{"report_id":"a3ccb0cd-1e7e-476e-b983-5327dadc4cfa","version":0,"status":"done","tags":[],"date":"2026-10-13T16:11:43Z","url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":0,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"title":"MR KING Dünyanın ve Türkiye’nin En Büyük Online Casino Platformu ! | Premium Slot ve Casino Oyunları","dom":{"size":526629,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46090)","md5":"940f5d2851690be0f70b8bc3ee3a1ed9","sha1":"0c3eaeaa729d184c363d318c7c6d4a893b3c91aa","sha256":"b300c9e6991730c6d9a265e72ced624d062165fd958360209b6cf525543eec17","sha512":"06a5c6704b2b663c6ea978378c4c3f54a41a9e186c5dc5421d94f501b79c86f5a0dcedfb247d649f1feabe2e552b255cd47e054b17687dacf4524d84df233be7","ssdeep":"3072:IHdlwwgdN9k/PVs7YFl4ELZtlVoQO8bPRVO67otGy:I9lSj9k/PmYD4sZttbPRVO67jy","tlshash":"eab4f1216200e53ad1739ec5f2313e3ab5dadb07c55588b0ebd8da62eee6c30b911dd4","dom_hash":"domhash928a73052340d1c50ba02085b42d6a4b","first_seen":"2026-10-13T16:12:52.174631Z","last_seen":"2026-10-13T16:12:52.174631Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":0,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-17T16:11:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cdn.jvrwolveq00dcsx.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"8af8c83d-8586-42f4-b327-2a7d1434123c.snippet.anjcdn.org","ip":{"addr":"108.157.229.89","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-08-28","domain_rank":0,"first_seen":"2026-07-15T17:32:10.599665Z","last_seen":"2026-10-13T16:01:51.84351Z","alert_count":0,"request_count":3,"received_data":19852,"sent_data":2122,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"mrking20056.com","ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"domain_registered":"2026-10-09","domain_rank":0,"first_seen":"2026-10-13T16:01:50.642184Z","last_seen":"2026-10-13T16:01:50.642184Z","alert_count":115,"request_count":117,"received_data":3154267,"sent_data":88367,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"cdn.kbkrw8839xwdwqe31.com","ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-09","domain_rank":0,"first_seen":"2026-10-13T16:01:50.644495Z","last_seen":"2026-10-13T16:01:50.644495Z","alert_count":0,"request_count":311,"received_data":56037214,"sent_data":176913,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jvrwolveq00dcsx.online","ip":{"addr":"104.21.19.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-22","domain_rank":0,"first_seen":"2026-07-14T22:02:26.779322Z","last_seen":"2026-10-13T16:01:52.25962Z","alert_count":5,"request_count":5,"received_data":330504,"sent_data":2952,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"frxchat.site","ip":{"addr":"104.21.2.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-13","domain_rank":0,"first_seen":"2026-10-13T16:01:50.648417Z","last_seen":"2026-10-13T16:01:50.648417Z","alert_count":0,"request_count":3,"received_data":73233,"sent_data":1552,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-11T22:47:21.405407Z","alert_count":0,"request_count":2,"received_data":27504,"sent_data":1100,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.upaflex.online","ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-07","domain_rank":0,"first_seen":"2026-10-13T16:01:50.646843Z","last_seen":"2026-10-13T16:01:50.646843Z","alert_count":0,"request_count":20,"received_data":892112,"sent_data":11088,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0m97bbjp.vgzu.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f98b1049da2dbbdd15077835f8113ee0","sha1":"181cce91546bdc2ab83b6278f5013dbeda5c6044","sha256":"bcf5020ac0266a80668e75fe1d7c08d3c4bf8c9ca4441496334d15653ccfa126","sha512":"c3c62a6f3ed685c9e48cda3a26e3ee1ee7ff90a72cf0fdd37fcc04eadb4e9c377eb4d1e47dbf5d35a03843e8e70379b41149d9c05960c41b1e9f0f4c34acc280","ssdeep":"96:mnQigpuv2J/Hx52j45y5Iie0RES0/0QPf5v2yA7sa6Rbxmqv2P:KQigp5MDhEB/0IMyAZox2P","tlshash":"b4d1d820f285e89b775a00985477a00ef214342a9bb4f87177dc54f21bc05f67d6abe8","size":6558,"data":"","first_seen":"2026-03-26T05:53:20.913278Z","last_seen":"2026-10-13T20:23:23.739094Z","times_seen":917,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/11gyiit97qm0m.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"acca769c2dbed1652ae7ef8e91ba6374","sha1":"c408ffad278046c1786cff430cc4bf0fff480212","sha256":"05b33679fe0a82ca459af1d3140fb383b471cdc9d862bef78857707bdc764b0e","sha512":"743277747d86e5b0a19245b15c125baf368661443b5b80d54303add9ef9c6a46e81ab4cb0b149de94853b7a82a67e80d6974c2766dbbf18377bb22e4e297e7a9","ssdeep":"768:Tkiy15KkLTBV660rBozsf2v1AnFWEK/LhOXGwrN:TkqknBV6vcsf2d4","tlshash":"24e20ad927553928aba940e5911ed00c312f7d9c9c0f4838b6b85c6a292ddc1f6b3fde","size":32435,"data":"","first_seen":"2026-10-13T16:02:14.625738Z","last_seen":"2026-10-13T16:12:52.280821Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c31fc581e67a1693c66d2c24c2f8e15","sha1":"1135c4a3ac71fbc11b7b15c248724d80552e1621","sha256":"f58bb7dd893ca31647bf66f2c1fa58b41349847bb478ef1a621e64f3e60e07e2","sha512":"b959bcedc0a1f6cc89e5dd8b9908debbad5926bb920cc79bc3885211703680cdb749af7ed174ea550b460e0199ee8dcd20b9021fcb915d820e8eb00e6e8476d7","ssdeep":"","tlshash":"8ee0727c30817a31ac270cfbf478db883f323210470a99a0c00f8c800632c068a02fd8","size":303,"data":"","first_seen":"2026-07-14T22:02:35.396569Z","last_seen":"2026-10-13T16:12:52.462002Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-10-13T20:42:11.735554Z","times_seen":289680,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bca10d40174d7c9a959a7e623478db70","sha1":"883addbfd994d9c69cafd5b25ad961cc8e31af1a","sha256":"166cfe61eec7f8a67e1ab6930fadda798987a2971b826c8614584a2d3b9063ee","sha512":"62c3491f589045d4a5a89c7dc1d233c38629e7db13e4393557b6ed684301c668aee9aff2d0d82487902183130c3848cf39a2697fe32d9427758eecb20366371b","ssdeep":"48:L4GyOGbG+G1NkGpsWbzk4myNjfDGpsWbzk4myNjZbGpsWbzk4myNjZdbdGpsWbzk:LrNb7tnO/u","tlshash":"0491ef4be91efc212c74cc9e053f9fb7a5c499378634242da29dea9c502093a43d9c94","size":4346,"data":"","first_seen":"2026-10-13T16:02:14.691398Z","last_seen":"2026-10-13T16:12:52.469421Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"be5216f025df43992734852d51f7b4e9","sha1":"b420204264d2f2a587797acda1cf10754557d499","sha256":"c7f6ceabac576974a8fc10842067c47945441eee51cee26e29f23e8ca9b368b1","sha512":"f014a1d48e446e3ae3b6dff3f04318fa5d10c8e893799768a491aaa325a57776563d3bd770899a195648298c71313cc373d105a38b2431e2aa55ae4e0682a53a","ssdeep":"48:LpNjYzJ5GpsWbzk4myNjtuGpsWbzk4myNjkYGpsWbzk4myNjuaJSGpsWbzk4myNE:LYdKwEQ78z","tlshash":"e691bd4fe85efc213c74cd9e093f9fa7a5c499379a30252da29ceadc502493a47d9c90","size":4341,"data":"","first_seen":"2026-10-13T16:02:14.69256Z","last_seen":"2026-10-13T16:12:52.474509Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e2d2305bf7569d7353afe4a5b38b5ad","sha1":"4eb86aa92371ec75f023c94a6497c46c41b8db42","sha256":"65fec2d7adb1041193d46fd9bd7a573480ab44f8bdf3c696a213d69471557eca","sha512":"c8f013968cd303cd82413743619edb894a8a8b8f3e7c1b0e7c447fbd270a59b526985e918ee559b0f6288cfe59bf997586239892a4e9a4a1b0c95d3784406c22","ssdeep":"48:L5k4myNj/vG1XIG1WGpsWbzk4myNjdJIfGpsWbzk4myNj4PXGpsWbzk4myNjZxWF:LM/SWpT9M","tlshash":"1f91fd4be85afd213c64cd9e053f9fa7a5c499378a30292db29ceacc513083a47d9c90","size":4356,"data":"","first_seen":"2026-10-13T16:02:14.694992Z","last_seen":"2026-10-13T16:12:52.47718Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d441d8797e361425e6e1b529dbff9c63","sha1":"3e08aedbbde7a2cab29e5756706c8e210ccde128","sha256":"18acedeb2087ab47cf882c8cc9c2cd46022edefaf48cfd999a94e52221edf9ef","sha512":"0112043aa7f5013e05db56cb39bef1beaeeef341f0408602f59b7ed8b11220f223af43aefc618fe190859425a28ff629e7b3226f27fea0d73056d81c2b64c78c","ssdeep":"","tlshash":"b6e0d8aab300a0d89d50241ab9632c89c0fd992f03d5c1c27ed0ee63b200dba4025f05","size":351,"data":"","first_seen":"2026-10-13T16:02:14.696183Z","last_seen":"2026-10-13T16:12:52.478916Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a07a0bd2cb0ea76d843c7ed1cee6633","sha1":"5d1527c01675604323a4148f14d18606cf45794a","sha256":"8d18c560b69ac0e68428fffbbf01f424bd8df32a5befa9bb1356e6ef312b4fbc","sha512":"7619d8d0922dc713e162a02cda1983dc69b562b499ec7b7578fadd4729c8f7e64a3073d875b26e548e88aae716c66536dca033583ce1f3d6e9012f3a54960025","ssdeep":"","tlshash":"1c61a00f7c05ee06dc3e6c79023e8e7b14ccce7b8761d9b9819ece491a166b617d9881","size":3370,"data":"","first_seen":"2026-10-13T16:02:14.697051Z","last_seen":"2026-10-13T16:12:52.480125Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"7673a853cc5d731f846d3c8a8520108b","sha1":"9e11bac00e533228dd05d7c740fb0dac86d55893","sha256":"4c6bb7ece796456327d629b6e8f9a948e79750221fda7deb70eb43c53b3417e1","sha512":"dcbcb88bd3fbe07f42bb087b8788b9f13369d2a6d429ab327b3619f0bace9a4850e1c6201dd8485aa2ffc7f531cefec6c3fa143f58b32154a29ed4c6d0c3bff0","ssdeep":"","tlshash":"11115965e405cc0cde84bc89653e3c36a1de46a742d6fe729dc4df6520558be25a6f00","size":921,"data":"","first_seen":"2026-10-13T16:02:14.698052Z","last_seen":"2026-10-13T16:12:52.4815Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b59a732d909c136cce118c4c76e072cf","sha1":"8694eb33f39e50f2304f88593764fc5f421ed495","sha256":"dbd8b0b984c81295e9c16120b9f5cbe507c8d3710398d9fa25bd6d8d189b67a9","sha512":"46f9ed1325775b6a22345d939f7e9293a35d6869997888a698bad660803c7f49e2263255398f4d39600c2cda6a58d9328bdd28e0b381c15f3349c04a3c44d6ca","ssdeep":"768:rXbr3f476i3EUQnWoBsEfHiIqIVRJI9zEjcR10:rLs7PwFlZfyzEjx","tlshash":"92e2a40d749ec84ec5d29fcf72bc5e32a48f971105a2e4bdb6a9c12f1109d34bba2858","size":32121,"data":"","first_seen":"2026-10-13T16:02:14.699012Z","last_seen":"2026-10-13T16:12:52.482846Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6934f1b2c24976788d452263283bcd4f","sha1":"e6585f5ce440f3f565da72ca9d78c5bc982b5d0b","sha256":"7d00a53a56e65d93e5161e27e9606f55cbb7d703630387866a6b90f7227294c3","sha512":"d84bdee183ed0b391a18ff3a6a3232226d26be58c1f9abbfb91eecb723ab0e8979e01ce99312c8bcfab22d8a11e542ab442ad105a022f223756dad9df2f80aad","ssdeep":"768:0Ey6JPqwqrqHqcqKqjq0qnqAqmqPqvqzqGqTeaq/+q9q/q3qUemqAqRqCq8jUqq3:QZtlOQ","tlshash":"28e2e0c5750cf467c2424c4b76be5e3b944684eec8f36df1959cd42290b90baabf2b81","size":33097,"data":"","first_seen":"2026-10-13T16:02:14.700113Z","last_seen":"2026-10-13T16:12:52.48404Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f70bc25bcfdd9fb72a3690a3fe8223e","sha1":"8e56c0b031aba96c32516434dcacd85eaef7dd6d","sha256":"dfe496d5de2b2649920716545db836f528bc1eb9319113ab8a600534e99b0141","sha512":"a1246d1800684d7e290a8389f7829052134979430f18254f63d622e996f7189f89c2bd965e7fee8b3e09bd3a243cf9fb4d7665303b429a32fbb03e5b458764bb","ssdeep":"","tlshash":"1801ecae040ccd26ee2a392a5e3e6c3600ccc87707988f79d68dce5826058b63799e41","size":667,"data":"","first_seen":"2026-10-13T16:02:14.701295Z","last_seen":"2026-10-13T16:12:52.484853Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff1197a0802302e6ef6f1fd2450f256d","sha1":"5ec53e4bb9f285c92f6a880d180580d7cfe9bc17","sha256":"84083fdc26cdfa3aac2dda773512a46004c6d06e3ddcb0554b94ba3adb788ba6","sha512":"90a0b51136c1514e77b17be965b7b0634ec12502f0845dc5738dd4c5198955afd8ae08c4465c82490c63f32dc7ad78bf94161aee2c862caf98f1f0a4b364e2a8","ssdeep":"","tlshash":"8501f447e909fd10a860cdae117e6fbb9988e83b5534b829f25dd68c019183603c9dd4","size":745,"data":"","first_seen":"2026-10-13T16:02:14.702537Z","last_seen":"2026-10-13T16:12:52.48634Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd5396db0e0c74c74de38ec5c315f82f","sha1":"2451c10b757b4864ed8ddb05a3b8fb7b1b2b5282","sha256":"91aa0b8607baf3ba2c5034dea1b9bdcd7d04481665612adddc571b8835110c91","sha512":"c493ba4e43f118d629e960e9a51dbbe4aea22beb5fbc6b551fc8180591f7c75080044faaffffbf0576f01026cb944e2ab02af0297aa96f7325b7e24721e878c2","ssdeep":"","tlshash":"193197ee6904cc52e9db3c4926ff0c3b5896c99b0d918abce249ee00045b07c9b95f80","size":1838,"data":"","first_seen":"2026-10-13T16:02:14.704107Z","last_seen":"2026-10-13T16:12:52.487957Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"36e4141fc852dab6e49aeaa80fb299ba","sha1":"331ebd46d5a53ea0c72661d9422176d76cebeba3","sha256":"e2687344a526a2a25864e0dd8732758493774990544e6a5b2009fd0a809e29c0","sha512":"15958c05579aac5ddd9fbe3563b0bde7fa7d30d33c3e1ba93619f007080c9b6e9f0d42966eea7f95f76727651b209445073d09342f60724fc248e281bd437174","ssdeep":"","tlshash":"e7800470c0405c15c03140731434130d017d400d0000071053505744501110f5505ddd","size":34,"data":"","first_seen":"2023-12-29T21:14:23Z","last_seen":"2026-10-13T20:11:57.539173Z","times_seen":3097,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b52db5ae32163e5735afc2c5bc69e2a0","sha1":"671dc9c9eae2fc5b4b527cd187a6d01dd709e3ed","sha256":"54cf3d31b6c9e7dc7401a0d766eb6a40c6f95170566a73ecd31f8aea57243012","sha512":"9da251dbd2224d9a74080b32c67660845215e211ecf585e437ff79e23897f38e9e79ab8afa26bceec0d13c704b50cc3969f7dc4871cba51d1ae32c3cd1ab5451","ssdeep":"","tlshash":"fb41a9526c15dd09e7d6be0919ff3c3c50c8cba352a1b41ae28ccd15128aa789bf1b20","size":1987,"data":"","first_seen":"2026-10-13T16:02:14.705888Z","last_seen":"2026-10-13T16:12:52.490734Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"95dc03dabb01295de0ea49bb5497fc33","sha1":"d5cd19a7236da8a450b527e6aece1223e19e97b8","sha256":"c40a3dc7e7f7eb5851ebf48a703ae858debcaa815878c80ec189b7b611068126","sha512":"ac991edb2e305cbe9e6d3d9bd66c2a58fdbff45107962e11656c194d12fa61ada732920bea41ae8424ed242af3d647ec992dc5a0bdc2342bfbee764a1eba2fb1","ssdeep":"","tlshash":"a1f0af5be80afd213c74cd9e143e5f67a4c4893685302529b29cda8d552093a47d9d94","size":600,"data":"","first_seen":"2026-10-13T16:02:14.707127Z","last_seen":"2026-10-13T16:12:52.491806Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3f55174a06de4cd087a03f86bd3e425","sha1":"9a2507041344243c736a42fda51e7934a38cb132","sha256":"35a55f72c4fc832c8b2a70b60d30e92ed092489bedc9af400eb03b393c0c7ada","sha512":"db6b9d8c3471c02533b5e013073c321c952faaf8f266ba9f0e5e8cc7bc3dac756690c0135cbd0b886465f4183d4b9fc8a0b8ecf3b57174cff36fc41eada2e81d","ssdeep":"1536:7oQOLwPNI/H9d+Pcwi0/S2n91VO67TjAtq86AYnxu:7oQO8bPRVO67otGk","tlshash":"7a832f96f908ec45c6804c0d79ff3d7654aed4a7c0e2cda12dc5da13e1985b5eae2f80","size":83050,"data":"","first_seen":"2026-10-13T16:12:52.493063Z","last_seen":"2026-10-13T16:12:52.493063Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/178a4ynnpox30.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"31e940b8885837b8067becb13aeae3cc","sha1":"2e87847a922aa878e3b89ada9055d1a501622ba0","sha256":"2d2cc0cde1fd3ba3992919e6fb97fa3f31b129fa13f57839bd0cd08ba6601593","sha512":"a7b8f74e17ba95c742727adcb3907ef14df62cbc241be98968f751266eff633feb2782ecf3baa45d93c514b4f36516e580844f1f179c5ef338f37f6f7198f0be","ssdeep":"3072:JiabPWocZ2mXOOQd4gzMdY7Y7Wy0CwGOB:JiabPWocZnXOOQGgAdX7LwGOB","tlshash":"38d3e6f935d1f482076b50aac03f0006f22c4d77189e6860e3e5edda756465de2b3faa","size":137472,"data":"","first_seen":"2026-03-25T05:30:59.068842Z","last_seen":"2026-10-13T16:12:52.401823Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0i.l9589uvx0j.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c982aaf9931256dfe2108595a389574","sha1":"4d38e8269a118fa3dd23e80a150d832c889be978","sha256":"32e9576b2b87cbc03075cbfde10797120b73b5c6e486723cd9e58a66d99c585d","sha512":"396749247a899dd4f29ef98a6d0bd622b3fa08d5909f76535c778a3befb72b9a325ad137f45f224ea59f9b02acfea1850d416bd24a27d89f321acf9f2e029756","ssdeep":"768:ChBJUWstOo8LEImqD9nhKFuvCDFZMQqi/mV:ChHJNEIZNieV","tlshash":"6433d9b53295faa302db91d9c0370012f2780d71309d64b4b394d8af799dd8a92f6f6a","size":54763,"data":"","first_seen":"2026-03-25T05:30:59.063144Z","last_seen":"2026-10-13T20:38:36.039302Z","times_seen":5170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/187jubqbbak9g.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5f608247527c0a4e4082b96c1d7708a","sha1":"7584d7f99b182fd11a924f3272f8d191300f2b32","sha256":"2bb6b56afffc96f7cb037cac0f2db505222c5dcd74aef693a6bf3ae99add7c41","sha512":"44e648ab0d87f298eb13689a1363f32b29efc1b95a7d78b57eb87ceee3f9bece8aa3b32975d78a4af3f5bf923f1c848db8520d2ba35d20d4d5593fe513c1b360","ssdeep":"384:lt/PMbqZ8w1SMaFWSiE1Ff8IiUrGbUKWb7qhitiA/MXdjzq/Kp:XZ8wcrrGHWb7q5EKp","tlshash":"3ac2a635694705be2aeed3d7e05ceb95cd391602e0198b0ce3878f319748be8528bb1d","size":26522,"data":"","first_seen":"2026-05-18T15:42:31.944521Z","last_seen":"2026-10-13T16:12:52.249162Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/17nd.qxyb_u01.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"380935e2ef39114b87e64c792c96284b","sha1":"b99b26ba194a432e98b328e1b4f4bf17f9e2cc81","sha256":"64675e169eedf66e3a2168f32ba8058a5f5fa7a084a997e3d2f1c437e9805960","sha512":"22e0e67aa2c596c02228baf5a8d6ef2865357ccc8a38c0fb00a717c9d8d02dfd5e3dc9032b6c9b7ac623ba0729237d8082ae2a423518536811c64346790dd7f2","ssdeep":"768:WXeVVCTlsgHz/Y0Hd+7yEvdQ55blaFd10QTsNAoL797J+GUx2mmEaJEi:WurC3YBveNaVyR797ANi","tlshash":"3a135644b155efecbe2615d4655ec40ca11e7b8cce1ecc68b9f838131d86ae0ba53b89","size":45250,"data":"","first_seen":"2026-10-13T16:02:14.527111Z","last_seen":"2026-10-13T16:12:52.381936Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0qj-bpzd~-r.p.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ead45f0906376fc23d57b1289a7f93c","sha1":"be486575efe7beecc77932c5d1ce09947b73101a","sha256":"38f4aae3f9bf688513971b2927efbe2a2e9476f2ee6e60c8c674044614db61ff","sha512":"4411520b05c4d650c16cbc01a5d50d5326340893fce6918fbe86fa012b633aa79708440929d2dda95233c19db5a93c3a9d7fa85fab34a76de4e53580ef8218b7","ssdeep":"768:M0V8vg1hNgqOW+Gy8Q33F7GwamoUL8/U541sXhBEqV7l:M0V8vg1kqOW+pj33F71amN8D1qV7l","tlshash":"a7030ac5b321606243d7919380b50103f329a999580a445cbb7ceefba97cec9b1f6f76","size":41127,"data":"","first_seen":"2026-05-06T08:50:00.494723Z","last_seen":"2026-10-13T16:12:52.246742Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/021tai9b7yop8.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"393f3f408bf379224fee2bad31e3eecb","sha1":"6372cf20c12bf9d853d8751a6c4230e6e4420194","sha256":"63b4c7e0eb55d4ec4f00bc09ef33cd75c7ad7f9db54a8a85d35694f66369ee39","sha512":"b272dce3f0a899381da9a6970115a3e71994500f34887e3409dab09ed7aaae42a1fae3eb5e429f0a674e172cf7c445cbebd5cf1a7868e19ee52dae34542f3b9c","ssdeep":"3072:adKhQD3Dw9ejhPxWH6nluxNlxLgaXWPCIUwBWtgWfjw:GKWD3D7PxWH6nlANltWPqacRfs","tlshash":"3214d745b2517a9ceb5e0489906fc10c762f3a8c8c0e883c79bc6ce62d555d076a7ffa","size":204989,"data":"","first_seen":"2026-10-13T16:02:14.530492Z","last_seen":"2026-10-13T16:12:52.222886Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"frxchat.site/widget.js","fqdn":"frxchat.site","domain":"frxchat.site","tld":"site"},"ip":{"addr":"104.21.2.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"598e21d6b73171ace8db8944de614ffe","sha1":"862a18d5dc4e84d92b21c362457dc14f967a0ba6","sha256":"d9a1183d605bef46cfd89feea9215b32d26f1c1485dc9da0e88247142bd12124","sha512":"bc9957f9bab9c973fa9fe5b982e8939b89d9fa740327afe7916bd20a261d4e719b32ede812ce2c91206f03479c9a4e7355b1e39622065a16fbeb2d7255e31ccc","ssdeep":"1536:xvoXNhHc893q9Y6+YUr/CXTcIeICSZgeTu/1qrAUa10rj62l62yyi8j6:xv6Y89a9Y6+YUr/aTcIeIJZgf/UAUe2u","tlshash":"1b634b90715c7138e42fa2d071b94e1df23a3695b487b2e0e26eac3922d5ad47163fdc","size":70510,"data":"","first_seen":"2026-10-13T16:12:52.263654Z","last_seen":"2026-10-13T16:12:52.263654Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/128aahewwf1we.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf874073eb2aecb3adb7c02079ba562b","sha1":"132f56b2fefe447e23f415b744b559997314b6f9","sha256":"db8151a57f0e61d9b7250ac30ae666c7067912a7268943a7fa0fa65732bd5dd7","sha512":"61ecc0a1cd960e31d240bd169e85f7718b055c8cb4ce81bcf5d2e7af9adcdbd9e9a7773aec0f300270255c0c66922b6790d36adf9a4fb2d695bef3128cbf838b","ssdeep":"768:MS6Dia4/coVPkpc/s+zYXExp7ly1V0U4v:MS6DiZ/coVqnY","tlshash":"bb13e7b132d4faa3539341e0e43f2016f2780d7520ad6470a7e89c9b754d88da6fefa5","size":44491,"data":"","first_seen":"2026-03-25T05:30:59.093629Z","last_seen":"2026-10-13T20:23:23.810334Z","times_seen":2434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/04z1b0hjxkk_c.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7776248093179ed40b42120ab3c78e92","sha1":"1fe1693882eaebb2acde19b14ff1ce413d8371cd","sha256":"535765e75234b2d856d6f4abd30ac23c906b7952361f0eb1bd5c00ff7ca72804","sha512":"83113af9495d02aa7df54ce2744b75813a15a92410acd94606061ac9616a52a293e71eab873443c69859c65212d47715251bc7dcc3ac84a480a071e8a4cc1758","ssdeep":"1536:7MSaMhi0kSqpRrbQWQ307WuKiPIgJMJZYSRlzMpC:7MSamC/bQRjqIgiZ/RlIpC","tlshash":"91a339a1b295b89d5b2b1584502f800ca67f6e6c480d8c24bffcac751e34c56b5b3f5e","size":100863,"data":"","first_seen":"2026-10-13T16:02:14.566242Z","last_seen":"2026-10-13T16:12:52.319049Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"9440dfc8983de4cbf474e30d7e0d975b","sha1":"6f8d54ef5ecd3087e863147221fcb32f7f230cdf","sha256":"b523f8870af4f2c738175c22cc5cdd8ab956401b1352e8e52735c94bb81fa4a6","sha512":"2300d39e39d615ef228c00b7655f43ef6fe8f07c1bf8e45318246170272efad920da14a7931baf423ea428a4f55d47b32df67ceae53da5ac7438ff2cb456c931","ssdeep":"1536:7oQOLwPNMZxWNfP8M9E/RpkP1VO67ZRAtn86AYnxY:7oQO89PLVO673tG+","tlshash":"59832f96f908ec45c6804c0d79ff3d7654aed4a7c0e2cea12dc5da13e1985b5eae2f80","size":83053,"data":"","first_seen":"2026-10-13T16:12:52.49556Z","last_seen":"2026-10-13T16:12:52.49556Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0eet8~56asqss.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b332e938d882e2b5e994803cd6a4e5f","sha1":"909a4964f36a9b81f6d0f16798cde4db95fe3d1f","sha256":"66b1e9c387a16c29f5872d90e1ebf919e7566ed82a5d2390c767e21a0dfafe10","sha512":"2a1ef557168b072dda84dc0374ec99cb243c6d0dfac8ee874be4058dc7676e3d33cbf50917c71609682da7366bd09ec61080dab13e1b5a1df0f8e4521fc29689","ssdeep":"192:Nplga0M+1ksGvAj2ObGehS1AkKaX33hl5+M0jWvdlebPGSfYMg9/3zkzXQMR:N/J01ksGvVaGeyX331T0ylY5fYDAUMR","tlshash":"3312f9e976c6f872439a4095503b814bf7692e72240e9080d7e99cda3534e4e81f2f9e","size":9825,"data":"","first_seen":"2026-10-13T16:02:14.439273Z","last_seen":"2026-10-13T16:12:52.366467Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/05-~33cr6_165.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d24045503121ce5750286cee82c258e","sha1":"2ec7f3ec2a9272ba5e57ac07349fbffd1c89ba91","sha256":"6d7e7ca28542acb904c0d3e34d11f2157546600e17a4a2d910191626db6f1f01","sha512":"d9b70a6c6d3e073e26534789caf8865b680c503cd29af3f2e6aa1a5245e83f88e155589e005a70aabf95a285ff451774db019a97d849999336aff6a5606f4151","ssdeep":"768:8ODbiF3wIA1hggUAgI6SUk2Qq1UK0iUBk7d:8OyF3wIi1yfSUk2QDK0iUG","tlshash":"1b035115a699adacfa2d0c94412fc00c7b2f2e5c9c4e8824babcbc951d1c6d47257fed","size":39841,"data":"","first_seen":"2026-10-13T16:02:14.434507Z","last_seen":"2026-10-13T16:12:52.310523Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0k0vihbgxlux4.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ad0f00c3d0d32516aed0d34234aef17","sha1":"3cb37c52cbb84beb1b826d2426fdc751dc5d68b9","sha256":"63db5dba23a84aa3b173d276d56fbefb8229d00846ceb360dae559290f4b377b","sha512":"658735b7446cd034e4f664f9cf2d67a97d105a4dadee15afc47505dc6a4cf4505d1fd8f571f199f67175c6b6b370b0115b8e3c8a6ad6f5331b9a6f2035ca3ad0","ssdeep":"","tlshash":"c3d097a83002fc941d8030c881b34a5a303928bc028e3026e1fe6c211534f1ea0a025f","size":254,"data":"","first_seen":"2026-10-13T16:02:14.519445Z","last_seen":"2026-10-13T16:12:52.3766Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/turbopack-0ac-0dsb__677.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"16053cbf9683d6a4c7d9459940c2d9b5","sha1":"330d66e74aeb48b07a8c53fc48d6a7b38742014b","sha256":"cafbcaa83753d9f7bc45744fad0316ceb3e0104981184d5ab942a4424fe5cd74","sha512":"dc48eeab7df341a228cfdc7505354d8dc3e01b35e3d791023ae6f7806dd7387a866119c08cf0b3c20118a8c19c8dd42b5991fea018e339f077d418b5db2c1eab","ssdeep":"192:o4gM6B68gEsg6d2hE7oGkldTTN/8S3sBT4fCT3cXX6PpH2:o4gM6VLskl/0ssqCTM7","tlshash":"7d22b6da33a6f07343af94eb906f4004f17984a9145d141cd3aca8eb2c395aa85e7f76","size":10614,"data":"","first_seen":"2026-10-13T16:02:14.509162Z","last_seen":"2026-10-13T16:12:52.272248Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0gbhykt4izba9.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ee68bb88baa796209a61831a810f15d","sha1":"8c165914ec7c045eb0a68366e2c3a0cf5dd89f80","sha256":"27ed800d1849ac7699f810d8a2d17dcdbb917fcb33ae7fa66572aaf7ac227a02","sha512":"f6996d150be21f0560a088df32765449ef7d9ba5fad042d3598735891a84ed27aa48be64015fb9b7f4c9830dc3902fc91ce3960ce17a84efe32a3b0d02db23b8","ssdeep":"768:sOfRbx1DyMj8pM8NFc3vYQzJAB6+cabS1wZOz06qrgzUAursa:9fj1Dr8//QYQtAB6+cabSTz0Hk4Hrsa","tlshash":"65131a14f115bdb99f9e41d8402fc40c757d694e580d4820fbf9ecbe2869980b1abfab","size":42603,"data":"","first_seen":"2026-10-13T16:02:14.43253Z","last_seen":"2026-10-13T16:12:52.231977Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0.c-hfvt96sq3.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ea8d274fa4e1a6c4edc61eedb1eeecb","sha1":"1a20999ad5059ced8328f97413bfd82df11fafa3","sha256":"16ad4df1c754713c2a1751f67ce5e885960a067f4523bf42ccfdc1c4c0fbd93c","sha512":"499b9e8cc24bbb73ee22d67dadcd7068babb8fbc522b133a28fec42dc30c5e11507df47ac32d27cfb9baf662018e8fa372e2b8b2415917dbae741268666558c8","ssdeep":"96:JdZWAtjmup/QpLt6vVckhfDZ52GCOdvA/1KA5Fi/QG+447zQOHKsOLqjiokW5AVJ:JdZWAtquSJcvWeDZrvUKWxxvQlsOs/07","tlshash":"e3e1c711b395f9987a6a04d8802f910c373f5e5d860e85397bf86cb53d3a28475a3fac","size":7093,"data":"","first_seen":"2026-10-13T16:02:14.479478Z","last_seen":"2026-10-13T16:12:52.40925Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0gmoggs02qpg6.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2fdac886fd59cba48e77f64c43df871","sha1":"8dd6f0dd90da40c6e89272442ecf9a6e5026168d","sha256":"9dcf5ad360b1c18a7b80b4910e585ede52a539f6fc8bc72e5ded357ee9a7910a","sha512":"67841a933f40dfa9bdbf72f15a3ae32551634a2e6740e97aff3401f6bfdcf2824490cb4b2cec4a1a5cd4a458c6ecae086119f30db328b2e8b7a0c70b88427f6b","ssdeep":"768:RIzhHJNPkOsCH71yZ8ATNTOYlTvLmHXG3v5aCEJG5LqKaBtl5N269Bx3jpIYYsHF:RIzhHJNPkOsMI9Tthp3v5aCE/v5RzHeU","tlshash":"7103b561a28672360e4343d9542903096fbe78b4678c541fb76c5ed72d22c8a4bbdff2","size":41160,"data":"","first_seen":"2026-08-14T22:59:23.870456Z","last_seen":"2026-10-13T16:12:52.343508Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0d_xkp6sugfpq.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"200139263d1201f94597cc9a7e5d775e","sha1":"d395200601b6bb4cfe8d010b1b6867f6767cda03","sha256":"7f7fc19dd14dfe29b99fa5f831b9e688f445cb6ca6fe980399cb014e96ad49f4","sha512":"eb1fca5df9b61b6f051ac646637705c9d349bc27270c3fde1914c124f762beda26bfc49a858a482cbf812be5508e8766b24129da403d4a9f9ab30495c2c3fb56","ssdeep":"768:JD6X1QL2CAZWBrDYMiBKdk+qola/LagDTAAQGLr6fZ/lndvfP:JsdDoHriBKdkX/GgDT4Gf+LndvfP","tlshash":"5c1309b572617822c78b5095c4ef4e05e23e5de92406487cb3bd9ccb286094d61ebf7e","size":44406,"data":"","first_seen":"2026-10-13T16:02:14.545726Z","last_seen":"2026-10-13T16:12:52.177853Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0zfai8bmc40xb.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2dff1338246397b0e034da0016698c1a","sha1":"e1be3741d0aebd0783c94dd8e12f669c1917355a","sha256":"198f67d23375692d2a931b328d3b6b20c4a86258b7e633032a67847b5cd592f2","sha512":"7f1c2ddb2dcdb9d1408b001a745faa6d36dafaf8fc271c21568752938eb6f5b8c70cd8329e637ae1d6392b6b933b0750907f840f2b0689ca022d02273c206359","ssdeep":"","tlshash":"0a815428a545adecbf5e5e8c3627640ce72f274846de1934bab84cf0653439132a2fdd","size":3983,"data":"","first_seen":"2026-10-13T16:02:14.459451Z","last_seen":"2026-10-13T16:12:52.403825Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b623109e603514b398672136ce822312","sha1":"a04a0a396d2c8c2085c7d3278a0522d2d8ded49d","sha256":"5d6319a93090a64b8f9119db519ab11d3fd395f464b335c99c03d6d435707eaa","sha512":"d506af9750cf8fadd71cc670bc7d6717040f27dc0be82a882f002b8f63261fac26c7f1a7c4d2ab132f0bbc0d6db302c26541835c8682251118f37f32410f27e2","ssdeep":"96:Zyh90ZXEJ2ooByzz7V0XZc+0rgc5a+l+ie7VpG73E+czLW4pFbe:Mh9kXElz7VUZHUgc5a+l+zxkNGhe","tlshash":"548100a90593a116179335216bbb120db4b65b636448e800bc1da6e07fb8f56c1faff8","size":4163,"data":"","first_seen":"2026-06-06T22:39:25.409127Z","last_seen":"2026-10-13T16:12:52.497494Z","times_seen":461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0w4sob8x5xfd-.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c2ee82e0e001c9a7005d6b6be2c350a","sha1":"ea636a6784ee74ff14d76492e8e45b5dd7a3b371","sha256":"d8904ec9e3969eb601840fa9df30afa130f43943cb471c4d27f382633f6820f3","sha512":"b7ea9e3356f7b4a6b41c826d145fc94922632513c94c0aaec41a9a183696713025673744e31a28829fa5fcac14b1a6be89a3fda0964dccb05dd3dc7f23e7d4fe","ssdeep":"384:q4RBjxykEleEpSvvNdRxijUvqf8J6rtgG4ud8QW9Useice4rp17efYjYveC1SW3B:q4R1xy3lA9dijUvGP7efq5CN3LeBDI","tlshash":"45d2a5a971d5f4910b9354b5803f500bf23e0d76286da0a4a3f2ddeab9b054ed133f9a","size":30902,"data":"","first_seen":"2026-10-13T16:02:14.486593Z","last_seen":"2026-10-13T16:12:52.211121Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/030lje4w49skv.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b00bc627c2134768a87766efc16b8a49","sha1":"d6b8619501c82e73e77e22e80ef84eb9b20bc282","sha256":"400cdd5a2b42d02de4bb6029747fcb905a320bac0f496c3942528e146a025fa1","sha512":"4faece58f97425bf00bdde0e0a4bf39bfa0fedac9660191b8e3bc2bdbc4c607d81359a842791d479c2e98a7d4e963079d6fd10bafc78b629f7f429400445d416","ssdeep":"3072:f1Jtr3M4rF8Og/7NqDIQtrcRlazbJ8JcQHGXX5MubGvngKctS5:f1JtzxrF8OgT5QLQGnRivngKctS5","tlshash":"a424fbe83955f662aab302b710af1803733c252b280d4d60a251fd9db57845fb17bf9e","size":226465,"data":"","first_seen":"2026-04-22T03:17:22.792402Z","last_seen":"2026-10-13T16:12:52.236908Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"affe18ce239b081c1bb9f4f9143686cb","sha1":"5ba9988d2330a23688731e3a92271d80cedb27be","sha256":"ccfabb7b8c1c871ce9b73217a1797577af4ca36ca4b680a12149c6b8db499a8a","sha512":"40976e2b5538a0bfdb5a75a733ae9009defb32f9e07cb907b84a449fd0f42e5bd55e36db17657b18afed008cdea8f53bcdcddfdd8003a54ffb98020e3283f498","ssdeep":"","tlshash":"34d0c93d3145a2355cab1dfff4a8ef943e363220a60b9950c04e8c811a75d9a9951f98","size":221,"data":"","first_seen":"2026-07-14T22:02:35.444339Z","last_seen":"2026-10-13T16:12:52.498859Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0d_xkp6sugfpq.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.162Z","timestamp":1791907856162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0d_xkp6sugfpq.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-ad76\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44406,"size_decoded":18493,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44406), with no line terminators","md5":"200139263d1201f94597cc9a7e5d775e","sha1":"d395200601b6bb4cfe8d010b1b6867f6767cda03","sha256":"7f7fc19dd14dfe29b99fa5f831b9e688f445cb6ca6fe980399cb014e96ad49f4","sha512":"eb1fca5df9b61b6f051ac646637705c9d349bc27270c3fde1914c124f762beda26bfc49a858a482cbf812be5508e8766b24129da403d4a9f9ab30495c2c3fb56","ssdeep":"768:JD6X1QL2CAZWBrDYMiBKdk+qola/LagDTAAQGLr6fZ/lndvfP:JsdDoHriBKdkX/GgDT4Gf+LndvfP","tlshash":"5c1309b572617822c78b5095c4ef4e05e23e5de92406487cb3bd9ccb286094d61ebf7e","first_seen":"2026-10-13T16:02:14.545726Z","last_seen":"2026-10-13T16:12:52.177853Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/footer/gambleaware.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.201Z","timestamp":1791907856201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/footer/gambleaware.