CF:E8:BC:4E:BD:B6:62:B0:10:B1:8B:AD:DB:F0:B2:CE:E0:10:51:CF:1B:4E:0F:6C:C2:CD:EE:F4"}}},"request":{"raw":"GET /18.svg HTTP/1.1\r\nHost: www.metaplay88u-amp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nCookie: INGRESSCOOKIE=78aa1dc8a4959606c34537687472d937|db944ac23b94b266e3d8846b952a9968\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\ncontent-type: image/svg+xml\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 04 Aug 2025 10:49:26 GMT\r\netag: W/\"e3e-19874b352f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\nexpires: Sat, 21 Mar 2026 18:40:06 GMT\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2Bly6vl9Ugj78fEh2BrzXXG%2Ff5xKFzD6mbqeG5YlMXcf9RE6Tc0eGhx4X9orfAHz9gVTN5RR7KHSgCWQIaJuUmvqPQPn4KZnGSMeivedh5uqW7Ljq2k7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9dff15460e2948d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3646,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b52480652961a99827d1d6b8f84d5366","sha1":"31723b1e8fedc7e9b629ba0739056b6cc6ecf5ed","sha256":"bb52fb0e80f18d4428af4d00f1de6456775a4226b7bc269534f72d52d97bdceb","sha512":"0e5e9f7471f0fe9729db9ecb3ead675d05113d2b8243dba59a907f4db322050cd46678dcb8b0f5b798c29a0c59247bdb2a4ce05b309e5b7100699cd242df5c46","ssdeep":"","tlshash":"9271559863e5a7ecf40523a487e694783bad3df5b811c10cdfad2846d06058ecd6b9c7","first_seen":"2025-11-17T13:33:04.01651Z","last_seen":"2026-08-17T21:46:42.648659Z","times_seen":11,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":687,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.metaplay88u-amp.xyz/Ekster-Light.woff","fqdn":"www.metaplay88u-amp.xyz","domain":"metaplay88u-amp.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaplay88u-amp.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 16:12:22 GMT","end":"Wed, 10 Jun 2026 16:12:21 GMT"},"fingerprint":{"sha1":"E0:37:C6:F4:CF:F5:3D:90:02:87:5B:55:5C:14:C2:54:70:A8:A4:3D","sha256":"2C:1C:62:1F:CF:E8:BC:4E:BD:B6:62:B0:10:B1:8B:AD:DB:F0:B2:CE:E0:10:51:CF:1B:4E:0F:6C:C2:CD:EE:F4"}}},"request":{"raw":"GET /Ekster-Light.woff HTTP/1.1\r\nHost: www.metaplay88u-amp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nCookie: INGRESSCOOKIE=78aa1dc8a4959606c34537687472d937|db944ac23b94b266e3d8846b952a9968\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Next.js\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l6Aj2BVIZZ8YOBOVtzZLXSoKyew4Ux2CbU77F3S2hZoRbnS5AmirUbHwUU4%2FJf6YckZsFtH%2BvyeRIzyi0Sk1sZlhXBFVJ9ksl6QVtwQrR2YNtBqwmHCv\"}]}\r\nserver: cloudflare\r\ncf-ray: 9dff15464ece48d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2352,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1241)","md5":"5f730d57a08c326257dbca77c30ebacb","sha1":"c0194be65e380d00f2f38570f559df81c01d3ef4","sha256":"1f538c287e232265dfcd3bf5ab1aaf59200acad1f2df1597c4b1229f629cf75a","sha512":"2da382590760b467b5d1fc54d1cde99e4574c5e11145d937f18c67d6bba8403fdd07ab31645825155bbfb7bd54091333ca39c81b3a9c0cd733c85157bf3b63c8","ssdeep":"","tlshash":"6d418456dd26de0514329c987035939c3056c72bc1b6cd98ffcc6a2c8b813ea8f08d85","first_seen":"2025-11-17T13:33:03.991853Z","last_seen":"2026-03-21T18:40:35.443569Z","times_seen":9,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":736,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/v0/analytics-vendors/gtag.json","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:07.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"0E:1A:26:72:B9:66:7B:27:2A:5F:B6:6E:78:84:9D:3E:9E:B3:DA:E4","sha256":"70:BA:BE:7A:0B:05:93:D0:F5:50:53:8C:8C:0A:29:F5:F0:31:E8:9C:EA:0B:27:0F:21:52:9E:47:AA:34:E5:4A"}}},"request":{"raw":"GET /rtv/012603032146000/v0/analytics-vendors/gtag.json HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nOrigin: https://www.metaplay88u-amp.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 926\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 18:54:20 GMT\r\nexpires: Thu, 18 Mar 2027 18:54:20 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"c13fdabce9c80a36\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nage: 258347\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a5e4bdaaa9f13a15282cbe87c3612bf1","sha1":"4f77670868217bd6ce11c7434a2e182cb6127a78","sha256":"0cdc1d09aac29df4b32648b075b088d83174193624fe3c219cfd777692c9ba81","sha512":"30421e1e0f8c88bd20bb55f50eec3be27c4e681868d359fa77bac6f95e113a637546870e0201bb55b2b30955a930e8671d5f251336a059ba3a1f8248583efd1a","ssdeep":"","tlshash":"1b5182be0f9ed1bb87c6255c360c1aaa1221130f9aeeac97ec04345dc9547bc5183f0b","first_seen":"2023-06-07T06:01:48Z","last_seen":"2026-08-19T00:41:13.52173Z","times_seen":1924,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/V1003/mobile/victory_engine_logo_mobile.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /V1003/mobile/victory_engine_logo_mobile.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWyc-V3itFF4L87arCRwogqhAAdZM_NNfsXUi3EyPN71CvnwGAZcmEcRqWfucrtxM2kbh32Y7G0\r\nexpires: Sat, 21 Mar 2026 19:40:06 GMT\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Mon, 20 Nov 2023 02:49:39 GMT\r\netag: \"522c5626259a9a29e142d48feb20741d\"\r\nx-goog-generation: 1700448579053207\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 6051\r\ncontent-language: en\r\nx-goog-hash: crc32c=HvPing==, md5=UixWJiWaminhQtSP6yB0HQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 6051\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":6051,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 222 x 48, 8-bit/color RGBA, non-interlaced","md5":"522c5626259a9a29e142d48feb20741d","sha1":"f7ac14322595dfdf97201610541d581d9ad98fc8","sha256":"5c5e3d713cb34eb30adbab3650f584deb1339cfee2e04a901ea406f34c60d9c0","sha512":"fbdab56cbb6f98b77a7400756b9c800d42c193e2597d0d1ce495065a1f28eda409543cffda4d4bc0d55286d70a01f2e3210d703a7ee350ab63763b94e25b9e7e","ssdeep":"96:pzqT6O2UBj/vTLjkr/OtmwdX0o6yvoWRWpGzPINMB//hL8H27eqgNhu1C:p26NUV/7LwImwN0o5epZMZ1iqehiC","tlshash":"d3c19fa3e762c7c97a17e007c5152dcc5ea3409a6586de4c59ac05f37771c2b090f2f5","first_seen":"2025-06-28T20:53:27.285416Z","last_seen":"2026-08-17T21:46:42.701953Z","times_seen":13,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":234,"dns":0,"connect":0,"send":0,"wait":343,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/common/provider/pgsoft/slotgame/active.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /common/provider/pgsoft/slotgame/active.