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 31055\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"ff98f02210f7ed9138b4a6e19902d513\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:24 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326186\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KPK6YaLZHeOO52KJdYSwufZC41nPE0sVQX73ms3%2Bnz%2F91awCugz4V%2Fa0CaomyFuMCdTqj7WgGGsOmsk8xUNZ3XMPYdTBDxvhYsa44UQzjOkMmIvqFQUxjGXUqYiJkZa9fY9b7YImtgJSO7VO\"}]}\r\ncf-ray: a49f9e053b320b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31055,"size_decoded":31773,"mime_type":"image/png","magic":"PNG image data, 446 x 66, 8-bit/color RGBA, non-interlaced","md5":"ff98f02210f7ed9138b4a6e19902d513","sha1":"d6def78ae6dfe835db6760279d600325406051cc","sha256":"aa0f796afb693390445b01a9372983332e1b4258f6d742eb296ae1b24c0ccc6b","sha512":"3a40357fd8dbbb0365cca0d65d2e1d3e4f988821492ca1de9dad8e33e97d7a77858db6895adf5494f20e4512914f8723c584ef7277aab6b9eb7b872def8643ae","ssdeep":"768:LPzIpK4C/QbuUlisS8hvHJywf929BrjkK1dQGZi9g:LPzItEIuUliLWvpr2brdXH","tlshash":"71d202783b92fec4ad1cec3212781eb7b9746a89ac89f00e6bd540b4c3d91417e0f661","first_seen":"2025-11-02T17:43:05.046814Z","last_seen":"2026-10-13T16:12:52.179444Z","times_seen":16,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/redesign/megaphone.svg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.387Z","timestamp":1791907856387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/redesign/megaphone.svg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LN75gUtXExePQg%2B8PyJOBz380lSnExH3cqc7qVzpzSIOG%2FHMQWm2kVo%2BD2B02OjnNHHqHcVtCwx8h%2ByySSa183XNyESSa%2F22VY7ivLK5NuQU993Bj60vIGKVHi%2F8TfHh%2Bxv7Sx3RAxZDePpQ\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\netag: W/\"c08799dec60d0ad79f9dbc0c12cf4623\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e066c5c0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2112,"size_decoded":1804,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c08799dec60d0ad79f9dbc0c12cf4623","sha1":"16aee95fe6c5291fc7519cad39fb78b1f34f9f94","sha256":"437cf44797f507f072e925d6748a452e35c4a7c9afc80c574e8959305ede3c0e","sha512":"ebc815f0349cd6b05fa3831e82485f96e6ff0e3c10b0ab80bab404f67731540d3ee85e80ce5ef9b0cae515323496dc219304704112416db4209441cb6b107f90","ssdeep":"","tlshash":"2e4141e9c3ec18d0604d2724fa61550a626c68f02fe15cc152b5d8b68d66b99f7ccbc4","first_seen":"2026-02-20T16:45:36.798335Z","last_seen":"2026-10-13T16:12:52.180136Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/category/populer-oyunlar?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.238Z","timestamp":1791907858238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /slot/category/populer-oyunlar?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":308,"size_decoded":789,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (307)","md5":"c0f546f4eb072f7345d1277794f3356f","sha1":"1f094a21624607226bbc367a0f65a8f9aeee7775","sha256":"dcc5c69cb9e136e97b87ae23cc29b78188d1f8ccb31f8987cb9139528c0c02b7","sha512":"5582ba44c91fcc535d9c59262ea305970d4a1c7095af4c1277d633a199cdb7b55b7020ccaac84f53930eceb2f408254ff69c36e2b6bc2fde40e1e2f77773d74d","ssdeep":"","tlshash":"1fe0862b920429b31cbb00c4803ed84b690e163b52ee1cf080941f3527e317a55572e2","first_seen":"2026-10-13T16:02:14.524654Z","last_seen":"2026-10-13T16:12:52.180734Z","times_seen":2,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/33290-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.550Z","timestamp":1791907852550,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/33290-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1758057\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"2463ff233640fa0583cb746d47a70eb9\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:38 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NmAtmBlG8H4QfJ8n6BObqfLUYk8h658WJfRJT48y203oEwRczbUtg4gsiPoOkLQ4zM6N6FwtLDvr6OGuYhTQIRfwZ0uIDqcwnhqPu7297y35ccS%2BiXdolNILZqkmuoqfo8V%2F43pFn5nrxW7W\"}]}\r\ncf-ray: a49f9dee6a150b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/33447.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.441Z","timestamp":1791907856441,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/egt-digital/33447.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 124248\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"58b0dd6d9663d6cd3513979e3eda634e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:29 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GdZiX81dwK%2FaMfz0UYXuR8LtjjvdQkQy9gA8wW84V6pLYf4oQdC4yHtyXSPDmo9xAW%2FcgcShykstMe9Rsn%2FMIQKeExe6zotY0ttIxvYeng%2B7PbjfETNq0%2FvJGx6GdmkDpUFPxXfym0%2B1ynf9\"}]}\r\ncf-ray: a49f9e06bcad0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124248,"size_decoded":124973,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced","md5":"58b0dd6d9663d6cd3513979e3eda634e","sha1":"7f50b53b3d829350c68e1f2b62b056529ed8ca8a","sha256":"1a581b34a49f51f57f780eeeb5975323b1290dfbfff952afb0ecc80d86908e55","sha512":"0d93c20fe0e14330251b37b5391fd0d57c0c13bb8257de55b4f3ff288cbea4ae2164129785039eaa1554ed0b7e5fb1367192aa3572f183c3841069b13d4761ff","ssdeep":"3072:x5+ZargGjPvLEbq0qx1POwxpUz4Dz809LqTWeNdUqdcCGK:r+g0GjPYbq0KOwPDzHqWePU8cCGK","tlshash":"c5c312c0718d40ca50bcb16ca456a3d2865d76e9b59be20e328dc658fe922b174cff1b","first_seen":"2026-09-25T15:32:37.975472Z","last_seen":"2026-10-13T16:12:52.199688Z","times_seen":5,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/banners/23792-7.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.726Z","timestamp":1791907857726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/banners/23792-7.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1403659\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"c3b58fb6b2ad1d4cf046e5049ba7952f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:23 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326188\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YejG0SfzJLanjDZVCLf7Pv9ebWiTNqwRXL1rtj8WLFrbFu0a6ixhJGThhS9vN%2F%2BTqVqqcb4mWrXXdCmy%2FQcP7XtDWTANTCsj8gqfNW%2BNxc6oLlmwhQafXdsuT6ZUm5Q1lB%2FMNspUFkSEoQ61\"}]}\r\ncf-ray: a49f9e0eca7b0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1403659,"size_decoded":1404384,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 3840x1280, components 3","md5":"9cc26880a65c6217e89f8581ec4052f8","sha1":"e881330d473bb33f25b43786d77ce2be33241dc3","sha256":"eb663c37d6e99089a0667c31f4f859092c68fb66c7959daf82a32c4711ae898d","sha512":"6c47fc61390252dcd9ab0df8af22fac619381eebed0feb52153a2087a67a33f1f29bc8bd0b50ef857539e145ba30294b7f18acea2d09ebbe660a1624568317e1","ssdeep":"24576:hfuPsqIGPK9Js8bvsO5s9FaBIqGMwrV4k7oj0qpPsSqt7XOD0o6yBbR:h2sqqtbX5s9FEIqGMwR3qPs9VODP1","tlshash":"e925335447229d28e524bbbff9e9b783236bae63c7e71d008f49a356d30b72cd680505","first_seen":"2026-09-25T15:32:37.976728Z","last_seen":"2026-10-13T16:12:52.200629Z","times_seen":4,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":272,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/provider/egt?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.677Z","timestamp":1791907858677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /slot/provider/egt?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":296,"size_decoded":778,"mime_type":"text/x-component","magic":"ASCII text","md5":"cc105529278681ed92ab6386268cb78f","sha1":"16260ca7931de1e09e0587dce0e123eb57ac7782","sha256":"9af8e6c1b1157c33ab4e35bd7f7f58a4ae3a577f56735faa43270f6e578ac15b","sha512":"b7db86a11d90138c1e7eb718ad148cacd5da8b8ecc45daecf8bbc063e72ecc5b3ee96cff513e3236ec4f0201935e3f1b7425fc38083edb51fbeddf12dbeda310","ssdeep":"","tlshash":"51e08627820415b71cba10c0803ed84ba90e513b12e90cf480a41e3427e317a05432e2","first_seen":"2026-10-13T16:02:14.51031Z","last_seen":"2026-10-13T16:12:52.201366Z","times_seen":2,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T16:10:51.903Z","timestamp":1791907851903,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: __lhash_=7604399a5ca116fdf316a7301488d11d; Max-Age=604800; SameSite=None; Secure; Partitioned;Path=/\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/_next/static/media/2421d155e98c9717-s.p.03rg4xj3orddh.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/5c8bbc89ca099f34-s.p.0vk09kfe5b-gj.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/chunks/0m.f1yt-6hoh2.css\u003e; rel=preload; as=\"style\", \u003c/_next/static/chunks/0kk690al~dpdb.css\u003e; rel=preload; as=\"style\"\r\nx-powered-by: Next.js\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d","quoted":false,"path":"/","max_age":604800,"secure":true,"http_only":false,"same_site":"None","partitioned":true,"raw":"__lhash_=7604399a5ca116fdf316a7301488d11d; Max-Age=604800; SameSite=None; Secure; Partitioned;Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":580399,"size_decoded":57594,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64615), with no line terminators","md5":"556a7fd7120ddf2f3f26243b5a527d08","sha1":"ed6a746acf016a44bfd3286c10a88e39de3e02c8","sha256":"edc852eeaedecc3f2b25ebe6de36b7ec5c70e2687f354c836dcde547cb503a22","sha512":"1eb7ce29cd0e4b877f458166b5fe02f9a95a9c396e01f49fc5346e2ad81ae6608069c445ae6f4e1b7f04db076212982a230b37cecb1a52e49e39ed4a1f6d145e","ssdeep":"6144:6KelG6bCo/FWx5o/lG6bCzYD4sZtt9PLVO6701:i4FAt4","tlshash":"bcc4f3216100e53ad173aac1f2313f2ba5dadb07859588b0efd8da62efe6c35b511dc4","first_seen":"2026-10-13T16:12:52.203093Z","last_seen":"2026-10-13T16:12:52.203093Z","times_seen":1,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/bl/mini.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.789Z","timestamp":1791907852789,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/bl/mini.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 52001\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"432e9834881ee73679313de25d5fc662\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cYqAxVvZKQEcyzNHwnCNPacu37XRn%2Fh9anG0X%2BEqgUo58l9jTS8VLaVsSnoFXexxHKBuqTpcT%2FoP9RFG5YIZctSnuiIh7NWc2bvChcY3wjUQrWX3WpykdRaUif9mKfEhhxttzCSzcKeWNERd\"}]}\r\ncf-ray: a49f9defeb550b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/blog?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:55.509Z","timestamp":1791907855509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /blog?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:55 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":209,"size_decoded":749,"mime_type":"text/x-component","magic":"ASCII text","md5":"075101f80354585e94c1b4b3b7851c29","sha1":"441a7876eb57a95dd8a5c3a8d78c0663057b8e85","sha256":"31804eff6a7feb2aff18eb6c32f0fce1035a41a74d54006788de01fb106784d6","sha512":"8e9246c360583fcc3737ed93329a7c35b9cdaf692b7c17f4e8a0d9f7052203c7b628e15ba886532ca342cfd905e0780a6b4579605df598a7094da657f0d1ff39","ssdeep":"","tlshash":"fbd09e2a520515761caa10d5902de847564e563b12d858f0c0651e2927a717946971a6","first_seen":"2026-10-13T16:02:14.534149Z","last_seen":"2026-10-13T16:12:52.204302Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/22065.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.394Z","timestamp":1791907856394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/22065.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34345\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"9d6ad83358784c7ef52e94a345dcb097\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:36 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vyQqKc3nyNrDDRGgaqEciZjJISJCookpYk4nQ2kQ3igFN6HbxKXGZof5u4%2FE8haUWHtHnaHxIwEwtOdep%2B%2BxRPe4k8%2BF027mLaeUfBM%2BwoK7NKGeJDXUoxxKKEyGXngbtim%2BIKVXo%2BcGMGGV\"}]}\r\ncf-ray: a49f9e067c6c0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34345,"size_decoded":35072,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3","md5":"9d6ad83358784c7ef52e94a345dcb097","sha1":"b0a87d08b231ce08fdfa2d70ec0a71f39e211e5d","sha256":"78a74eb2b6fe23e17928bf6d396d581dbd2744398340999f29175d39100a2199","sha512":"6f1df07ee97ea1c4fc57269a1600d90ee26124d2472be422a2c5e7353d532c2f74ac95bdb50e07ea3727104f60e2d95d1bf3c957f0ae7eef8585696cc14b091b","ssdeep":"768:CV8JsUbNYxP3whGgXqyu2mRiHnf9mhhBW5Wf/LvrlbbRFXCoJ6XghfST1f73pWl:+8JsUbNwP3wYhyqU8W5WnLvrlbb70whz","tlshash":"83f2e144d3639391fcbc597803413691bb27ad5eab566d0fa0098ffb0551a6bcc0c6be","first_seen":"2026-07-14T22:05:39.870607Z","last_seen":"2026-10-13T16:12:52.205069Z","times_seen":6,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/high-wins/64.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.741Z","timestamp":1791907857741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/high-wins/64.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 465980\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"611fec0e547981bde5f688f504f0a645\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e4siq7%2BVAw8gIS2zvk6Rvu5sL%2BsfFtsE90ARuXGWo4onZY6ol6SN2ihzUeFJZS2QYdvlFI3EUQwrttrFYKyI8hfLRrgGETBNmvXRcH211o8prhHcgI%2BAQc%2Bi%2BJowy9x6gMdKIiryJ42ZTiog\"}]}\r\ncf-ray: a49f9e0eda960b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":465980,"size_decoded":466704,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 696x1260, components 3","md5":"611fec0e547981bde5f688f504f0a645","sha1":"76cda99090cd0b9851307a267799ffa4e33c1d36","sha256":"c60a35c3be625ea26a7c7c5f1ca0cbf897bd2997a01e23f22c7f944ef6379493","sha512":"090416205f6003fbbab78cea54a869577b7faa3bba13620808a1c2d430df944a5f9b5e2bd6e05bda7c5c7eaac64c27bdb48b90a7912f0442ddecd5165b436210","ssdeep":"12288:Eh4hcGhmVAydZKP9vUtZi9WCutTpqkT0Uf7Tq:+4ZhYnQ9cm9WCutkDITq","tlshash":"bda423a09bdd058585e6c3e6cfbb4475fae9b68c6f356634c6930248f02c83b1b34967","first_seen":"2024-10-04T10:11:53.276955Z","last_seen":"2026-10-13T16:12:52.205642Z","times_seen":13,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jvrwolveq00dcsx.online/native-images/gt-13463.jpg?v=1788640991395","fqdn":"cdn.jvrwolveq00dcsx.online","domain":"jvrwolveq00dcsx.online","tld":"online"},"ip":{"addr":"104.21.19.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.270Z","timestamp":1791907858270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cfa24eff.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Sep 2026 02:48:16 GMT","end":"Wed, 16 Dec 2026 03:48:11 GMT"},"fingerprint":{"sha1":"DA:EA:9C:15:AA:31:A0:7E:7D:CA:BF:B7:9B:BF:3E:1A:E2:89:75:6E","sha256":"22:04:8E:BF:D0:35:CE:DF:0D:63:40:30:2F:EC:2F:CE:7E:CF:29:5D:8E:37:F6:81:F5:4B:C8:3C:C5:A0:96:76"}}},"request":{"raw":"GET /native-images/gt-13463.jpg?v=1788640991395 HTTP/1.1\r\nHost: cdn.jvrwolveq00dcsx.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49681\r\naccept-ranges: bytes\r\netag: \"a787dde97316a821e8d0ae1fc8022905\"\r\nlast-modified: Sat, 05 Sep 2026 20:43:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NCMCrwzGl0KG75xn9xQ8AKfuYj%2Bb2kN5ePYwkfmLsKv3uCQ22Om6s3GonICmRE%2Fh%2B1xxx5ToO8hglgTa4ijt5t8o3rkq7v1vxysgG2QMoSlsYfWQiAWMjRsErR%2FHnSA%2FZOMGZSey4I94bX4Ggw%3D%3D\"}]}\r\ncf-ray: a49f9e127f4bb4ed-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49681,"size_decoded":50359,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 375x375, components 3","md5":"a787dde97316a821e8d0ae1fc8022905","sha1":"6c8fd1c1be2ef30e1c55fb6c45d7196b68b071a0","sha256":"2a9a7ab7327f0cd8f98e140ffafd8cbe2d83ee27ed958ff5e4a316b480cc9849","sha512":"4094b18fcdac90fe7a6a9ef9cddd099f1f73c1e9122d69a15a5f89608105b38640e27efa9542c25ae3fd9070d64f6fdf4ae913efdb0e6a4c8aa61c4deb4a9473","ssdeep":"768:rw65XdR25Ds+gx6bx/y6sO05IqQf1+Vy/8+e/AW0kdNulGQ+e9s:xVt+Q6bxvP+LxulGreO","tlshash":"7623025fd6eab5c3f8a143a3e25c6e70fb8e57ae284a110509d1b8d852630c11a7517b","first_seen":"2026-10-13T16:12:52.206175Z","last_seen":"2026-10-13T16:12:52.206175Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":46,"dns":49,"connect":0,"send":0,"wait":68,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cdn.jvrwolveq00dcsx.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T16:10:50.491Z","timestamp":1791907850491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:50 GMT\r\ncontent-length: 13602\r\ncache-control: no-cache\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: __js_p_=850,1800,0,0,0; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__js_p_=850,1800,0,0,0; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13602,"size_decoded":13830,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (9177)","md5":"e1f2c4fc9a0d479e448fcb683b5114f1","sha1":"769afc3ec42ca148db0fdd7771a8ba444b21fb7d","sha256":"d0db68a344d1ad23628a7baec8bdbdf58a763073717bd3cf01ebba3d3478e8ef","sha512":"4cd45ae652b39a3f56c0727b5ef83b28af1939c2a3ff1cc0b89b519664e6d5f11683cd518e4154d92bc408366afbf0519fd8818846395da4c5bb1e0279c43fad","ssdeep":"192:8I96MKMSnA/3V3TE1WK4JrdqdGqT//PHvOwyW30WAibgrh9kXElz7VUZHUgc5a+i:mMKvSTw49dePHvdE66Q0lzBst","tlshash":"0c526b782807752a575338a91ebf134d6cb705635598f404bc4c93d46fa8f0689bbdec","first_seen":"2026-03-25T22:18:30.064372Z","last_seen":"2026-10-13T16:12:52.207146Z","times_seen":1566,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":5,"connect":41,"send":0,"wait":41,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/blackjack.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.337Z","timestamp":1791907856337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/blackjack.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 6434\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"ab7fd50cee91b1899c97107135182fb7\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uVeCxOIHF21ono%2BF1ZjmHSAZnJP9aB88fxf9An4OaP2mP6UZTplHfRf2x4SXpAqbuOUa9pWQvJxUUgpUfuohOKuDj4li%2BFsnVg83bjInaG8vL18L13mYb7ngFMEJ6r3bE4I6HXdv2shb91E5\"}]}\r\ncf-ray: a49f9e061bf00b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6434,"size_decoded":7149,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab7fd50cee91b1899c97107135182fb7","sha1":"4717a52cdf531748f18a29b80b0812710cc2ee00","sha256":"f50b9c95ec0686bc0b3cc0ed9f873faf4b8b57c94a62710772a3fa0908fabd4b","sha512":"2c98f229ed8db7b6be7f0ea8ea9c5830d7af747bac131a2af32b4d74ebf114015fef62f5f41e560a6a10ca6eaed77808f6986e33aa84c56b18c0b2fae9a6f8ca","ssdeep":"192:xZ87n8v7qO+sxH+0nULNTdXt+fY5mbz1FQ:xa8OODk5d9sY5gi","tlshash":"c7d19e3f9240df9f39d46c6b8741e9f228b161691f44f247ba9f8601ee498c0273880c","first_seen":"2026-06-23T11:19:31.136193Z","last_seen":"2026-10-13T16:12:52.207935Z","times_seen":8,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/jackpot/major.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.482Z","timestamp":1791907856482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/jackpot/major.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 54398\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"7f11b1f2935774dd1db0df8945b629a2\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2BmiwY4wdDy%2Bqyjg3J%2BXpgsLk6AFZgAI3eOJDD%2Be4KZYyZFlnHVLsdmAbDZRe2bpWOWoOhFJKSLzFSBDSXdHorLwofkoOIC%2Ff7PGHgxIrRzdfQN7A8jQFhk%2Bz%2BJ46HEviSyeVgdxrTrg8lw9\"}]}\r\ncf-ray: a49f9e06fcf20b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54398,"size_decoded":55124,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7f11b1f2935774dd1db0df8945b629a2","sha1":"995df486624236e932fb4ad65d51336657590c79","sha256":"7325edc9b2e994fbd856ebe3fdf6c68358c9f41f07f2f7822c5190521fefa057","sha512":"ce0853b1ef6eaee2a643c61f89898306b6fa9ff98d3e78833073b7e9e347474e8e473030829dbb2ff63a84168539d2fc5e48e48bc86f0f883c5abb663f31b853","ssdeep":"768:7w54c54AY9UI0vJEGJpAQElPmdOuZmRhX+SnoShdEZyg/dF7aMPGi:U54c54AYOZfAplPm/YRhXZoadEdFL+i","tlshash":"a03302e8c4f3932860b483c6dfd27cc56d5fc7b7c67598fb28356a54a345aa8008c5da","first_seen":"2026-07-14T17:30:30.062279Z","last_seen":"2026-10-13T16:12:52.208481Z","times_seen":7,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/payments/Fast_1.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.534Z","timestamp":1791907852534,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/payments/Fast_1.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 8650\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"4db2213b7a04adbfc6afe5036cec8a79\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:46 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=erpLBAv70Y%2Breyw84WcyzHfyMBd69z2wAOBriLsOyj71vU75NQEYB5CszLly81QLuBRac5p70XTNTpssBm8xGQrBVf5TSORcOPjQ67K2F0AQQ7bThVY3CV4NR9SrVicjF0iy5iC7%2FDubTS%2B8\"}]}\r\ncf-ray: a49f9dee59fb0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/poker.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.583Z","timestamp":1791907852583,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/poker.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 4074\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"3bc2bd455ed18b766687178facce5cc9\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHlT2SeV8Uz7gsytQMh8pP10ywFm4nAWpPvDwHf%2FGuVUZPNLstsIKWNrBlZtxidh%2BtFOAH5IRdckFNRBtIqZHJui5IW3n5EIRvmdLaWiC6OGv6xz5SOwi9ONelegcB2FiBULuvVkUeGVyUhm\"}]}\r\ncf-ray: a49f9deeaa480b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/reevo/33917-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.295Z","timestamp":1791907856295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/reevo/33917-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1758572\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"d4fadbbcb2486b0d53a8ba64337ed10d\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:39 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JcrJ4M4x6945VyRfool4Noud3KIBnZ3e%2Bc%2FMILNPG2qqbzNvQzFUKez3Q6vR8hKbv%2BVedNI7OnNXCBwhzTu88u5h%2FYFrc%2BO5wP4UcjI6Le0hZqQB6uwvYAdJsU2iOmpS2wI1fAkfFIYssQ3B\"}]}\r\ncf-ray: a49f9e05dbb50b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1758572,"size_decoded":1759296,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"f96cf50b8f4e239d10e58f6b4f1e5557","sha1":"5b14d01ebb8b20aa4747453776b4f8725062c0de","sha256":"96c1dfbc256a48905742246c14b4a18ca0cb4af69fa7bbee2bd623a06496b942","sha512":"e39a3b37fc0ad3dc8afa54738f2747972fdab78392c27817dfa1bc5a1c79931ce823e1ccaf4207be9fdcdb32da042c51e5e1fca4786973f956021e78e4aec147","ssdeep":"24576:r1wQxcrnv0EZa503LxErMsOEJ5Jv0AuTK4ffk:hJcrvfmaCr+EJ5Jv0AuGh","tlshash":"b825338fd2b09e429520b3b95187671f67acfb516eec25a3a9354e76a0314afc710f03","first_seen":"2026-10-12T18:41:57.274637Z","last_seen":"2026-10-13T16:12:52.209026Z","times_seen":3,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":806,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/site/de-bossoran.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.568Z","timestamp":1791907852568,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/site/de-bossoran.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1049885\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"92aac415c3364470de2f73987876beb5\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:53 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qDwfBlGCWJCMmQ5hNAOkA6LLyk308OQDd%2BX%2Bn6v3xk7EMEVwzQk%2F%2B2CMwmKNogRq9Yf0fquDMfEij6mHVwNzo5aeKDh7cX06HnZk7UG%2FlAXyYD1z5ki%2BieeAx9022EyIbxH%2FNvl0Htna63zu\"}]}\r\ncf-ray: a49f9dee8a300b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/9585-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.847Z","timestamp":1791907852847,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/9585-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/sportsbook/em?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:59.064Z","timestamp":1791907859064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /sportsbook/em?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:59 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":254,"size_decoded":767,"mime_type":"text/x-component","magic":"ASCII text","md5":"7b1e11d6c9e601dce1b9589757f31132","sha1":"43626405a60b76f27b959c00069fba40a613665b","sha256":"69069b17422d9c17994f02a88c20c53f2468904cc88251414baad8e397fc33df","sha512":"a8a78d3fb95e9b8a0125af9417dc8c0ab5ed26e5cd9406bb7709c2d7e15adeed849afd710364f0c20284e78007d1500feb5586cc02d8d02a42d3df0a49012946","ssdeep":"","tlshash":"12d05b27534415b61cbe10d0403de847aa4e553f22ed5cf080541f3927e727546a31f7","first_seen":"2026-10-13T16:12:52.209922Z","last_seen":"2026-10-13T16:12:52.209922Z","times_seen":1,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0w4sob8x5xfd-.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.144Z","timestamp":1791907856144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0w4sob8x5xfd-.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-78b6\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30902,"size_decoded":10051,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30902), with no line terminators","md5":"7c2ee82e0e001c9a7005d6b6be2c350a","sha1":"ea636a6784ee74ff14d76492e8e45b5dd7a3b371","sha256":"d8904ec9e3969eb601840fa9df30afa130f43943cb471c4d27f382633f6820f3","sha512":"b7ea9e3356f7b4a6b41c826d145fc94922632513c94c0aaec41a9a183696713025673744e31a28829fa5fcac14b1a6be89a3fda0964dccb05dd3dc7f23e7d4fe","ssdeep":"384:q4RBjxykEleEpSvvNdRxijUvqf8J6rtgG4ud8QW9Useice4rp17efYjYveC1SW3B:q4R1xy3lA9dijUvGP7efq5CN3LeBDI","tlshash":"45d2a5a971d5f4910b9354b5803f500bf23e0d76286da0a4a3f2ddeab9b054ed133f9a","first_seen":"2026-10-13T16:02:14.486593Z","last_seen":"2026-10-13T16:12:52.211121Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/payments/manyqr.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.281Z","timestamp":1791907856281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/payments/manyqr.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 85860\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"2956511d03bc782f161233299f4f3339\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:46 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2wpj6BZBZaCWq7UjbdIx2VQfy%2FBuFdfTooSSt8DQHcvt0uDKMHLGAFIJDNvHdCjywlbDxxlFMbtbN0Jw%2B2nhmxYGpasCi%2BlMfpw7eRJQ2yViPNzjJ4%2BWbEwYriz4U5DDuxfkbrBdIHyeTrnk\"}]}\r\ncf-ray: a49f9e05bba40b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85860,"size_decoded":86580,"mime_type":"image/png","magic":"PNG image data, 718 x 150, 8-bit/color RGBA, non-interlaced","md5":"2956511d03bc782f161233299f4f3339","sha1":"d92cc037373abe7a24b295b12f4704e0ba1f027a","sha256":"38405d8235bf79e054de37c6054ee3e993affe4b578ef01d5713bacda811da14","sha512":"68b2933d07c7da63dcaf689e2b3301d5bb7a0ed7cac09cd15746f6f6f25edad5aee63d436c353bd6f3f81a64187722f71a9f715323b7cba9556ce6d741180f52","ssdeep":"1536:Z3qmAEf07z4xS5z2r1GxoBZBx+9AO3QM38OW7aQGId1GNrs0ZIhnr:Z64MISkr1IoBZa7a7anIqB5ZI5","tlshash":"488312b9bebcd2ab1936832b340705913cc9564de3dc561a3efb31067ed5265a43f902","first_seen":"2026-09-19T02:54:18.499146Z","last_seen":"2026-10-13T16:12:52.212253Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/mr_king.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.466Z","timestamp":1791907856466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/mr_king.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 246043\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"72c0afac217b1de705632dc98688af2f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rLSwjXHlwZca4jOPryQyhhQnCzFmvR3cGcn0j408WuK6tOotLb0gbr6oHJM1QNLcpkOPflGM8wbTRkZnXQRpKuB1%2BwkWqjZn4onXoNWDRIO6U7y4urVRPBw7kGvTcbcGOHyRIGL1p0E8WfEl\"}]}\r\ncf-ray: a49f9e06ecdc0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":246043,"size_decoded":246758,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"72c0afac217b1de705632dc98688af2f","sha1":"37e3974bdb7bbbf5fb5bd19663b9504fcd6f8d2c","sha256":"2258535783ed2fa463352a972cb50cd249f2049756909760a2fc709789795cc0","sha512":"fe074bd6acae4246b227c6553d65e0a676bee4c4a770696d1043c6ac2601a6495f8d655d198f707e0fb737c6524d17a41568fe9a3c3729baa2bec313c53cac51","ssdeep":"6144:xOObcouNVu8xkK3Wody54NmkCgwIEliCh4I95KbmN:xOOFuNFaKy5bgwIKiArKbg","tlshash":"833422a2ee4d8bdcced2681b6c245779a4cfb09c0d961c5210b7d68da50ebc25f8df06","first_seen":"2026-07-14T17:30:30.182564Z","last_seen":"2026-10-13T16:12:52.212875Z","times_seen":5,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":283,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/provider/pragmatic-play?_rsc=p37cr","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:59.519Z","timestamp":1791907859519,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /slot/provider/pragmatic-play?_rsc=p37cr HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/payments/guvenlihavale.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.284Z","timestamp":1791907856284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/payments/guvenlihavale.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 24284\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"6d8ed81006f971dcb925f91e97e95d76\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:46 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JFU%2BR51%2FJDzM7zv1g08sTTgURm2WxNxbEjEFeXl%2BQYSwP7PJVVMBlsQbktR6m218xZk%2BYaItzWt4yhceG%2FxCiZAhX%2FN%2FFcKojmw1hVI3S1eS0wVfCBYwWtCiGT%2F%2BP5PUdkEZWQHAj5k0GVRw\"}]}\r\ncf-ray: a49f9e05cba80b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24284,"size_decoded":25014,"mime_type":"image/png","magic":"PNG image data, 718 x 150, 8-bit/color RGBA, non-interlaced","md5":"6d8ed81006f971dcb925f91e97e95d76","sha1":"9edf2eea06cbfa9403e9edeafe868a7122cd5529","sha256":"fbb5bbe8cefa4fa4634b9c4c16f954bac50adf7c02af97a097e66e8008ba10da","sha512":"feb584cce4cabdf814f647bb17b744a4d82b138b49735af469aa02577cb4da24bd5ab02ed5b2afd45f0f0ac957e8924c74102264119ae5154ef2dee9b3ab81d4","ssdeep":"384:vkI3awUT58iYaTAA37K9d2S0mbeHyOpOosrXb/6NE1iLdQndr/xZEc7uZgw:vkI3pG5jY1229d2S0SeSrL/dwqndr/7U","tlshash":"0db2e1e059fd56cd388cc2f24ca28f85673c0b27a1d6ebdc135a6b98691230b5b36303","first_seen":"2026-09-19T02:54:18.518576Z","last_seen":"2026-10-13T16:12:52.213463Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/30692.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.639Z","timestamp":1791907852639,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/30692.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38938\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"f8e2b6dd4df219e0991bfac286b2c4af\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:37 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FhePgEcp4y3kbLAImuxmr9%2BRN7up%2BR1Uz7IgyRZbn7IVpU2J5wBfCd3A9kgiTFl7H5jCsuZaXQpBDK50%2FCV71qgE1QV1x8b%2FS3U3mEoijH4XKxKJVpKm1pernqshsULtkVa0r%2F9A8F6O%2FTf3\"}]}\r\ncf-ray: a49f9deefaa80b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/jackpot/mega.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.793Z","timestamp":1791907852793,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/jackpot/mega.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 88561\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"2b58f165a9a11611429a42236582dfbe\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qaNtOcuXloTy5wjio6gHyFcVZX3%2BNiME%2B4k8y%2B32tETVkjHkQSobgi6cJWTkceS2G5B0fg3ns%2BlXLK5IhrqOc6fOOBBuZLjkgSrJwV7K6X2ppH62hofuCa5xkUgs0hJ84OFWW1vKS8HbjOms\"}]}\r\ncf-ray: a49f9deffb5a0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/provider/egtdigital?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:55.677Z","timestamp":1791907855677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /slot/provider/egtdigital?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:55 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":303,"size_decoded":783,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (302)","md5":"adc7e7144d7baba678717cb4ba71be83","sha1":"480618a768d8a5a69e759d1ad0579b4f4d87ae87","sha256":"c85f74f4a0e43db819ff713d14f2d3a44915a7c6bd4d67933194a9c2f06b663f","sha512":"1a21dafc9a941af91586366c5ae742ca5bb8d2cc2702c8d29bbc3a90ea2a81949117d96e56443bb5cbbfd202f5d4c07df0c341e4c3ce6c011542a2a8bcad7933","ssdeep":"","tlshash":"18e08627820415b31cba10c0803ed84baa0e513b12e91cf080a51f3467e317a06832e2","first_seen":"2026-10-13T16:02:14.512477Z","last_seen":"2026-10-13T16:12:52.214048Z","times_seen":2,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/16362.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.404Z","timestamp":1791907856404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/16362.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 405901\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"bdcee7c90b5af95ae745690e68983e3b\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:35 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326186\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eYvDyXVPvBsJYT4G4M6gFZW7YZt25s88p%2FZGAVpu6Zrd9UzTZSh8rEHPh31o6NWbzwhtUf3bXnjqr%2F4lZcjx3cbnE4BQLP7y66UaF3p7lU67fh5LqXl6bhxPor%2BpqMHBWfp812iwTdBBXVf9\"}]}\r\ncf-ray: a49f9e068c740b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":405901,"size_decoded":406620,"mime_type":"image/gif","magic":"GIF image data, version 89a, 215 x 145","md5":"bdcee7c90b5af95ae745690e68983e3b","sha1":"b75da9f739394ef08421a3905f7f969aa71a9016","sha256":"32b0d5d8065e01a4f1a61f51703e8b685717d5ae50c454a4df35a1e6843d931f","sha512":"b39b882433ca69f07db3f71b999f46d2d711430325386aee6c47762c22248d162f0e933c3cc0d15752dae3c90d9cd0a6167a7d9db3ffc9a6657a49f638e8646f","ssdeep":"12288:kXgeU0o3TJL4rNo0E8RZ58lNgFh3y53IDVE:kYLuCcRZ58Huty5d","tlshash":"7484237db4354b68ea95bcf45a12ba08d83421f49bd0ca3de04a3f0c794944f726d7e9","first_seen":"2025-05-06T03:00:53.705205Z","last_seen":"2026-10-13T16:12:52.214826Z","times_seen":24,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":410,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"frxchat.site/api/widget-config?key=frx_3ad67e97acad4a839b7c4d4498e9d3c70afba26e","fqdn":"frxchat.site","domain":"frxchat.site","tld":"site"},"ip":{"addr":"104.21.2.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.643Z","timestamp":1791907858643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frxchat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 21:12:04 GMT","end":"Wed, 09 Dec 2026 22:12:00 GMT"},"fingerprint":{"sha1":"B8:63:0C:55:52:E6:FD:F8:2B:F1:2D:B7:DF:3C:37:32:FD:23:28:28","sha256":"FE:6B:D9:49:C4:35:8B:CD:96:22:E4:15:55:5C:69:0B:FD:E5:EE:58:9F:12:A8:D5:1C:AF:40:80:17:20:FB:86"}}},"request":{"raw":"GET /api/widget-config?key=frx_3ad67e97acad4a839b7c4d4498e9d3c70afba26e HTTP/1.1\r\nHost: frxchat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nOrigin: https://mrking20056.com\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding, Origin\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\netag: W/\"45-f/tXS0hXYieC2ygbk1IE/6wfA14\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WYyPN7GHynCbb38laxJSsZK09KXlLhyQibTCSQYyRwlfagkrAbY8j6zZdTJNkhCY7xK1llw1UecCRSm47888C8439UkVXPVzBWcDwurrlPc6DG531qA4wvOmSQF6m0k%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: a49f9e149d28120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":69,"size_decoded":1041,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ef79a01279b392fb52446a5fc808a895","sha1":"7ffb574b4857622782db281b935204ffac1f035e","sha256":"5c39d481d27c02893c56e1b003ba244d86aa27dd48865fd23788c5befdc2d1bb","sha512":"bad2662833ed03458c5a1149d270aa4e7a5044c923fabc9ef7666553ab8f74a209fd755e34f51a333f6e15443e0f1cc83e68ada2df046f088aec6318008767ba","ssdeep":"","tlshash":"01a0220c000b3c3e2f02c8aa308cabbb00038ae03022082002088b38088080e8802020","first_seen":"2026-10-13T16:12:52.21542Z","last_seen":"2026-10-13T16:12:52.21542Z","times_seen":1,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":10,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/partners/kingroyal-bonus-1000.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.274Z","timestamp":1791907856274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/partners/kingroyal-bonus-1000.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2440419\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"bcc9e606ada253296f5ec0201b3142ad\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:47 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lUEWEsRK1%2FXib6QzwQ2JWvCOfI0K3CWoxTgpfYJp4kReT8iZ%2FLgtFz%2FFai0UcrYIggixKyfNC2hbospbbf7j3WroVbJh8VKSr69y6gN3dbz4E6Ewupr77TwALcf8oiBaaIvQZqd67%2FvWq%2B87\"}]}\r\ncf-ray: a49f9e05bb960b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2440419,"size_decoded":2441143,"mime_type":"image/gif","magic":"GIF image data, version 89a, 774 x 143","md5":"d0b55baaf417896da58714cae6a6d2fc","sha1":"14051788fa810df5836152aedf2926cd66d25b2d","sha256":"307f5f5547b39ddded9e7e93810b41502f083bf38149bc6a82932d10c375b566","sha512":"9aa3be14bb03f19ed7d3fac8b6737f32c88362a3a6e9915e63dcdf3b8e129989447e93214ef60d5d3825bcf48531fa21ced168fb450767c87ca62a8b9a7b501a","ssdeep":"24576:+QiEUagSRsJLYGanOanFRPfRBH5J1NpN2M4aBQ:+QiERsJLTVanNNWiQ","tlshash":"bb2533ed00f980063c62a47516acf6e44fac9283bb09447eded790fd65b4907e4f9e89","first_seen":"2026-10-12T18:41:57.265209Z","last_seen":"2026-10-13T16:12:52.217217Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1205,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/redesign/telegram.svg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.625Z","timestamp":1791907852625,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/redesign/telegram.svg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QzHkYOlPm7zfTw8OXUDLmEQJYGSpXqCubTRgdwzct9XBZSDLuKDJca4MU619XcOnqwXQAgpsYzM13hT3qzmfcz8gG6aWrVK5MInupcCpeW0DvaqKnOh8YTVC9pfPbHOWmZ2Fod152UR2dv80\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\netag: W/\"8d8d66a0c26fba86dc60ad8043167830\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9deeea8d0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/microgaming/34201-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.544Z","timestamp":1791907852544,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/microgaming/34201-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1043630\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"2618290b62004840c527133e4c13f0cb\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:34 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Wa2GyF3dThQr9FgUvyfV74AWNCYwiibztdYZ%2BDNjPYESO1ilLh%2Bi6uU74jOKijXSQBKPiKGXHhw75kUbEA7egGOvqypB75z7cGw1RwAlKtMtJJqlMXGZJgsR4G02MfnqMgjTMNRdLRwnQaP\"}]}\r\ncf-ray: a49f9dee6a0f0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/million?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:55.671Z","timestamp":1791907855671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /million?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:55 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":212,"size_decoded":751,"mime_type":"text/x-component","magic":"ASCII text","md5":"23205530f43dbba6679c711cb2ad051e","sha1":"721717556828c15864883a84ca58d5bca73fd10a","sha256":"302139d2cb6115ff83d119c9abefb3b451efde911db51832a4fab461d56fc493","sha512":"0802aed33e8e70a733b1a3dafeb019be2c4fc4ec20c50c388dd3d8814e37ec0d4b0de3e21dd27490381a0f4dc62ffdfbe56dedf530e44a00adaa2a3df2b1038b","ssdeep":"","tlshash":"dfd0a92b820428b21cfe10d0803ee80b668e563b22ec5cf0c0642e3937e327947931e3","first_seen":"2026-10-13T16:02:14.586162Z","last_seen":"2026-10-13T16:12:52.217837Z","times_seen":2,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/idnslot/33515-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.293Z","timestamp":1791907856293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/idnslot/33515-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 334320\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"1b1824fcd52cc33fa71bd76a870c8e96\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:33 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qnSzwRXBfUrnMSwKt6omYJxycrolDLJu0S%2FEvEl0tlmS4tNOgeZKLCszkfos4KH7cpzZVBs%2BZq%2B%2Fzs4WMIiYqXWZNcsjSyA6A%2B2hbL503W0WtWgMQWPyq44fF%2BvvyDnR57HxShIJ57bh0rHY\"}]}\r\ncf-ray: a49f9e05dbb30b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":334320,"size_decoded":335045,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"1b1824fcd52cc33fa71bd76a870c8e96","sha1":"bb073d54809ecb4f5d108a47cdc45a4e82538840","sha256":"175709e70ee1a2f69f70370d0670482fe0a73df3a2cdc6d35618b8147f038927","sha512":"1e3f347411bf9e05db5e46923d33d5645735ae8122f540af4ac228b41d2e56bb7e0be3b34322ad80a705f440b9059200447de1a2a335ace383fc26058d5b3925","ssdeep":"6144:lMbT/dxYrY5O7Y7Xb5a85g/mBsuGiVbpxqrfuk8ffKWst92av09L7OugUQH6Gz:aL59dCSUiV9lKTv09ZgUe6k","tlshash":"636422e5f24bc86925945c4e4d37e6378e9de3ca14d5c903a940f0f68bd06b6528ef83","first_seen":"2026-10-12T18:41:57.119269Z","last_seen":"2026-10-13T16:12:52.219017Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/boss.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.463Z","timestamp":1791907856463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/boss.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 28321\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"1d12533de6785a191f90c88e94fe8d55\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FeQsVCGOPXBEfJsoaQruu5bll%2F1zAQpTqNHSMCnXSFSqEuVA%2BiiZzWJ4xEQ02BvuupFn2rw65qSn3q1XA5Mqfj%2BOPEZ%2BSL%2Fcn7ai0fqN1Uu88cSGmlBgLzkQnoJjT%2FmW6vvf5ni1jgEwVyJV\"}]}\r\ncf-ray: a49f9e06ecd50b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28321,"size_decoded":29047,"mime_type":"image/png","magic":"PNG image data, 302 x 154, 8-bit/color RGBA, non-interlaced","md5":"1d12533de6785a191f90c88e94fe8d55","sha1":"7b0c166a265d3e30e92c098d1640e6dd0a47a36e","sha256":"a1b89e558896fa746c3dbc8c9bc297fe4134f8a73e53cc4d5533ba80fde6ba23","sha512":"0adbccb2dd70a5dfe59369babbb3cc0f1f746305ca8119f861b2b51453ddd2aeaddbb2a18d7987daecdd35ab5351bed1b77ba4bf3749f7641d37795826bb976a","ssdeep":"768:xXb6EGpcS0+ouRh0JZEm1w1ymVE8H7X5NArtSV+Clw9SHE:xXbGpj0s6Z7wtVj1gSVkwE","tlshash":"a0d2e1eb5b0b14b7ae0e1df446d20ce49db5671bd81a66ec0c9ed0fcbc12429aac47c5","first_seen":"2024-10-04T10:11:53.23706Z","last_seen":"2026-10-13T16:12:52.219611Z","times_seen":15,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/footer/instagram.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.192Z","timestamp":1791907856192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/footer/instagram.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 27226\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"9d588e7e3781e7eb07ab32f10869302d\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:24 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KTVnq0eHXkl2qemqOeRviveEWJ6Rb2WaZTxOEiKuSbNKnl9VuCvN0Gbk%2F5Us0OS60GFHR10R9YJPwjpsYRSfP0iZIypfZ16S3x703xOVt2z%2BWvIInCWqBAf3YlxViDzr5RDHLmCX56DPY0Ce\"}]}\r\ncf-ray: a49f9e052b270b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27226,"size_decoded":27942,"mime_type":"image/png","magic":"PNG image data, 140 x 200, 8-bit/color RGBA, non-interlaced","md5":"9d588e7e3781e7eb07ab32f10869302d","sha1":"d93aca01bba1186cee266168c7ca7d353dd90013","sha256":"dd7c85422f0b676ff6b8a7cb09188c05daa1c8473950e7dafbc222eadc0bcd1e","sha512":"c9816f79616f162680c58a27730794bda4dfab3a0e1f953da28572866b63486bbc7bf35be4d1a31d2e5eeda4601dc5cfccf03823ca5615ac3deb5b612953bdfb","ssdeep":"768:gkI3pRkxUScFuv78q8Ekz0QFjc8ltCrhT36I:g3QGBFuD8Z3jcqtKN9","tlshash":"1cc2e0f9c514408304664512daac7f267bf2de00f28a6b4e32b6ed884b57ba231d5d9d","first_seen":"2026-07-14T17:30:30.283502Z","last_seen":"2026-10-13T16:12:52.220222Z","times_seen":6,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/banners/23767-13.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.732Z","timestamp":1791907857732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/banners/23767-13.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3248598\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"35ad23d8d62abde36a421265ce5f4250\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:23 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326188\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nn8dnphw0XV%2BcQLFkY2sWB4zpqOL0BAh3NzBwNHyZW2lUqQ%2BSD5SrwXrMh9z4c42vC4qnscDJXmaDl2MHE8chzzx0aaqKKyRXygWxD3ILmUEG9Htlk945f5kqwTLaMBRtCFAB1ieuwlOdg82\"}]}\r\ncf-ray: a49f9e0eda880b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3248598,"size_decoded":3249317,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 3840x1280, components 3","md5":"26914ab6b67d41ee23f401ee3fd595e3","sha1":"3ea87c322ff589267e576c3d79aa64b1ea1a54d4","sha256":"fde18b10335e21baf7a01baccdb481649f34fbffe401131e4789cf201b15a57a","sha512":"a8a505a2f59a2ccf4f60eed593b237906a139013ade2a796d0ea78b53272e0227ddca23a6e8d49d7b0fc3e406fa5962a47cd50ff3ff0998515eaade4926e8d07","ssdeep":"24576:4oO6qwPDDEbxOUU124D0V207jeASF7H4b:FpDwbKNgR7C7w","tlshash":"f325238ecb67da9ae51c873198d70f61ebb9c3f8c187d445a5399a3ec2ab1c026d1190","first_seen":"2026-09-25T15:32:37.82145Z","last_seen":"2026-10-13T16:12:52.220775Z","times_seen":4,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":459,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/api/live-feed?type=all\u0026limit=50","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.786Z","timestamp":1791907857786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /api/live-feed?type=all\u0026limit=50 HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nX-Device-Id: 92ec062d0022be1f\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://cdn.jsdelivr.net;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;img-src 'self' data: blob: https: http:;font-src 'self' https://fonts.gstatic.com data:;connect-src 'self' wss: ws: https:;frame-src 'self' https:;object-src 'none';upgrade-insecure-requests;base-uri 'self';form-action 'self';frame-ancestors 'self';script-src-attr 'none'\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"4680-GRew7elWLx8wfl4pUxtE3MT1Gss\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18048,"size_decoded":4218,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e6bfae897eb8c241b2a87ac68d29cffc","sha1":"1917b0ede9562f1f307e5e29531b44dcc4f51acb","sha256":"b350521eccf22183104210bd5f77511b400e0cf257292dff6fb85254e34480b6","sha512":"6d55145cdd1bc5a462aff8700a3a9506185dbb485338e34e184cfb861889dc7f6d9a920649289db43ffeec69949754e7df93958f10a3b2524f72151a764b6f53","ssdeep":"384:1vI1dOkQF5rGujfsARGWu8ihuxG5r45/rf2Whwmsbu8k/mhijk7lEhH9Xr5QQv+y:1ykfvzTPG7YxGVqrv/mmOhiA7yhBNdvb","tlshash":"9782de6f774aacf5d3f12542694f3dd960dd901f6082ced8f5eeaf2095a8a1006364e3","first_seen":"2026-10-13T16:12:52.221379Z","last_seen":"2026-10-13T16:12:52.221379Z","times_seen":1,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/rulet.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.579Z","timestamp":1791907852579,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/rulet.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 10050\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"e37999775ca29d8e01c9fbe32d0d3d54\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T3YCQYfqG5QWQ%2Fa3RtyKCjrFVBLH237WMGPIYUxTiTM362m63z0KQrVg6F1zcbc0K0vtR1%2FWnPfw1%2F1KUj8IJ3tpqBT5%2FQABhQ6u2c6cGZ%2FmEQqV0%2FsKgcse2PP2dkcIFJUKDetfBcN3H0c2\"}]}\r\ncf-ray: a49f9dee9a430b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/021tai9b7yop8.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.164Z","timestamp":1791907856164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/021tai9b7yop8.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-320bd\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":204989,"size_decoded":70491,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65523), with no line terminators","md5":"393f3f408bf379224fee2bad31e3eecb","sha1":"6372cf20c12bf9d853d8751a6c4230e6e4420194","sha256":"63b4c7e0eb55d4ec4f00bc09ef33cd75c7ad7f9db54a8a85d35694f66369ee39","sha512":"b272dce3f0a899381da9a6970115a3e71994500f34887e3409dab09ed7aaae42a1fae3eb5e429f0a674e172cf7c445cbebd5cf1a7868e19ee52dae34542f3b9c","ssdeep":"3072:adKhQD3Dw9ejhPxWH6nluxNlxLgaXWPCIUwBWtgWfjw:GKWD3D7PxWH6nlANltWPqacRfs","tlshash":"3214d745b2517a9ceb5e0489906fc10c762f3a8c8c0e883c79bc6ce62d555d076a7ffa","first_seen":"2026-10-13T16:02:14.530492Z","last_seen":"2026-10-13T16:12:52.222886Z","times_seen":2,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/pragmatic.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.322Z","timestamp":1791907856322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/pragmatic.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2794\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"c2c54968fd8f4c52df605c2902253c1a\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8D%2Fjpb0R0nxMNmZXAWPR67rp1msQuULpOs%2FXK3jS9Au7kQCJtKNwzyzh%2BkGcmZrRQU8Avm3KD3KwSJNtzJgL6C8hx3gZi7J24NY3%2BwuYouvR7W5LguXeVfssm9Eh6gO1%2FxMtY7Zza1F0%2FqFj\"}]}\r\ncf-ray: a49f9e060bdf0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2794,"size_decoded":3517,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c2c54968fd8f4c52df605c2902253c1a","sha1":"c9baff61bb2471e3b887baac37b28e618a0f45dc","sha256":"5f50c3f1548f6a539046a8e0ec89baba7a3cee396b1624b58c350decc9f50956","sha512":"03a9bdcc2d2ddeab21b9dcda8f8603a9908322b5c22b34d2ac0ad12beb4756af33dce3e43eba26fa550e2649354bdfbafb069c6ec691b9762aae10c7e4517a6a","ssdeep":"","tlshash":"c9514c4f045c1cab7e50d52f232b4f0462e947e938fa953e976f21a4e48296ef121854","first_seen":"2026-06-23T11:19:31.076295Z","last_seen":"2026-10-13T16:12:52.22423Z","times_seen":9,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/cf-fonts/s/titillium-web/5.2.8/latin-ext/400/normal.woff2","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.688Z","timestamp":1791907857688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /cf-fonts/s/titillium-web/5.2.8/latin-ext/400/normal.woff2 HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.kbkrw8839xwdwqe31.com/mk/titillium.css\r\nOrigin: https://mrking20056.com\r\nSec-GPC: 1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 6820\r\netag: \"0180cb3f1ae237fcc059f6730a3cd63d\"\r\nlast-modified: Fri, 09 Oct 2026 21:31:21 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 6011\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AvfEkvRAN0EpFHI7%2F%2BWwK9k8y7VOtuCE4mUVNmyqZ0XWx0MPn0r1yjyKLF2l%2BqIkd9Uh2u%2Bqn3Thl4eLxHMFRKb%2BkN55gl1W6fPGasCQaZHPfUB7h63D0Pqz95zgCuMHgeUGk0Lsy1IULap%2B\"}]}\r\ncf-ray: a49f9e0e8a360b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6820,"size_decoded":7588,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 6820, version 1.0","md5":"0180cb3f1ae237fcc059f6730a3cd63d","sha1":"20bfa9cecf4db5ea4ef45c95e562e17caabf278c","sha256":"ecd15a1dce7380c9d4af38ee3dc9bcc4fcd53101040d88abd7ea98968938120c","sha512":"71840558f94086113782b3b47087b8a8d1ff588783883f4ce23a4b72a3c778671b7c51eecc78f5bf1f9a492762617e77bc06a4b0c2a94645a0cdf1cf0c9a180b","ssdeep":"192:97oC5l1TzmkUX+GamNQwim3ZoM33O/305959Ypw0p4+2nGh8:97oC5HOk1Q+0c3o95apVp4+cGO","tlshash":"6ce19e4ec5074713da38793b103df5d9ca9002572dabe5f1b16ba60621a2d82ac93e0a","first_seen":"2025-06-05T11:25:17.246909Z","last_seen":"2026-10-13T16:12:52.224869Z","times_seen":909,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/mk/app.css","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.311Z","timestamp":1791907852311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /mk/app.css HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxR%2B%2B%2B3p6c%2FE%2BNwMk7nF%2F0UbYtqweyLQCW6VvaaovstJNTbFjfGbWrKg9XkUsDuU6H1xWlhsmnsKqPkRcMWt3OUS5BmzI637Dhylp9Zanh7d9qb%2FF3fZP%2BoKo7iN2%2BfgrQ7hJbDwZqcTZ51Z\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:31:20 GMT\r\netag: W/\"553b64e82a8de58e775623382148dce1\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 976\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9ded29330b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":755587,"size_decoded":131957,"mime_type":"text/css","magic":"ASCII text, with very long lines (65432)","md5":"553b64e82a8de58e775623382148dce1","sha1":"a03ca5600b14ab268fd2cbb1bbdfa36e4b32383b","sha256":"614960703ca2c811095f46daff72d4e5307d1290e7fcdc698bf8f0acf1fdc851","sha512":"5d025edc827636ffc032000567a9b021e1b3192fcc03a191fb6f8fb6b5fbfe8222cb9d41ac05e3835edba58863c78b0bcfed64d06f75239a1ba7e3a769380743","ssdeep":"12288:NopUQsG4wDBCaaHGbntS5c4IyXffiv6OiA9l7e6KraodId8SgSmj/9eAvath0AXF:iyXQ6UtGpfoNL8+D6nMA5Xa","tlshash":"5ff40728795c211cb07bd625a4e19fcc422cf213d6071badb653a9398ecb5873b37a5c","first_seen":"2026-10-13T16:02:14.535577Z","last_seen":"2026-10-13T16:12:52.225472Z","times_seen":2,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/cf-fonts/s/titillium-web/5.2.8/latin/700/normal.woff2","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.684Z","timestamp":1791907857684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /cf-fonts/s/titillium-web/5.2.8/latin/700/normal.woff2 HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.kbkrw8839xwdwqe31.com/mk/titillium.css\r\nOrigin: https://mrking20056.com\r\nSec-GPC: 1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 11732\r\netag: \"6a025e37840087fc773a919e805d677c\"\r\nlast-modified: Fri, 09 Oct 2026 21:31:21 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 6011\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sfejnc69DCViWKbMq90nrnNTNTZsrTXuRzNz6hqkyGf1RGBde%2Fo2s5Upw66GRRbllyj46nzRLH%2FtXp7LprJvBsCK7rgp1tuXH6OW2xW%2FjoWzpSO5wuSsbY5gUempszPYajtnYniwbGJ0DUie\"}]}\r\ncf-ray: a49f9e0e8a300b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11732,"size_decoded":12495,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11732, version 1.0","md5":"6a025e37840087fc773a919e805d677c","sha1":"4f716b1a077ece2131283eb0eb033595baa0dd97","sha256":"9e3162d81ed6681322ab34791660f1b45c79945197e7a7dbb217005b2926caf4","sha512":"5820533d57126e6b1ac98e1a719b319a79dc14f6b91d8c01652f4ffdc55119b881ef1346520e98bfe01e5d0b6bfb9f682df80dfa22e1c9ec66d6030a47930111","ssdeep":"192:TGmzw/sd1bnYKK3INB6lG7BCYw1JKWZS218VXv9oe8lBaMPnhT98yFZhPD4Sctg:69/sMrSeU9wjLSDIBtPnhVFjcSOg","tlshash":"b232b0e73d815e2dc5d8fa325057c2c61f31707b4ed5ce6dc888e38629b177496643a1","first_seen":"2025-06-03T23:22:11.175795Z","last_seen":"2026-10-13T20:06:07.311472Z","times_seen":5776,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jvrwolveq00dcsx.online/native-images/spinomenal-3volcanopower.jpg?v=1790806519959","fqdn":"cdn.jvrwolveq00dcsx.online","domain":"jvrwolveq00dcsx.online","tld":"online"},"ip":{"addr":"104.21.19.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.259Z","timestamp":1791907858259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cfa24eff.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Sep 2026 02:48:16 GMT","end":"Wed, 16 Dec 2026 03:48:11 GMT"},"fingerprint":{"sha1":"DA:EA:9C:15:AA:31:A0:7E:7D:CA:BF:B7:9B:BF:3E:1A:E2:89:75:6E","sha256":"22:04:8E:BF:D0:35:CE:DF:0D:63:40:30:2F:EC:2F:CE:7E:CF:29:5D:8E:37:F6:81:F5:4B:C8:3C:C5:A0:96:76"}}},"request":{"raw":"GET /native-images/spinomenal-3volcanopower.jpg?v=1790806519959 HTTP/1.1\r\nHost: cdn.jvrwolveq00dcsx.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42918\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"36d9e50d276d750b36faed8791f7b48f\"\r\nlast-modified: Mon, 05 Oct 2026 13:09:35 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VSygrb9ebz4nL44KEzVQDMnWvENkurTWVHU8YHRdRceLm52p4TChkNbem%2BRnIGV%2Fgldj3C5V4uS0gl3qpkiSJcSSLU45FPpdekBUbYfN92qBwKKpNUicMwxGaXKQRIOmS0QTPPLPBLSVx8%2F6SA%3D%3D\"}]}\r\ncf-ray: a49f9e127f50b4ed-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42918,"size_decoded":43614,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 650x406, components 3","md5":"36d9e50d276d750b36faed8791f7b48f","sha1":"e2c6ba8a26ee0ab1622d8684c497942dcad21310","sha256":"b32681b809be98b1012f58701d85b02d2242101844968e6f5bc22de9d78b7198","sha512":"c1ba1d6ef09d201d81e49df0160f4f731737f9c0d0d9c047ebe6a5a742dbc862a95d0ca8d81e4c8d30374839bfd9bc30adcc10982ad23330f719c483aefa59d2","ssdeep":"768:rbkT+/+3zKhT+tEd3qUoC+g3mZBrhPC6NvotKSSIe93e:rQ0+cT6CqUoC+gWZx9CavotKSSIele","tlshash":"4713f1cdc89d14f2d78c0a20185e639657e5704b6217a9c9f18029dc4b37f6edb7939c","first_seen":"2026-10-13T16:12:52.226999Z","last_seen":"2026-10-13T16:12:52.226999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cdn.jvrwolveq00dcsx.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/28753-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.845Z","timestamp":1791907852845,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/28753-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/30081.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.405Z","timestamp":1791907856405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/30081.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30581\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"3994909703e45759aa404b2e583b8903\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:37 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pvm0zYD1oYPUGAjJ%2FEro5iC8jLyBP7Vqbo7RWDbr693KWFx6bzRyQzA8mpsHJZShASAAOK%2Bk4Eg%2BSq7ZCREyBpdy7c1djQ%2BAFFBG3S3q1kstb9w2GFR88YxIdMP%2BwJotzOzRAbGqIqy0qzrZ\"}]}\r\ncf-ray: a49f9e068c750b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30581,"size_decoded":31304,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3","md5":"3994909703e45759aa404b2e583b8903","sha1":"1f9e0e2d7ee61d38dfde74cb4af6c4858c20ecbd","sha256":"743964c85e8bd8d6978e74910605de9bf0ac85307cad021062940b7af3e39b56","sha512":"82488083e7724c7fe16fbcea43b78fcb5d9ca35381d97cba8ae5e736692e9bb03037d1459f3306c20a427227412eab30227d052f550784ace3e22224f626baff","ssdeep":"768:C44dXoCUOJFR8dFo9K2Ewqd+0ocgsNxuTfv:S4C5FGdC9K2/N0ocgsNQ3","tlshash":"30d2f17055131b54ff343afba8e04e82e7512f35d6ab8b78ea80d9d122484dee1e56c2","first_seen":"2026-10-13T16:02:14.549167Z","last_seen":"2026-10-13T16:12:52.228451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/31606.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.454Z","timestamp":1791907856454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/31606.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 492065\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"aa3e21a0b91c118b16e6a9f84568083e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:39 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bh%2FHoq7FGDMzx1jpBOzBaA1%2BuThSgnZeDwHXl3Rplsnu%2B8SvPTORTxVyPau37PmLPExLhdWfneBcpQVTika98DoqAm6CNvTL7qqb5k%2FkSXpAn8sjKitYghXKXx7%2Fgus8KmssbbJ6eHa8towZ\"}]}\r\ncf-ray: a49f9e06dcc30b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":492065,"size_decoded":492788,"mime_type":"image/png","magic":"PNG image data, 640 x 480, 8-bit/color RGB, non-interlaced","md5":"aa3e21a0b91c118b16e6a9f84568083e","sha1":"cee983117d7c0bdc07a482dad6a5fb2869c73132","sha256":"b30bc902901878275f9a077f4618751e7c64798e9a9280d2bacda028d238ccae","sha512":"984ff135769e53994e32e24dec3eb21e3d20fe9fe267514252bc9a29bf284f442e5896e15c0d5d57eb9344bbab0012f4b8813af72ffffb240ec434aaa7c264c6","ssdeep":"12288:U3XQ+MUnckMliu9gD+tvtocCBBPsJ/0IpY+BnvB0hOB4n:UHQ+MU2l59gD+tvtNGBPsJ/bL0gg","tlshash":"22a423e3821e4b8045b2f156f42831fbfff22397d81621cc99dba2a657c1ca1559ccb6","first_seen":"2026-07-14T17:30:30.293809Z","last_seen":"2026-10-13T16:12:52.229782Z","times_seen":6,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":430,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/media/5c8bbc89ca099f34-s.p.0vk09kfe5b-gj.woff2","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.710Z","timestamp":1791907857710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/media/5c8bbc89ca099f34-s.p.0vk09kfe5b-gj.woff2 HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 27812\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: \"6ace4746-6ca4\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27812,"size_decoded":28100,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27812, version 1.0","md5":"40fbb0c52f0de3ff98a350da4c858f4c","sha1":"ba5c2e73488126b9499c4b69369244e3d3348496","sha256":"ce6e0dd89c3ffa4de97bda85f9b08bcb775bea4df456b3dbb7e819c1c879be50","sha512":"8aa12d4acc7d1db8fe2be410b0fe1496d9f26028cc87f51629b6e295e538e2a2706b2fccccb978cbda5e72146b331cb8b6322aae9d94a88f1242ac83e9b83b97","ssdeep":"768:bo1xUfxD/TF7Bc6xp6N6BAQQhAVeQh38A:bWiRpm6xzqQteQh3B","tlshash":"39c2e152060ae7df41f19039b8849b9257202c6f816a38814061bd5e078dfdedb9edb7","first_seen":"2025-06-07T00:31:13.543086Z","last_seen":"2026-10-13T17:50:43.898642Z","times_seen":816,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/amusnet.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.790Z","timestamp":1791907852790,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/amusnet.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 165854\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"2a5458313282abb47744fde803d5f262\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f4WF9iV7u8T%2BG7aHTM7QpOyBMKlva3bjg7aghPq9AYcF7587y20%2F3ts83hqF708r0n8yXhE8xR821p34fyaiPMxjkHZZNJhUNCM11L1KDCPSz45p%2Bskm31vjapqCu%2BXPa9oXvRm2sxuHq5xl\"}]}\r\ncf-ray: a49f9defeb560b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0gbhykt4izba9.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.161Z","timestamp":1791907856161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0gbhykt4izba9.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-a674\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42612,"size_decoded":16990,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41910)","md5":"4ee68bb88baa796209a61831a810f15d","sha1":"8c165914ec7c045eb0a68366e2c3a0cf5dd89f80","sha256":"27ed800d1849ac7699f810d8a2d17dcdbb917fcb33ae7fa66572aaf7ac227a02","sha512":"f6996d150be21f0560a088df32765449ef7d9ba5fad042d3598735891a84ed27aa48be64015fb9b7f4c9830dc3902fc91ce3960ce17a84efe32a3b0d02db23b8","ssdeep":"768:sOfRbx1DyMj8pM8NFc3vYQzJAB6+cabS1wZOz06qrgzUAursa:9fj1Dr8//QYQtAB6+cabSTz0Hk4Hrsa","tlshash":"65131a14f115bdb99f9e41d8402fc40c757d694e580d4820fbf9ecbe2869980b1abfab","first_seen":"2026-10-13T16:02:14.43253Z","last_seen":"2026-10-13T16:12:52.231977Z","times_seen":2,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/23107.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.426Z","timestamp":1791907856426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/egt-digital/23107.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45460\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"bc6be31c1d8e0e6fdffa8510224244d6\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g6s6hWb1pLe4psdh7u1f1eVB%2FhD1ZXMu7wfbLiolRWW9%2Bv9KdcpD2hfR6u5Ua7Z3uwb%2Bmq5rOM0AbZQSFuQXKgYWCRyoDuXkMyGu8tIRZNZ5r4IkNaC0YbUVAydtt41rd4v5ZRvHgHULyRUM\"}]}\r\ncf-ray: a49f9e06ac960b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45460,"size_decoded":46179,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bc6be31c1d8e0e6fdffa8510224244d6","sha1":"40fc6f7205c3e41c093f6ffe2d2be142e0cbcf06","sha256":"5d487a433d0d5221192cf710ab579a9b4f6ebe09130a2dab56dbb78dcd519a1d","sha512":"0fcf45d2856215eba410ec5927455ca406aef69fbc452deb96e81cb55735a5702fa8cf1b263d262169f6a70cc7cabd6b8c246679879c5f151570f4fbcb7fd11c","ssdeep":"768:g2nTeosV3g4WIEpuDXUNzeXUPjvXgJTk/jF2n9Kn84QfDDeB4Y0pHJgBrJ9AwzuL:tTQxg4OYU0JTkrw9K84CDY50JJ4rfTKL","tlshash":"25130219a2c4c402cfb53d7a2cd6e95b974a6c8f4c23c839687183255f676d9140b3d7","first_seen":"2026-02-20T16:45:36.881613Z","last_seen":"2026-10-13T16:12:52.232977Z","times_seen":10,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/play/casino/18471/0?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.764Z","timestamp":1791907858764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /play/casino/18471/0?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":296,"size_decoded":781,"mime_type":"text/x-component","magic":"ASCII text","md5":"208fcdaa96e22c2622b974b1c44b3537","sha1":"93ad5fa9f788c09e19f1c16d1fd983de4ca648ff","sha256":"1808eb5ac5af64f031f99e489df1710297c3003a292613607c85f8c6197e0592","sha512":"7bfc5e5cc55f63cd28bdbef522a5dc5e8bebc10732fc322110419eee0496c8ea46cde0d6d8e959ca3ce4c705232c1c8b118797a4e8c4b5cf90a0218ceb3a6b44","ssdeep":"","tlshash":"afe08c2b82046ae31cff00c0803ee84baa5a563b22e90cf180a41f3923e713506932e3","first_seen":"2026-10-13T16:02:14.59397Z","last_seen":"2026-10-13T16:12:52.233617Z","times_seen":2,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/idnslot/33515-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.545Z","timestamp":1791907852545,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/idnslot/33515-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 334320\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"1b1824fcd52cc33fa71bd76a870c8e96\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:33 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BmcHdbJpUw295zLUtWwQh%2BQ4Afig%2FWGpSS%2FwwAJ3suTiMZJxtFPCBusnuqcqHW0vOPveLVsnX8XsBr1ejK0WmbAgeti8R3duP6B39F8zxxHAn%2F63PIZ1HC1FfrOGKb6ro262W3WwzdtyC%2F%2BK\"}]}\r\ncf-ray: a49f9dee6a100b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,500,700,900\u0026subset=latin,latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.063Z","timestamp":1791907856063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Roboto:300,400,500,700,900\u0026subset=latin,latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.kbkrw8839xwdwqe31.