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWya7ExrGvkQpoTQcoQg_N9rYmulg0dHXlxEZEiqPaboPzNn-1kZo2tM4vrKFX4ig3Th7OTbmY0\r\nx-goog-generation: 1764643063903085\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 5310\r\nx-goog-hash: crc32c=VK4anA==, md5=843RZi8o33ZtjZqe6G7yCQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 5310\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\nexpires: Sat, 21 Mar 2026 19:40:06 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Tue, 02 Dec 2025 02:37:43 GMT\r\netag: \"f38dd1662f28df766d8d9a9ee86ef209\"\r\ncontent-type: image/png\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":5310,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1208 x 285, 8-bit/color RGBA, non-interlaced","md5":"f38dd1662f28df766d8d9a9ee86ef209","sha1":"95c521bd8121722dc3ac41bc620451adcefbddc5","sha256":"175966917bbeff4c08a8d23482ba00d21aecd569977637f61648fad0198d44c9","sha512":"c69b7b4e74a0dde0bae5b22642e4d4fd53e552dba6d577bab90a8b9bc63e02851baa113a315154b469cf3dd35bcab29683a35c35ecb2c2d856c7340b21e52103","ssdeep":"96:8SCMzjK1WaKlZC8KK9fDmyuytbigdvdWHM1NUgVHi+XUPnuLrEQmpw:8SPj5aKQK9rPuytbigdvdWip9i+XUv8Z","tlshash":"54b1a4016ac27421dcc739f0a8a6470b71369bdc679b2246d3725ca0afe8794ef5153e","first_seen":"2025-12-06T15:01:15.147988Z","last_seen":"2026-08-17T21:46:42.676223Z","times_seen":5,"resource_available":false,"data":null}},"time_used":901,"timings":{"blocked":257,"dns":57,"connect":36,"send":0,"wait":362,"receive":1,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/common/provider/saba/sportsbook/active.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /common/provider/saba/sportsbook/active.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWygMH8wXbmHuXQA8HwrTuRG6b_OBP4ihAqwYAyExYz7mS6q_qjKRhVBpiXudUSoNm-uWdNeF44\r\nx-goog-generation: 1666320291439833\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 13396\r\ncontent-language: en\r\nx-goog-hash: crc32c=aqqbMQ==, md5=TnrQeGC8RoIOxYvn0KgcFw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 13396\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\nexpires: Sat, 21 Mar 2026 19:40:06 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 02:44:51 GMT\r\netag: \"4e7ad07860bc46820ec58be7d0a81c17\"\r\ncontent-type: image/png\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":13396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 116, 8-bit/color RGBA, non-interlaced","md5":"4e7ad07860bc46820ec58be7d0a81c17","sha1":"0d506fe9febb76b7d437d4b8f756a439e3b8c8a1","sha256":"080d328caf0a24e949561bc0b8c9726697e27c496271496c66b4db535b1c869b","sha512":"9063a9ce20a8105712d80af1865227c699292bdcdb0fe6f4cb9342ad89c6fa0dfc5535896f92b7941ab089ea341d1f047e750dfb8bde2627c5c82768ffe2479f","ssdeep":"384:O9u6EXmq2wM+pWlZnDDnpnxfD/d8UX/8NGLaRXeht3t4/Bt:whq2sUhD79J/tXEKaxe73t4/Bt","tlshash":"5052d0336bff2e55b5c6441c31b98de5027cd02602aaa0d8347facc381da973d71b289","first_seen":"2025-06-28T20:53:27.29121Z","last_seen":"2026-08-17T21:46:42.698782Z","times_seen":13,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":246,"dns":0,"connect":0,"send":0,"wait":323,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/common/provider/spadegaming/slotgame/active.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /common/provider/spadegaming/slotgame/active.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWz6IysyTzaxboAcj25nB657_p3JnwIado3fDIxjpCg5w-XIxJICJvzqwekQOp0CnDrE134ZmX0\r\nx-goog-generation: 1666320291411781\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 12282\r\ncontent-language: en\r\nx-goog-hash: crc32c=cwO8zw==, md5=eIuA1iWC8ueVvTBFqCoftA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 12282\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\nexpires: Sat, 21 Mar 2026 19:40:06 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 02:44:51 GMT\r\netag: \"788b80d62582f2e795bd3045a82a1fb4\"\r\ncontent-type: image/png\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":12282,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 116, 8-bit/color RGBA, non-interlaced","md5":"788b80d62582f2e795bd3045a82a1fb4","sha1":"f926a7667c61840063d17f52b827e3298b3f6251","sha256":"77ecf48a87424433891250e479c669e553255581c7783419a4fe0b74bf01c11e","sha512":"700256744448ea0b6545c1265d6e28945a51fd00850d86ca14fa51a7410caef345694a9c854fc9c72d79deb304f93f555a162fe3c0bf7a4915738c1baae452d4","ssdeep":"192:vjw6MGPXm7yJZFnzpSKeisSgY6NH02zodhw0sTenIgUTib+8FsP:vjw0pJZi+PFhDsTenIib/a","tlshash":"2d42afbdeecdf841558cca16bed04e1165627eea96c70b1235373f0c09246cdebb1605","first_seen":"2025-06-28T20:53:27.302764Z","last_seen":"2026-08-17T21:46:42.665626Z","times_seen":13,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":327,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/common/provider/habanero/slotgame/active.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /common/provider/habanero/slotgame/active.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWwwz9RD_vrHchnecxwn9w4gXooWUXuLCbcJXRoW4LCNpEAlwj5QJZi6NVHk1GPtTQuUKhlufaU\r\nx-goog-generation: 1666320291161655\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 5515\r\ncontent-language: en\r\nx-goog-hash: crc32c=VNceHA==, md5=R45Ij8rBy3u3qY9kDC2ifg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 5515\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\nexpires: Sat, 21 Mar 2026 19:40:06 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 02:44:51 GMT\r\netag: \"478e488fcac1cb7bb7a98f640c2da27e\"\r\ncontent-type: image/png\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":5515,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 116, 8-bit/color RGBA, non-interlaced","md5":"478e488fcac1cb7bb7a98f640c2da27e","sha1":"4af5cce9ce12fd685fd667ffa555b0305b3f29d6","sha256":"00da53638c756898da4489365ae148802b9588c76e24be6897db063b3ae6043f","sha512":"03735153f37ef7c2a7a088a5fa113f4b8638bb6eb9341a0ec2f99f808a1a9a483103f77c1a2ffd96f2621f18285ebc317a59abf71f5388779ce89a69093017c6","ssdeep":"96:0e2keW+qlCFXVZC2xY38wQy/ejhBA+mywFIWPcW861fSvjG9qIYBzzS7:xDo3Zx86SyWP11KbOYBz6","tlshash":"17b16c45dd39eb791eabc77594af0f5f011ba88014e886a9d08254df784efd00311bba","first_seen":"2025-06-28T20:53:27.291918Z","last_seen":"2026-08-17T21:46:42.700588Z","times_seen":13,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":243,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.metaplay88u-amp.xyz/Ekster-Bold.woff","fqdn":"www.metaplay88u-amp.xyz","domain":"metaplay88u-amp.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaplay88u-amp.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 16:12:22 GMT","end":"Wed, 10 Jun 2026 16:12:21 GMT"},"fingerprint":{"sha1":"E0:37:C6:F4:CF:F5:3D:90:02:87:5B:55:5C:14:C2:54:70:A8:A4:3D","sha256":"2C:1C:62:1F:CF:E8:BC:4E:BD:B6:62:B0:10:B1:8B:AD:DB:F0:B2:CE:E0:10:51:CF:1B:4E:0F:6C:C2:CD:EE:F4"}}},"request":{"raw":"GET /Ekster-Bold.woff HTTP/1.1\r\nHost: www.metaplay88u-amp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nCookie: INGRESSCOOKIE=78aa1dc8a4959606c34537687472d937|db944ac23b94b266e3d8846b952a9968\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Next.js\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Wof99oPDJ3Z0JwTRHbyWC332XZgUWofgfVne4sN8SNLkCdhTy5pVsjM9XBeNpLv32w0YlqIxCo0U0cBEqZ9j7c2zC1dOToccIJXUs%2F7%2FW%2FJcvuYacOF\"}]}\r\nserver: cloudflare\r\ncf-ray: 9dff15463eb148d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2352,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1241)","md5":"5f730d57a08c326257dbca77c30ebacb","sha1":"c0194be65e380d00f2f38570f559df81c01d3ef4","sha256":"1f538c287e232265dfcd3bf5ab1aaf59200acad1f2df1597c4b1229f629cf75a","sha512":"2da382590760b467b5d1fc54d1cde99e4574c5e11145d937f18c67d6bba8403fdd07ab31645825155bbfb7bd54091333ca39c81b3a9c0cd733c85157bf3b63c8","ssdeep":"","tlshash":"6d418456dd26de0514329c987035939c3056c72bc1b6cd98ffcc6a2c8b813ea8f08d85","first_seen":"2025-11-17T13:33:03.991853Z","last_seen":"2026-03-21T18:40:35.443569Z","times_seen":9,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":689,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.metaplay88u-amp.xyz/Ekster-Medium.woff","fqdn":"www.metaplay88u-amp.xyz","domain":"metaplay88u-amp.