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 13 Oct 2026 16:10:56 GMT\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26840,"size_decoded":2470,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1566)","md5":"764704f4224769e47139ac89203b4ba1","sha1":"c8b914dda2e76945ac87ac5a8d75433214a19eae","sha256":"253aafb02dc0ea18afd85bd1bb480a0b86dbc045597f0d1acb6d512ac7fda4f4","sha512":"dd7e240238a31167604f4f1b23082867f4adcc1e0832dc69a85081565712fbae56f1f7be9e101eb962247030506c4a24beb0bffbcc9af0f9aa366761e76c860e","ssdeep":"768:3FsbbsSc4UFMl22sfVJNan6BBsEqeiwhQHHsOAU4+DeNNsAO628:9N0M+4","tlshash":"fbc2faa10417440097834ce223cebf35fe1f92107142d0b5abfd9b6baddbca652693ad","first_seen":"2026-10-06T04:43:35.229227Z","last_seen":"2026-10-13T16:12:52.234526Z","times_seen":61,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/redesign/theme-moon-icon.svg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.183Z","timestamp":1791907856183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/redesign/theme-moon-icon.svg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Juv6WpDEOV1Ric1pX67HH12WMO1mv9OIJZ7ajcCEGKLHIK2O5Jg%2F2AXOBukzJh8zDfMJD0N8YqYHk92XxkrIktI2tZDJ9anAmEA3%2F8VTrsukcMOwyUlUYQEBwy0b%2FXHaBytc3NOz1TkKUNPx\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\netag: W/\"05b2556b641370125abf027843244c01\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e051b1b0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":516,"size_decoded":1057,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"05b2556b641370125abf027843244c01","sha1":"67e26703da82100431e09cf32d4ad25855087714","sha256":"d4f405ca352a13d17b65f073c2ff2d147ccf626d439f74cfd5b2962e957327f0","sha512":"3307f7ce254ab05f10b0b021eca8c2abd57ef9474a43de4be7f20e7a97f104f0126250ee90e69349b3868b0a26d3275eb587f2ab31fc360f51b936f23053e8d3","ssdeep":"","tlshash":"a6f00e3e466080b84b1009211829b4bc7ca232e26dd817a8e2b300523163bdb309e1ec","first_seen":"2025-07-27T20:21:53.765853Z","last_seen":"2026-10-13T16:12:52.235224Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/bl/grand.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.471Z","timestamp":1791907856471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/bl/grand.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 49613\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"e94c792ef445aa0d6544440ae49099e9\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:42 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BlxXd0VjTRmiAGLExL0gJGWL1dcw9vDJbZ2LAR8zeIV9EKx6JVlFSfxgy2VcGAMGfm9fyBlErAZPnJpo1Lskf6KfAMd6UduHqYWszPXrJdmnR%2FcRqRKWTbnipMfChW3t2EsxunaizUJFU7PQ\"}]}\r\ncf-ray: a49f9e06ece10b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49613,"size_decoded":50329,"mime_type":"image/png","magic":"PNG image data, 214 x 219, 8-bit/color RGBA, non-interlaced","md5":"e94c792ef445aa0d6544440ae49099e9","sha1":"da171d3db2c95ecd56d53491d7fe323b76b03388","sha256":"d6ff0c4772b18c40da74ddeb3431099ba46bc71143d5a8821ab4c9a4129c7453","sha512":"e271493e53517d55f3c7206a8879bd741bd8cddfba428c278e542c14ce89dadc6afea12ad0d2666d131bcef65fb51a0d0e73d4a0d7a653d1a9548ed20861cbb0","ssdeep":"1536:IHJczPdCOLukyoR45B/ntQQhbUHwe0SGPo/6:4KzPdCOqkyoR45BnKQbUH7E","tlshash":"1023f13a23b1755d20e197feb2c379c765a40c35a8186207cee7f68c95488de26cd6ac","first_seen":"2026-04-11T14:16:59.532904Z","last_seen":"2026-10-13T16:12:52.235862Z","times_seen":6,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/9585-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.521Z","timestamp":1791907856521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/9585-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1015710\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"db843757757b54ac2c07941ccfdcebef\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:38 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sthvRjrscskJ%2F3t2UYK%2F%2BVjyHfV7FvjChCDvjW1xf0eqB%2BBljqcaDVnB5i4gZjXQCrvxcURI1CyWX2H9Q3F4VSL4uXr%2B2b9F3ABIaXv8BwFujmkG0DaSl7KD3EtVuSQf%2BF7wSaDPIzHHGPjh\"}]}\r\ncf-ray: a49f9e073d2a0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1015710,"size_decoded":1016436,"mime_type":"image/gif","magic":"GIF image data, version 89a, 250 x 258","md5":"db843757757b54ac2c07941ccfdcebef","sha1":"d700d7fee441e71999f9c2796060d3706e21411d","sha256":"0fadf7e296e27be629e824738c15b4fe77ed1fbf7da9f1b0a4329d2527a643c2","sha512":"ed917c8e5e4ececcdcee16d14b7c285ed40bdd13d624f0170f8c556b6191c688bcb20ab3881e6fee8d790132188b063917149c046d459ba4e989c73fbe0c975a","ssdeep":"24576:lsdLaHF+WFE2nsfeH+231KXZqaBmR3c6Yc2Cadg785ctXsped:13FE2sz231sY7R3cW2sScuped","tlshash":"4f25331d0c7f157295778dcf189ad6313697ae3eb369e881be056071bc8932874a822f","first_seen":"2024-10-04T09:11:11Z","last_seen":"2026-10-13T16:12:52.236467Z","times_seen":29,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":562,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/million?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.546Z","timestamp":1791907858546,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /million?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":212,"size_decoded":751,"mime_type":"text/x-component","magic":"ASCII text","md5":"23205530f43dbba6679c711cb2ad051e","sha1":"721717556828c15864883a84ca58d5bca73fd10a","sha256":"302139d2cb6115ff83d119c9abefb3b451efde911db51832a4fab461d56fc493","sha512":"0802aed33e8e70a733b1a3dafeb019be2c4fc4ec20c50c388dd3d8814e37ec0d4b0de3e21dd27490381a0f4dc62ffdfbe56dedf530e44a00adaa2a3df2b1038b","ssdeep":"","tlshash":"dfd0a92b820428b21cfe10d0803ee80b668e563b22ec5cf0c0642e3937e327947931e3","first_seen":"2026-10-13T16:02:14.586162Z","last_seen":"2026-10-13T16:12:52.217837Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/redesign/logo-white.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.543Z","timestamp":1791907852543,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/redesign/logo-white.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14324\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"0e53bea0678bb1ce322f1ba1aa2ce9e3\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BcEVVV6Y5O5wUp17wAL34dq1AqN9kagFZQFQ6rAd5Nf18DT9BFplablvqTu5Rj%2F22MKoWz6Kc3HfYOentfG0%2BxD7RNARdG3uycBGfgajS6DkpuaXaXaXQ%2Fph8QGnr0jyjRkY%2BTVMGV1qTX9%2F\"}]}\r\ncf-ray: a49f9dee5a0c0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/030lje4w49skv.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.146Z","timestamp":1791907856146,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/030lje4w49skv.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-374a1\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":226465,"size_decoded":83421,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b00bc627c2134768a87766efc16b8a49","sha1":"d6b8619501c82e73e77e22e80ef84eb9b20bc282","sha256":"400cdd5a2b42d02de4bb6029747fcb905a320bac0f496c3942528e146a025fa1","sha512":"4faece58f97425bf00bdde0e0a4bf39bfa0fedac9660191b8e3bc2bdbc4c607d81359a842791d479c2e98a7d4e963079d6fd10bafc78b629f7f429400445d416","ssdeep":"3072:f1Jtr3M4rF8Og/7NqDIQtrcRlazbJ8JcQHGXX5MubGvngKctS5:f1JtzxrF8OgT5QLQGnRivngKctS5","tlshash":"a424fbe83955f662aab302b710af1803733c252b280d4d60a251fd9db57845fb17bf9e","first_seen":"2026-04-22T03:17:22.792402Z","last_seen":"2026-10-13T16:12:52.236908Z","times_seen":169,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/jetx.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.363Z","timestamp":1791907856363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/jetx.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 3294\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"f8e31f9134f2f8a4f9675f3be570f807\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XfjCPeYc88rldrLRTYmmUjUj9xYq%2BinCOCMCXgkrZSYLx7g87gSnRmZ1FMa0U4H%2FOxLhIApDbDkg9zoJBWdgD3IilM9xq%2FJF1daRZRo2C5vnFgelZIx2CD79oa6pg5hCcNolVKZ6aHR0qjA%2F\"}]}\r\ncf-ray: a49f9e064c2e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3294,"size_decoded":4013,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8e31f9134f2f8a4f9675f3be570f807","sha1":"3f146be615ace85288322a60aef05aa0d8b0241f","sha256":"7400df59b0b7efab300dbd01e1a408d41d245bd033852f8d02c7c78b24e88d75","sha512":"583a82a10b9b28fe4a5c6627125e9185581471fc426db8c237b7c13a7b1f05aa347a213cf77e051a875f6cb8e07a98f297dc8d1b801347892e09677d4b3a52cc","ssdeep":"","tlshash":"11616c033a025c718480b4a402dc4444dd5bcf9208ab5b3da0e5db74f4349f316afa5e","first_seen":"2026-06-23T11:19:31.008039Z","last_seen":"2026-10-13T16:12:52.237486Z","times_seen":9,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/redesign/ribbon.svg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.701Z","timestamp":1791907857701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/redesign/ribbon.svg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.kbkrw8839xwdwqe31.com/mk/app.css\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FG%2F9euURaOzntb4WuaDXS8CXtWbRquCUogb%2Bn2QtZkD%2F9pnOwE9LT9IJKtrBEU4K9WY1UiXZoyDSyeKMOzq5%2FN9GQ9ni7ZEFf9PbvS%2Bcnk5ntsToj5jvEyCgdp%2FpMrN8d%2FJhNnDYceLew17b\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\netag: W/\"070ad58657eb3eb12251f9fe003c1974\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326188\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e0e9a510b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1281,"size_decoded":1209,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"070ad58657eb3eb12251f9fe003c1974","sha1":"2d50fb8e6fe44a6be7448f8713b53a8c0c3c390b","sha256":"b0d5fbc02762cbb42ad56cee52bae5c26338ea28cf6df28fd56ffda13f4e84dd","sha512":"9d76ec12be512ef942b83c52993b0813fc85de170918971bb1da012a2108291446f84adfef19fbdfb0bde2047ec2323a4805712c51acc1e94f145b13c3a33bd3","ssdeep":"","tlshash":"7821dd1ac94dbc7be07ec2bce8d4d43933a9066ba4c58255e5a5ef0f35685c3180abe0","first_seen":"2024-01-08T17:23:44Z","last_seen":"2026-10-13T16:12:52.238147Z","times_seen":50,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/banners/23825-3.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.731Z","timestamp":1791907857731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/banners/23825-3.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1700547\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"7439b48fa34ac0139bfa2f5801c7cb13\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:23 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326188\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2JLTnuo5gMpG3w93a%2FlYpNINQSPxj9PIE7pecgMl4n7bTgeSwxbn48KzLqurDtjNU4qabnEFm2Jr%2BT5AZuJ4gx1rFvKCvSUgkm5T4wKxiw%2Fj7rlwgDSxVqahWN%2Fk%2F1IqsvvrSefj6FW5ND6u\"}]}\r\ncf-ray: a49f9e0eca850b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1700547,"size_decoded":1701272,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 3840x1280, components 3","md5":"e9f9a6ea2dd1afca23994ae6c0ff1b4e","sha1":"8732c8db94458c661c09e25c0ebfe7ea21efb200","sha256":"43d5422850002be360366ca29434dfc834e470a447b643d50456583a3e229193","sha512":"c1cc7925ca8081b3ce0cea970f1eb85ac1ec739635e3f9e4997a19f6914cba89aad1ed2d42b1bc443efdac980db8e180958d2b99cea1d427930434b26e1255b4","ssdeep":"24576:JBwb2XUv5oQ5hndOjbh2nwuRtj3JCqMCTeOx2VurA/:jwyG5o6hdO0RtjdMCCO+uru","tlshash":"2c2533e89de16843f05dde7472fa3eb3bb960f784313a29875615d212ac13503e8c9d9","first_seen":"2026-09-25T15:32:37.978083Z","last_seen":"2026-10-13T16:12:52.23876Z","times_seen":4,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/play/slot/32336/0?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.705Z","timestamp":1791907858705,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /play/slot/32336/0?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":294,"size_decoded":785,"mime_type":"text/x-component","magic":"ASCII text","md5":"ce67a9fc1b1efa9296fd1b32a5f1dc94","sha1":"4671447837080c704b7fd06f1d56033a4e0faabe","sha256":"0b2ce4f5c0a3c3379f86b38a2612e74daf59d84d1669d55b85c750d474feaf0c","sha512":"5638b0cef8b1fc000b29e933183c419effd6e90dc925097c43c64f17420bffcf3c5b8afa0db9631a4e80d8127325ecb995670668b9b7af5985b2a5e75cbe2b03","ssdeep":"","tlshash":"2ae08627820419e31cfb00c0803de84b694a123b62ed0df180a41f35279717955432f7","first_seen":"2026-10-13T16:02:14.483135Z","last_seen":"2026-10-13T16:12:52.239395Z","times_seen":2,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/021tai9b7yop8.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.348Z","timestamp":1791907852348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/021tai9b7yop8.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-320bd\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/04z1b0hjxkk_c.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.353Z","timestamp":1791907852353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/04z1b0hjxkk_c.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-189ff\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/horse.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.590Z","timestamp":1791907852590,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/horse.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 5838\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"1238a184fa247aa449ebcbb66f8c9e40\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCshUUPuTLllY%2FA9xPDnlz0xgohrIlUUr3bkuMlW7eY8XMR6PFO00mWbMDN1y7JvHL9ZFgbGIO7DAsOcJxrOSs3S1DVztxlKATiC3lRo6SaPiu72V35ddGweB2lrOc%2BZ%2FV2ud6m0OkWQQbSt\"}]}\r\ncf-ray: a49f9deeaa570b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/golden-coin-link/MINI_SYMBOL.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.825Z","timestamp":1791907852825,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/golden-coin-link/MINI_SYMBOL.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 561456\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"1504dfb90ec6b96b3947260b0ffb0819\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iKp9wkz9%2BrbL2jv06dqFh%2F058S1NEtQ36P9%2BwbDhedRrrPKBDaXLFIj5XmY6aY38LepSoV3WvdBLgoP6HU%2B9sYT80FFsEJ0t03r9Xa2LNqgzTa2P2zaCuqPmaRFrQKfovU67YR3r6c10BMap\"}]}\r\ncf-ray: a49f9df02b7f0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/footer/twitter.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.196Z","timestamp":1791907856196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/footer/twitter.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 15382\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"4edd05736f93cbb35a63c0689f7f042e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:24 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdr1dlK6Y2OyYrU3mgtxEipJLDqpCloVM4KjiDyrQ%2BZDH%2FzO7Qh6p3nunUTJDaUwNeNgDmf08%2FqeQ4%2FfgX5zGMW8xzdvMnUmV0KRLPHVFs4QzoLteyvcCEbJ2JvJFXy%2FZavcdJjwxjk4bL2O\"}]}\r\ncf-ray: a49f9e053b2c0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15382,"size_decoded":16104,"mime_type":"image/png","magic":"PNG image data, 140 x 200, 8-bit/color RGBA, non-interlaced","md5":"4edd05736f93cbb35a63c0689f7f042e","sha1":"8d72983afe24f071efbf749fa68e11a186e72885","sha256":"cc16fae47f22b22d1301750d232b0660be9ce6854ee40929458211bd4488fe39","sha512":"54ff9441e4bc663d3d6c5e85b871105e8463bd88bd651725e02f3ea9c41b6605c463816aeca6d895f2a21cf10912b444ca1ecd923473fb97dacd659f306f4dd7","ssdeep":"192:ilkEu03gJVbg97SdJsIXovgPTGA8jt9dIKiTwFXkUsYFSxTRIkr+IEXw7nEYbApB:gkI3awuHsco4PKkO1LSRIk6jXw7nvWUk","tlshash":"0f62c0c9e1510e9fd900c741d8e2aa00f1fbc7f4a3b8f3a6310556b9758052762b5aa3","first_seen":"2026-07-14T17:30:30.085354Z","last_seen":"2026-10-13T16:12:52.240796Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/golden-coin-link/MINOR_SYMBOL.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.503Z","timestamp":1791907856503,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/golden-coin-link/MINOR_SYMBOL.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 567658\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"37baf6561b656cd430a301a7f7cfb788\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wdt3LOrLCILxmvkEKTOZtpCgocqApMnah%2B1CYoppDEu5pmkuuIJ8BY9TGHD%2FaXPNEBDM5VvGCo%2FpPwOFhyvlP1k7%2BfVJOViC6SUWryNkwmWWf%2Fy3HUOQD27%2ByvOEqnI7vWXw%2BGJiEij%2B4Fyh\"}]}\r\ncf-ray: a49f9e072d190b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":567658,"size_decoded":568387,"mime_type":"image/png","magic":"PNG image data, 930 x 848, 8-bit/color RGBA, non-interlaced","md5":"37baf6561b656cd430a301a7f7cfb788","sha1":"c3788a8f1bb0ba083ae872dddd3708c043f89774","sha256":"789bb53afc39c9ff340b4ed5a6548709138f7359a95ea497ca17f463c68db382","sha512":"c043a541fd3900426733fef09fa1bea4576d46601a8629b826f85bf3a060d135b18d429a7fe144f1bcd215f758098cbfbfd6c075a29ec9edbdff996151537fa3","ssdeep":"12288:fsSIg+/JCmho9hVDt26sE4BqVrgrMZHC943YzHpjDLc+YcLH5d4Lx:7IXQDL26sEqorDM43Yzt3JYC5mN","tlshash":"97c4232cc8daa3f6dda753bbd26bd260cf80cdc5f9a610552074882e7bd23272d558c9","first_seen":"2026-09-19T02:54:18.525917Z","last_seen":"2026-10-13T16:12:52.241525Z","times_seen":4,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":453,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/virtual/provider/golden-race?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.703Z","timestamp":1791907858703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /virtual/provider/golden-race?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":307,"size_decoded":785,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (306)","md5":"86d2e9ab166b98e6744a76cc4535bda9","sha1":"49eb929ced1bb176e37123a6e7c9a413e49b8fb0","sha256":"3e626a702165de4c7ee61d7eee1ed295fd26c257ebb24b615970af4d01948b98","sha512":"1d3166b3fd5fbb8c443cdb47c85bc566a9da7f0c0b4aeafc7c216e3e4ecf30cd35b0cc26116f53ddbb72f868eadd622b63b207cae4e8fffe09a40c59fca7b2ee","ssdeep":"","tlshash":"99e08627924429b31cbb00c1803ee84ba94e513b12e90cf180b51e3567e327945572e3","first_seen":"2026-10-13T16:02:14.590129Z","last_seen":"2026-10-13T16:12:52.242212Z","times_seen":2,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/telegram.svg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.398Z","timestamp":1791907852398,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/telegram.svg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=saCG67p57%2FIAv4Jwo%2Bzv3RE9grBcGHtxy6zA4mt4tYOKI4Rs%2FugFjja4yXH8I2JUgVwz9mOMhBL88sDvlppRVT6vIkoBoULm2Mb4BjvQbqvcR9QXsu6E4GY32U1kl%2BLvz7XlCbhJZFdT2%2Fzv\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\netag: W/\"8d8d66a0c26fba86dc60ad8043167830\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9ded79680b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/partners/kingroyal-bonus-1000.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.475Z","timestamp":1791907852475,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/partners/kingroyal-bonus-1000.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2440419\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"bcc9e606ada253296f5ec0201b3142ad\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:47 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YTZmBLLjS0eokZxknoFEBFmGFCScbPcceXY38%2F2IEn9yw3i%2FtlXWhZ5uutHsbnInI0iQ2HHzHYdupQfZGROjIrQT4Sb16EqNmyIysb11wrwKr91Y%2B1TVIopKkVP1RYvE0oUzUiy0tWgb19Ro\"}]}\r\ncf-ray: a49f9dedf9bc0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/33447.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.761Z","timestamp":1791907852761,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/egt-digital/33447.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 124248\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"58b0dd6d9663d6cd3513979e3eda634e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:29 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R516rn1yWKjxEhZIqnJPE0yaMsmgGWOzhhHQAMUBzH0hSTq8EAm26uHAIFlfnd%2Ft5oFNix4FrTbJysrqmqCJqvqoVmA7yWbkhW89UL4ztLNerNxlPMTliOj1ZVvqdX3v6v3ZNZd7Sr3cNn1Y\"}]}\r\ncf-ray: a49f9defbb230b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/tvbet.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.372Z","timestamp":1791907856372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/tvbet.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 6282\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"7c68564c818295ab9051e4f4bc74210d\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YrErdbK4rwI704TInbmz4TFcuvhNVbhTz4jN1mHe%2BivqumoiZ4sNTod2Ly0q48TLXS5u4tDQwPE1G%2B7tMzr27K%2FFS%2BkqBm%2BdAtBA9sg7SBbbnS59X%2FnM1DKtdEDyfSrnzKtnm1KtjzQvfB7u\"}]}\r\ncf-ray: a49f9e064c430b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6282,"size_decoded":7005,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c68564c818295ab9051e4f4bc74210d","sha1":"e15d551569af3192240acbfc3dade1e1ce806ce3","sha256":"1b3389384bf505428624f6ba0cc03ab49884033321b2303e4de970fc9ceeb0cf","sha512":"8f7151a1ba7371f2441e769b2a877bde21f3047eff6e276c95bce432e650a020eb82989d6aa0e16fd8e95f9df22b2f88455b0f4a19c6706579503f6eddebe67f","ssdeep":"192:ZS896p4nwapElP2CpuXvg9Z39F6G2A1ZRpzWY:tMp9aKsCIXYnHU8RpzWY","tlshash":"3fd1aeebbcd2b7c354125e9b6883924778a2bb50214430729c73dc776242df8c3b9b91","first_seen":"2026-06-23T11:19:31.092462Z","last_seen":"2026-10-13T16:12:52.243386Z","times_seen":9,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/ninja_parkour.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.599Z","timestamp":1791907852599,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/ninja_parkour.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 19182\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"0abd4a1fff837422ebb03bbd44744f13\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D22tCVoqu1tbW23psznkKJXPGMrd5DyaBVYA3KK3tWy0W32LGPF6tO8XqJiydTmkW7ylaMQggoGjNMIItLY5oH1GaUZ099ykTMGcU4OOfsInbhwadR%2BFIm9wDsR2T%2BOnxrA2OOIiCUP3Q%2BoZ\"}]}\r\ncf-ray: a49f9deeba650b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/merit.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.328Z","timestamp":1791907856328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/merit.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 8764\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"d9da44a78b2df481ddffc7a0f94e63bb\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ni%2B3DFKDh1Hg98e0JWSITtbSMfpNogeXR%2BF4GHmvyG1ofiEiV4HUquo3U%2Fe%2BlDDu%2BwOBdKrfscnFlhxm5Hc%2BEs9xoD5uBOdy4u3xHmaRlcYT5glQAg6nl0ZQq8WcZSZuvwMcwGNlFZfQYSpC\"}]}\r\ncf-ray: a49f9e060be40b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8764,"size_decoded":9487,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d9da44a78b2df481ddffc7a0f94e63bb","sha1":"1e4bc01ca7e58717e8f74642d7a71f74760df06d","sha256":"45162ed5b7f8d6ce75c2ecec20ce552375bab337fb2d2e38f6f0bf53dca96392","sha512":"0e52df7999d14999feb8bf9a580760f750628e9c458a002326667e98990f4fbd3c2f7cdf81519823ab414102f2413ae2bc957b401f791f723afa80225cff1079","ssdeep":"192:Hmi2Yme3b/dNaQ5xo/v3B0tMpmEYp3+xyQVxbTWnr81ZdfWPZHys:Hmiv9r/75xo6tbpOxysF3lWNys","tlshash":"d302beecf496e7241cf02d998eb9c5a70e118794e8c2854174052ad15f71c8cef62bed","first_seen":"2025-12-30T10:17:00.050125Z","last_seen":"2026-10-13T16:12:52.244185Z","times_seen":9,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/redesign/twitter.svg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.385Z","timestamp":1791907856385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/redesign/twitter.svg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FpzYF2vupCOd4JoOdiTV%2FomvZ4iPZTuO9RB9lYsK0wV5LF0ayAqUAoQlhK%2FhUxzoDNo9SyTM9glqlJkg%2B6s04F5fP8gg7YWGEAgtRguqmS46uNOjMyShSWAiSJpwwGDnIziuROMpYU%2BAT1tz\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\netag: W/\"89817bdbfa3476ff737d69a9f6725cee\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e066c5b0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":571,"size_decoded":1039,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"89817bdbfa3476ff737d69a9f6725cee","sha1":"43aa84d9371488d3048cd69771b2bc3b1f1dea51","sha256":"7b3dcc65f247f21e8cfe57fdf294c0965e484dded62f51d7cc993e9a195ef42f","sha512":"bab8b535c89d7a10bf900dd8a3a2d0b30bdcdf704bc898d277859214a724dc2c04780bfc6c824831f6d176a532a6fbbbfdd7131d88384e104ac7875a7e734944","ssdeep":"","tlshash":"f2f04cb9f27c2ecb8017e782d4e3b4f8ad8bb07547508403c6ce06c4959ec4eb85b054","first_seen":"2026-02-20T16:45:36.834504Z","last_seen":"2026-10-13T16:12:52.244898Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/high-wins/5.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.747Z","timestamp":1791907857747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/high-wins/5.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 101233\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"94b0d69bdaa5d9facefe59a8c1f84f61\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SqZ%2FzN8EPyOKhxzMXJWHlyJDh6PEXd5Y5lGjl5v5tOdu92gRGiTf918euClDpA0V2K3c1hjBQTiFD%2B1Bo44KAEJZZF7D2PsPcAT9GTW%2FuNh4B%2Fybl%2BaIRxPV1TLFSqI5PeewJWh3nGry3hIW\"}]}\r\ncf-ray: a49f9e0eeaa20b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101233,"size_decoded":101957,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 696x1260, components 3","md5":"94b0d69bdaa5d9facefe59a8c1f84f61","sha1":"16bc87aabd04369cc86ec19f95cba2af33f5631a","sha256":"d707ca4dbe7ddbb722b32779398c323817edbb39dca418af3ece90628829230c","sha512":"d8e721055b4bc23f10bf542fa525af68c1d55fa2539dec7c141c8673dfc8bd6c74c00350b08092511b81bc25e60d472698256908cc6d47993ba7a3b254442125","ssdeep":"3072:c+AJB2Fdl8eV1PP8VWmgIh/cCxFEjwNoz/vd9Qb:c+ea8eV13SgIJZEjwoYb","tlshash":"57a302aa3c498d93ff40fd78ad54b157af2063952090dd86d1a74884efa4bc103b567f","first_seen":"2026-04-11T14:16:59.573407Z","last_seen":"2026-10-13T16:12:52.245681Z","times_seen":4,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/9585.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.773Z","timestamp":1791907852773,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/9585.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 53741\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"f9fc036d321c819d1b1fd448bf07d930\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:38 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WGt50NueTmUWCm8XrG7H5BckkkBJBuPmhilBWN7iA08rjqEzbmGxJoHoeut8iNZJH1ObZvp2efoHNvRkJWJJQPO6dfPl7AXLv7yaGFzt0YXDyx0BpjsHu0iIQrPHUdjXmivvrq4QNgAwXgmN\"}]}\r\ncf-ray: a49f9defdb390b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0qj-bpzd~-r.p.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.333Z","timestamp":1791907852333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0qj-bpzd~-r.p.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-a0a7\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41127,"size_decoded":15226,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41127), with no line terminators","md5":"8ead45f0906376fc23d57b1289a7f93c","sha1":"be486575efe7beecc77932c5d1ce09947b73101a","sha256":"38f4aae3f9bf688513971b2927efbe2a2e9476f2ee6e60c8c674044614db61ff","sha512":"4411520b05c4d650c16cbc01a5d50d5326340893fce6918fbe86fa012b633aa79708440929d2dda95233c19db5a93c3a9d7fa85fab34a76de4e53580ef8218b7","ssdeep":"768:M0V8vg1hNgqOW+Gy8Q33F7GwamoUL8/U541sXhBEqV7l:M0V8vg1kqOW+pj33F71amN8D1qV7l","tlshash":"a7030ac5b321606243d7919380b50103f329a999580a445cbb7ceefba97cec9b1f6f76","first_seen":"2026-05-06T08:50:00.494723Z","last_seen":"2026-10-13T16:12:52.246742Z","times_seen":5,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/redesign/theme-moon-icon.svg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.397Z","timestamp":1791907852397,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/redesign/theme-moon-icon.svg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y7kAphRRicU6faESUgNSzYuR0nO8X0Nrz7h3sHje59jero2o0KCCioaYMc8n2iftHWAMsWuoZcsjDxMndNi6PTdZqFAASIXWSfh1cBfRcHHkZvRYM0G10DaHlHmTnorAAiOG6dlHFo7VuCdp\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\netag: W/\"05b2556b641370125abf027843244c01\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9ded79670b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/aviator.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.603Z","timestamp":1791907852603,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/aviator.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2736\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"953b29f5846435c2910697fc33bc573e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UdkaUT6auqT04aAN8GF03k4b9WuyyEtVF3ElmRebsovjpVuhZJrr7giE5vYRd0M19H%2Fgzfg8loLYQP5oMtnXggRbzHzSnIrkuPpv7k53DR5tlvRHZT5m3MmeWFe7tBO79mSZxos7OdhPXNTc\"}]}\r\ncf-ray: a49f9deeba6c0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/redesign/twitter.svg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.627Z","timestamp":1791907852627,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/redesign/twitter.svg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3IzRNU8z%2Bf7prjGO9ErCi%2B9FBILLBZhAo2AA149qYnxwbcUg4JD7o%2B1UqJzE1yJS30UseoChhUgD5Ydrf5eFmWbyBzZ9DyWzqgjKITxJ3YVZ0UL1Kd3555iahXz2X%2BXy8foe36KEsWjJ6W7t\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\netag: W/\"89817bdbfa3476ff737d69a9f6725cee\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9deeea900b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/award-slot3.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.842Z","timestamp":1791907852842,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/award-slot3.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/golden-coin-link/Logo_Golden_Coins_Link.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.494Z","timestamp":1791907856494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/golden-coin-link/Logo_Golden_Coins_Link.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 535860\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"ba08f48a04ca872848b882136740ccb9\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yOrd%2BKdFIeGvEkIGhx2xgJi4PVrUmOkNhkgguQdIXMYgFncYwGBy9YLxXVV4RIvIF026%2FBgFu%2F0zwLDuBG2ILU4XdEIfz%2Bsv05c4LfhmseF6Mg33zpeZ1wsBp1aSkC%2BQ%2BrUK5bnv3ip%2BrHBG\"}]}\r\ncf-ray: a49f9e071d040b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":535860,"size_decoded":536587,"mime_type":"image/png","magic":"PNG image data, 680 x 680, 8-bit/color RGBA, non-interlaced","md5":"ba08f48a04ca872848b882136740ccb9","sha1":"0aaea71914b6d4a1bae422b182f48f9aedb7d65d","sha256":"21456e9ec05f9db67dac9ec1291fa09e1b0734ba355a12103c9592c5bb97c48c","sha512":"00518dc8440a12a112a3acabe569d7662ed104d8141f420210a2ebc2928d9c3fee32fe6b6ce51ea63a2f46c438c93b4c81d4dde203125377edb7bdb8155c9dab","ssdeep":"12288:zTcrwgPKVOA2a7U/kzgpsw/uxMob1A1r7TxGcnvrLHQbumMyA7:zTcrgVOAi/3psw/8MokVzvob07","tlshash":"72b42326d1d7867fc12b55de54669d31a8292673ef2c1339d87ec291028da3f0223fb2","first_seen":"2026-09-19T02:54:18.28655Z","last_seen":"2026-10-13T16:12:52.247609Z","times_seen":4,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":455,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/high-wins/4469.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.734Z","timestamp":1791907857734,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/high-wins/4469.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 238588\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"03f9f043758036ad40c6988e69a066ee\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tx%2BFgjPb0ZgHq%2FMDm568wCkfQf7t8RIMHaSguZfXmpTiJnJjHpf%2Bo7MxjZjpPASEvSuNEuNcz5whTRrMdEVQlMfKC%2BPvlRwOc5EgyefIfkH6tHJvlvJRzg4Lesljcr7E%2BKXRib77%2B7m2OD89\"}]}\r\ncf-ray: a49f9e0eda890b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238588,"size_decoded":239314,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 696x1260, components 3","md5":"03f9f043758036ad40c6988e69a066ee","sha1":"c737b8c01b4f59e3c726edafd956b88a84e239be","sha256":"a597c4ad9f5d5255c2f0a011d68d651e19f61ea3ef6892032e07fbf5a2ed8d56","sha512":"b377d6ce4c8efc73826c3bf89e6042380864b16f5168f92c852f976e3c8391656c142b0cbfa62d2d94eab4c7b7d91fcdeca36143aaebd364c55f27d0af28bdee","ssdeep":"6144:6bsTA5uwhR9CP1NaFxdcvpG4dXilz3V3QFhg7bjh5BF6+9Qj:IhjCtZs4qDaFhE/hZe","tlshash":"c43412b65ae4c8d2e256edb8c3f1934e4330621d268a26cad1f4d4302da573417be7cb","first_seen":"2026-09-25T15:32:43.565832Z","last_seen":"2026-10-13T16:12:52.248405Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0w4sob8x5xfd-.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.318Z","timestamp":1791907852318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0w4sob8x5xfd-.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-78b6\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30902,"size_decoded":10051,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30902), with no line terminators","md5":"7c2ee82e0e001c9a7005d6b6be2c350a","sha1":"ea636a6784ee74ff14d76492e8e45b5dd7a3b371","sha256":"d8904ec9e3969eb601840fa9df30afa130f43943cb471c4d27f382633f6820f3","sha512":"b7ea9e3356f7b4a6b41c826d145fc94922632513c94c0aaec41a9a183696713025673744e31a28829fa5fcac14b1a6be89a3fda0964dccb05dd3dc7f23e7d4fe","ssdeep":"384:q4RBjxykEleEpSvvNdRxijUvqf8J6rtgG4ud8QW9Useice4rp17efYjYveC1SW3B:q4R1xy3lA9dijUvGP7efq5CN3LeBDI","tlshash":"45d2a5a971d5f4910b9354b5803f500bf23e0d76286da0a4a3f2ddeab9b054ed133f9a","first_seen":"2026-10-13T16:02:14.486593Z","last_seen":"2026-10-13T16:12:52.211121Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/jackpot/minor.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.795Z","timestamp":1791907852795,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/jackpot/minor.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 42792\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"ed04f2d6008542c43e71b855c26ddf05\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASY914SkEDqfwFOUx%2FxDE7Q5gSkQyP2glSXa5dMk7AeBSCGKcxE%2FCbIGwEB0yUQhCLs%2BOx0AuJ%2BbHcUg2enr3Ir3gvG8KA5OYi17IbOCuJzBpgctBYVT89KbYBwFNxoQ4bASiU8aoWux%2F9xo\"}]}\r\ncf-ray: a49f9deffb5e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/187jubqbbak9g.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.159Z","timestamp":1791907856159,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/187jubqbbak9g.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-679a\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26522,"size_decoded":9639,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26522), with no line terminators","md5":"b5f608247527c0a4e4082b96c1d7708a","sha1":"7584d7f99b182fd11a924f3272f8d191300f2b32","sha256":"2bb6b56afffc96f7cb037cac0f2db505222c5dcd74aef693a6bf3ae99add7c41","sha512":"44e648ab0d87f298eb13689a1363f32b29efc1b95a7d78b57eb87ceee3f9bece8aa3b32975d78a4af3f5bf923f1c848db8520d2ba35d20d4d5593fe513c1b360","ssdeep":"384:lt/PMbqZ8w1SMaFWSiE1Ff8IiUrGbUKWb7qhitiA/MXdjzq/Kp:XZ8wcrrGHWb7q5EKp","tlshash":"3ac2a635694705be2aeed3d7e05ceb95cd391602e0198b0ce3878f319748be8528bb1d","first_seen":"2026-05-18T15:42:31.944521Z","last_seen":"2026-10-13T16:12:52.249162Z","times_seen":15,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/33434-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.302Z","timestamp":1791907856302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/egt-digital/33434-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 873614\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"095a5950126d8d3d6d8a9a8f3dd81603\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:29 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ptIImo1ZfU9JD%2FFSGpJgYFKe6YQeuZG8yua3leGNzaKdQMIkKmAUbcr3Xc98rvqZdAybQr62jxRPFk4bqMddmGFkPot6CZ%2FC8kieW6EWYRbqEOsR%2BeuYqg2xII1e%2FXx1%2FV9y6qHAl6%2B4n5B\"}]}\r\ncf-ray: a49f9e05dbbf0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":873614,"size_decoded":874339,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"095a5950126d8d3d6d8a9a8f3dd81603","sha1":"3934dafcf8c634a3cdb47f389d1b2c3ce224c291","sha256":"e5c1bd11059ab6e0cb9038561910f1072cfe18e7c9dfc518055d437649721c4e","sha512":"b035c2cd510ddae5e16f17a57e582c0e43129428ba0e93249666781e2c0242128c3f590d6f19534991ba3d4a7ca9eceec9ceefd6680fa9fc2db1535757f8762e","ssdeep":"24576:VQ3FxsRZCsqWHwMLGyQiqHGRRN5ZkEL15J53eKZ225v5ykyG:3RZC6QMLG0BRRNI+u/25vwG","tlshash":"4e0523d783170122dc94cf7f30c918b86ca34c3f6b525e255ea1eb6272ae517758fa22","first_seen":"2026-10-12T18:41:56.979978Z","last_seen":"2026-10-13T16:12:52.250502Z","times_seen":3,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":487,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/mac.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.346Z","timestamp":1791907856346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/mac.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 1834\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"a41fea16c8d77117634220bb882b72ba\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2eFz0JJ%2F1eaGMgr4ZW0Dr0cdlP0glRi7ax8HluZqcLJTEHojoL9TwJVC5JtaW2TTy1CMb%2B4jc6fvFwsDv3LHLtExqTeDzSiQYbQ19T0o0uSmx20q5Tju43%2FD053zpjTcWyDF6cW90r86%2F7FB\"}]}\r\ncf-ray: a49f9e062c040b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1834,"size_decoded":2553,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a41fea16c8d77117634220bb882b72ba","sha1":"b23c527eec80586eb245aacc87900f42546cf2f8","sha256":"960338767660a46d09c2d8605d4447b66929fb48b20b774f30c870ebe70cbb83","sha512":"9a637d36c30cc0baf5a8a61a9f1a3fd5837c9cea38fb0415092ef4b279a141da716980421eeb72e28322febd3928ac44c7a583fe607cc571121c50c7d502d848","ssdeep":"","tlshash":"df310bd2a13e6bcc003ed661653c6d36119f6098722731f101af9d47d1c99fca764c16","first_seen":"2026-06-23T11:19:31.015122Z","last_seen":"2026-10-13T16:12:52.251332Z","times_seen":9,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/team_logos/347.png","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.510Z","timestamp":1791907856510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upaflex.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:25:58 GMT","end":"Wed, 30 Dec 2026 16:25:57 GMT"},"fingerprint":{"sha1":"E7:05:1F:1E:A4:FD:0B:B5:FC:09:40:CD:E0:55:E1:28:D6:5B:78:E5","sha256":"C3:D1:9F:1C:81:C8:C0:4A:93:F0:62:A5:B4:C1:36:3A:40:46:75:D2:82:B4:D7:29:40:40:38:94:09:F2:93:0D"}}},"request":{"raw":"GET /team_logos/347.png HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oTgA4vGI1h2GSUDC42VI7aNX2iK4TVekUD3Mllr4bZeW3Gf35mnKw9ZwLr9bCVfGSDqoOXsA029IzWISEoDIrUXsyyhEFEaNChDJFjZkeR50lieBWmMYH7T3Hm6zZtthoREifCg%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e072c74b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/cf-fonts/s/titillium-web/5.2.8/latin/600/normal.woff2","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.683Z","timestamp":1791907857683,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /cf-fonts/s/titillium-web/5.2.8/latin/600/normal.woff2 HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.kbkrw8839xwdwqe31.com/mk/titillium.css\r\nOrigin: https://mrking20056.com\r\nSec-GPC: 1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 12116\r\netag: \"b65bd9e79f1dd93eb8e0cd83e3fe62f9\"\r\nlast-modified: Fri, 09 Oct 2026 21:31:21 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 6011\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2f4jCuGRhCKh1YL1QwmzIU49NMEpA%2F5%2B3owuvSd5y87iLk3e4CqnSOuLgWn2tCkHR6zJjhiFdPbzpEsAk7b%2FR0Y%2FX%2F%2B1P8EduhS4%2Fc46gKfSFNpCXOv0f9dyXgsAIsQ%2Fbr1jgSDZHlBxDzuD\"}]}\r\ncf-ray: a49f9e0e8a2f0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12116,"size_decoded":12889,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12116, version 1.0","md5":"b65bd9e79f1dd93eb8e0cd83e3fe62f9","sha1":"3bb357672e2c3942ca0f67d8861aea3cb80284b9","sha256":"f356ff5613e1b6789a47ae3bd6b72fa6fb61d44493811bcb758fb4229b7a8bcb","sha512":"b030ef30e20ab608a54e6744c2d2108513d6181674e0e1e360fd3530453fe9fbb50786fb854448b70fe472d091ef88485f38c54d4de6c3b0445697bdac01ab21","ssdeep":"192:IZMY5n8XHp+fpbeY2swnzsDHycy2a/xwAJK0ANVtQR3TpOYEQFN66R+xx415OpnE:IqY583pwXwwDScyuAJ+Vt66Q3FExb6","tlshash":"b442bf8ada8ee683e3f567717b3e09474d9a2843ee79f8995b03012095b00906658e88","first_seen":"2025-06-03T21:25:26.821297Z","last_seen":"2026-10-13T16:12:52.252088Z","times_seen":4695,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/maestro.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.364Z","timestamp":1791907856364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/maestro.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 24710\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"57288149d21707f706cc0bafea472359\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=POjqcdQJqWpki8oHgd7foHNrT6KTQDwAVaH8UHMDk2o3uQwLnqovrnymIlFbLsIIsDjdx59DlgDKeGZhA6d%2FkWF5nBbkj4KNprV51uch047Ot97IWrT2LpIvhGNM7JKWArspRXGiuJTHBdz0\"}]}\r\ncf-ray: a49f9e064c310b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24710,"size_decoded":25424,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57288149d21707f706cc0bafea472359","sha1":"58562031cded72bf5c6591c87f496f5756a5c01b","sha256":"4943f65ff8035101286bc64d0d726f372fcc6bde34a2e030e7a802ba24debf1f","sha512":"d661c697ebf4329ad0053e9a10cda4e47bd6d28340561442b623730b8f4cfa8d4986d534f44ef2af9a5b1f0d38c6eaf34d98cb594d98e8e6f3e4af8dfe8f0e21","ssdeep":"768:msW9h6oKD4ugeHFwHRZ39Zdge2WLXlAAwoJr5K:mv9XbNelUdhTwo2","tlshash":"e0b2d02ec41ea508d278d710a66c708cb2c9aaa966efb3775fc991dfd6c450230db1e4","first_seen":"2026-06-23T11:19:31.06711Z","last_seen":"2026-10-13T16:12:52.252864Z","times_seen":8,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/merit.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.574Z","timestamp":1791907852574,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/merit.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 8764\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"d9da44a78b2df481ddffc7a0f94e63bb\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IVmwWgawl6%2By7eH8Ni0pgTik7JpKWuiDvIEmOb26CoUJ5M%2BOD%2F7rfcD8jyWxyT9Xlc05whBg%2BizWPaWSj3BdODOPJp4plYsYLkFkuhGQKhXY9On6Caow4MuNA03Oi9oHgBKkRJJAupQ5ztts\"}]}\r\ncf-ray: a49f9dee9a3b0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/spaceman.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.614Z","timestamp":1791907852614,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/spaceman.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 11210\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"0f070068176376c5651f31711fedda49\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oUV6VSgDyq7Qcv5SHjYns%2FUqrcSC4wEDJGwlkpcDdTsdhGBqiVqKOdsd19qaTHuVhS1REWfOlA%2BFy82ZMz5xdmZ%2FLvoNq2tL2O0htiLBDvNftkng3P8tJeDpXHweiWzGgPGNCUih%2BY5%2FpTk%2F\"}]}\r\ncf-ray: a49f9deeda7e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/category/slot-mania?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.821Z","timestamp":1791907857821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /slot/category/slot-mania?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":303,"size_decoded":783,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (302)","md5":"5402e4ce0092547402f9a84351ae7fa7","sha1":"926f23e2192a67998ca54ac04f252ee9d7e0ce3a","sha256":"9f4bf4d990915b69190fe2b4c7c2e040a4e340fa17b4c12d968766615e61e5de","sha512":"31979fda70e59641cb4bd139ec4616313f97fa512d17e9d6036567c5d107e085a4cf171eac7b7b96bcec00e5414b8554645bf18c5c2bd3fbf148c9d1f0a9c0cc","ssdeep":"","tlshash":"4ae0862b830419b21cfa00d0803ed84b690e163b12e95cf480a41f3427e317a15472e2","first_seen":"2026-10-13T16:02:14.477806Z","last_seen":"2026-10-13T16:12:52.253599Z","times_seen":2,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/comments?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.236Z","timestamp":1791907858236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /comments?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":213,"size_decoded":753,"mime_type":"text/x-component","magic":"ASCII text","md5":"0dc24fe56a4b8ec02658692bab367ed2","sha1":"9230fa7ccb3cbc9741dab48868b2975efaff529e","sha256":"05b39a35d70a5a5acdfbedbd9bfde4b4a22061349358d9679b6fbc6781a5c413","sha512":"93ba7b1421c77a7a1fde2c6a80acfa23a354f719dc7adffd994ece11df54dafe410596ebf19c0756cac66045856f7ff8fe3462372dae5108a4ce73046d6b2013","ssdeep":"","tlshash":"2ad0a72b420414721cfe10d0803de807564e563b12dc5cf0c0651e3937e327946931e3","first_seen":"2026-10-13T16:02:14.564257Z","last_seen":"2026-10-13T16:12:52.254838Z","times_seen":2,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/promotions?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.431Z","timestamp":1791907858431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /promotions?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":215,"size_decoded":754,"mime_type":"text/x-component","magic":"ASCII text","md5":"2b4a18021ec56cd73a57b9004f1ddbfd","sha1":"ca8b3839a812be0132ce36435f8917c4e57245e5","sha256":"1d0e52978f421f1a5492b761a76c06b0791aade6ada0deea5a5488a14e5bc4a0","sha512":"bc2d391706a3bde5168223145d986ac4e50e03889752d67071d2574ad8f87524b5ab796a29c0ab91b21e1e9f29eb0eec1676664f477bd1faf9ae961d54c3fb28","ssdeep":"","tlshash":"a0d0522a820419b21caa10e5806ee84b664e963b22a858f080642e2927e327946932a2","first_seen":"2026-10-13T16:02:14.595842Z","last_seen":"2026-10-13T16:12:52.256Z","times_seen":2,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/pilot.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.361Z","timestamp":1791907856361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/pilot.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2730\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"ebada2b5fdd3903c9aa7a67a4b2c935d\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=acJTRKNx3x1%2BymuOSRPZ%2FMh3cGNRSZJHLwBGdCmBR4hAUxa4hYGPZaq89HQnarHYVx%2B%2BvY6kCBgUb5eEv43WG7VFmRWtwVnEveUhiXMGR%2BGlV4VLnhhArenHa4CtITxgzJzU6GiQuc0bh3nf\"}]}\r\ncf-ray: a49f9e063c2c0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2730,"size_decoded":3451,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebada2b5fdd3903c9aa7a67a4b2c935d","sha1":"0632b9b9b0b0ff60418e7f8dbc485a25b503ef54","sha256":"7b6b803c288cb3b9c047d558e2d3daac85d8a9d9030e0b81ffa319a4bf843a48","sha512":"12db70706b64dbee1df4e987acc31b4651bbdcd2a7fe38ce3bd546c9d9a20d4f74957ffad63815a4264b8823048374b681d874191cb14c731651525d151e1d27","ssdeep":"","tlshash":"94516c9ee89ee849c0ab07243814d7d57271db984161993de7f4c4703434e81e4ff98c","first_seen":"2026-06-23T11:19:30.997217Z","last_seen":"2026-10-13T16:12:52.257341Z","times_seen":9,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/jackpotplay.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.478Z","timestamp":1791907856478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/jackpotplay.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 46951\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"e1c38d840617ef1d8423f6bf40b15196\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KJrdy4D%2FhwV8UZUKfsKSPqQerpWSejTQpiwisSLiZdDSNP2e9R8nJplW4cAIUAF1yrNjnCskHWq808MWES8fFMqYIzdP5BiCr8uXY4ThLUdLUijuoX0kRJa9upKj%2FTiYms9AUtEXdyALWTDD\"}]}\r\ncf-ray: a49f9e06fced0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46951,"size_decoded":47667,"mime_type":"image/png","magic":"PNG image data, 300 x 133, 8-bit/color RGBA, non-interlaced","md5":"e1c38d840617ef1d8423f6bf40b15196","sha1":"dbc71f626ca982dc13eaf1b37c219c2eda27a099","sha256":"0d2bc0600e28d3072e62f07a617863a0206f63ec2b4eff7992e09e90392dbd93","sha512":"9c306cf507658f53f363745200a9e5c66a8eee136d133782969bafe221e2b449f98631c5b1ad2a85ff819a066c7c2726c001f4e1e692bf4d27309d77af3d4fe5","ssdeep":"768:/EY4g19avesy6qbsp7WHG1DXzyNQ6CXcqzLQEqw7SJ6b0aLRggFr168s1Va/:/n9vsEspv1Vsds7F02t68sr4","tlshash":"01230252d5b42caca824f6ec42f930fbda3b032ac0809907b89254f7de4495ae61477f","first_seen":"2024-10-04T10:11:53.251898Z","last_seen":"2026-10-13T16:12:52.25809Z","times_seen":18,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/high-wins/69.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.736Z","timestamp":1791907857736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/high-wins/69.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 196751\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"8b76b3847a5c728ac426d63bfa8cefd9\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vvv7M%2BsDY7dy4txjYuD%2FzisafbOyS5dtELVjzw26iPJ5s%2FydxTcxGqGhn9ha4QAbIxQuLJIHzKEKUXzaRP2cts1CvJCmL7bqOMJGkFBv6Iwq1%2Ft2KfnXgr4yVeZbn8YANeQZpQTxsefDhb%2BJ\"}]}\r\ncf-ray: a49f9e0eda8e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196751,"size_decoded":197475,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 696x1260, components 3","md5":"8b76b3847a5c728ac426d63bfa8cefd9","sha1":"696ab7a2154c33c05126c9ad3d00f5c3c293a025","sha256":"103479de51e18ec27d3a4d944cd8d3d5d1673980eb7b7059694851f0995da752","sha512":"17d592518b5a8ee3853b4cdd25ad2b41154d971f6b9156bc4714925fd23bd1b3bf944c17ed2dbeb26b11dbcd3168cd4a88850e8a659c27f50db68e00c35699c6","ssdeep":"6144:RezyxIEUT3POXv1SjzzsfroCIVjftWZlAcDLQ:TNUT3mYPzidIVjfelxnQ","tlshash":"9c1422fedae9cd06df746f3865e4420a1090f2237540c38412ff4aa61ff77b9256628a","first_seen":"2024-10-04T10:11:53.272892Z","last_seen":"2026-10-13T16:12:52.258799Z","times_seen":5,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/assets/games/relaxgaming-4dealswiththedevil.png?v=1","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.269Z","timestamp":1791907858269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upaflex.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:25:58 GMT","end":"Wed, 30 Dec 2026 16:25:57 GMT"},"fingerprint":{"sha1":"E7:05:1F:1E:A4:FD:0B:B5:FC:09:40:CD:E0:55:E1:28:D6:5B:78:E5","sha256":"C3:D1:9F:1C:81:C8:C0:4A:93:F0:62:A5:B4:C1:36:3A:40:46:75:D2:82:B4:D7:29:40:40:38:94:09:F2:93:0D"}}},"request":{"raw":"GET /assets/games/relaxgaming-4dealswiththedevil.png?v=1 HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 223468\r\nserver: cloudflare\r\nlast-modified: Sat, 05 Sep 2026 11:33:14 GMT\r\netag: \"6a9bfdfa-368ec\"\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=856lSnApT4OuiTP4W6ijYyOiWj1ZOZjyZcFXZyBdwqpz3YOeHcZsdNu5rbu0NY9Io5N%2F2ZogOX%2FF1MVK3kVwwNBUA3I%2F8oBv8c2jdJ1D5%2FydRDBK93b97tHkbPOMkwHN7KeMzkY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49f9e122f77b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223468,"size_decoded":224121,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"889599e892cf7527684b2946af31361b","sha1":"1ff84bd4beda9a764ed5e068d6414b3d0402f249","sha256":"39b8fdcc5aabfcada0b99d0fe2b998926dc3ac50fe7846982addac87f530dc45","sha512":"24f99603d5756ab02b0874fdd05530f3c3fa0262b40de53df4242bcf1964e8bd602f9c9ca35039a21acd047ea0455fafe302f3eda42dcb2dda9718eed0b49a63","ssdeep":"6144:VWhosHHYXKoZc9YPml4ZJwlgkpFuIBBf3qpNIOY:VZ0ghM+fXwlgk7fa0n","tlshash":"0a2423f1e19e219e9f77808402a66b01fc96702ba1fafe104bf4bad81ded5b45d46370","first_seen":"2026-10-13T16:12:52.259495Z","last_seen":"2026-10-13T16:12:52.259495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt/27142.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.271Z","timestamp":1791907858271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/egt/27142.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40936\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"73898871a9856a8e900b6943112aee0d\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:27 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cbj7xHV6LsMYDQpsX9I8hT9VxWukXysz4LwAfi5NaQ8KIqR4xUs%2FXuzwFcCFnAPlOUgEPNj%2BFKGoUDXdJSEcpDSRi9rDUkZ20al5caDy2mrcEyIM3twuI0DgYGDczCMqN8WOywRUloi9dD5M\"}]}\r\ncf-ray: a49f9e122d560b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40936,"size_decoded":41640,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"73898871a9856a8e900b6943112aee0d","sha1":"3b9fa106bdfc7ce3b76d73b19b3aa94d15173af3","sha256":"4dfc3fc5f27f4da3c19065c7ced14efb5e02ecd6e998b2ed887e3330df599c47","sha512":"09b91e7ce9c1c6173e4639d6785059b0e6e11112dfec9e6366976d07470a2718696120321581ba6fdb6ac474b3b58260ba6efc056a264a8dd6f4e50a41678c4a","ssdeep":"768:vdD2EBC9Ch3mO2lVt5zPmQHyytUdez0uQupw2EPnuVcWcp0EnS:VKzCI15rmQSyid20apAPR1S","tlshash":"5c03f2bb11c0994ffe30a27f7c5402a393997933a693cbb15539902f0bfb615944746e","first_seen":"2026-10-13T16:12:52.261674Z","last_seen":"2026-10-13T16:12:52.261674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"frxchat.site/widget.js","fqdn":"frxchat.site","domain":"frxchat.site","tld":"site"},"ip":{"addr":"104.21.2.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.292Z","timestamp":1791907858292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frxchat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 21:12:04 GMT","end":"Wed, 09 Dec 2026 22:12:00 GMT"},"fingerprint":{"sha1":"B8:63:0C:55:52:E6:FD:F8:2B:F1:2D:B7:DF:3C:37:32:FD:23:28:28","sha256":"FE:6B:D9:49:C4:35:8B:CD:96:22:E4:15:55:5C:69:0B:FD:E5:EE:58:9F:12:A8:D5:1C:AF:40:80:17:20:FB:86"}}},"request":{"raw":"GET /widget.js HTTP/1.1\r\nHost: frxchat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 Oct 2026 12:40:51 GMT\r\nvary: Accept-Encoding\r\netag: \"6ac4ec53-1136e\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: public, max-age=300\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WLo40wBZTQxfWx%2BfbnmeCc3EurU9ffNmVaQGn2g6XVFtjbphgZPwt%2FhjTqPVtPkSH98gnYmi7RJ7IZ%2B2%2FKzLj4%2BFqXm57YmNiEsJ4AvP2nRvTPzYtsw0QnaGywvwH6U%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a49f9e129e2b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70510,"size_decoded":24459,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44538)","md5":"598e21d6b73171ace8db8944de614ffe","sha1":"862a18d5dc4e84d92b21c362457dc14f967a0ba6","sha256":"d9a1183d605bef46cfd89feea9215b32d26f1c1485dc9da0e88247142bd12124","sha512":"bc9957f9bab9c973fa9fe5b982e8939b89d9fa740327afe7916bd20a261d4e719b32ede812ce2c91206f03479c9a4e7355b1e39622065a16fbeb2d7255e31ccc","ssdeep":"1536:xvoXNhHc893q9Y6+YUr/CXTcIeICSZgeTu/1qrAUa10rj62l62yyi8j6:xv6Y89a9Y6+YUr/aTcIeIJZgf/UAUe2u","tlshash":"1b634b90715c7138e42fa2d071b94e1df23a3695b487b2e0e26eac3922d5ad47163fdc","first_seen":"2026-10-13T16:12:52.263654Z","last_seen":"2026-10-13T16:12:52.263654Z","times_seen":1,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":24,"connect":16,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:59.067Z","timestamp":1791907859067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /slot?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 307 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:59 GMT\r\nlocation: /slot/category/populer-oyunlar?_rsc=1r34m\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/x-component","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/mac.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.587Z","timestamp":1791907852587,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/mac.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1834\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"a41fea16c8d77117634220bb882b72ba\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EupxBvxTHhrPKhzFWkkNXooDJYh10KPEzYD%2Fhl9McwkksnRsAzo3zPfD7HSTPLyLQs8PY5NujjJ47JUZt%2FjohlgOhxKvqcZkCM9AYJr3%2Fzo4xvRtrc4KsDfwVjBmH4Mq11p4lD9L%2FRu4BssR\"}]}\r\ncf-ray: a49f9deeaa500b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/team_logos/345.png","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.513Z","timestamp":1791907856513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upaflex.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:25:58 GMT","end":"Wed, 30 Dec 2026 16:25:57 GMT"},"fingerprint":{"sha1":"E7:05:1F:1E:A4:FD:0B:B5:FC:09:40:CD:E0:55:E1:28:D6:5B:78:E5","sha256":"C3:D1:9F:1C:81:C8:C0:4A:93:F0:62:A5:B4:C1:36:3A:40:46:75:D2:82:B4:D7:29:40:40:38:94:09:F2:93:0D"}}},"request":{"raw":"GET /team_logos/345.png HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5X1r40UCFH4R6juREDZLyVF3plZbIAJAXWlhunIcTc5ZfAmNjOMdpcsxlDkqjCZk1Do51eifY7a%2BaUffMmWAi3tnyP99ZlmfVLYcWczbNe5R2civNNQIsEcrNoOkVqwn%2F3EfhA%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e073c80b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jvrwolveq00dcsx.online/native-images/oaks-3_olymp_fortunes.webp?v=1786756231527","fqdn":"cdn.jvrwolveq00dcsx.online","domain":"jvrwolveq00dcsx.online","tld":"online"},"ip":{"addr":"104.21.19.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.254Z","timestamp":1791907858254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cfa24eff.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Sep 2026 02:48:16 GMT","end":"Wed, 16 Dec 2026 03:48:11 GMT"},"fingerprint":{"sha1":"DA:EA:9C:15:AA:31:A0:7E:7D:CA:BF:B7:9B:BF:3E:1A:E2:89:75:6E","sha256":"22:04:8E:BF:D0:35:CE:DF:0D:63:40:30:2F:EC:2F:CE:7E:CF:29:5D:8E:37:F6:81:F5:4B:C8:3C:C5:A0:96:76"}}},"request":{"raw":"GET /native-images/oaks-3_olymp_fortunes.webp?v=1786756231527 HTTP/1.1\r\nHost: cdn.jvrwolveq00dcsx.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40786\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"3a4fff83ac77cca1a1f4080f89f50043\"\r\nlast-modified: Sat, 15 Aug 2026 01:10:31 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GGcdjrs4xHD9CXHam4jcaHIOKGMkUHu%2BNKmgJddsWb04%2Fn%2FCS5jvnbvLhq15WNAwefo9zPQ4%2Bgut0T0CNkhQvOcE3A4GCwWAAXEuETg3cJAVpjKglXewZ9ceKifbGV2YP5VgkOl9mcm70k4rsQ%3D%3D\"}]}\r\ncf-ray: a49f9e126f38b4ed-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40786,"size_decoded":41484,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a4fff83ac77cca1a1f4080f89f50043","sha1":"887190582786560b34d2cb0ce79b06e8d7f1b439","sha256":"66fb0a9763977112c589bf3af554cbb887f46bc091b765bb724f5bf820dfafef","sha512":"7bed9d9555c5cf629ec0f68ce3416d9eb4c1aebe9e0cf33c76d624da1f44b55a1698b36fab33ca218d766608f67b7fc9d022c5e1703b490075e1c331d34b135a","ssdeep":"768:M0P6DL/pFyU1TRTqmatqG4QynzxE+AKw6IPc0WtAkKKLGyJygOnck/eaJ+4:9wd9TRT3PXz2Cw/WeFylbWeG","tlshash":"8003e1907a831f2ab3da9b495ca1f7d61f857a990900fc318746db705622473edfe288","first_seen":"2026-10-13T16:12:52.265563Z","last_seen":"2026-10-13T16:12:52.265563Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":35,"connect":11,"send":0,"wait":89,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cdn.jvrwolveq00dcsx.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/casino?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:59.066Z","timestamp":1791907859066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /casino?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:59 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":211,"size_decoded":750,"mime_type":"text/x-component","magic":"ASCII text","md5":"6d63f777ce81156f4ee375c7ac66d59e","sha1":"3b861db2e446a9caec880fb85259d99257b15a09","sha256":"3c738fa152291c0a6b15fd511b1dc22e8fc59c0c65e5fe531117963be38325e5","sha512":"d2a96367c55b46aca9039d70f67eae0494e34a1032721beab8c002272e4be95a74d01001fa4b49ad816c7813fb3679e953cb12f76b82d5655149b1df8fd82322","ssdeep":"","tlshash":"b5d05e2b420515721cea10d0802de8075a4a563b12d858f080641e2927a317946931e2","first_seen":"2026-10-13T16:12:52.267776Z","last_seen":"2026-10-13T16:12:52.267776Z","times_seen":1,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/comments?_rsc=p37cr","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:59.424Z","timestamp":1791907859424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /comments?_rsc=p37cr HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:59 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2623,"size_decoded":1682,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1605)","md5":"b5d96f5548db075d43709f2bccb6946f","sha1":"806dba9cfde994b6fac46272a2a0d1dcbf92f509","sha256":"be47e550ba59d320ff245e9589673422e46e8efca561e9973f0842ab434c3def","sha512":"58e1972320060ddb4192a39eb6dcb0455c9b7b587c8b18d060daca8625da28c5b36a5852f852739cd70df19722fc05182afd920124cbcdd3fd5d284ce1e99dd2","ssdeep":"","tlshash":"1e51113fa900dc2da6e7858500efa30e674c573b97607c7ac54d9e0a27c927e5fa13a0","first_seen":"2026-10-13T16:12:52.26963Z","last_seen":"2026-10-13T16:12:52.26963Z","times_seen":1,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0m97bbjp.vgzu.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.315Z","timestamp":1791907852315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0m97bbjp.vgzu.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-199e\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6558,"size_decoded":2740,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3119)","md5":"f98b1049da2dbbdd15077835f8113ee0","sha1":"181cce91546bdc2ab83b6278f5013dbeda5c6044","sha256":"bcf5020ac0266a80668e75fe1d7c08d3c4bf8c9ca4441496334d15653ccfa126","sha512":"c3c62a6f3ed685c9e48cda3a26e3ee1ee7ff90a72cf0fdd37fcc04eadb4e9c377eb4d1e47dbf5d35a03843e8e70379b41149d9c05960c41b1e9f0f4c34acc280","ssdeep":"96:mnQigpuv2J/Hx52j45y5Iie0RES0/0QPf5v2yA7sa6Rbxmqv2P:KQigp5MDhEB/0IMyAZox2P","tlshash":"b4d1d820f285e89b775a00985477a00ef214342a9bb4f87177dc54f21bc05f67d6abe8","first_seen":"2026-03-26T05:53:20.913278Z","last_seen":"2026-10-13T20:23:23.739094Z","times_seen":917,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/footer/gambleaware.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.409Z","timestamp":1791907852409,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/footer/gambleaware.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 31055\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"ff98f02210f7ed9138b4a6e19902d513\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:24 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=chqFPL0O5GevzQhLZS0%2BHjF6aJ0sdqCwRsG%2F1lGsy7KLPWz1Wn2vSvly%2FQVnHAMZ3WACysrK9TLffkddFydt401Ep2YYssRW%2BUktm2tmdbeE0EcmUdAyRZ9HcLmrWCgj0Rj1hyjOmJsUeAJg\"}]}\r\ncf-ray: a49f9ded89780b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/17060.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.757Z","timestamp":1791907852757,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/17060.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 485906\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"de904100c5272a09ed4b3760583bc135\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:35 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yT4o0Kx%2FAwZSQEv%2F7t3MPE6InkJDKRREjHSvHQ7bg63aLkcRREY5FrqtOmqYzNsnH5hxOco1DVhXPnoPQrOctBWr52Lcrf%2FH%2BEhsSIA6gDW7wzeFioYv4Vo9tneE86XsgvTJDegm5umcGVFd\"}]}\r\ncf-ray: a49f9defbb190b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/turbopack-0ac-0dsb__677.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.149Z","timestamp":1791907856149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-0ac-0dsb__677.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-2976\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10614,"size_decoded":4806,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10614), with no line terminators","md5":"16053cbf9683d6a4c7d9459940c2d9b5","sha1":"330d66e74aeb48b07a8c53fc48d6a7b38742014b","sha256":"cafbcaa83753d9f7bc45744fad0316ceb3e0104981184d5ab942a4424fe5cd74","sha512":"dc48eeab7df341a228cfdc7505354d8dc3e01b35e3d791023ae6f7806dd7387a866119c08cf0b3c20118a8c19c8dd42b5991fea018e339f077d418b5db2c1eab","ssdeep":"192:o4gM6B68gEsg6d2hE7oGkldTTN/8S3sBT4fCT3cXX6PpH2:o4gM6VLskl/0ssqCTM7","tlshash":"7d22b6da33a6f07343af94eb906f4004f17984a9145d141cd3aca8eb2c395aa85e7f76","first_seen":"2026-10-13T16:02:14.509162Z","last_seen":"2026-10-13T16:12:52.272248Z","times_seen":2,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/whatsapp.svg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.190Z","timestamp":1791907856190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/whatsapp.svg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F9FcaeGQIt1ww9Xou7VP6oUjUlkuocl4s6FLf70MG7mtyoGy88aWnY4leNSG7sEBcyulanxJe0P%2FGkW7%2BYu6ga74VNlD8gjMMVfasvVntLBTosUq8Pz2S5o89KtoQ7H0Dt3kpEnXhIJs2EHV\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:28:56 GMT\r\netag: W/\"113c371f0a63913cb24beb2b9bf2bdbc\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e052b240b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1935,"size_decoded":1801,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"113c371f0a63913cb24beb2b9bf2bdbc","sha1":"176e3d831ce0f1941c21159c2d6098203e2fb6c5","sha256":"c6592d5ce11949bba59ea621aa60fb29edfea3b58c35e8458c9165916ba3ee35","sha512":"097c9f360011d2838d39f0a03a3b302e4e069d5a92b9fda8333eef362a45b7aae8059cee274e9b231e4a8d85811b4278c34c8f126dd63fdb437df6756e9f997c","ssdeep":"","tlshash":"fe4154e5e3b4e0b2f887c7eecb7948a9391d91fea1414994917ecd08cda28c60741916","first_seen":"2024-01-08T17:23:43Z","last_seen":"2026-10-13T16:12:52.273612Z","times_seen":48,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/redesign/telegram.svg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.384Z","timestamp":1791907856384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/redesign/telegram.svg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PcGS%2FXqXFDMn3Wn0Uv9NYTm6GYAxMPz8%2FnKrsR0w8%2FosersIy9eNZbZsqthPQfuPw5b%2Ffog3LUoobgEr%2Fj0hoFniGHB%2FQT3rJJlGQVzghtLWIUAjkOX%2BC7%2BpjcLrRG9lfWTOmxvSqdT2S2A%2B\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\netag: W/\"8d8d66a0c26fba86dc60ad8043167830\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e066c580b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1332,"size_decoded":1378,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d8d66a0c26fba86dc60ad8043167830","sha1":"11a6de5de1ad1a43866ca868507acae0ddbdd369","sha256":"9d3fc6d341c2ada52d9bc0bf5f1b9f44e54495b68ec1f74d57e28eef30413cc4","sha512":"406db009e172471bb50eaa4c8a7c134700fc8c602e3edef767a6c44bd1a00e8c8ee361a284d8f343049f6bb71b54f0ddde80b548a470583d8ae6a0c5c1c69563","ssdeep":"","tlshash":"3121f369d249d033e019c7e68698d4a53269d0dfa1c08571c1b96e6c4bb0cca074bec6","first_seen":"2024-01-08T17:23:43Z","last_seen":"2026-10-13T16:12:52.274438Z","times_seen":50,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/22065.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.631Z","timestamp":1791907852631,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/22065.