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaplay88u-amp.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 16:12:22 GMT","end":"Wed, 10 Jun 2026 16:12:21 GMT"},"fingerprint":{"sha1":"E0:37:C6:F4:CF:F5:3D:90:02:87:5B:55:5C:14:C2:54:70:A8:A4:3D","sha256":"2C:1C:62:1F:CF:E8:BC:4E:BD:B6:62:B0:10:B1:8B:AD:DB:F0:B2:CE:E0:10:51:CF:1B:4E:0F:6C:C2:CD:EE:F4"}}},"request":{"raw":"GET /Ekster-Medium.woff HTTP/1.1\r\nHost: www.metaplay88u-amp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nCookie: INGRESSCOOKIE=78aa1dc8a4959606c34537687472d937|db944ac23b94b266e3d8846b952a9968\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Next.js\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pbYZmYPbQZdhCb3oDduJx4kjZWkg8JwF8aRk0dvzqi6bvGzoXpWibFNtTkj84zNz2%2B9yt7QLLOpC%2Fro%2FV%2Bfwvd8Jp0scuQyp1J6iRNJhB3%2FPHvguWGEP\"}]}\r\nserver: cloudflare\r\ncf-ray: 9dff15464eca48d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2352,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1241)","md5":"5f730d57a08c326257dbca77c30ebacb","sha1":"c0194be65e380d00f2f38570f559df81c01d3ef4","sha256":"1f538c287e232265dfcd3bf5ab1aaf59200acad1f2df1597c4b1229f629cf75a","sha512":"2da382590760b467b5d1fc54d1cde99e4574c5e11145d937f18c67d6bba8403fdd07ab31645825155bbfb7bd54091333ca39c81b3a9c0cd733c85157bf3b63c8","ssdeep":"","tlshash":"6d418456dd26de0514329c987035939c3056c72bc1b6cd98ffcc6a2c8b813ea8f08d85","first_seen":"2025-11-17T13:33:03.991853Z","last_seen":"2026-03-21T18:40:35.443569Z","times_seen":9,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":735,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metaplay88u-amp.xyz/","fqdn":"metaplay88u-amp.xyz","domain":"metaplay88u-amp.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-21T18:40:03.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaplay88u-amp.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 16:12:22 GMT","end":"Wed, 10 Jun 2026 16:12:21 GMT"},"fingerprint":{"sha1":"E0:37:C6:F4:CF:F5:3D:90:02:87:5B:55:5C:14:C2:54:70:A8:A4:3D","sha256":"2C:1C:62:1F:CF:E8:BC:4E:BD:B6:62:B0:10:B1:8B:AD:DB:F0:B2:CE:E0:10:51:CF:1B:4E:0F:6C:C2:CD:EE:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metaplay88u-amp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 Permanent Redirect\r\ndate: Sat, 21 Mar 2026 18:40:03 GMT\r\ncontent-type: text/html\r\nlocation: https://www.metaplay88u-amp.xyz\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PV2MA3Ay2l9atdI2bCvbNK9vs93LAUEjMMOYmbL3hy41BAspG%2B5TBFprWQs3fLeEEyGnbYJ8KfDYylSNkQAQeHKizLELF0ihL%2FVXNXfH05PBuBE%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9dff1533e9ca2d96-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50443,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39466)","md5":"81d09641ea3ffe044c3a78bccbcc4512","sha1":"dd46634ad5e212b63446d7d3b95652af1897bf82","sha256":"539fdc20854f6cee392f385969b9cced2604e3f3150e2bdead7f756cc6ce15a5","sha512":"6e937437c3d05363f5526cd72d492bd20a6ed4c2e978c6f77ed75f85ebd84c530cd638b3e77faae073df89233829daa31c78e5644e8e1957c8bf09979bf786a7","ssdeep":"768:1/WA/8Q+rELDRMD1kif4th6rjBhnZBQjigdPs7ZW:1/ZDR0GiwtgrthnZBQjigdPs7ZW","tlshash":"8433c637bb0c518ee21ba784d8d1f6777d15c887c7608a4dea24ab15d826fe32230b5d","first_seen":"2026-03-21T18:40:35.47664Z","last_seen":"2026-03-21T18:40:35.47664Z","times_seen":1,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":81,"dns":58,"connect":8,"send":0,"wait":236,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.metaplay88u-amp.xyz/Jackpot.gif","fqdn":"www.metaplay88u-amp.xyz","domain":"metaplay88u-amp.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaplay88u-amp.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 16:12:22 GMT","end":"Wed, 10 Jun 2026 16:12:21 GMT"},"fingerprint":{"sha1":"E0:37:C6:F4:CF:F5:3D:90:02:87:5B:55:5C:14:C2:54:70:A8:A4:3D","sha256":"2C:1C:62:1F:CF:E8:BC:4E:BD:B6:62:B0:10:B1:8B:AD:DB:F0:B2:CE:E0:10:51:CF:1B:4E:0F:6C:C2:CD:EE:F4"}}},"request":{"raw":"GET /Jackpot.gif HTTP/1.1\r\nHost: www.metaplay88u-amp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nCookie: INGRESSCOOKIE=78aa1dc8a4959606c34537687472d937|db944ac23b94b266e3d8846b952a9968\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 108157\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 04 Aug 2025 10:49:26 GMT\r\netag: W/\"1a67d-19874b352f0\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nexpires: Mon, 20 Apr 2026 18:40:06 GMT\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KjjXQ3bAeHcGFkUKc29n4DuFIt63goH3A029Tq%2FEVMRsE3%2BPZ4yukJoSEigR8Uu28Hed6%2Bwtv1id4tciLaukrnpsWOdaTptZ%2BDhYnTnTRAQ%2BKkHXIvTN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9dff1545fde548d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108157,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 797 x 238","md5":"5e1a67f481e1cfcd0b3b73dc13721e7b","sha1":"3c2b953273b284b1878fd146adfb2bfdb70b0734","sha256":"c3c5f2d764a611b56270938fcf2116fa787b2cdae0b122c04d1e49c2137ef58e","sha512":"6d8eecca6313dc1103fed95d089b34d4d61306e4af02340179bff8a21f8ec13ba7272e100aae4cc179729347e0c4864ddead280f928a1db600288b00370a2e8d","ssdeep":"1536:VsoVwVZV1IQgJcJs2XW84q3MNJhtdwOsoZIMkx5kJs2XW84mEO:VsoVkn1Iis3Ph7wOsoZIMk4s3mEO","tlshash":"f0b3026654c9871a27f64b9190976676be3d3e8dfae0772e132313d29100a23371fb86","first_seen":"2025-06-28T20:53:27.294263Z","last_seen":"2026-08-17T21:46:42.683372Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":695,"receive":662,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/v0/amp-auto-lightbox-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"0E:1A:26:72:B9:66:7B:27:2A:5F:B6:6E:78:84:9D:3E:9E:B3:DA:E4","sha256":"70:BA:BE:7A:0B:05:93:D0:F5:50:53:8C:8C:0A:29:F5:F0:31:E8:9C:EA:0B:27:0F:21:52:9E:47:AA:34:E5:4A"}}},"request":{"raw":"GET /rtv/012603032146000/v0/amp-auto-lightbox-0.1.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.metaplay88u-amp.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2819\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 17 Mar 2026 21:22:26 GMT\r\nexpires: Wed, 17 Mar 2027 21:22:26 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"342c1d4247be8b4a\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 335860\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7095,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6972)","md5":"364f24641942c93e6ede683ab3923a22","sha1":"04ce01df7c7881dd0225267d3eb2d94180f647b0","sha256":"505be43b956f29f4ff07f46c36713c5f2945da74563628ac9a87b4a7beb6d0ea","sha512":"264cfdc8dd027c968c2a8fc492a2737e577b8b1ae9da02ed086ec056c7af4f4e6e8375c69b452152d106fcf77a5de71e573bf30c55e368a9589b7cba1516a4e5","ssdeep":"192:/WEifFyiH0GLDl0koh7qvnp+lmlLgA/laQ0:/WEQyc02Dl0kUYp+mgalar","tlshash":"f1e172e876c2b5355baa69b2d17b8006e33da955700f8020d17cfd853dba186d2b3f2c","first_seen":"2026-03-19T03:48:05.555623Z","last_seen":"2026-05-10T22:43:05.867626Z","times_seen":137,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/V1003/images/banner/30/1722411160.663986_banner_desktop_a_id.jpeg","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:09.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /V1003/images/banner/30/1722411160.663986_banner_desktop_a_id.jpeg HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWyfwK3lUfni7Qm01CvHdPPIhhtT3FYDCCwqpqkGZTGL0zBNmIjgbAuwC1wMGCh0SMrN\r\ndate: Sat, 21 Mar 2026 18:40:09 GMT\r\ncache-control: public, max-age=60\r\nexpires: Sat, 21 Mar 2026 18:41:09 GMT\r\nlast-modified: Fri, 06 Mar 2026 12:51:05 GMT\r\netag: \"db1accd9fc92ce940e90848cf36119ae\"\r\nx-goog-generation: 1772801465813720\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1070444\r\nx-goog-hash: crc32c=SIpXyA==, md5=2xrM2fySzpQOkISM82EZrg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1070444\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1070444,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1261 x 450, 8-bit/color RGBA, non-interlaced","md5":"fde0815da06cc765297acd59b754c270","sha1":"637f123820457ce5d4992a1257e8cfeb9a0d4161","sha256":"a9df92353fd995522a203199dd1543eeb0ef4bf724100e3cf7c08771df247183","sha512":"74fe01b9e63acbc4a7617f0b9bbce027074357936da533e4b02cb85ccbc258cd2ec05ac0c99face7992fc76d91c0e28700d36bc3edaeee356f5dd75ba8d9b653","ssdeep":"24576:2D+eIsCO7ShVwVv+3+GnKUHQTlv+J1KPEIkbkTdtmnJWTAnJOX+yP:FeIsCO7EWB+PZHQMJcPEAdtGWTAJOXBP","tlshash":"8c25336f541f4af9bd86922349dc09ee6b6218d1ae4d7302d61f488c14bee61d6ccf38","first_seen":"2026-03-21T18:40:35.480476Z","last_seen":"2026-07-11T05:45:02.470748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1391,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":325,"receive":1066,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/V1003/images/banner/28/1720697113.263005_banner_desktop_a_id.jpeg","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:15.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /V1003/images/banner/28/1720697113.263005_banner_desktop_a_id.jpeg HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWxspG9xQvBrpK8zCog4qRaQPZQhAzkZgU2zWwBL8wU-GTlp1Sp62vR1GMrPvYcDOvzQ\r\ndate: Sat, 21 Mar 2026 18:40:15 GMT\r\ncache-control: public, max-age=60\r\nexpires: Sat, 21 Mar 2026 18:41:15 GMT\r\nlast-modified: Fri, 06 Mar 2026 12:51:38 GMT\r\netag: \"b80c21e3416cf26aa8f670f2b23a6f8f\"\r\nx-goog-generation: 1772801498201695\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1105395\r\nx-goog-hash: crc32c=9+Yf4g==, md5=uAwh40Fs8mqo9nDysjpvjw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1105395\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1105395,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1261 x 450, 8-bit/color RGBA, non-interlaced","md5":"4c604c15e3b84d5576e6cad45740a7e6","sha1":"c57303948d7b94319838c141099c83d8d54782d0","sha256":"ce2095587be1fc711056a74af5e4578af5dded83b0dd4938bd2c49c28756fbfb","sha512":"93563b4d34dc4fce089f9e565e9e9f3484beb614da0a31794c581b3c3d4288a6a27a4cbc1b7132b5888818b8d5e162916d4f2547bfd028890c9ca10cbdf24fd6","ssdeep":"24576:bDkoGWTVmUfqiVdMWX+hKAHqhAu50x6LHdBr24mqKzUWibXR0BS1:PrZVmUCu+Yhz50x6L9w4gzViR00","tlshash":"4e2533e13531e4427a677c3b095ccce646e08e2bc6a1f6332cbcc1d6941a9f74b568e5","first_seen":"2026-03-21T18:40:35.481947Z","last_seen":"2026-07-11T05:45:02.425566Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1959,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":372,"receive":1587,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/v0/amp-loader-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"0E:1A:26:72:B9:66:7B:27:2A:5F:B6:6E:78:84:9D:3E:9E:B3:DA:E4","sha256":"70:BA:BE:7A:0B:05:93:D0:F5:50:53:8C:8C:0A:29:F5:F0:31:E8:9C:EA:0B:27:0F:21:52:9E:47:AA:34:E5:4A"}}},"request":{"raw":"GET /rtv/012603032146000/v0/amp-loader-0.1.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.metaplay88u-amp.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3921\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 17 Mar 2026 21:22:26 GMT\r\nexpires: Wed, 17 Mar 2027 21:22:26 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"43c0c1e3818fdba7\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 335860\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12361,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12245)","md5":"c7fcfc2dad8a5a21597675f84c0a2cec","sha1":"b43be391d0a3bf209b3f01cf0f29b68311c03ab7","sha256":"44c1a7b71b2869d83d2f5198514dfb2e60b49c51b1edad87daa2af977842b045","sha512":"cd2e09e595efa89578bc1b4358d69798fa62e91e52eb29ae72999b4136eb6a4d66a0a897d43ad136cb3070303e197a1c5421762c1348e6fff712ba30a49c8b30","ssdeep":"384:Eo39KdedznnHXcxZgulqaa5F4g5A4WR2vCk:F39KMdT3cLgulDa5F4g5A4WR2vCk","tlshash":"1a429360a50be2ac530342b488f5b956757ccd4fb8104075f0604eeedb8ae54bdbba6e","first_seen":"2026-03-18T09:15:17.817764Z","last_seen":"2026-05-12T10:22:31.882044Z","times_seen":792,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/V1003/images/banner/14/1717843953.406381_banner_desktop_a_id.jpeg","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /V1003/images/banner/14/1717843953.406381_banner_desktop_a_id.jpeg HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWzU88tkyKUWKDChpZ_y4D8k9OGSsIrRoGkrwiGvy0IEJ-_Dd5XNm1RMtArrCazVP2WqPxBbak4\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\ncache-control: public, max-age=60\r\nexpires: Sat, 21 Mar 2026 18:41:06 GMT\r\nlast-modified: Fri, 06 Mar 2026 12:50:30 GMT\r\netag: \"183b005e83c66e05861f3d03114b868f\"\r\nx-goog-generation: 1772801430950523\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1154895\r\nx-goog-hash: crc32c=yAIHPA==, md5=GDsAXoPGbgWGHz0DEUuGjw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1154895\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1154895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1261 x 450, 8-bit/color RGBA, non-interlaced","md5":"5e08bc76ea43d6bff6588eab0271d0c2","sha1":"2984bc185ad468158e3b0c571a80d58775067be4","sha256":"7cd4592f52fdf6ab020786b57c46e64a4c5da1ce108af32656d360cf17d67c83","sha512":"bfc68454cd0d62a2858c6df51edac02581cc3766e17773827197556c37ac9df34f27160b7b74a33ac975758e620ca30455209433a387a90a264fd8737392c36e","ssdeep":"24576:FPlUHI4XWp5TiZusbh922m6WszWEV7VdTxSbbXOma7+wTN:FlSTmLiZust9pm1sKEh/xSbKma7+C","tlshash":"d625336fad6c23b89bcf146836904163784cf34dabb22d55cea0e640b351b87f7ac461","first_seen":"2026-03-21T18:40:35.484316Z","last_seen":"2026-07-11T05:45:02.469305Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2202,"timings":{"blocked":220,"dns":0,"connect":0,"send":0,"wait":360,"receive":1622,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/V1003/images/banner/36/banner_mobile_a_id.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:21.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /V1003/images/banner/36/banner_mobile_a_id.