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34345\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"9d6ad83358784c7ef52e94a345dcb097\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:36 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2v41tj6Vouc6rumJNxczNSlEo9df%2Fc6jJet20E9PPuudsRMCx2MSf73HD0T3vqL3TGclDEliZC2%2FJ2KbvRZRQjIRSKiJS9V83%2Fju9bPu4K8d5ajZ2O6SohS2f659Kig8U3EgSQxDmHKgB%2Fz\"}]}\r\ncf-ray: a49f9deeea9d0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/boss.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.779Z","timestamp":1791907852779,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/boss.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 28321\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"1d12533de6785a191f90c88e94fe8d55\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nk8tZjhFj9lIOJcHY2EZKhaKbSozN4Z%2BrY7VNdseME8p6B%2F%2FsY6bKor5Ydt1rbSKCsMU2bf9qqvA2mp9Mzcd3ffOtjCrGRjgs4kBaJCVtNYbKxM2RSd7lNs9GZDHqStuLFkjj6wyE2eIJK0p\"}]}\r\ncf-ray: a49f9defdb410b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/cc.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.796Z","timestamp":1791907852796,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/cc.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 25816\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"40cafe00ee3bce445ea1a8751c0fd444\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6CL8TlA%2FqNrA6wpXEjOlaVPnE6uxMr0%2FCcEmu7qJZ0fBPsbL5F7IswOvgtoGSI8aYR8jjc%2BCNLPuoc2lI5mLImhHIo%2BzhrdWXH3qDnTxZEJ7Z%2BAVezKHsopRhgGk%2FlpVg3K1cCXJeg6QYM9R\"}]}\r\ncf-ray: a49f9deffb600b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/virtual/provider/golden-race?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:55.822Z","timestamp":1791907855822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /virtual/provider/golden-race?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:55 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":307,"size_decoded":785,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (306)","md5":"86d2e9ab166b98e6744a76cc4535bda9","sha1":"49eb929ced1bb176e37123a6e7c9a413e49b8fb0","sha256":"3e626a702165de4c7ee61d7eee1ed295fd26c257ebb24b615970af4d01948b98","sha512":"1d3166b3fd5fbb8c443cdb47c85bc566a9da7f0c0b4aeafc7c216e3e4ecf30cd35b0cc26116f53ddbb72f868eadd622b63b207cae4e8fffe09a40c59fca7b2ee","ssdeep":"","tlshash":"99e08627924429b31cbb00c1803ee84ba94e513b12e90cf180b51e3567e327945572e3","first_seen":"2026-10-13T16:02:14.590129Z","last_seen":"2026-10-13T16:12:52.242212Z","times_seen":2,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/34148.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.401Z","timestamp":1791907856401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/34148.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 562994\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"24818d14438b346d681f326ec51f82f7\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:38 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sc%2FbwEf7Mnvd0gyDvbxQoGOUbhve6u%2FzDJv2SCijsm%2Fve8G3VnwEgUCE3svrDs7srmELvq8eDdpg8L2d%2BvUOb28gdKIdmxjThnkKTP2w8ZP%2FzwC4Ba5J9I4d%2FZbcRDH0yNoH0kMuNsP736AN\"}]}\r\ncf-ray: a49f9e067c700b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":562994,"size_decoded":563719,"mime_type":"image/png","magic":"PNG image data, 640 x 480, 8-bit/color RGB, non-interlaced","md5":"24818d14438b346d681f326ec51f82f7","sha1":"3771d4c861a8368d7301a4f1d550dccd17c558c3","sha256":"dfd83e267917c2c6a5a60506ebd5a2a2e9d0ed13cf0bb4b8df55960cce78686a","sha512":"3d1437f29723bd6a44c0121fa7f0a3084d435b1c34b0f2f7c5b76ee67a3ce1fc52852cda7c1dd4fdd72dcfa8fd6387faaafcd2e724f036c698deab2e63b3d731","ssdeep":"12288:pFiWPpiRD6koeqkp79TdursXAAn4qjipuHR5r6Z1S9LO:yWxiRhoeJZTdsgAAn4oipuHRM15","tlshash":"43c423b2cb889c0e15ed511ff0a752a7749d6d77e4eac66404ea0971a033438ffaf1a4","first_seen":"2026-10-12T18:41:56.95575Z","last_seen":"2026-10-13T16:12:52.275224Z","times_seen":3,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":482,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/payments/coinpay_coinpay.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.531Z","timestamp":1791907852531,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/payments/coinpay_coinpay.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 27354\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"00abdaf6bc12a1751e8b7106c60a0b3e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:46 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h9qst3mZOhzovHK3dvFJsPV0r%2FjsLXwTGfkbm43dGrgP7zcw8KGvry812X0UAEmkYNodvp5%2BLQxMZMiK%2BcHRRLUnPNjBtL1%2F1icNiy%2F7vO%2BiAYaxt4ZXUusiFkr0IbkswKXhc%2BIfWTrGRO5L\"}]}\r\ncf-ray: a49f9dee49fa0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/aviatrix?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.797Z","timestamp":1791907858797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /aviatrix?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231,"size_decoded":762,"mime_type":"text/x-component","magic":"ASCII text","md5":"40c079e09289924e891dd34dbef368a6","sha1":"84898b3b30e12302343d6662f2dacc9b1e7f05c6","sha256":"c4f2cb8c05eff7ae0fdb2f48dc05ce3e77a6829df58642acb762b7fe7af96de1","sha512":"63effb2bee87f2f2e616a2f8aea57616967317f0be280625541c8e0986a764309ddc34d8d7df7ff6db86b4c09dda8b57f31ea55d7d2e312b32c19e7c3282f4ad","ssdeep":"","tlshash":"41d05e2b920515b61cba10d0803dec4b6a4e553b22d95cf080941e2937a317546932b2","first_seen":"2026-10-13T16:12:52.27594Z","last_seen":"2026-10-13T16:12:52.27594Z","times_seen":1,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/play/slot/flexrix-chicken-road-two/0?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.851Z","timestamp":1791907858851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /play/slot/flexrix-chicken-road-two/0?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":313,"size_decoded":797,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (312)","md5":"85c6cbd021b46c6c75eaba85e5a4f317","sha1":"9f3091e3439febbd535dff754fa3ca0dbf3c812b","sha256":"1d979164c1d6d32b4168dc65d6eb5be5da732b4f141fa2dbf453a241059a1430","sha512":"bff9d9cbe8ed7eae4f55ca0dbadc331834cf62fca98bf47b6c51e46b7b1dd801d197b1a04535402be1495efa44206530e0bb292a6fe218566fdb8e4f84a71fbd","ssdeep":"","tlshash":"87e0862b820519e32cff00c0803dec4b694e163b62e91df180e41f35279717969832eb","first_seen":"2026-10-13T16:12:52.277509Z","last_seen":"2026-10-13T16:12:52.277509Z","times_seen":1,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0qj-bpzd~-r.p.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.155Z","timestamp":1791907856155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0qj-bpzd~-r.p.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-a0a7\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41127,"size_decoded":15226,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41127), with no line terminators","md5":"8ead45f0906376fc23d57b1289a7f93c","sha1":"be486575efe7beecc77932c5d1ce09947b73101a","sha256":"38f4aae3f9bf688513971b2927efbe2a2e9476f2ee6e60c8c674044614db61ff","sha512":"4411520b05c4d650c16cbc01a5d50d5326340893fce6918fbe86fa012b633aa79708440929d2dda95233c19db5a93c3a9d7fa85fab34a76de4e53580ef8218b7","ssdeep":"768:M0V8vg1hNgqOW+Gy8Q33F7GwamoUL8/U541sXhBEqV7l:M0V8vg1kqOW+pj33F71amN8D1qV7l","tlshash":"a7030ac5b321606243d7919380b50103f329a999580a445cbb7ceefba97cec9b1f6f76","first_seen":"2026-05-06T08:50:00.494723Z","last_seen":"2026-10-13T16:12:52.246742Z","times_seen":5,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/reevo/33392-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.299Z","timestamp":1791907856299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/reevo/33392-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1871205\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"d42342b056d047270f036e7de73003a3\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:39 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qSvmniNXE%2F5OEIX%2F0OJDBVfydtn8FIyxIVp40ns10quL2QI5vLzGjNSoDZOJnRDCT7EXoZKJpzbw%2BVDb36YORa8XFYjwbFMPm7fMpMtVDHy%2F2AAu4rfk3cGHPbHeBZlvlPxtr6Zh0%2BytHmyk\"}]}\r\ncf-ray: a49f9e05dbba0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1871205,"size_decoded":1871929,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"0a26ff5d5a812b187ff51e406d6b08ce","sha1":"816325e4ba3d6e7207584595623b71b1d1ebafd7","sha256":"fc41a5ccab1622842ddf940a87046317e31eecffc36fa02a26a24741388cb8b0","sha512":"a16df4cb36f3a1f0c9001a1aabbe317111bcf667beb17598d57f36a8febc8c662ef2435f35d26058e5157c71f171ca52d07128d5b741f8e25d89037ad825941a","ssdeep":"24576:fuT178QKs/rNCSFB7xrJ/1OHMCyXsfy072Zv1Ano473Ue+zkSqsz:2T1fKs/0SFTrJCx6sKsoe+QSJ","tlshash":"452533b64927f076773649cdb2bd8094a2e7ad4dcbf22c258d1762f703d76058a3b460","first_seen":"2026-10-12T18:41:57.121805Z","last_seen":"2026-10-13T16:12:52.279207Z","times_seen":3,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":764,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/high-wins/89.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.737Z","timestamp":1791907857737,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/high-wins/89.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 293084\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"60bb5a9d95ae412714f206c37e11da1e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B8tE2wPAnDudKqLFF2sZXrN%2FCigFIDp5aDFsUEX0nTa%2FtGsQIFvSIsFvBPsng0dDvef3ywo4Ae1sk3lvXkFuzyGCM9VoPvNYDr8LylIsft7%2BPFZ90HQSf5debcJksGkFRakS7K2WaYSkgCSK\"}]}\r\ncf-ray: a49f9e0eda920b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":293084,"size_decoded":293804,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 696x1260, components 3","md5":"60bb5a9d95ae412714f206c37e11da1e","sha1":"d699e1cc5060db2072a4e1ce571395625e0576d6","sha256":"a86f7b0c6bb71b56e54505eb41112fe7a334f619c65899def972ac1c1f8b43ad","sha512":"2c1a3b0f9f6b4acaea98dcba2c360efbc730726f9c6e9fb71aec0284567b0ccf447c785ffdab8d18903444606a33b70f138fcb9b48de3b5816a6164add81be57","ssdeep":"6144:HOZTRVQl/cNhxtj2vUTuyYWnVVqh4LmjJh2hV5iEH8e:uZIl0NhxtjyUTiWnV44qth2hV51ce","tlshash":"ee5422bb081840c5ecbd5b70eaf14d04c8b5e22e5026c7cbbf54e2f67269622774da61","first_seen":"2026-04-11T14:16:59.603238Z","last_seen":"2026-10-13T16:12:52.280029Z","times_seen":4,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/11gyiit97qm0m.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.331Z","timestamp":1791907852331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/11gyiit97qm0m.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-7eb3\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32435,"size_decoded":13263,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32297), with no line terminators","md5":"acca769c2dbed1652ae7ef8e91ba6374","sha1":"c408ffad278046c1786cff430cc4bf0fff480212","sha256":"05b33679fe0a82ca459af1d3140fb383b471cdc9d862bef78857707bdc764b0e","sha512":"743277747d86e5b0a19245b15c125baf368661443b5b80d54303add9ef9c6a46e81ab4cb0b149de94853b7a82a67e80d6974c2766dbbf18377bb22e4e297e7a9","ssdeep":"768:Tkiy15KkLTBV660rBozsf2v1AnFWEK/LhOXGwrN:TkqknBV6vcsf2d4","tlshash":"24e20ad927553928aba940e5911ed00c312f7d9c9c0f4838b6b85c6a292ddc1f6b3fde","first_seen":"2026-10-13T16:02:14.625738Z","last_seen":"2026-10-13T16:12:52.280821Z","times_seen":2,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/novomatic.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.573Z","timestamp":1791907852573,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/novomatic.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 5818\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"dcd926ae5b1d465c2d20b671c7dc482f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0kCOGv9wwcJfdM0GPexJNpCtiwAPCTulHR8lTTfgzp4uXICcXdCJb5L7kXhZRa20roex3vKUFfZdFx6DzCdvxlvuYdS0AunesBej5JXEGrguTkWiWn69KE65HRoqruVZD%2Barw%2B3mdb4xZlXr\"}]}\r\ncf-ray: a49f9dee9a370b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/bl/grand.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.786Z","timestamp":1791907852786,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/bl/grand.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 49613\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"e94c792ef445aa0d6544440ae49099e9\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:42 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHOQdhE562H7LwsAeWg63K2nQ6%2BuVpZ4Q22ZnneR%2FgrCGrCmaNgAdm6IRvbXROpqevnlVnvK5jPXhf9v3WCiKNC%2BaKSz%2F35UoesXsdpWNBdQ6qYIJX96Bl0hmxuCa3B%2BQFEKs9nHjYeUh%2B1Y\"}]}\r\ncf-ray: a49f9defeb4d0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/redesign/logo-white.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.290Z","timestamp":1791907856290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/redesign/logo-white.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14324\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"0e53bea0678bb1ce322f1ba1aa2ce9e3\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u9EdguqmCGDIuc60KvGNNXE8NAJO9r0Ytui2dkjix0Dyh5fDIllGwGU%2F9CHkSbEPaWxcw3ro6X%2FZLCgyo9URrPVB6pbBzCIzadyKl8jmHPTKzXEEkSYwqG0fF5uApzaf4Nb%2BKzO%2Fm6aWlRtd\"}]}\r\ncf-ray: a49f9e05cbb00b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14324,"size_decoded":15045,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0e53bea0678bb1ce322f1ba1aa2ce9e3","sha1":"64444ec090091c8aed45893a6db9d0e9fd9c7393","sha256":"61d90a05b41f8ae2f7a903d814b3d9f0fedf4c015de53f5a99a1cd87d3b4db20","sha512":"c364d97951598566880506e6c13343fa28c8a34bfe9bc4a60ccaa6e2b276a4b58fce1429d381e69f8750e896469946be99d6e82dfb2c429441a1fa0e0c810091","ssdeep":"384:j00Rzll0Jiivit+R7BlS4Y2zsF0PMxKSXXFE1rFR8Ke/:j0AllItit+R7SP2gF0ExJFqrDXe/","tlshash":"1052c008890b4382dbff2465139ae2f14e24ecbcd5b0536aaaa357e73f41dfa611514b","first_seen":"2026-07-14T17:30:30.092647Z","last_seen":"2026-10-13T16:12:52.282698Z","times_seen":12,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/bl/mini.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.475Z","timestamp":1791907856475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/bl/mini.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 52001\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"432e9834881ee73679313de25d5fc662\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EAHYF9y%2FhfwaAHp21i6tVUn34r%2Fxc8PgLEUWWhTe200aniHWEREEjlLWVvBIy%2BfLBRqB3F5oaonxJ%2BMl4Tn4OUstejhkZE5HNfBXfbo32UNeeNr4yrrfRzPt00bs1A%2BqU%2FgbsJN%2BkBtJbfZ4\"}]}\r\ncf-ray: a49f9e06fce60b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52001,"size_decoded":52727,"mime_type":"image/png","magic":"PNG image data, 214 x 219, 8-bit/color RGBA, non-interlaced","md5":"432e9834881ee73679313de25d5fc662","sha1":"4c66a23b2996b037a6f332a865515169baea9162","sha256":"0dd77b44aff72cf7b8493a5163a6057514f416b7edf0728c4ad8c52981ae0f3c","sha512":"e33e857184defaef5307485e7f191e777d2d73794a8a819c6849ccbdf0882eac0fdc001f245d687c764a960cee7bc0c96a2522e9a0fe1f28cd483e4a5f866add","ssdeep":"768:bHXlMBOdjh6X5CFj4wjpmFPS7WdE7CnRWlvKTz/t/QUt9cTYKOd8sEbrNK:JmOdjIs4wGPrQCnRPvtaTfyNgNK","tlshash":"933302adc192c4c6cb6499e51313a0c6ca51d0407ee1b234fbeabf65b1692ddb8df213","first_seen":"2026-04-11T14:16:59.724953Z","last_seen":"2026-10-13T16:12:52.283622Z","times_seen":6,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/user/shop?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.429Z","timestamp":1791907858429,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /user/shop?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231,"size_decoded":754,"mime_type":"text/x-component","magic":"ASCII text","md5":"972f258b6ed39ed2b8c3df43fbd08c95","sha1":"e1f7e4620f9992108979058002c3ca99f260ec35","sha256":"31bdf6f0de19ee88af401acdf24412040cb08b2f19a2ecc6b0bb1b294f726acc","sha512":"55811a947e29584532bc03e6b5495b9c541c5b9fb31feb320fc320ccee6ed8a46e72f5a1ed37a547cffed8b3c266dfc54f7db7a7bcdb00278e52750687aa45d6","ssdeep":"","tlshash":"1bd05e2b420525b22cfe10d0803ee80b664e563f13ac5cf080742e3927e717946931f3","first_seen":"2026-10-13T16:02:14.622109Z","last_seen":"2026-10-13T16:12:52.284488Z","times_seen":2,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/jetx.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.607Z","timestamp":1791907852607,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/jetx.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 3294\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"f8e31f9134f2f8a4f9675f3be570f807\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v0y7t4rF5lptuQ6giaFu5UuyT5aQSxwSCL6qqJXtLlim%2Fl%2BbZjmb6QmGeMxBiR1P62p04K%2FqibXF1LqyPbN6w8aE62xDCC6SzC0bQahbFJQBPvBDnU3eV%2B1yTT10vqD2PC9ZLoeNMJGzhPrA\"}]}\r\ncf-ray: a49f9deeca720b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/redesign/theme-sun-icon.svg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.182Z","timestamp":1791907856182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/redesign/theme-sun-icon.svg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DMFQx437LoEW2LXQVXKxW5kYaBT4HUExVNtQAczOkcrZ0jx2wMk7FPa2hnEOLGOF2HSUuIpVSBv5mObXPSDGPAzG6AIUyH%2B9kiUXTs%2BMqMFk67TYpGO9KJ7V34IMFmJibL8624GidGgzX4Cv\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\netag: W/\"00d35ac9dd4772fb65ea6e016dd8df81\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e051b190b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":857,"size_decoded":1201,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"00d35ac9dd4772fb65ea6e016dd8df81","sha1":"c56ad8ddb5adb29bf525f091ae6a285acd904a98","sha256":"e084d20886bc3265a8765b4d8ffedf9817bee16df91c5cb94606ed6203dcee70","sha512":"17c22ab6fa62f0e7084036e7b3c8a9334b2a3ac3acd10164014d7167454843ea41d32d4e0b47523aa4577155afc65c051ed22c67719a48e9f08bcc5aeee90e5f","ssdeep":"","tlshash":"6711c2bf064449fc6fd987d1ec326176a41fe0cd5afd47e080698182b9c16ca21de8c8","first_seen":"2025-07-27T20:21:53.879081Z","last_seen":"2026-10-13T16:12:52.28603Z","times_seen":18,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/novomatic.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.325Z","timestamp":1791907856325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/novomatic.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 5818\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"dcd926ae5b1d465c2d20b671c7dc482f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Srg6FrsvfN1e%2F4DiJNTYXNfpyPi4B%2Bx0t0oYCvz6iRR%2Bd82FSYgPhG1nEgr3qplzYU61VPAXyHA5DQYAPIIA9nbXHFQ85KRZJE4F1b0T5IxANVX1bWPfrXTQm4HrvYQC%2BaGIO%2B64OixouUi2\"}]}\r\ncf-ray: a49f9e060be10b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5818,"size_decoded":6539,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dcd926ae5b1d465c2d20b671c7dc482f","sha1":"4945c08b72e69f54d2db1d711a3507a75577d50e","sha256":"fa69c7a4c5e2ab6c39587081ae31fdf2e4f3fa9b3f9311a482320f00a0509d05","sha512":"c7553c56786a90421537ca41602e6284551955e25a046bf5c6a1876fee86589162c4aadce5e52332aab17c756de594586d5607ee610d1baa23275f27e83bbda9","ssdeep":"96:2Vl/anyNw9EbQ3PlgPtV8CsrGFTzCyPB7V3i3lwc+6YZhxtufmjh2ueuJQ2u5BMx:2H+EbQ3PlOtCC9TzC07Vyiv6Wwfmjh2G","tlshash":"1bc1aff547799fd620bb924a2e340084944d8bdbb2fa7f68094106d5c475fc8af4e7a3","first_seen":"2026-06-23T11:19:31.153049Z","last_seen":"2026-10-13T16:12:52.287059Z","times_seen":9,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/spaceman.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.369Z","timestamp":1791907856369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/spaceman.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 11210\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"0f070068176376c5651f31711fedda49\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nrSc5s7JsZ%2B%2Be%2BsDQVmvVJyxx0JauG216z%2FlQUBeoaQWBJ8lIxkDdto7eklSm0%2FCsrkagG5PZ4bPsOVTvVmozFfHCMJjr20anP%2Br6eIgmhliOQDFP0OmMQQxnrY%2FVWijVbOlI%2FbjZcefWqoY\"}]}\r\ncf-ray: a49f9e064c3d0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11210,"size_decoded":11938,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0f070068176376c5651f31711fedda49","sha1":"a012707c0e870477cd7c547d4007b09c7e8af9c3","sha256":"cbd4a730b8ac11c5f4d7a8c5dd9d96dbf3f8f52d048c3140ebe22b1df7690f73","sha512":"f730a5c250a2b4614d60cfb19dadc0ea8b6d6182b67a0d5e8769d04b2bf3cb9d1effcf5271942eba27c5ce58193961776a598ea43f41b4aeb4a4a32675e5968f","ssdeep":"192:Ia2tCFJ+wYaT8bgFbfA5eZMyPvNiRwbS7snUHo67CaxZXeyXYDElsgP:Ia2tW+w/TQabfA5euNwFW7CQz+Els6","tlshash":"4432d1b3e2dc27d589f30658147544057ee84fdba290c654c0e9ffe7a8cb275d910446","first_seen":"2025-12-30T10:17:00.024987Z","last_seen":"2026-10-13T16:12:52.28804Z","times_seen":11,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/030lje4w49skv.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.322Z","timestamp":1791907852322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/030lje4w49skv.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-374a1\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":226465,"size_decoded":83421,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b00bc627c2134768a87766efc16b8a49","sha1":"d6b8619501c82e73e77e22e80ef84eb9b20bc282","sha256":"400cdd5a2b42d02de4bb6029747fcb905a320bac0f496c3942528e146a025fa1","sha512":"4faece58f97425bf00bdde0e0a4bf39bfa0fedac9660191b8e3bc2bdbc4c607d81359a842791d479c2e98a7d4e963079d6fd10bafc78b629f7f429400445d416","ssdeep":"3072:f1Jtr3M4rF8Og/7NqDIQtrcRlazbJ8JcQHGXX5MubGvngKctS5:f1JtzxrF8OgT5QLQGnRivngKctS5","tlshash":"a424fbe83955f662aab302b710af1803733c252b280d4d60a251fd9db57845fb17bf9e","first_seen":"2026-04-22T03:17:22.792402Z","last_seen":"2026-10-13T16:12:52.236908Z","times_seen":169,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/canli-casino.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.577Z","timestamp":1791907852577,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/canli-casino.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 9984\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"c7aac9f27122021b04c5d9bb4d71f522\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BEC0ClpUIJ4jR2VihPv7EDO8X3x7XPebRTjI%2BV4%2FyF2xR4XxXzMEeHdlJD0njtCjBEf3fydpZRm%2BlbpwryOBd0QajvyAGQkbGtX7gD5Dzm2pLxcG7JrXCKOD9plh3RXMYb8oauiJoUzPBoKA\"}]}\r\ncf-ray: a49f9dee9a400b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/canli-bahis.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.585Z","timestamp":1791907852585,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/canli-bahis.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2894\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"458216871b9816e3ed42d7fe3708fc31\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=625vL7c6OmNC61lKQ883YPYmCFj3vWAhcKlzTVodFxtbSN%2FdXfXu9sv6EQXXN3CuEik6dmAPYkWkEGGdjNb9L1n%2F4t27xpGxz2w09ZFnxw26Bd9oLOXmNCm1ZEQEz%2FThrTHEfqLnbyqSlz7m\"}]}\r\ncf-ray: a49f9deeaa4c0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/jackpot/major.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.794Z","timestamp":1791907852794,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/jackpot/major.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 54398\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"7f11b1f2935774dd1db0df8945b629a2\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xKEcPTV3oCkCFndhSLZZPV11Rs1beRhHfCg11Af0IxW9y4%2BhAcxMLGg2TP5w3D5tPZ4u%2BzkKqlLACdMFzPQBKRCwZCW2iBbc%2BK5dqrMCoMH%2BGmeauPIBRvoOf6WHLw5mi7bXd8Cs7w0wL2zr\"}]}\r\ncf-ray: a49f9deffb5d0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/tr.svg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.518Z","timestamp":1791907856518,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/tr.svg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DfbWLkJF7J8hckOyl2yiOatdb6O8%2FxrXZgQg2urb8B0XhGHQPWOBWCVLZkunq2%2FKyKNPDm%2FnEoXrJdM4UFpbGNi75O5GlNZmmJ3rkAxMdNjqT0QMluKk5zLGrmRl9OOMKRdgsOy%2FPIM4umFW\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\netag: W/\"ac5d76ddbbc3d23943bef7f54f61e994\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e073d270b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2017,"size_decoded":1472,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac5d76ddbbc3d23943bef7f54f61e994","sha1":"66ab8f6999d20b4fe70714fce13b62b6bb2d06ad","sha256":"99dd75e43503785e97f64142f7fbd093a7159901f4a12f95dc1db82344225b84","sha512":"1f21eadd8da9ec9d2a4e50995995f814069f78cc7c4d60729f0fe2aaee589112f24d0bd2f141415772446a38ec6e09b575a648179215ce6be231228e1a289ec3","ssdeep":"","tlshash":"174154896728533c5cd286b1cf37bb8a54b594531a203cf9926e2c749f2f78d06336c4","first_seen":"2024-08-19T21:04:48.470097Z","last_seen":"2026-10-13T16:12:52.288988Z","times_seen":34,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/sportsbook/em/canli-spor?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.928Z","timestamp":1791907858928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /sportsbook/em/canli-spor?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":265,"size_decoded":777,"mime_type":"text/x-component","magic":"ASCII text","md5":"f3b2e183870bb81f9dcb05c31d6f02e4","sha1":"4e0457feba1cc8153a951cdf8e71b274f3de6435","sha256":"bcf009120e9d08265567c0fff33303ed99af3f36551fa637320351842c66037c","sha512":"0d5868289a46e4440bbb6b76447ecc14b1efd5cb0ff08fd33b65843ba5aae718772f4281a132199c6ee85e600a156fea1f0f6b46724f196ae6fd1e14cd3e2f0c","ssdeep":"","tlshash":"19d01227524415b61cbe10d0403dec476a4e562f12e95cf4c0541f3a27a717a46a31e7","first_seen":"2026-10-13T16:12:52.290651Z","last_seen":"2026-10-13T16:12:52.290651Z","times_seen":1,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/redesign/theme-sun-icon.svg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.396Z","timestamp":1791907852396,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/redesign/theme-sun-icon.svg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G9TkB%2FVEs9qODqSvh3GkQeGXJzlu9NUEKcE4aauK9dKakjeD4ool4Ert3tjn8BQd2mYT78zGLaOWASg1VULMLqpk7%2FNZkRz5Guwtbb89UAe6s0coL4rXKuXY83VCmoeYjj3N54f2aa%2BKK65%2B\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\netag: W/\"00d35ac9dd4772fb65ea6e016dd8df81\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9ded79650b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/team_logos/267.png","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.836Z","timestamp":1791907852836,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /team_logos/267.png HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/user/shop?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:55.510Z","timestamp":1791907855510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /user/shop?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:55 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231,"size_decoded":754,"mime_type":"text/x-component","magic":"ASCII text","md5":"972f258b6ed39ed2b8c3df43fbd08c95","sha1":"e1f7e4620f9992108979058002c3ca99f260ec35","sha256":"31bdf6f0de19ee88af401acdf24412040cb08b2f19a2ecc6b0bb1b294f726acc","sha512":"55811a947e29584532bc03e6b5495b9c541c5b9fb31feb320fc320ccee6ed8a46e72f5a1ed37a547cffed8b3c266dfc54f7db7a7bcdb00278e52750687aa45d6","ssdeep":"","tlshash":"1bd05e2b420525b22cfe10d0803ee80b664e563f13ac5cf080742e3927e717946931f3","first_seen":"2026-10-13T16:02:14.622109Z","last_seen":"2026-10-13T16:12:52.284488Z","times_seen":2,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/kingroyal.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.467Z","timestamp":1791907856467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/kingroyal.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 129229\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"0da94b28320c58417e40510392f2728f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sskHbebKw9f6UF%2B8KMTaCjOHptouvtEIkBCTyg4qHtjlHAFFvxpj4dXo4ZxnE%2FfK5VFfbZbpv3SmKGNBYlp5kiwvlsT7RwPrHZhBuVI1GUUQjDpXXldPEtiwC1gfX1nEcPkXR8EV8b2AFFde\"}]}\r\ncf-ray: a49f9e06ecdd0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129229,"size_decoded":129946,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, interlaced","md5":"0da94b28320c58417e40510392f2728f","sha1":"7aa78649b8f30632a0c794a72f00759838807c7e","sha256":"4e685f89e4d175236d41a63aede262830e020c90eb3834eedbcc7fe7ce307c9d","sha512":"a66dd8fa8b13f591976f4fae0b7f7beb131fcc05cc70b90ef7489e346a903f060b52c63bfc0b4b53a99ca5a1037052a7a0e0cb609bf2b9e547a7123cf77e726a","ssdeep":"3072:HOJSYaaAbEiqxhRlBuDI6fWWE8+a4yDUkAm2WBO:HFhbEiMbtQZbRUkAm2UO","tlshash":"3dc3120b27582856884791323c0fe353c6995a6f562d9f4af1cdc3243b2bab8f276c5d","first_seen":"2025-11-02T17:43:05.040518Z","last_seen":"2026-10-13T16:12:52.292703Z","times_seen":7,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/187jubqbbak9g.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.337Z","timestamp":1791907852337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/187jubqbbak9g.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-679a\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26522,"size_decoded":9639,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26522), with no line terminators","md5":"b5f608247527c0a4e4082b96c1d7708a","sha1":"7584d7f99b182fd11a924f3272f8d191300f2b32","sha256":"2bb6b56afffc96f7cb037cac0f2db505222c5dcd74aef693a6bf3ae99add7c41","sha512":"44e648ab0d87f298eb13689a1363f32b29efc1b95a7d78b57eb87ceee3f9bece8aa3b32975d78a4af3f5bf923f1c848db8520d2ba35d20d4d5593fe513c1b360","ssdeep":"384:lt/PMbqZ8w1SMaFWSiE1Ff8IiUrGbUKWb7qhitiA/MXdjzq/Kp:XZ8wcrrGHWb7q5EKp","tlshash":"3ac2a635694705be2aeed3d7e05ceb95cd391602e0198b0ce3878f319748be8528bb1d","first_seen":"2026-05-18T15:42:31.944521Z","last_seen":"2026-10-13T16:12:52.249162Z","times_seen":15,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/17918.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.776Z","timestamp":1791907852776,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/17918.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 482562\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"eeb63e36dc258f439742b8381db10d2b\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:36 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yR2JAE7x8%2BHacevV%2FE%2FWZyBEBaxlc5ZJel9QWTA2SiAjHyffKk%2BMixXz92HGAYDmAhfjX4PZR1SrrqngBUh%2BF1gLTP5xVcsyYe5ymKiPgiw71OYioZaGx59sPVPbrOhQ%2Baq0gwNQcxair4Dn\"}]}\r\ncf-ray: a49f9defdb3e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/26446.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.421Z","timestamp":1791907856421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/26446.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36850\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"7490449ab0fb1c973a914650e4de26bc\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:36 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uW6yymct3vgPuAromubHYOQL53fw%2B1cebV1l7qGWq%2B4zScsFD94CbD%2FfhnxFLT6A%2BhwtZ0FIq1lhghSQ4vBB%2BUiLjqTtQWkyRU8%2BVD2FyFlY59rg1gpf0Strddfc4tquOB%2BNDtHg5zdvwH03\"}]}\r\ncf-ray: a49f9e06ac930b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36850,"size_decoded":37577,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7490449ab0fb1c973a914650e4de26bc","sha1":"67520d63a25dff834c32f6f5266aa65df82dda20","sha256":"d7254680e1275ac852dc709925276166938354675831454698d8305615924324","sha512":"e3ea63d7fc63e0a8f774bdd553f6cab46bc9467e2199ae5d1bf5c6e1fccbb69f069b594cdc2ee92f7a5913d45136021faf6165d55094c1e3ba0da201eca4945c","ssdeep":"768:pXf/w1EaQgmC4rPzEoQWu9uxX4etpeCy3LZ+jXzU37Atyq6YcA1KZSWCUOu/0cLf:FnPrEYukFQXI3UrMyq6YcAKIU","tlshash":"60f2f28458719299c0863afcb22489e772ee5dcd13a75bb0efc82d264530497bb7c71c","first_seen":"2026-10-13T16:02:14.493102Z","last_seen":"2026-10-13T16:12:52.293771Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/provider/pragmaticplayjackpot?_rsc=p37cr","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:59.772Z","timestamp":1791907859772,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /slot/provider/pragmaticplayjackpot?_rsc=p37cr HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/gamecheck-seal.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.287Z","timestamp":1791907856287,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/gamecheck-seal.