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWwhL5uPoD3CJZDjoZyUFzePQvEyLrZVlHX948-Y4faQMvJObYsR2Nykak-pdG_k5Lao\r\ndate: Sat, 21 Mar 2026 18:40:21 GMT\r\ncache-control: public, max-age=60\r\nexpires: Sat, 21 Mar 2026 18:41:21 GMT\r\nlast-modified: Fri, 06 Mar 2026 12:52:48 GMT\r\netag: \"c17684ea2e1db4af1e8c610bdc33c06e\"\r\nx-goog-generation: 1772801568594811\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1092005\r\nx-goog-hash: crc32c=aol5xA==, md5=wXaE6i4dtK8ejGEL3DPAbg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1092005\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1092005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1261 x 450, 8-bit/color RGBA, non-interlaced","md5":"81bcdc31bccf7c8094d091985b989aef","sha1":"186c6b857806f16c793990d85ac21b61d6b2e079","sha256":"ce1e754d680d837ed97e57c5a5b57f8c522a78de353e01d1ba0a90b38981cc6c","sha512":"a790bb26edfddf5f6c8106f88389a589e0f06328349da6050ddba27428bcc23e577bdf56de91459de5e10fd0c7d68d5c43de01b3b20e6f4c0385b9875f38314f","ssdeep":"12288:EGKw2Ejw2LMpmj+1UFJDh5MTeACjOKRTM8aYQ4rWEHqVAcFUj8v5t8VBI0vPwmGH:IdADwU5aTeFjzRwWrYheMt+KQDGakk/8","tlshash":"e6253385d9b3c80a4528b11c5f38fbd934240494907b3f7fc84bea67648eadced74aa1","first_seen":"2026-03-21T18:40:35.485741Z","last_seen":"2026-07-11T05:45:02.474791Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1673,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":353,"receive":1320,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.metaplay88u-amp.xyz/Ekster-Bold.woff2","fqdn":"www.metaplay88u-amp.xyz","domain":"metaplay88u-amp.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:05.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaplay88u-amp.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 16:12:22 GMT","end":"Wed, 10 Jun 2026 16:12:21 GMT"},"fingerprint":{"sha1":"E0:37:C6:F4:CF:F5:3D:90:02:87:5B:55:5C:14:C2:54:70:A8:A4:3D","sha256":"2C:1C:62:1F:CF:E8:BC:4E:BD:B6:62:B0:10:B1:8B:AD:DB:F0:B2:CE:E0:10:51:CF:1B:4E:0F:6C:C2:CD:EE:F4"}}},"request":{"raw":"GET /Ekster-Bold.woff2 HTTP/1.1\r\nHost: www.metaplay88u-amp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nCookie: INGRESSCOOKIE=78aa1dc8a4959606c34537687472d937|db944ac23b94b266e3d8846b952a9968\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 21 Mar 2026 18:40:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Next.js\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VdITw3qgjTvkRmEI1lNrHNNVAD6OwOP28fefvmmsf0py2rQ5nnShEVjds6wMQ6N333Mpaphh7Wog2ayHDYr26CsEpS2zwkspiqXozGwWLqe6q%2FU3C9xB\"}]}\r\nserver: cloudflare\r\ncf-ray: 9dff15407f5948d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}],"data":{"size":2352,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1241)","md5":"5f730d57a08c326257dbca77c30ebacb","sha1":"c0194be65e380d00f2f38570f559df81c01d3ef4","sha256":"1f538c287e232265dfcd3bf5ab1aaf59200acad1f2df1597c4b1229f629cf75a","sha512":"2da382590760b467b5d1fc54d1cde99e4574c5e11145d937f18c67d6bba8403fdd07ab31645825155bbfb7bd54091333ca39c81b3a9c0cd733c85157bf3b63c8","ssdeep":"","tlshash":"6d418456dd26de0514329c987035939c3056c72bc1b6cd98ffcc6a2c8b813ea8f08d85","first_seen":"2025-11-17T13:33:03.991853Z","last_seen":"2026-03-21T18:40:35.443569Z","times_seen":9,"resource_available":false,"data":null}},"time_used":709,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":709,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/common/provider/gmw/slotgame/active.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /common/provider/gmw/slotgame/active.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxw6foGkoISqZea26CNw_LBnqBN-2JlCpvzWVqLmoYtUUTxy2TlzRBCbRVT9mWeZdHi0aIcPVA\r\nx-goog-generation: 1666320291156588\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9312\r\ncontent-language: en\r\nx-goog-hash: crc32c=G9hpaQ==, md5=2jIDrgckAnDYZVjfUej0gg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9312\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\nexpires: Sat, 21 Mar 2026 19:40:06 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 02:44:51 GMT\r\netag: \"da3203ae07240270d86558df51e8f482\"\r\ncontent-type: image/png\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":9312,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 116, 8-bit/color RGBA, non-interlaced","md5":"da3203ae07240270d86558df51e8f482","sha1":"dca3dd741f4232557d05fa1107c9690a79b82f5f","sha256":"163cf1d743abe58b174c6a71b66c48295bb2a328dc48b528d546e71f737e9b50","sha512":"89365a81fba2b2abfae2833d20abfda13c593a0496e8f5e5b58e82dfea0892656a634177aea4474f611bc6671033680339830612dc145b46fcd05ff0d78a7f64","ssdeep":"192:khiq7aotZB+OiXe4Mn/faRGH1slUC+aBeyO/07WRL0i:khiq5tZB+u4M/yGHmUZa/O/0eL0i","tlshash":"4b129eaec9f230954c88bb7754329168a7f892971012060cad45be3d3c49c7c93b6e2f","first_seen":"2025-06-28T20:53:27.282547Z","last_seen":"2026-08-17T21:46:42.706483Z","times_seen":13,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":329,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/common/central-banner/home/128/banner_id_13032026055853.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /common/central-banner/home/128/banner_id_13032026055853.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWwKwmudZsAf0XGBFIvP0Nhfm8m82YorlwZHFRJIondbXDjhwSmCLo20zA5DcuOWh9JkLTMF0Ew\r\nx-goog-generation: 1773381533924319\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 272044\r\nx-goog-hash: crc32c=PaKV2w==, md5=030tiPPKHGbc90suQBUtcg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 272044\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\nexpires: Sat, 21 Mar 2026 19:40:06 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 13 Mar 2026 05:58:53 GMT\r\netag: \"d37d2d88f3ca1c66dcf74b2e40152d72\"\r\ncontent-type: image/png\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":272044,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x640, components 3","md5":"d37d2d88f3ca1c66dcf74b2e40152d72","sha1":"3e7482818cc38266bb3c1b3ae93d3a88cbe74dad","sha256":"acf53597367a0e575a062952bbabc08edff82ba204a8c9d07757a1a297470314","sha512":"17d8784ac44a966d50342c8a604419c014a26f66dd6a7239fe7940cad636ba68c8e03ea2ae5d3f8a7a615fe92e5984f3201269250aea532e77e51f22b5256473","ssdeep":"6144:dy1wo55EyuXAWpobQ1h1UMiksJ9cUYbSW1qSW+mXM3nYNzQ:dvxyuJpo0heMiotSW1qImwnyc","tlshash":"4144234e4bf7bd53ed985b78088597bade8cb1c09a24b7f5cc02548e6ac0f0b2457926","first_seen":"2026-03-21T18:40:35.488573Z","last_seen":"2026-03-21T18:40:35.488573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":230,"dns":0,"connect":0,"send":0,"wait":385,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/V1003/images/banner/29/1722411142.1404_banner_desktop_a_id.jpeg","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /V1003/images/banner/29/1722411142.1404_banner_desktop_a_id.jpeg HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWxl8fEQbVxviGugkrj6BC3cfREN0w5OTzVS1Ng8iuw1a_MTFjOy4Vqeaz2NzqNmL9BXhft3GDc\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\ncache-control: public, max-age=60\r\nexpires: Sat, 21 Mar 2026 18:41:06 GMT\r\nlast-modified: Fri, 06 Mar 2026 12:50:44 GMT\r\netag: \"c90f6ff7b42099ec5fbe87bb1cf75921\"\r\nx-goog-generation: 1772801444482323\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1140612\r\nx-goog-hash: crc32c=pXRE5Q==, md5=yQ9v97Qgmexfvoe7HPdZIQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1140612\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1140612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1261 x 450, 8-bit/color RGBA, non-interlaced","md5":"8c9b61abc9c6ef534d85e0cc2509a8fd","sha1":"3e5ee7f5980f1087f831899cfdfc82a6ffd33abd","sha256":"27d6e477e7590e7767f32251e36f4395d8e1e7af0c771400b1c9a909d9379e21","sha512":"1564ce2878aa86fe63119d28e9cb4b0fa4eac4883d24dc738eb1539168e72f04a08516d6e731d5f57d4983f81c7d4893d502dcab8dca8c6eec15c8671ea0a46e","ssdeep":"24576:xczduavlbOv4TilG/6jyUxW8TULtngAfjU3mRi35lNNU96b:WJvlCv+/6jyV5tngwjU3mR2NNUs","tlshash":"7e253362e1c0e8342573e8ee72063394f5933e2dea94511b34fb094dfd46601eeaa5db","first_seen":"2026-03-21T18:40:35.490036Z","last_seen":"2026-07-11T05:45:02.466322Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2233,"timings":{"blocked":224,"dns":0,"connect":0,"send":0,"wait":409,"receive":1600,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.metaplay88u-amp.xyz/favicon.ico","fqdn":"www.metaplay88u-amp.xyz","domain":"metaplay88u-amp.