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 25196\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"c506e4eb149acb08f2ee53d7d39bb8f4\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oXL0t3p255NDxtIyMiscLky6FZWA9ps398pZZtCuWocZofCngGEUY2%2BYyurQMVfPxel7Mtp29bvjN9X4V%2FiXtdZ0PZbs7qycCkK6RQziXuqnAwCn6TiX7AG7oCoNSyOuWN2n%2FdbraYNRrStA\"}]}\r\ncf-ray: a49f9e05cbad0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25196,"size_decoded":25914,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c506e4eb149acb08f2ee53d7d39bb8f4","sha1":"c59b09034f53bcf29de7cbc82795f7dc9876d441","sha256":"9deca31f0fad50c7b39c9e4252c7af2d2a300d6a895223e2748ac354e1e9ab9c","sha512":"3313836490ce797ac0038b2e8f423721f21facda74030b7146e87b740629480d9995571884e5e701620c3a479b2f0f7fee48a9e7f54c7a17c16a420269c8cd9e","ssdeep":"768:EBmIF84SP6hivO5Tpo6OS/JJggGrj/D0wm4IrBXjhPAOu0dLL:kmIy4cf76L/UxNm4ohdRl","tlshash":"42b2e1aef4483d11582b622246d6f27152f1fe763c23e5126b8782d26d83e7a7884fd1","first_seen":"2026-07-14T22:02:39.937645Z","last_seen":"2026-10-13T16:12:52.296565Z","times_seen":8,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/23104.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.433Z","timestamp":1791907856433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/egt-digital/23104.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39042\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"db2a40526217022cda669ef499d7758b\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1u95oIMxIipCuFMvhg6aSxps7zEtw978Snhbyt1MBWIAVUGIOG4xbpX8XC2OHr265VcEyjRdKesU%2FkyB%2B1i3wDTgxRjTtIJcagxz5P%2BWXorC8HbEp7yjyM1LqBQ4uk0dnmCdhlfzYtQcU199\"}]}\r\ncf-ray: a49f9e06bca40b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39042,"size_decoded":39761,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"db2a40526217022cda669ef499d7758b","sha1":"96df2344f8b8acb4d917cab22b177df68dbcd900","sha256":"287b44e7952d7c5f7c691948e4ef204914da389824711909afc67689a855aec4","sha512":"55ab772c0fe14fc2498e1a5f333895cafe7a9a73e92e873c80e23096243140dc7978edc4fa91d374327441effc0dc42c2045d19b758313036207b4e93ac5392a","ssdeep":"768:9EUsK/BvFdK+K+9J5xgZuL7QNxPIl3UI0eTQyuQg:6+p9PzQrwlFTQrQg","tlshash":"2c0302772134db5bd0e190b0b9ea2f6a0c2789681dd9a14181b3741db39cdb41ceef56","first_seen":"2026-02-20T16:45:36.866322Z","last_seen":"2026-10-13T16:12:52.298119Z","times_seen":9,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/award-slot2.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.515Z","timestamp":1791907856515,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/award-slot2.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 21110\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"b555a248e5b0dc336a91749184825fd8\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NoT8tDDiR9obthM1pLrkQERTzDxpBoiGymTZN6tgOIzUCmgUCi%2BiImDfY1tY1doaP%2F7zf0d7G5SN%2BGlMCSWPRysyb5Gx%2FUqHQKB29a2g1BmMhss7u%2BUlsNPIJ6tw%2F3ODZXeY40t8RrU4R%2Bsb\"}]}\r\ncf-ray: a49f9e073d230b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21110,"size_decoded":21836,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b555a248e5b0dc336a91749184825fd8","sha1":"b5a7a98af7ca0fc9f79863c85bc312647e24419e","sha256":"6fc65f9bccc290b496fcf2238d75aa97e065eaae6e468c77d745ccfce71f4d35","sha512":"9f9759d9745433778b25c8e2d1fde224d659896694396f5411f94d8bb6f7c08ca045e657de958621a61539a6e78a489432e8c24d50ecd2380c4da3d8801be55e","ssdeep":"384:nNjcmpKgayzGrpdfd35SuTy/3UTPkAZygHLIaPjUvlYjX5iAVcQAyTuCXd3DtZ:BcmphSN5d35Syy/3KkAZygHkkiXAVcVQ","tlshash":"e692d037b7618c3ba132f7d48ba72af88d5bff0735ae562f18309c45a478e975290112","first_seen":"2026-07-14T17:30:30.210203Z","last_seen":"2026-10-13T16:12:52.300072Z","times_seen":6,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/category/vip-bell-link?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:55.821Z","timestamp":1791907855821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /slot/category/vip-bell-link?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:55 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":306,"size_decoded":789,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (305)","md5":"31d7de0181ef6fa164ddad1d5b8ce8e3","sha1":"5ac99e45615d43264f53bca4f9ca1f90341d259c","sha256":"cd914f89fcfab204f49a0e2bf000f68ab837385440bcbc01873e0fc537e65f98","sha512":"204d28dc69e9b5b3a6f458eedf3987bfebcf1e3ae3db4be0dfa308bbc984055f81c78fafe8ba001a91c87f53f44ee2ae5a66e59cb713b020e72e448d7664e267","ssdeep":"","tlshash":"86e0862b824429b21cbe00c0803ed84fa90e563b12ed1cf080a41f3427e717a15432e2","first_seen":"2026-10-13T16:02:14.484328Z","last_seen":"2026-10-13T16:12:52.302111Z","times_seen":2,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/assets/games/popok-9.png?v=1","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.260Z","timestamp":1791907858260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upaflex.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:25:58 GMT","end":"Wed, 30 Dec 2026 16:25:57 GMT"},"fingerprint":{"sha1":"E7:05:1F:1E:A4:FD:0B:B5:FC:09:40:CD:E0:55:E1:28:D6:5B:78:E5","sha256":"C3:D1:9F:1C:81:C8:C0:4A:93:F0:62:A5:B4:C1:36:3A:40:46:75:D2:82:B4:D7:29:40:40:38:94:09:F2:93:0D"}}},"request":{"raw":"GET /assets/games/popok-9.png?v=1 HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 286400\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Aug 2026 16:07:13 GMT\r\netag: \"6a74b131-45ec0\"\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KhwDy12Is4Va%2Bfn1bIRs9vLC9uybo3jE98glAdWvQOqkKlpBOyECd6UFu5vQps8HTEBztKGwYUV25f1CL%2FJ0xA9X8VGhIDJTEiVXboPvDp60SJUMuNPJMoJlr%2BIvsqjWYVGEaso%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49f9e121f3cb1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":286400,"size_decoded":287051,"mime_type":"image/png","magic":"PNG image data, 456 x 608, 8-bit/color RGB, non-interlaced","md5":"e4960851dd71deb7cb2fe4ebc158a35a","sha1":"1afb079ff231f1e5c850b1701670cebee4142961","sha256":"35aa6a9256c6639fb2ab49fa6e5b8bcd14a06ee08668e98831aee7631c7e9bce","sha512":"3d10df3caf0d10fd7eaf138749653ce267882c4da87c7f3e651ad37e3f97dd94e20e30a093418002f382af63a96d3b58817ac022422f9d5bf867150f2deb54ad","ssdeep":"6144:8s3j+G6Xfp8xXL5P8E1RneBHtdYrZh2uME/8LxhJH86hV:8vGkmxbjLneBDCb2uME/AhJHFT","tlshash":"ea5423936b3197bcaa1c1aef4001871a458b70b32306f46611d70ff9e7b9f6819e2dd9","first_seen":"2026-10-13T16:12:52.304729Z","last_seen":"2026-10-13T16:12:52.304729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/reevo/31251-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.557Z","timestamp":1791907852557,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/reevo/31251-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1968394\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"ef606ed64ffc6abb0e43830eb24af13e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:39 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nTOL7QeTseiMjbxDN8mjvk%2F45g5jaSWv3CRQ5mwniyo%2FBhnYcydMgsnoyYTxXbuY7j2HrAMgoUf6d6V0Y8YQaHxhi0%2F1ZYnEdImsolHSKe5sutiLVRbpwmVDShmTpin29OXafKoma16CzY0T\"}]}\r\ncf-ray: a49f9dee7a210b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/golden-coin-link/Logo_Golden_Coins_Link.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.804Z","timestamp":1791907852804,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/golden-coin-link/Logo_Golden_Coins_Link.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 535860\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"ba08f48a04ca872848b882136740ccb9\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l5M8RkCb0HrjAuYy%2BHuQZtWt3Fvzt0HFsZ4JG9GgEyxduKNhbE7aghFCNEUogZ%2BLOxwAlDcKFo%2FOvWr%2Fp3mK8VSDv1x4xrpoJ7%2Bk6Edptdd04Q7ql2iwB1aPz%2F7AGR3z7IxYLWTaorP7mIVz\"}]}\r\ncf-ray: a49f9df00b690b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/footer/twitter.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.402Z","timestamp":1791907852402,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/footer/twitter.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 15382\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"4edd05736f93cbb35a63c0689f7f042e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:24 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BsvYjC34AX0zY5iafcPTjL3RMqiNMuDVkltkJoAopIFv2aFB8SJu5%2FUVCl493gW%2Ff%2B1vCdOKTvn5%2FwnUm5ZuPjxi1klIR%2BiiTHZcNjK3ZnZcndmFSzN3EXmce3JrN6DInRbkGAueO5vgCLIV\"}]}\r\ncf-ray: a49f9ded796b0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/payments/semi_bank_havalesi.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.484Z","timestamp":1791907852484,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/payments/semi_bank_havalesi.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 3088\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"725b09c19436ba1687eeff9bc7691454\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:46 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rgWHei%2FVjXKI%2FfXCGTP%2FrpOyAO9hDz5uVtuZteXP4JbzTLEnUUVnEI1u1%2FneECGfeOKwDBXlncmNJ2OQcf5IhgP4fMrvvYJUMsBXbFCW4UbBE35wnEYWxwJLlTP09H8%2F0asnWnvjqQ29u0%2BF\"}]}\r\ncf-ray: a49f9dee09ce0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/jackpotplay.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.791Z","timestamp":1791907852791,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/jackpotplay.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 46951\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"e1c38d840617ef1d8423f6bf40b15196\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TYlztKFHF1JTI%2F16Ec3jQSv66y2cXM%2Blp3D5tHxA1mBiBtVo6sx9WXtnvXI4wqIYb0bo9RLbb6BrB8bC05D%2FkACFqp3Ye0uzTwSeJYScoXNvrBgRP%2BpCqDhvvkBA3Mi3WCGE%2BhZBlskeOSzU\"}]}\r\ncf-ray: a49f9defeb580b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/telegram.svg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.186Z","timestamp":1791907856186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/telegram.svg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aXD1kTX6GvuQ5CKmxMTR7nm%2FkvpjBBRIvi5ngJ7b6PoxfbuE0SQz9Gn3LYIc2wvOECW46NIaSG2bAUNwX2PriM1p4HHeWkm5ZNUXzGr4HjlTOeUgysaPn0Lmzgtg9gw6c%2FE6B0OBIMSOGXWQ\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\netag: W/\"8d8d66a0c26fba86dc60ad8043167830\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e052b1e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1332,"size_decoded":1364,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d8d66a0c26fba86dc60ad8043167830","sha1":"11a6de5de1ad1a43866ca868507acae0ddbdd369","sha256":"9d3fc6d341c2ada52d9bc0bf5f1b9f44e54495b68ec1f74d57e28eef30413cc4","sha512":"406db009e172471bb50eaa4c8a7c134700fc8c602e3edef767a6c44bd1a00e8c8ee361a284d8f343049f6bb71b54f0ddde80b548a470583d8ae6a0c5c1c69563","ssdeep":"","tlshash":"3121f369d249d033e019c7e68698d4a53269d0dfa1c08571c1b96e6c4bb0cca074bec6","first_seen":"2024-01-08T17:23:43Z","last_seen":"2026-10-13T16:12:52.274438Z","times_seen":50,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/slotmania.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.319Z","timestamp":1791907856319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/slotmania.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 3246\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"29b19307336c32aa940858e11ddf5bc2\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QNq%2BpVnECXaDa3yyH0effySKHtHQxJV8okypRF9fG%2FsWWpGRMOPqbO8v4KQQj3hKHLCG8Q98jH6EYBqnV20jVUbS1YFPsBadI45gz3JheL4AuRm4aE%2BphH%2BOWY1nI6EP7QA0%2FXsPLhEsx8%2B%2F\"}]}\r\ncf-ray: a49f9e05fbd50b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3246,"size_decoded":3971,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"29b19307336c32aa940858e11ddf5bc2","sha1":"835d52920e9bef32be41dc148d0fdc9cdaae6a9e","sha256":"24b7c991f4bda66b33926818dd93063f935265816baff9d00dab11be42b8575c","sha512":"83196feab7e9d69cd4e1726449d3b90b0d5fafe5a5af3e78a169e9d4e8ba038033662745e5465ac27a01649ddeddbc09935a2c5a1898826460152b55441dc268","ssdeep":"","tlshash":"b8615c686dea04c2112f9bf9176b31cd4cec2490a3620f57a55a1aea2549df9d44bc0a","first_seen":"2026-06-23T11:19:31.075137Z","last_seen":"2026-10-13T16:12:52.307506Z","times_seen":9,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/provider/egtdigital?_rsc=p37cr","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:59.770Z","timestamp":1791907859770,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /slot/provider/egtdigital?_rsc=p37cr HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/05-~33cr6_165.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.177Z","timestamp":1791907856177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/05-~33cr6_165.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-9ba1\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39841,"size_decoded":14038,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39809), with no line terminators","md5":"6d24045503121ce5750286cee82c258e","sha1":"2ec7f3ec2a9272ba5e57ac07349fbffd1c89ba91","sha256":"6d7e7ca28542acb904c0d3e34d11f2157546600e17a4a2d910191626db6f1f01","sha512":"d9b70a6c6d3e073e26534789caf8865b680c503cd29af3f2e6aa1a5245e83f88e155589e005a70aabf95a285ff451774db019a97d849999336aff6a5606f4151","ssdeep":"768:8ODbiF3wIA1hggUAgI6SUk2Qq1UK0iUBk7d:8OyF3wIi1yfSUk2QDK0iUG","tlshash":"1b035115a699adacfa2d0c94412fc00c7b2f2e5c9c4e8824babcbc951d1c6d47257fed","first_seen":"2026-10-13T16:02:14.434507Z","last_seen":"2026-10-13T16:12:52.310523Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/assets/games/am-803.jpg?v=2","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.258Z","timestamp":1791907858258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upaflex.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:25:58 GMT","end":"Wed, 30 Dec 2026 16:25:57 GMT"},"fingerprint":{"sha1":"E7:05:1F:1E:A4:FD:0B:B5:FC:09:40:CD:E0:55:E1:28:D6:5B:78:E5","sha256":"C3:D1:9F:1C:81:C8:C0:4A:93:F0:62:A5:B4:C1:36:3A:40:46:75:D2:82:B4:D7:29:40:40:38:94:09:F2:93:0D"}}},"request":{"raw":"GET /assets/games/am-803.jpg?v=2 HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 149436\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Aug 2026 17:22:21 GMT\r\netag: \"6a74c2cd-247bc\"\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TpkPY%2BAmAaeW%2B86mO63yRWF8nXyGtxf%2BlOnhRA%2BgwoWZ1UIHR9JpShFgw3xHux1lXuTsryC5%2FRJWgAaRuiMfGQp9C0oJvT75DLpzlSaiCOWqJPqXWh%2F243H8z4CjkpI43JCwdfU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49f9e121f2bb1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149436,"size_decoded":150094,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 580x900, components 3","md5":"9fd8c595d4b4453b0692eeab51d8126a","sha1":"12b23b66377703ee367c85e47e1f05e22fcdb599","sha256":"9206d28887fad76b1fe505e28045429dc9145247e3b7d0dd31312292ed5f674e","sha512":"7f572acfff8806b30ef0c5075dd6c97eb25c945bb44d926854261dc66385a59746dcde2df0f9a7dad055962fe98deac4bc6182b0e52a1e4695ffc067db9fac30","ssdeep":"3072:33Oiv13Bw3pgIPL3FyOCWxR/69jXCHjT2n9a1dtQdNx:lv13Bc+ILFyLcR/VTco43","tlshash":"eae302040dcbf4b5c9217f692def464f654a2e99a473390bc0e48425e06dfb5781be3a","first_seen":"2026-10-13T16:12:52.312224Z","last_seen":"2026-10-13T16:12:52.312224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/provider/egt?_rsc=p37cr","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:59.773Z","timestamp":1791907859773,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /slot/provider/egt?_rsc=p37cr HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/banner-web.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.534Z","timestamp":1791907856534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/banner-web.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 3723983\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"a0733d752b2f89b0b9ff9c083c5a6e2e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:42 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKK7gJ64zy3fQaRt8CPOfZs6Np3%2B8mkszYHZtLv6jvflmTr9y1tG2cr5AkoXpFfzVzT8JmtyVPaGQY5WpxpuSvfMeg15ztsCNWIgIyOIbyrQUK%2FejEFeV6rbK2LEHrnhV8bL%2B8J4f7E6DZkA\"}]}\r\ncf-ray: a49f9e075d410b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3723983,"size_decoded":3724703,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1920 x 150","md5":"4a57f71cc32d862b801d6f2b6c985d24","sha1":"24f760df57c5b3f8915ec388d6100a5501a630af","sha256":"1139608aaaf4c333fbd21c6e2f4d7c50ec1eeab0974c02abbed5cde56e2ffa7e","sha512":"c0de2956d08eba129d20e2f792829a1d384b701ce2dedc37e7080999473fd4d645048eedb87c3facadea5d58cf343898caf2ca22c4038cf88602c8c85df2e0aa","ssdeep":"24576:DkPWyM1ST7e0u0IMDUz5BWYli5bxRg58hX8xaaUnNLe8nRC3c6:ouyXHe0dIz5BU5bxi52XihUNX4","tlshash":"ae2533bbe4826f174f4a4273e661da8c779316386404f270d72bdedc99408fca0e58e9","first_seen":"2025-10-20T21:45:37.199635Z","last_seen":"2026-10-13T16:12:52.314401Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1093,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1073,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/spinomenal/33468-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.547Z","timestamp":1791907852547,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/spinomenal/33468-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 946970\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"610bca2a61c8cdb85e33838c873eb266\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:40 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKZhR1prBu2J3wMUFHn%2FysYlU1FwGccaThd36ESyYSLhr64zVZcIWnPDurG562RbOFkvtHqthlv3IGwQLXddPoWPD8W693jBGOec3VVJ8ZNeprRue9rYI59ZhIBkqVbtGW9DuQOinX57%2FiUq\"}]}\r\ncf-ray: a49f9dee6a130b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/footer/service.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.199Z","timestamp":1791907856199,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/footer/service.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 14865\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"cff0b0557a379fc3c1df71b14e22a75b\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:24 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rV40X8VIv69O35nm6IRxPWHx2ykPe5PKcX%2FLDDJw12a5j9zCaCPGoiukG%2FGvfMeuSd2cbxAtTr0Rjbfoac%2FgPe7QKO3GL4oIZRVYBQcaW0LSOUvm0rqgqC0DlP3ET%2BE%2FLXwv22VUfOlOrTlh\"}]}\r\ncf-ray: a49f9e053b300b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14865,"size_decoded":15587,"mime_type":"image/png","magic":"PNG image data, 254 x 148, 8-bit/color RGBA, non-interlaced","md5":"cff0b0557a379fc3c1df71b14e22a75b","sha1":"ea83c679ecb8534fd184e7998e3d3e7deb8d59ff","sha256":"c1eee1d50d3b90dfd53d2c6062207110687a8f73568f995c7dff3b00f37f75ea","sha512":"c0adf97bb2c1f7eab9091c9cf7246ad434388611611e09d43793049b83b5e3d82bff79f83f1bf586a3436511e972f39cab11343f5ba2e3d1487f568c5f13475f","ssdeep":"384:h2nllyCrkLt+5Daf9edo79vvRj55FsXbfB8q3:8j4s1afgdoxvvEL59","tlshash":"b162c0dbede0fc521ce1d896b8f5807f461198d8409ac8e5f1e8db2111633f68dc6ad6","first_seen":"2025-12-30T10:17:00.015197Z","last_seen":"2026-10-13T16:12:52.316432Z","times_seen":11,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/jackpot/grand.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.480Z","timestamp":1791907856480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/jackpot/grand.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 51078\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"37fc8785b033db1ed6f030554c755a9f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2FvBWyshYcF1AnF%2BUacp5J2ontiQZ9FpyfYSvAj7F69wRxrCx3J4sJmh5Ee8dWfIV%2FQONWfVAmIJGLVyVU1VluRBpR8uW2wmKdyOT8iEqBCGcpTIXwjdPwRME9rA4qL0kIkx%2FbHSTiNwyysj\"}]}\r\ncf-ray: a49f9e06fcef0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51078,"size_decoded":51798,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"37fc8785b033db1ed6f030554c755a9f","sha1":"4c08be962205c43f067f28db0b62e49ea5b4d71d","sha256":"3535f6def9c70e900d41a15de8a18102b934afd997622d7bf381e3eb9daa6636","sha512":"c6c06cf5014e1ce2480ece9a1f454621144f23a926ebc6c51051fc688de1c5e8d612c6fca1dce1220f30d067d0025af0ec77f67661e9d091c702e6e1c188e488","ssdeep":"1536:gNHZ4jBNYHjSTw6/8968AXmCPebHlUL7JhCVA:E4FqHWw99KejOfJhC2","tlshash":"c53302d0dd820a8dc0cc7189e9f0a762ec8194e0e754993acb5dccbd51aa673835fe5a","first_seen":"2026-07-14T17:30:30.15587Z","last_seen":"2026-10-13T16:12:52.317726Z","times_seen":7,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/13226.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.769Z","timestamp":1791907852769,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/13226.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 42513\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"62befe595794edb1072eb414123ac2d3\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:35 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IvHJlg9G6kKvKAHT3A1WrsOzBfcWVs3n0OOYWeXpmLGRMAkxe0bjTo4ahmVV%2BjjXBydhxIznkV7QiE9V0AMPszDOmx6t3lAO%2F7a3pMIrzJQe8xl1q4lunEYnwBhO8pnKqIA6JJVod%2FF7NGEe\"}]}\r\ncf-ray: a49f9defcb320b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/team_logos/390.png","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.831Z","timestamp":1791907852831,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /team_logos/390.png HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/award-casino1.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.848Z","timestamp":1791907852848,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/award-casino1.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/team_logos/267.png","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.511Z","timestamp":1791907856511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upaflex.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:25:58 GMT","end":"Wed, 30 Dec 2026 16:25:57 GMT"},"fingerprint":{"sha1":"E7:05:1F:1E:A4:FD:0B:B5:FC:09:40:CD:E0:55:E1:28:D6:5B:78:E5","sha256":"C3:D1:9F:1C:81:C8:C0:4A:93:F0:62:A5:B4:C1:36:3A:40:46:75:D2:82:B4:D7:29:40:40:38:94:09:F2:93:0D"}}},"request":{"raw":"GET /team_logos/267.png HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FvBsTn9u5yBGw%2F4liHerFBcRi6l6C9vwNfemtX9jeaRjaCNIY8ILCt%2BfxjH7DGocRU3oJ%2BEJjnMpw3gC7Q5dLrG3X%2BOS8YyVDYcH1BWkQZdu3Ys4g%2FJo2krzZ1W5jhy4wrqltKY%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e072c7cb1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://mrking20056.com/socket.io/?EIO=4\u0026transport=websocket","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.007Z","timestamp":1791907858007,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://mrking20056.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: sVWz1CQnMYGUY97aJNzBjg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: 193.233.15.184\r\nDate: Tue, 13 Oct 2026 16:10:58 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: vjmTPllOZTyMhaYrnHA7+vAUIvI=\r\nAccess-Control-Allow-Origin: https://mrking20056.com\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":298,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":42,"send":0,"wait":74,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/award-casino3.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.849Z","timestamp":1791907852849,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/award-casino3.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/promotions?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:55.511Z","timestamp":1791907855511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /promotions?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:55 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":215,"size_decoded":754,"mime_type":"text/x-component","magic":"ASCII text","md5":"2b4a18021ec56cd73a57b9004f1ddbfd","sha1":"ca8b3839a812be0132ce36435f8917c4e57245e5","sha256":"1d0e52978f421f1a5492b761a76c06b0791aade6ada0deea5a5488a14e5bc4a0","sha512":"bc2d391706a3bde5168223145d986ac4e50e03889752d67071d2574ad8f87524b5ab796a29c0ab91b21e1e9f29eb0eec1676664f477bd1faf9ae961d54c3fb28","ssdeep":"","tlshash":"a0d0522a820419b21caa10e5806ee84b664e963b22a858f080642e2927e327946932a2","first_seen":"2026-10-13T16:02:14.595842Z","last_seen":"2026-10-13T16:12:52.256Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/04z1b0hjxkk_c.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.167Z","timestamp":1791907856167,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/04z1b0hjxkk_c.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-189ff\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":100863,"size_decoded":38054,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47952)","md5":"7776248093179ed40b42120ab3c78e92","sha1":"1fe1693882eaebb2acde19b14ff1ce413d8371cd","sha256":"535765e75234b2d856d6f4abd30ac23c906b7952361f0eb1bd5c00ff7ca72804","sha512":"83113af9495d02aa7df54ce2744b75813a15a92410acd94606061ac9616a52a293e71eab873443c69859c65212d47715251bc7dcc3ac84a480a071e8a4cc1758","ssdeep":"1536:7MSaMhi0kSqpRrbQWQ307WuKiPIgJMJZYSRlzMpC:7MSamC/bQRjqIgiZ/RlIpC","tlshash":"91a339a1b295b89d5b2b1584502f800ca67f6e6c480d8c24bffcac751e34c56b5b3f5e","first_seen":"2026-10-13T16:02:14.566242Z","last_seen":"2026-10-13T16:12:52.319049Z","times_seen":2,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/redesign/merit-gif-logo.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.181Z","timestamp":1791907856181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/redesign/merit-gif-logo.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1108132\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"8b2ab99e07dc0bad6faa5f8d2d9cd9c6\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vRXbmpmUoegfWiQuowjCHzfv%2Boi5Ngrgpx1tCyLMkGvrG%2FEFkG3VZ9YLx35tjAIUTrxW80LhGimdjuL1semOrDaPSkmUZnVhsFDOr1nsFzmmq87SSu2TeZAJ10pb1NnBy29XwKBexikM7%2BVR\"}]}\r\ncf-ray: a49f9e051b180b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1108132,"size_decoded":1108852,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 200","md5":"9abed94a97aa7b8ee208d790c4dd450d","sha1":"4bd1fe4635f63b2bc61b99d3f69214004e9c9573","sha256":"eb4b573cc451933acef44e2b6be641f0fe25eedd9ba69c8f89e2af3fa4c8625c","sha512":"e214ca5b63c46eff7579abbb6cc181dd056547724de1f851da6c817fb2d969b684617f248c67bd96f1f36b0b3f178eb527acd590ebb28975a788f78e39109383","ssdeep":"12288:fubouO/3+59E/fNadolCOBCxt0AE7xWou/ngV3+Q9U18DXmue91Tp3gePXz8r/p0:GNa3kdkkx1UuvEW1+25PXY9ac6","tlshash":"062533ddb60eadcd02b5295178a929b5fbb34cfbd46c993fc780fd04a64646e38d4808","first_seen":"2026-07-04T16:31:46.39815Z","last_seen":"2026-10-13T16:12:52.320458Z","times_seen":4,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0i.l9589uvx0j.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.329Z","timestamp":1791907852329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0i.l9589uvx0j.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-d5eb\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54763,"size_decoded":15452,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54761), with no line terminators","md5":"8c982aaf9931256dfe2108595a389574","sha1":"4d38e8269a118fa3dd23e80a150d832c889be978","sha256":"32e9576b2b87cbc03075cbfde10797120b73b5c6e486723cd9e58a66d99c585d","sha512":"396749247a899dd4f29ef98a6d0bd622b3fa08d5909f76535c778a3befb72b9a325ad137f45f224ea59f9b02acfea1850d416bd24a27d89f321acf9f2e029756","ssdeep":"768:ChBJUWstOo8LEImqD9nhKFuvCDFZMQqi/mV:ChHJNEIZNieV","tlshash":"6433d9b53295faa302db91d9c0370012f2780d71309d64b4b394d8af799dd8a92f6f6a","first_seen":"2026-03-25T05:30:59.063144Z","last_seen":"2026-10-13T20:38:36.039302Z","times_seen":5170,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/5952.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.768Z","timestamp":1791907852768,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/5952.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40053\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"450a7ec3956b22e5a7a45b41776cfd11\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:38 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3ZNX6r3miC1WhTrekdrPemhpH%2Bx4x6GFCSse3JCCxw6%2BvDuosOIyXCueAx0jSFObJIlp%2FRjbiHOYKYXe033KIeKmy8ZqnvLLMjFmeTvAgB%2FOcjy0vIVXoXlseWwRLHV8RWy8EqnhHYwEcq5\"}]}\r\ncf-ray: a49f9defcb2f0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/payments/safecuzdan.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.283Z","timestamp":1791907856283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/payments/safecuzdan.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 32685\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"c0731c8a7e10108bfb2129faea0feef9\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:46 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ODfjsOUsxwcTzDhMjQ2YWvBY%2BHKJ5U7h%2BREg3hqyL4V1b6ArwCM94viKYyC2P3FsFdgvMsRZqVze0gNqdK%2BQW%2B4oJFlvglkXDvsMRtRJWa8%2BtTgfDa4lOUDqUrrrAlzpwCVpVmnThUNPW8P1\"}]}\r\ncf-ray: a49f9e05bba70b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32685,"size_decoded":33407,"mime_type":"image/png","magic":"PNG image data, 718 x 150, 8-bit/color RGBA, non-interlaced","md5":"c0731c8a7e10108bfb2129faea0feef9","sha1":"923ca7e85787bbd20aa5063a4d667fafccc0d75e","sha256":"ff93622549531b548b6f8c19cc53c886827868f05ad3afce59379bfb06b7b2f4","sha512":"2a6ba6ad9a03897cc141729e743f397197934c865d30e11a2dc373fc0bed88c65c48c12f6bc6400ce6e40bcbeea28085ced733223f660a70de20b9d74b900aee","ssdeep":"768:vkI3pv8K82U8ueJbcX5O9bcFiZURF+fbBdUI0:Z3t8D2U8FJi5OwWURF+zBiL","tlshash":"2de2f1eb92cbd129c930ef41ac517c9a28163e19928f7507d3f54d418ea6dd330f4a46","first_seen":"2026-09-19T02:54:18.452634Z","last_seen":"2026-10-13T16:12:52.322255Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/aviajet.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.356Z","timestamp":1791907856356,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/aviajet.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 10576\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"645b1d1abec114a41367a69eba8b38e9\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mFh%2BZIRCDsvrWchHgVCPXQjzu6jXeQH4zjh7aA2HhT7ng%2B1xaEnIQlRkYHta%2BE1jR5cDU11YX4xLHrXa5rWRSxToj4EwMYqQARaNIMwdXyklpZ99d%2BAlAOVfi15M7CnCoqJUClmrIX5PkPNS\"}]}\r\ncf-ray: a49f9e063c230b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10576,"size_decoded":11296,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"645b1d1abec114a41367a69eba8b38e9","sha1":"34dbed4747e8588a8078ef66befb9e0b00b6fafc","sha256":"c430d13defbb064174fa7c0a82d4c046217315b1cebc49c0c50cdb12133d34a5","sha512":"197a05a764a9532b2cfe68a10f5c5a9a4ae3d2756b5b1c0dba534616e4e5034ab6f83dafab6f2369af261b93521651f78d40e974754cc75d4d8fb91fdfc45260","ssdeep":"192:h7RBiZaTy7nlE/sigB+/vnRktzuICYhWgYwOrhtwTgiPENkMT:h7riMynlEe+/5ysyCLwTgiOz","tlshash":"b522c060561af86c48f1fe09b61323803283e0db9be3d8053b259b7646db2473d94c5f","first_seen":"2026-07-14T17:30:30.029535Z","last_seen":"2026-10-13T16:12:52.323679Z","times_seen":7,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/mk/titillium.css","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.306Z","timestamp":1791907852306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /mk/titillium.css HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wv60LkhSD9ao116VswEECFXHFIHMgrAnCG6lFasFHqlMoKLloaAJL8FPbayw0a9%2F%2BsmmM4qov6JU5qi4rDexO6CLPLoguau63BBVbSPk9eYDHgG3sDuFe9sBbi%2B6M69DQ9JyHvpRs1IPKAc6\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:31:20 GMT\r\netag: W/\"aed948f0de6ccb1009da7b530e69ffed\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 977\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9ded19250b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3399,"size_decoded":1065,"mime_type":"text/css","magic":"ASCII text, with very long lines (354)","md5":"aed948f0de6ccb1009da7b530e69ffed","sha1":"37cfc07075945364925454d39d8987237b8dc9db","sha256":"74381bf352e50dc5bdec2bffd1332e3785c4838e34bdff3a07813fe3aaf45da3","sha512":"d69747c533331124f2e35229d6f96f0003e44554710c7732cbb17074f0b51f2f6dffe8e051886bd00b3821b741f176819adcbcc05f35832e5ecd7d32ec0b880d","ssdeep":"","tlshash":"ce614935082bb604d6fbcd3230ce3e472818616295ea2512de5609f88eebd7ad397706","first_seen":"2026-10-13T16:02:14.508258Z","last_seen":"2026-10-13T16:12:52.32539Z","times_seen":2,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":18,"connect":8,"send":0,"wait":27,"receive":-1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/slotmania.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.570Z","timestamp":1791907852570,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/slotmania.