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:07.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaplay88u-amp.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 16:12:22 GMT","end":"Wed, 10 Jun 2026 16:12:21 GMT"},"fingerprint":{"sha1":"E0:37:C6:F4:CF:F5:3D:90:02:87:5B:55:5C:14:C2:54:70:A8:A4:3D","sha256":"2C:1C:62:1F:CF:E8:BC:4E:BD:B6:62:B0:10:B1:8B:AD:DB:F0:B2:CE:E0:10:51:CF:1B:4E:0F:6C:C2:CD:EE:F4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.metaplay88u-amp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nCookie: INGRESSCOOKIE=78aa1dc8a4959606c34537687472d937|db944ac23b94b266e3d8846b952a9968; _ga=amp-Mdj_e-fE7s1SiJhrapDVxA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 18:40:08 GMT\r\ncontent-type: image/x-icon\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 04 Aug 2025 10:49:26 GMT\r\netag: W/\"47e-19874b352f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\nexpires: Sat, 21 Mar 2026 18:40:08 GMT\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nh6Of2YQn%2BiInaySz13f3sL9Xgnurzj1TbR53FhqdWkWHs42ymtjhuR9kRwZWApHCyU5%2FHIcnfiH4WFvotUUmaVsMdvIAoDDpPBZPdfA5sHbMhichdjk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9dff154fb82448d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"cf4e7e9c32c2152a5bf08b52faf66d8b","sha1":"ba58faf7e8771d5d8abc9cda0cd672005b4fbd06","sha256":"b4cf93d1ae7f3758d40797f5a04b99324c484e713a3225e863651fcda16d1565","sha512":"886ce9027cbcfa1a6fc5a7e3e706f4dd31008edf34e8f916fbae2e7fbbf44828672b768560ac5385e077b204501be189875cf616122f6d3201335e62e182f27c","ssdeep":"","tlshash":"39216da0bc86e35dc055e2312322191e3415d16879ca62cd37abd3ce697f59d2cafea0","first_seen":"2023-10-13T02:21:30Z","last_seen":"2026-08-17T21:46:42.694791Z","times_seen":21,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":707,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/V1003/images/banner/35/banner_mobile_a_id.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:18.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /V1003/images/banner/35/banner_mobile_a_id.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWyMeiqU1VmmZXKyOf4RF5NBOw0yzLK_P7lW-bHmGjXLbxxmdHIGQdO38uHLPJz353vD\r\ndate: Sat, 21 Mar 2026 18:40:18 GMT\r\ncache-control: public, max-age=60\r\nexpires: Sat, 21 Mar 2026 18:41:18 GMT\r\nlast-modified: Fri, 06 Mar 2026 12:52:29 GMT\r\netag: \"03d12c8c5f17f2aee454f101bc0dba91\"\r\nx-goog-generation: 1772801549331605\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1126604\r\nx-goog-hash: crc32c=8UJnUw==, md5=A9EsjF8X8q7kVPEBvA26kQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1126604\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1126604,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1261 x 450, 8-bit/color RGBA, non-interlaced","md5":"570610bd032eb7356690a4e664bede74","sha1":"8c3b25ac9216e56b21de28785884718bdb41455a","sha256":"ea60b3a4af522aa17614b353c0ee94bf966cceba7a64854affb82c34e1986637","sha512":"87c94aca73b7b274f1da6a4d2c077b80412b492ee09a07127a19eef0f5f65fdd39623d22715f0953bb712b21c7bd8f12902d880981c4c1e3048b5e6ee399d1ea","ssdeep":"24576:Vh9+IbLqsxj9RtQoMBqRUNPHNlLHLoFZMn6/hh7r3H:Vh9lCsxjFQ9Bphtlz2anc1r3","tlshash":"892533010d80d1b720c42e7ab9967c5a719fd37a8c2d932724952e8932b9e0fdd8d9bd","first_seen":"2026-03-21T18:40:35.492072Z","last_seen":"2026-07-11T05:45:02.480067Z","times_seen":2,"resource_available":false,"data":null}},"time_used":706,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":330,"receive":376,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/common/provider/ebet/livecasino/active.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /common/provider/ebet/livecasino/active.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: application/xml; charset=UTF-8\r\nx-guploader-uploadid: AGQBYWy5BcZgIEco7Nf9emVq0ZbnO3tpNq-PAEeqJL-8Elyya8OqOycL2kV4JrPuQ1MRE06T2nKWYQc\r\ncontent-length: 127\r\naccess-control-allow-origin: *\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\nexpires: Sat, 21 Mar 2026 18:40:06 GMT\r\ncache-control: private, max-age=0\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/xml; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T10:45:00.892306Z","times_seen":17972324,"resource_available":true,"data":null}},"time_used":572,"timings":{"blocked":241,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-analytics-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:05.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"0E:1A:26:72:B9:66:7B:27:2A:5F:B6:6E:78:84:9D:3E:9E:B3:DA:E4","sha256":"70:BA:BE:7A:0B:05:93:D0:F5:50:53:8C:8C:0A:29:F5:F0:31:E8:9C:EA:0B:27:0F:21:52:9E:47:AA:34:E5:4A"}}},"request":{"raw":"GET /v0/amp-analytics-0.1.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.metaplay88u-amp.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29114\r\ndate: Sat, 21 Mar 2026 18:40:05 GMT\r\nexpires: Sat, 21 Mar 2026 18:40:05 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"e063d2b34a7651c0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96788,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65534)","md5":"e033a739d6c1d9901b3d3f8aa5b25d5c","sha1":"efa19dfdc8b7873a266cbeca746493db42b038ad","sha256":"6b03d0078cefd454dbf4121ed662175ed8ea3a4cfc4b74dde43ac19df134a94e","sha512":"35504e42985cb6eb84cc75757b40ad4be0d2101572c7ee93c381aaaaaa70693c5e699c79b0b902a8b57b487da8467165acccd29e7ae86d74be38a60b330fed8a","ssdeep":"768:4LnJL1fv/k1Ut0QVSCFVfxuOCJywJqOHEjn8CTx0DrfdSGyQNxxl6imLKuUctxGg:4b31HKRoVGkFKZBLUwT9NmDUzltSiKJ","tlshash":"f393e6a63292f03643d659fa98374002f3296944300a887cf4ecadd7fd6b94671b6f79","first_seen":"2026-03-19T03:48:05.533626Z","last_seen":"2026-05-18T11:36:27.034242Z","times_seen":151,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":398,"dns":19,"connect":20,"send":0,"wait":19,"receive":2,"ssl":361},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/common/amp/live-chat-widget.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /common/amp/live-chat-widget.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzhgdQAYlaE8TMi-dD0yhhsNU1WdIgtERnoB42oRFB26eYBSnJgnCHQ2wo573tjKdQwWbWgJXk\r\nx-goog-generation: 1668760706361130\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 85476\r\ncontent-language: en\r\nx-goog-hash: crc32c=ZxTvgA==, md5=wUwKbLomWIA0x1EblYBEgQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 85476\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\nexpires: Sat, 21 Mar 2026 19:40:06 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Nov 2022 08:38:26 GMT\r\netag: \"c14c0a6cba26588034c7511b95804481\"\r\ncontent-type: image/png\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":85476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 217 x 311, 8-bit/color RGBA, non-interlaced","md5":"c14c0a6cba26588034c7511b95804481","sha1":"5fb3da5c029d183d7329f52379883cadb5c1d1ff","sha256":"d6fef45b6054745d097a29767662927d666af37b56b8a663d9fe35d021063ce8","sha512":"b3b9ddc9378ad67d5d387c1d49cc373b3af8529c5f4cd47194e9c74ab2bfb0aed61719759e364b7f06222319f5be76d4acc3d7c17a5b60c3e3d9afe8306d4f7c","ssdeep":"1536:doYLeNqCV2sRtdYH2K7qom7jtbu1I9+xUJYK7F12h6fbfrN3VCvxrt0:xLeNqiGWK7+duZ7K7F12h6jfivhu","tlshash":"e38302d4c44db95d28fc0f2a554723f595bb213250a8deba4d8ca8e8a40521f7eecb27","first_seen":"2025-11-17T13:33:04.01145Z","last_seen":"2026-08-17T21:46:42.708553Z","times_seen":11,"resource_available":false,"data":null}},"time_used":860,"timings":{"blocked":261,"dns":58,"connect":11,"send":0,"wait":299,"receive":23,"ssl":204},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/common/provider/pragmatic/livecasino/active.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /common/provider/pragmatic/livecasino/active.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzr1dNrtu8Qe9ywh6cTzKE6uhOA8sBWYKbA-ArZxdcWojOuDS7sPm9gYmGhBwSGEZ28qPF3QaY\r\nx-goog-generation: 1666320291429992\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 14647\r\ncontent-language: en\r\nx-goog-hash: crc32c=9Fd6bA==, md5=njX6ol9I7dJ2r78YXwh4aA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 14647\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\nexpires: Sat, 21 Mar 2026 19:40:06 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 02:44:51 GMT\r\netag: \"9e35faa25f48edd276afbf185f087868\"\r\ncontent-type: image/png\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":14647,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 116, 8-bit/color RGBA, non-interlaced","md5":"9e35faa25f48edd276afbf185f087868","sha1":"89cf198e3793d722d3afd02e0ef5c72782e1001b","sha256":"69c839950c3945cff482504dba94ef19733fbed01cc6cc7e9a42b525ebbf2d92","sha512":"d6c43ed05715422d8a2f98637cbe67534816a3ef7b6ca5039a11c3c04926e68b0dd8f1ed7c78cc0e85fc5a0a37ab689c2ea57df6cf6d83afbc10c82a20fef76f","ssdeep":"384:j9udwJtxKSmcnSm97FFJEaCXkQsfkP4rnxA+Ef:jcMtU5cp9hav9P4rxA+Ef","tlshash":"f662d19df0dc3389d01b6168db50758593cd7832aafa84193658e35e8fb90fcd27a5b0","first_seen":"2025-06-28T20:53:27.290495Z","last_seen":"2026-08-17T21:46:42.709667Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1021,"timings":{"blocked":329,"dns":61,"connect":39,"send":0,"wait":336,"receive":1,"ssl":247},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9996777888.com/common/provider/aegaming/livecasino/active.png","fqdn":"9996777888.com","domain":"9996777888.com","tld":"com"},"ip":{"addr":"35.190.44.120","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:06.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9996777888.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 15:43:03 GMT","end":"Tue, 26 May 2026 16:36:38 GMT"},"fingerprint":{"sha1":"5D:5C:89:37:98:31:E8:19:FE:5A:99:40:60:D4:1B:17:92:1F:C0:01","sha256":"C2:2F:CC:32:A8:2D:15:80:4A:28:28:6E:00:09:D0:07:D3:08:C1:27:2A:BF:A1:90:69:1F:31:0D:71:B8:81:8A"}}},"request":{"raw":"GET /common/provider/aegaming/livecasino/active.png HTTP/1.1\r\nHost: 9996777888.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWz1xyjbz5eQeqfjibXIEBg0u-ImRDRYGPh2Cjz2G3jMuknFAGcDh0uOGii8ExZ3ATeobIpRxz4\r\nx-goog-generation: 1666320291211187\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 22360\r\ncontent-language: en\r\nx-goog-hash: crc32c=pTkOVw==, md5=UUD4dxtwLLPAJvnSkFK+Mg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 22360\r\naccess-control-allow-origin: *\r\nserver: UploadServer\r\ndate: Sat, 21 Mar 2026 18:40:06 GMT\r\nexpires: Sat, 21 Mar 2026 19:40:06 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 02:44:51 GMT\r\netag: \"5140f8771b702cb3c026f9d29052be32\"\r\ncontent-type: image/png\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":22360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 116, 8-bit/color RGBA, non-interlaced","md5":"5140f8771b702cb3c026f9d29052be32","sha1":"a1ed506ee184fb092a4215b9377e2539a97dd8e0","sha256":"958bdac1a598b9a17a8e31d02dc69342252073f46606592b87e4597f88a36ed9","sha512":"505d21342137033b4087193fd5bfe12864b5dd2c8f6930003ede8d73ca31cfc59892f9369916f759b784bf0ecb62c598c3a2481602498c0a528546b5cffa3f6f","ssdeep":"384:b19gBRQsOAF2X5nuNaHqpsDEt33b8XhJhwwaVImaRvNSuaVlIPfTEsDf/eFL:b/gBRQsTgXRzKrYXhrwwW6vN5OwTEOGB","tlshash":"84a2e0c2bf89553fec5e851ebca955c3249bb0818bdccac10f9b34e30a5971cea58187","first_seen":"2025-06-28T20:53:27.292754Z","last_seen":"2026-08-17T21:46:42.669653Z","times_seen":13,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":243,"dns":0,"connect":0,"send":0,"wait":324,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/amp?__amp_source_origin=https%3A%2F%2Fwww.metaplay88u-amp.xyz","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:07.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"POST /gtag/amp?__amp_source_origin=https%3A%2F%2Fwww.metaplay88u-amp.xyz HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nContent-Type: text/plain;charset=utf-8\r\nContent-Length: 231\r\nOrigin: https://www.metaplay88u-amp.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":231,"data":"{\"vars\":{\"gtag_id\":\"G-ZD4801ST2E\",\"config\":{\"G-ZD4801ST2E\":{\"groups\":\"default\"}}},\"configRewriter\":{\"vars\":{\"st\":\"1774118407155\",\"ct\":\"1774118407152\",\"sc\":\"1\",\"gclsrc\":\"\",\"hasGcl\":\"0\",\"hasDcl\":\"0\",\"hasExtRef\":\"0\",\"hasDocRef\":\"0\"}}}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.metaplay88u-amp.xyz\r\naccess-control-expose-headers: AMP-Access-Control-Allow-Source-Origin\r\namp-access-control-allow-source-origin: https://www.metaplay88u-amp.xyz\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-disposition: attachment; filename=\"amp.json\"\r\ncontent-encoding: br\r\nvary: *\r\ndate: Sat, 21 Mar 2026 18:40:07 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 726\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1329,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6b29e24d10a0e48dda88696778eee710","sha1":"c53bce1d7e8a0b774a76ec879ce5fdef4de9dc2a","sha256":"e3ac06c1339743323375b80fa8ca88aa02c1d5b962911bf7a6aa2137b31fcff3","sha512":"d813f3a547875aee5881f80be3c72415cbcd641335900f33e3d650ed38cdf05075fdbae047b4ae8d075d54521c0e87db41560d8be08ce41a002f36f4594c3af4","ssdeep":"","tlshash":"382162d6431928b2cb5ec252aa5c1b0663fe403ce11b7c62f6b91e5c0f24fdc5627e29","first_seen":"2026-03-21T18:40:35.49889Z","last_seen":"2026-03-21T18:40:35.49889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":57,"dns":1,"connect":7,"send":0,"wait":17,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.metaplay88u-amp.xyz/","fqdn":"www.metaplay88u-amp.xyz","domain":"metaplay88u-amp.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-21T18:40:03.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaplay88u-amp.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 16:12:22 GMT","end":"Wed, 10 Jun 2026 16:12:21 GMT"},"fingerprint":{"sha1":"E0:37:C6:F4:CF:F5:3D:90:02:87:5B:55:5C:14:C2:54:70:A8:A4:3D","sha256":"2C:1C:62:1F:CF:E8:BC:4E:BD:B6:62:B0:10:B1:8B:AD:DB:F0:B2:CE:E0:10:51:CF:1B:4E:0F:6C:C2:CD:EE:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.metaplay88u-amp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 18:40:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: INGRESSCOOKIE=78aa1dc8a4959606c34537687472d937|db944ac23b94b266e3d8846b952a9968; Expires=Mon, 23-Mar-26 18:40:03 GMT; Max-Age=172800; Path=/; Secure; HttpOnly\r\nx-powered-by: Next.js\r\ncache-control: max-age=0, no-cache\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLsbEHWzSnlBZ%2FY2FML8QrGrW4%2FJB4OWKfMZbqx6CjD4BIbiltl%2BXTtETkVUA1ePFO0y%2BygY3RgDfidt%2F78rJ8lhwTD5w3B6TUdlC6UWnamTfwX8gniG\"}]}\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\nexpires: Sat, 21 Mar 2026 18:40:04 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dff15358d832d96-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":50443,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39466)","md5":"81d09641ea3ffe044c3a78bccbcc4512","sha1":"dd46634ad5e212b63446d7d3b95652af1897bf82","sha256":"539fdc20854f6cee392f385969b9cced2604e3f3150e2bdead7f756cc6ce15a5","sha512":"6e937437c3d05363f5526cd72d492bd20a6ed4c2e978c6f77ed75f85ebd84c530cd638b3e77faae073df89233829daa31c78e5644e8e1957c8bf09979bf786a7","ssdeep":"768:1/WA/8Q+rELDRMD1kif4th6rjBhnZBQjigdPs7ZW:1/ZDR0GiwtgrthnZBQjigdPs7ZW","tlshash":"8433c637bb0c518ee21ba784d8d1f6777d15c887c7608a4dea24ab15d826fe32230b5d","first_seen":"2026-03-21T18:40:35.47664Z","last_seen":"2026-03-21T18:40:35.47664Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1450,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":1433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-carousel-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:05.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"0E:1A:26:72:B9:66:7B:27:2A:5F:B6:6E:78:84:9D:3E:9E:B3:DA:E4","sha256":"70:BA:BE:7A:0B:05:93:D0:F5:50:53:8C:8C:0A:29:F5:F0:31:E8:9C:EA:0B:27:0F:21:52:9E:47:AA:34:E5:4A"}}},"request":{"raw":"GET /v0/amp-carousel-0.1.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.metaplay88u-amp.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10074\r\ndate: Sat, 21 Mar 2026 18:40:05 GMT\r\nexpires: Sat, 21 Mar 2026 18:40:05 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"ad5a15f918174d63\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33481,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33361)","md5":"1a0c74e3ee31db74256943a8712d1feb","sha1":"b3bb013c70fd53f2ee29b1c7eb7f3f5a0b7ad13a","sha256":"c1281f0d57ecaa7bbb3422c13a361ce10ab89b42816097e1b35c8c0488a38053","sha512":"a3bc73b6c412451ec40f605aa06143f4bb3d6e48d22a1154453a0f0830c3952ff270d9e5937741267afe4ce818b806364fcbb2d23c3dc1bd6eef022829edb02e","ssdeep":"768:vhMeyJaongtXq3yoSae/2yyEV6ocJRMdYDZ8PL1Wdq8NQQEd1/i+E0xCq7rzRqC8:JM5iK2zYixzGdB","tlshash":"cce2e8e0b242643a07e649b440675105e62ca9557106482cf4fddfcbfeaad9632bef3c","first_seen":"2026-03-19T22:31:53.49773Z","last_seen":"2026-05-10T22:43:05.864725Z","times_seen":51,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":79,"dns":18,"connect":11,"send":0,"wait":27,"receive":2,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.metaplay88u-amp.xyz/Ekster-Light.woff2","fqdn":"www.metaplay88u-amp.xyz","domain":"metaplay88u-amp.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:05.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metaplay88u-amp.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 16:12:22 GMT","end":"Wed, 10 Jun 2026 16:12:21 GMT"},"fingerprint":{"sha1":"E0:37:C6:F4:CF:F5:3D:90:02:87:5B:55:5C:14:C2:54:70:A8:A4:3D","sha256":"2C:1C:62:1F:CF:E8:BC:4E:BD:B6:62:B0:10:B1:8B:AD:DB:F0:B2:CE:E0:10:51:CF:1B:4E:0F:6C:C2:CD:EE:F4"}}},"request":{"raw":"GET /Ekster-Light.woff2 HTTP/1.1\r\nHost: www.metaplay88u-amp.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nCookie: INGRESSCOOKIE=78aa1dc8a4959606c34537687472d937|db944ac23b94b266e3d8846b952a9968\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 21 Mar 2026 18:40:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Next.js\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z0YxoE8aZ%2Fr6ZH7pKElpOiQKIrVz%2FPyss3rAyQ%2BfcuFfwU549r3L7VINcEdpFZv2KRyH0HUqxrmMaTJsYTG3WKd46QPfcKRjOxW0q7M%2FlCwmuZI3FEBz\"}]}\r\nserver: cloudflare\r\ncf-ray: 9dff15409fb148d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}],"data":{"size":2352,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1241)","md5":"5f730d57a08c326257dbca77c30ebacb","sha1":"c0194be65e380d00f2f38570f559df81c01d3ef4","sha256":"1f538c287e232265dfcd3bf5ab1aaf59200acad1f2df1597c4b1229f629cf75a","sha512":"2da382590760b467b5d1fc54d1cde99e4574c5e11145d937f18c67d6bba8403fdd07ab31645825155bbfb7bd54091333ca39c81b3a9c0cd733c85157bf3b63c8","ssdeep":"","tlshash":"6d418456dd26de0514329c987035939c3056c72bc1b6cd98ffcc6a2c8b813ea8f08d85","first_seen":"2025-11-17T13:33:03.991853Z","last_seen":"2026-03-21T18:40:35.443569Z","times_seen":9,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":717,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"www.metaplay88u-amp.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.metaplay88u-amp.xyz/","date":"2026-03-21T18:40:05.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"0E:1A:26:72:B9:66:7B:27:2A:5F:B6:6E:78:84:9D:3E:9E:B3:DA:E4","sha256":"70:BA:BE:7A:0B:05:93:D0:F5:50:53:8C:8C:0A:29:F5:F0:31:E8:9C:EA:0B:27:0F:21:52:9E:47:AA:34:E5:4A"}}},"request":{"raw":"GET /v0.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.metaplay88u-amp.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.metaplay88u-amp.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 63621\r\ndate: Sat, 21 Mar 2026 18:40:05 GMT\r\nexpires: Sat, 21 Mar 2026 18:40:05 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"1fb0813db2f9ea66\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":228175,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64621)","md5":"fe1b81f958d86c98e88b86960a4dc246","sha1":"eb7c9593cf4980bd7774efec7f9579a9227d021f","sha256":"958c3f227881fbb4eebfe70f950f16384382a519ac0b708a073ae809205e312d","sha512":"bd2a0e6ce8551a58f83c095f7c1c071b061ac495337f58fda6b7e175344003a4687de1185d9ec87b1bfd4dd44fab2d6d54a6081b884c034bca5d6dac989a45da","ssdeep":"3072:dHxofahpFRKNAtM0sK8NQgU9SutUvDK3p9Pd+g3:XofahpF+At5s2gU9SutSDK3p9F","tlshash":"f524c5a53296b03247e154f5d4774002e3296998340b816cf8bceecb7ca9d86b1b6f7d","first_seen":"2026-03-18T09:15:17.810072Z","last_seen":"2026-05-12T10:22:31.89447Z","times_seen":888,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":85,"dns":21,"connect":7,"send":0,"wait":19,"receive":15,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}