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 3246\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"29b19307336c32aa940858e11ddf5bc2\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=olkWMKAXRNlNOBf2bhQoSE4Hvzor9IF7zuZrjrYKRXw33NkTYMr4W36lWCWgQesOF%2FSgL5Ft%2BoE6%2F0GEuOeA5XV0Zxpi5Z%2F9fTZLUqBkIA6pg7c7rcBvOfeh%2BeU%2BW9bu%2FoJCOdpRHWDD7mPH\"}]}\r\ncf-ray: a49f9dee8a340b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/plinko.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.619Z","timestamp":1791907852619,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/plinko.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 6126\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"5bdb17d60b8471c5e9f5ec597b680778\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FVDLedvOmD0TkETZB9Wjh5UfR3N2WKPv%2FZSKI2Q1cKrypHSUZZhn7aCDLZSRkUa0Dt9DZ3%2BHt6Mz48vkUvD5Oj4QYW1Qcg89tcNnw88%2FngnyPOnGAY6GT5kzgvv%2FVVvwM3qz4OAN6tAAng91\"}]}\r\ncf-ray: a49f9deeda820b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/award-casino2.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.528Z","timestamp":1791907856528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/award-casino2.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 35358\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"6d4cf5096b3893ae0d0d821e38c090d1\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r9tIu58FRLoVoXIqV0sxUYYsXCoovIVbpSu8MtodvpqyviOKgwt7CXTeubjg08rTDPzjMZzrldQEPhVMkk2F%2BwW0x9ZiiTZrLVjsw3rv4a7xuNYXIsKkVn0mrjeDoiiNRhE%2B%2BXPluncEgGCH\"}]}\r\ncf-ray: a49f9e074d360b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35358,"size_decoded":36076,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6d4cf5096b3893ae0d0d821e38c090d1","sha1":"f497bb3e008f65720c0c8cef56687ee7b47d5764","sha256":"a11ca24996bddcccd8c59e6cbb594ff9b26f6f164e0a9ef2617b34f1e1cd207d","sha512":"78c0718fd145a1969fca5a8dbd298cdf12f2ca690a879001f5a0246e8cefed55a4be15dd2087677a004454f496f8d497bd6e9f8507ca3f6e413a76b804acfbd3","ssdeep":"768:aVKKffRBMRSM6+mZAx+kFgAfIKaLS56hDVRAVivcN4Kvqjzfo1+B7nfCaAS:aoKfZ6X65AsAfIjL46Z3AVgcNPEfo8B/","tlshash":"6bf2f10299e6f77a167091cc4435fee95953ab9bf36c278be1243c298273503991bcc5","first_seen":"2026-07-14T17:30:30.064415Z","last_seen":"2026-10-13T16:12:52.326855Z","times_seen":7,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://mrking20056.com/socket.io/?EIO=4\u0026transport=websocket","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.647Z","timestamp":1791907857647,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://mrking20056.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: kTokenFzGkaQYWpVx2jzPg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: 193.233.15.184\r\nDate: Tue, 13 Oct 2026 16:10:57 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 2a93BSXLqG84sdlRPIaWAuiVYb4=\r\nAccess-Control-Allow-Origin: https://mrking20056.com\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":298,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":43,"send":0,"wait":83,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/media/5c8bbc89ca099f34-s.p.0vk09kfe5b-gj.woff2","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.112Z","timestamp":1791907852112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/media/5c8bbc89ca099f34-s.p.0vk09kfe5b-gj.woff2 HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 27812\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: \"6ace4746-6ca4\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27812,"size_decoded":28100,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27812, version 1.0","md5":"40fbb0c52f0de3ff98a350da4c858f4c","sha1":"ba5c2e73488126b9499c4b69369244e3d3348496","sha256":"ce6e0dd89c3ffa4de97bda85f9b08bcb775bea4df456b3dbb7e819c1c879be50","sha512":"8aa12d4acc7d1db8fe2be410b0fe1496d9f26028cc87f51629b6e295e538e2a2706b2fccccb978cbda5e72146b331cb8b6322aae9d94a88f1242ac83e9b83b97","ssdeep":"768:bo1xUfxD/TF7Bc6xp6N6BAQQhAVeQh38A:bWiRpm6xzqQteQh3B","tlshash":"39c2e152060ae7df41f19039b8849b9257202c6f816a38814061bd5e078dfdedb9edb7","first_seen":"2025-06-07T00:31:13.543086Z","last_seen":"2026-10-13T17:50:43.898642Z","times_seen":816,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/tvbet.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.618Z","timestamp":1791907852618,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/tvbet.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 6282\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"7c68564c818295ab9051e4f4bc74210d\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVP5qpuvCQdZ8LSBIF1GXlvWwLc1tDnk5R%2FIwT1FU3S0Gs%2FIGz7dFInU2ngsyL0f8rYms3ha6Jyqp48kBmvplhm1iyLCj38VCsDklVokGv3UeRd7YKJLhy5%2BCvFgg8BjPrwqkQfOurRMaag9\"}]}\r\ncf-ray: a49f9deeda800b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/kingroyal.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.782Z","timestamp":1791907852782,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/kingroyal.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 129229\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"0da94b28320c58417e40510392f2728f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6b8t2NBXh7pEIz0WJNbg53MXOVBc35K2y9955RJdWAkTCXmYPyZaXbDxfYadod0Kna7eAWrwYlCJxAK9NJhIKDcQXPE41H35D0ipji9ZNc2HKe2j%2Fy2ytUVtbLUp9%2FLzb%2BfuYagi2KWHSuT9\"}]}\r\ncf-ray: a49f9defeb480b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/payments/semi_bank_havalesi.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.276Z","timestamp":1791907856276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/payments/semi_bank_havalesi.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 3088\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"725b09c19436ba1687eeff9bc7691454\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:46 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0bCEiboj37MBezmANyFCEOfUKMqkZ6%2FVWfY8N4Z0ejKbmni0tyzwEbOppG%2BdDfTPIEviGuR1vqtljX0S%2Bb%2B8kqj7mYWseDVpX4bcCmKStlyJG1HnhZdATcOGhQF%2F3slvVE6SiCK9U4Afl32t\"}]}\r\ncf-ray: a49f9e05bb9b0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3088,"size_decoded":3809,"mime_type":"image/png","magic":"PNG image data, 300 x 82, 8-bit colormap, non-interlaced","md5":"725b09c19436ba1687eeff9bc7691454","sha1":"737cb204a864af759e638bf5cc49b797c51727f6","sha256":"952e4f8b57d3e9fde467e1eff7a1c5dc621e60c566e629065e9db8d643f4d80f","sha512":"87c3a50130e4b01a4a144c6250c84100d9d335c267cacd9540f16eb14e1e5c224a0844e16407181bf1178d40468d1059873359d5d1f4701597f0694634749775","ssdeep":"","tlshash":"ca513b2c1ff4ebd8aae485c305e1cbeaf20b3e6937a3e098a119354054bcd662043d31","first_seen":"2024-01-08T17:23:44Z","last_seen":"2026-10-13T16:12:52.327457Z","times_seen":29,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/site/de-milyoner.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.315Z","timestamp":1791907856315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/site/de-milyoner.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2052024\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"043d28658dce852af7439447d182b7f9\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:52 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mFtRn%2F3dMv9uj5XtdQ8jKWJWfX2eZQDKoZTeMhfwSMI2K5RgqW%2BKp6%2BjFphVWRolPcTg%2FdI6sY0k%2FMUZQGdbfLPG9u0fdj%2FjaxvMqR5yozTYU258ykLrdwbq56gb4d2sJYSQMEcqL9NFlCIO\"}]}\r\ncf-ray: a49f9e05fbce0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2052024,"size_decoded":2052750,"mime_type":"image/gif","magic":"GIF image data, version 89a, 800 x 200","md5":"c63ddb3981be6fcfbb6957cc98a5affa","sha1":"740aac26003575bf81d9ac12c67c8e2678f90b89","sha256":"eccd4683172e7100c5b4b97328b9174076091adc4731ca8cd8f1c4346470a7e6","sha512":"b811dd90845d16fbcd172475757a219cda69ba5ef3ebf8f8e98ae730682c5695638f5266d9b12a838c9d78a8ce7920f155ce919fe219139446cff1da0c35fc8b","ssdeep":"24576:w2xAUM0qFCnSEAlEvQbvWFSx6WyvdpOnbsX8hFpsZEKz:bRqFCbAls89xdyjfX8xs3z","tlshash":"bb253300d1adccefaa30027ed7ed840f991a0f1a5d6a5d2cf79a74cca75952bd039e12","first_seen":"2026-10-12T18:41:57.207538Z","last_seen":"2026-10-13T16:12:52.328067Z","times_seen":3,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":806,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/vip.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.378Z","timestamp":1791907856378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/vip.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 3542\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"9888254367f1873a2a898b03a7fc0ac6\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326514\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B8Vc1xy6CPeVBMw2SaZmTgTVOA7LyPvEeSyY9V0Wnf2PGLRCJE4bA2ZVHn70CqlhTJZ6f6UCpKDMUVzJvgkltp1OYLIVrlFVRoIqLlCu9umMJqyhSxAzsRlqwN7hQQqRCB4I3aAD15KGKRiW\"}]}\r\ncf-ray: a49f9e065c4b0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3542,"size_decoded":4255,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9888254367f1873a2a898b03a7fc0ac6","sha1":"5327f15d8f65051ffb74ab2eddfecac3149d872f","sha256":"7b7f1747ad480f837f942a4bc085e0269646919f67ab9c902b6fdff544840825","sha512":"245c8732bd78ff324de5deabece6989813a583879a20811fb64a43fbea2345d405af2d6b3802ba148d06e34dbfc9d7f087cb1c349df0d0f416f3acc48f281c9a","ssdeep":"","tlshash":"02715c9b586d79aa4888d8c8a2d9d3c3e7980c78cf048ec360cddf5c5a784747ec53a8","first_seen":"2026-06-23T11:19:31.005482Z","last_seen":"2026-10-13T16:12:52.328794Z","times_seen":11,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/golden-coin-link/MAJOR_SYMBOL.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.501Z","timestamp":1791907856501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/golden-coin-link/MAJOR_SYMBOL.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 535052\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"499a72c51aa0290d55771eae6f51e5e3\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r5Zok6PJhaRGsO737QYX%2BC9%2BCLif17yiMmk4SapVOgYq%2Fv5J5ehysIHcYPzEuN9Fjs8zTU7xZ%2FwIZ9hV%2Ft7PvH7a07HQ4dcDD0HMEucGHRYgSGpLQpMbZLqZoP%2FgZq3tGPTg0fewTqRGwtNH\"}]}\r\ncf-ray: a49f9e071d0f0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":535052,"size_decoded":535777,"mime_type":"image/png","magic":"PNG image data, 930 x 848, 8-bit/color RGBA, non-interlaced","md5":"499a72c51aa0290d55771eae6f51e5e3","sha1":"28cdaca3fe9461829ce9c92bbd158c39f7ad7c5f","sha256":"77f773f2296f088bb229f64c1f77de50c1e94c137d3e90037fd6742701a2bc62","sha512":"eb2981bd3f05d4c46e0ea1d3c4ab47ab6803e4a9fde626704983cc3c43fc63c0ac0073f7acaa730cd5d91393033ca4c24ea8648013773ba94db6cc05e7418f29","ssdeep":"12288:zMJIMuezQe2xxHXnaknKXjL4K/UN78IUyoglzA1DrDkQe:z4Dzzx2xRKTXwK/UNAVDrDHe","tlshash":"29b423c6bff193f483ef21eaf4465218d54a71544ef1234c55ac83eead00f588aa1b6e","first_seen":"2026-09-19T02:54:18.541522Z","last_seen":"2026-10-13T16:12:52.330013Z","times_seen":4,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":453,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/maestro.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.608Z","timestamp":1791907852608,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/maestro.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 24710\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"57288149d21707f706cc0bafea472359\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nP%2F1cnNcKyDKUaRD0rFkLOszPIgYTb5n1WUfwAgHmoDrXl0ZvUTIb%2BV6BcnbO7k8vmETmFSx4qLMRdGkCaTal2zh2FFc0JPCVWBfbkS02V11yWAzec051GvVScpaGnOqQtOqZe7ak%2FVfXjUR\"}]}\r\ncf-ray: a49f9deeca730b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/26584.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.763Z","timestamp":1791907852763,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/26584.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35104\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"549b70dac589d49ceed8d3d94ec6f698\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:36 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UPumEW6zBXA%2F18d1UdrSERSVzjNyL9aPk6YjSbOh%2FgMxPRBozdGOECnWWdcLN6qqaZdTH7dTevtUMT4VkLbAjGm1Rb2aYl%2Bh1htLifT%2B9StKtrDqywVkPV5mGv0U%2Faxg6V9tOmhtIkEehOQ6\"}]}\r\ncf-ray: a49f9defcb290b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0kk690al~dpdb.css","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.118Z","timestamp":1791907856118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0kk690al~dpdb.css HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-21b15\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":138005,"size_decoded":26710,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e7ba62bc8da5243db39ef6c76fab4074","sha1":"fed3b2b1a6682dbe89fc5a5a5c1dd308c695715e","sha256":"c12bc1d7fd2aaced32bc20b94343d79f92e58e696c0820502bc2a8be04c77e09","sha512":"db8e277568345246d09e367d9127c5f63bff9f673394c4a91c3200c74ddd9aceb9b8d48e272ea41e55f993657bd7b1ae0ac53277567b6c390886f65e3a4a84e8","ssdeep":"3072:anFVzZMjCz703OQWJSyLD0R9azxwGZ3mIOK+tYcKhRjZm5Rgohg7g76zoyE1peKA:anFVzZMjCz703OQWJSyLD0R9azxwGZ3B","tlshash":"d4d38491b234e53fbc3370fad3dce88d761ab091de228ae8b950212217d77f61d56a14","first_seen":"2026-10-13T16:02:14.62856Z","last_seen":"2026-10-13T16:12:52.330774Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/25871.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.408Z","timestamp":1791907856408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/25871.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40726\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"ad89d43adcb309afbfa50575fbf3f6f6\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:36 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Z940SPTxamBZG2sVtY5487hcVDIzYzBrfGPmD8IKZZh2AxPcx85%2BsNiDrCKEjCeYWjT%2Bzo9U1cip7bV3tBOwqEy5ShcIKWUfzB2b0HHHb0O1ited0r1o5%2FgVM6H%2F%2B5dUE6OabJLb9w9f9rA\"}]}\r\ncf-ray: a49f9e068c7a0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40726,"size_decoded":41449,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ad89d43adcb309afbfa50575fbf3f6f6","sha1":"649d8686e5d4b2c8f5655c0acc28223122163e61","sha256":"2e4271ee02c75b3c20df73d88cdc66c5334bd05aeeba402faf9435ddadcb0b2a","sha512":"6741032f311eed1512b085d61425ea423968638e351c88ede11889c9b4f42f5e5ad68e1bbca7f117c161ba84536965c688f7403e32d872575ab56b63ab9cea8b","ssdeep":"768:lPapw5BSoxUtsLMfWWdMJT2xBTxAGJuIzZPieTusiapR3GNDqT:UpwdUtLMUxV6v2PieTji0R36DqT","tlshash":"f8030249e4ab47c8d806b57f1b4cc666d6d2f0794640fec9b5d0b67831dd832a3a89cc","first_seen":"2026-02-20T16:45:36.891679Z","last_seen":"2026-10-13T16:12:52.33163Z","times_seen":7,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/26584.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.444Z","timestamp":1791907856444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/26584.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35104\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"549b70dac589d49ceed8d3d94ec6f698\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:36 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hYZTgf5vGu76Y4l9IhXaBmPWVmxCyf8u7HdZkc21G6TjysZLs94Rqs%2FoN2QkLno%2FxVeRJtVySfT9nZAV85B%2BPgBwaKuBYDQoxHUlvLkSBx1OY0%2F8rwfWYFDZjnY9nujDkrk8NInwK8VW98hZ\"}]}\r\ncf-ray: a49f9e06ccb20b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35104,"size_decoded":35825,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"549b70dac589d49ceed8d3d94ec6f698","sha1":"20a31927f190b410a16d6bb87cf927bd7b9acb61","sha256":"6c5fefce62f41f2cb034b1649b2afae1b3fbfc536d238dd0021b0a7487a2e5e7","sha512":"2cf25e8b2c9c8e8f33d4b142c7a900056372f010c628bc9d3ac9dc84301526343d31bf71f279aa5e806d7b1e26fac983f8c5aea5086ba70b3c6f3df776e3ab78","ssdeep":"768:5s+TCKRxGFsWPBw1da2krSR/tn5Zbfu5mQ90IEwSNwC275AuGRDYPZdFpyG:VDx4sUwTabONB5A/EzQ1AnYPZoG","tlshash":"4ef2e1617f2e47a8ee5823f623b2da33a960e6a84e4675109899333d63c451647640bf","first_seen":"2026-02-20T16:45:36.894812Z","last_seen":"2026-10-13T16:12:52.332264Z","times_seen":7,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/9585.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.457Z","timestamp":1791907856457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/9585.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 53741\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"f9fc036d321c819d1b1fd448bf07d930\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:38 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TO7r8Dhe4uY9nz9%2BFH4vwmAy30cM2owDw%2BV%2BDM73ifpjRZPzVRmZ%2B4YWNT0T42DkoevpcByU0ucbKZUmApb3a5xqQJS1hMvT%2BxUnck5UG%2B3QpTvLoevOg5yzscPgoQpw0NF9FqPuE%2FCRxptD\"}]}\r\ncf-ray: a49f9e06dccf0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53741,"size_decoded":54467,"mime_type":"image/png","magic":"PNG image data, 400 x 300, 8-bit colormap, non-interlaced","md5":"f9fc036d321c819d1b1fd448bf07d930","sha1":"b2684b62f4182792fde042b0da435d4dde2ae307","sha256":"9e07a934fa205941d918a018ab77cd651d8adb13bbc0a3a0accc5271e49c7863","sha512":"b024b3ac21bd930dbc1cdb02ed9d35f4b0d99358682d6b5bfe18058386961f5d6fe7958de8e50b8658e8c774071ed229c33587e90249de8bcbd9fb79007bab15","ssdeep":"1536:opZSLBUaNO7kLp6I8lFUtvw5TWV6tdrJ6qy:opZNaCE6hl+5tEdr0qy","tlshash":"9e330222b2e187fa4ebff0f5f0a96ac187f05a01d0b4b572086334c36926125e7e65dd","first_seen":"2026-07-14T17:30:30.051737Z","last_seen":"2026-10-13T16:12:52.332951Z","times_seen":4,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/fonts/merit.ttf?992de3584682ea783554301be755a8ed","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.689Z","timestamp":1791907857689,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /fonts/merit.ttf?992de3584682ea783554301be755a8ed HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.kbkrw8839xwdwqe31.com/mk/app.css\r\nOrigin: https://mrking20056.com\r\nSec-GPC: 1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: font/ttf\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=39PXNiDMNXpJRwPKa53yRrUhtFV3mR%2Fpv4I3rJ%2B81aPnHAEAF99C2fjrE%2BPyCIPVwMC2AC6ae8tkjqt3KOzwa8DCRPtew%2Fp63ocsb8K8RRv24mu7PJRw60z4l5bcnSqqKJaa7XJbKiUPqsfn\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:31:21 GMT\r\nvary: Origin\r\netag: W/\"5440312c63dba6c8827c102cc392ce8a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 6011\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e0e8a3c0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86768,"size_decoded":51625,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, merit      ","md5":"5440312c63dba6c8827c102cc392ce8a","sha1":"d9d8eb3dab354129e316da10ca3c44324aa2a82d","sha256":"2df036d85fb7142ed60fe84a5d5989d4d77be6ae7e52d61e9f4210aa51615249","sha512":"4d14ed546d18b09f639ec4eaf333d1c218fdd2c0329a202391df23a7c130f86420ffed50438800111b8834a5e458940b6fd03ffa4da1e0f0f3c975fdbaa790b5","ssdeep":"1536:iAw5CIGx1D5Y5qfbZbx5z+hFiNtD35Dfgt33X3iN/YDBrv2KqZpxbR2+WR/Dl+16:KCISFY5qfbZF5z+hFiTDpDfgt3yNw1rz","tlshash":"23836c0b974acfcfd441d6f60d6380730ee2da15973fe266a9c99c41f0259e88c357aa","first_seen":"2026-07-14T17:30:29.942441Z","last_seen":"2026-10-13T16:12:52.333548Z","times_seen":14,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/provider/n2games?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.816Z","timestamp":1791907857816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /slot/provider/n2games?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":300,"size_decoded":781,"mime_type":"text/x-component","magic":"ASCII text","md5":"ca341161d64993e5956a7be73525d5b0","sha1":"f67cb38008eba67f6abd01282eed8f2ebafcb3a1","sha256":"ecee557c5c87bfd89e038de3c779cc847f2c2a63d72a4e70540a778a6687eff1","sha512":"e8cf19c20c266ae7fdd5785475862a7706ccf7a2d0ac4c4aa4ac0e6cf6f3b7412e572b16a86b7f82c0be09f6505c8e002c932b86a4e371642c159543bf0147ea","ssdeep":"","tlshash":"43e08627820419b31cba00c0803ee88ba94e113b62ed0cf080a41e3427e317a06832e3","first_seen":"2026-10-13T16:02:14.550398Z","last_seen":"2026-10-13T16:12:52.334205Z","times_seen":2,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/footer/youtube.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.197Z","timestamp":1791907856197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/footer/youtube.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 18633\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"93a89c32a87116285df1025f81b39298\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:24 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SL5HZj3QmPhefOpnCweB2w1R8F%2Ba12vAazo7jiO7NOQam9e8BanDEKC9jkesZXmZ%2FVkaYZG3VU%2F8m6pm7RAQFNP2kfmK6zsCdDcmB7lICl3AzC2Es0foOo5GT8tJA9DEXs7iSDareV5NQh7Q\"}]}\r\ncf-ray: a49f9e053b2e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18633,"size_decoded":19351,"mime_type":"image/png","magic":"PNG image data, 140 x 200, 8-bit/color RGBA, non-interlaced","md5":"93a89c32a87116285df1025f81b39298","sha1":"edb0ca020a810eee0d5a199b19f94b09af557800","sha256":"387dedc8be09767092b442eff32572c2e0220e3f3a3d0a96972f1f3c5ae8f459","sha512":"1e4079ab10ce6b5260f9c3888071817474f73c4ebb1903f6092768ad5297d27b2a5e3a6771c9577c9aff0d15969decd17c9f078af486cabf8c8d3ea5eac95d10","ssdeep":"384:gkI3awuoLo3p6aOcpH+FendiYH65YwaikwU/yvdP+Ls/W/:gkI3pHQpmcpH9kYz6xW/","tlshash":"cb82d0e82646ccbe6400d82252cc5f438d766d98ce9bc6eeb40dbc4da7db56da5b9300","first_seen":"2026-07-14T17:30:30.083143Z","last_seen":"2026-10-13T16:12:52.335049Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/high-wins/359.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.746Z","timestamp":1791907857746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/high-wins/359.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 1963736\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"c7184eb3c0d4867025619a88558dbc09\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ByfF9LLfeT53xAecVfXiQbPU%2FxmdLhS28%2BBA5m%2BTBrTGYRFcq%2FGOI47Zz%2BUkiXXWHXGaW8WiACYUYhMgGYvAEznjJlz6yfBeuoJbweookuHqyNkuOadQgeioTuNsF%2F8zpvwQjLLt3y%2BkHNd%2F\"}]}\r\ncf-ray: a49f9e0eea9f0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1963736,"size_decoded":1964466,"mime_type":"image/png","magic":"PNG image data, 696 x 1260, 8-bit/color RGB, non-interlaced","md5":"1197624a5cc2f8bebe48dafe66fb9dd7","sha1":"1528c65e509f655dc7dfa0a01df2f62104408b1a","sha256":"53d8bcbdadccefb9d32428629286e857bb2e98b22485c84e307c352a52d05c20","sha512":"b1e7646b6ee01aa65a25576ad979bcc4fa28d2b3f913fade97f0460eef4303707130063cd0d8c40c154f936baca5735a65c7d5e2d74b4c68b02aec67b154495c","ssdeep":"24576:2Gcl2Dv3Xj5Ym5YRGILmsipLn0FnAtEOg6IiR9AaFyMCe:N5vjV5OJmTn0FA+d6IiRhJN","tlshash":"bf2533fee8be0e5d123fc011410d9b39f9d066024ea1e815695eb5dec78c0bd2f94ba9","first_seen":"2026-09-25T15:32:43.554541Z","last_seen":"2026-10-13T16:12:52.335625Z","times_seen":3,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jvrwolveq00dcsx.online/native-images/gt-10642.jpg?v=1788640991395","fqdn":"cdn.jvrwolveq00dcsx.online","domain":"jvrwolveq00dcsx.online","tld":"online"},"ip":{"addr":"104.21.19.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.262Z","timestamp":1791907858262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cfa24eff.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Sep 2026 02:48:16 GMT","end":"Wed, 16 Dec 2026 03:48:11 GMT"},"fingerprint":{"sha1":"DA:EA:9C:15:AA:31:A0:7E:7D:CA:BF:B7:9B:BF:3E:1A:E2:89:75:6E","sha256":"22:04:8E:BF:D0:35:CE:DF:0D:63:40:30:2F:EC:2F:CE:7E:CF:29:5D:8E:37:F6:81:F5:4B:C8:3C:C5:A0:96:76"}}},"request":{"raw":"GET /native-images/gt-10642.jpg?v=1788640991395 HTTP/1.1\r\nHost: cdn.jvrwolveq00dcsx.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 81275\r\naccept-ranges: bytes\r\netag: \"a53ba304e78ca9d7b96ecf6215946066\"\r\nlast-modified: Sat, 05 Sep 2026 20:43:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T9gm7SIZG5ZBG2LyV2Pyp6M6W1K7Jvh17E1TeOPNoDX7OrSQeRPfCJwtzSvMvq2dQDYPsjmnJ5WmpKS8ZB%2BFekUnIm7kGXqrwebM%2Bs9ro9DCOTtRkZckNJcdNsBpZ2IYMCFusKUiFu60a2bqfQ%3D%3D\"}]}\r\ncf-ray: a49f9e127f4fb4ed-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81275,"size_decoded":81947,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 375x375, components 3","md5":"a53ba304e78ca9d7b96ecf6215946066","sha1":"a9ab7a00180351599de77aee2aa1d2e95269ce99","sha256":"c53332ce3edce19d5fb04d2e967f7cea4341f04dc8eb211b9d79f24b589375d2","sha512":"5628573200d98d5b76a1bd37f6c91a6bf3458e109c1d8b90c7fa9b906dc6fadf11fe9d3e6bb685de445f45131e5e5af2a588de5993e97fa56408ee910bdb65f9","ssdeep":"1536:+K/1AslSvBJRkz5v0BfZFD7hiJLqyw6FQI2HMsXFmHhX8KKKK:d/dlmEzx0FZBhazLF92HhXFUhsKKKK","tlshash":"fe83029e74cfcf47438dac0212470a98b66a51675100cf0971dcaef3cbb5eb69698e1e","first_seen":"2026-10-13T16:12:52.336195Z","last_seen":"2026-10-13T16:12:52.336195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":90,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cdn.jvrwolveq00dcsx.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://frxchat.site/rt","fqdn":"frxchat.site","domain":"frxchat.site","tld":"site"},"ip":{"addr":"104.21.2.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.647Z","timestamp":1791907858647,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frxchat.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 21:12:04 GMT","end":"Wed, 09 Dec 2026 22:12:00 GMT"},"fingerprint":{"sha1":"B8:63:0C:55:52:E6:FD:F8:2B:F1:2D:B7:DF:3C:37:32:FD:23:28:28","sha256":"FE:6B:D9:49:C4:35:8B:CD:96:22:E4:15:55:5C:69:0B:FD:E5:EE:58:9F:12:A8:D5:1C:AF:40:80:17:20:FB:86"}}},"request":{"raw":"GET /rt HTTP/1.1\r\nHost: frxchat.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://mrking20056.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: jBusyV38Fle84bNPvY6WFA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 13 Oct 2026 16:10:58 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: MQi6eC2GpMCneL8xL1ICdBdD3K8=\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wgYUsHbeB2bu1u2adOUFE%2FQeV92vylMnT%2FSQjPrvQ348aNhA4N318DLV5ks9VhbQBJ0tfjwiSvj0eoCAYICTSU4wjeVYo%2BZjrls8FmiDchy%2F0ziWCV8fg2Clr5xWfXU%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a49f9e14b9a83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":769,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":23,"connect":24,"send":0,"wait":133,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/auth/register?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:59.072Z","timestamp":1791907859072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /auth/register?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:59 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":235,"size_decoded":757,"mime_type":"text/x-component","magic":"ASCII text","md5":"7aee0d63a754346d4e9816abbbe817a3","sha1":"0f2f10aa7f05b750787050277390f0544d752285","sha256":"db898da4d719147949077a87ae2922b4d033b486b747e5bbd6e97747afad381e","sha512":"9de8354b3635a204f6284ce42de641351acc8a5cdbdc151f111284ce673826c4868775e902ef61f68d74e2dc134318aded7e36bda9254e12582924e98fb24efe","ssdeep":"","tlshash":"8ed05e2b820425b21cfe20d4803ee84b664e563b22ac5cf0c0642e3927e717946972e7","first_seen":"2026-10-13T16:12:52.337703Z","last_seen":"2026-10-13T16:12:52.337703Z","times_seen":1,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/category/populer-oyunlar?_rsc=p37cr","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:59.523Z","timestamp":1791907859523,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /slot/category/populer-oyunlar?_rsc=p37cr HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/virtual.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.588Z","timestamp":1791907852588,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/virtual.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2544\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"913d30cd624098ca324e29d92eb42787\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pN47o%2BV4spj2nVhZKkih2yMwsLZIeF678E6%2F%2FUvx%2BPL1qgD6rfIvJ1dAiso4usy7YXrzBp6sDfiSXm5VedptFO5mQ%2BIOF0KF3nbtsI24jYvZrykchvAQ%2BRxXzyPOABnjTohPWp5XF%2Fh74i6r\"}]}\r\ncf-ray: a49f9deeaa520b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/14158.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.762Z","timestamp":1791907852762,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/14158.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 548489\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"4a7f91291a7601ffc586095b5daed664\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:35 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326511\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VaAFURgh0VhmxBHOpYU04KUQgtUCTJKVlvHsqekUl6O6MZGsLqY4a%2BdtgHXEYPPQ6N2RUwk%2BNSNmRuq8KmWNUbM%2FLmXKTv4CHd6RR%2BWv87666L34yAKiki5%2FeEcM2ew%2FpNje%2ByYSmy76uCvE\"}]}\r\ncf-ray: a49f9defbb260b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/cc/minor.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.799Z","timestamp":1791907852799,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/cc/minor.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 4117\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"f8f3189d6339b55551539decbfcc35f3\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQeVx31l%2Bq4P4iwx%2FkQ5AM5lykhLWeF7fPf6Peo2NQi7CmtNw12OH2lfcSmyB35JvY%2Bt31EAe1VfVz9Yz1gXGnqvZyGvftpgexDWtS2eVSFUaYh20vXIDwzVaDsqvgeKuxEzE5qjL4w5f%2FzR\"}]}\r\ncf-ray: a49f9deffb650b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/high-wins/67.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.735Z","timestamp":1791907857735,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/high-wins/67.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 116505\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"027477e0ed46047b9199f72341775165\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y1hn4fgbkSOqdW8qFiMJSV6Q%2Be6ijWVRI%2BZ9abnYxrhwx7psP%2FcW%2BtCdbH%2BFnWz7k8%2BgMdyMHJ5lJn%2ByM87ctsEPRKsex%2FF8d6QxmN8fKwcWCSmEim88O%2FXLcSKoAPRytM7F0Ulb2B%2BGPx9X\"}]}\r\ncf-ray: a49f9e0eda8b0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116505,"size_decoded":117239,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 696x1260, components 3","md5":"027477e0ed46047b9199f72341775165","sha1":"346349cc49f6de58f9fe13304b5cb46b69fac76d","sha256":"56e77575264d363bac914e83b23883c5c450bd094cea2916734bbac90d3667c7","sha512":"165b611426b6df208e52ae7fb894d1f7cfec6c9897bf3a94db74adbeb880d54f315398978d1ce74342a01a0397296add721e0dca5c9bc37c76a96aefb01f488c","ssdeep":"3072:/asmnNNb9AjI59VaUXBw2ohPc04iqW60dgvPARH:/asKNNbqjI9G2opc04iqW6MgvGH","tlshash":"e1b312794e994c32dd163fb0a4ecc2a8af717b1550818ad4d0e6c350e5cd322bf4e2ae","first_seen":"2024-10-04T10:11:53.271886Z","last_seen":"2026-10-13T16:12:52.339097Z","times_seen":13,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/27441.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.420Z","timestamp":1791907856420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/egt-digital/27441.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 152618\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"0bcd24a669e87f4f092a946eb72d2ea4\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u1bPN3tsbzzrw17j6wR2RMX3PhjSO41ZTVcqSvGQgukf4vWs%2Ft%2BUO9LXLWpckvQBjfzKrD45wEP1CmWEDdgd1VEv03RxTqVNdwQGbvC3GBUtRxKvlAF1aRSX%2BM8EIH66um%2BZEgyLC7yPNlVh\"}]}\r\ncf-ray: a49f9e069c8c0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152618,"size_decoded":153339,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced","md5":"0bcd24a669e87f4f092a946eb72d2ea4","sha1":"dab4b2ca29dadb22c1ff034401cb3bb7b2096189","sha256":"7efac83ebcdb3907e85b973b1dfa38feb08331a087e09ec79d6b7f04b5937175","sha512":"01a65bcd441ec26641c2de3c93e048efaa0104e64c1f824c0fa1c82fb30cd3b50b3ab6bf4976f9cdc2861f882b6a3cddc370422c36d5259b316156554b2ea5a8","ssdeep":"3072:f84bs+tIhV68Q/bi6w4+RfrkX7d2T4mIw5af33G18nlgwjA1/nOC3v:f8yVtEVU/biHZ67d2T4mIV/Vl/kJOC/","tlshash":"39e312fcd551662ae0957427b31b7b171e7be8ac12fbb7d890d352838a8e05c12e94b0","first_seen":"2026-10-13T16:02:14.539554Z","last_seen":"2026-10-13T16:12:52.339698Z","times_seen":2,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/team_logos/6.jpg","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.509Z","timestamp":1791907856509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upaflex.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:25:58 GMT","end":"Wed, 30 Dec 2026 16:25:57 GMT"},"fingerprint":{"sha1":"E7:05:1F:1E:A4:FD:0B:B5:FC:09:40:CD:E0:55:E1:28:D6:5B:78:E5","sha256":"C3:D1:9F:1C:81:C8:C0:4A:93:F0:62:A5:B4:C1:36:3A:40:46:75:D2:82:B4:D7:29:40:40:38:94:09:F2:93:0D"}}},"request":{"raw":"GET /team_logos/6.jpg HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YOiVb0%2F6gJgNtG6V9l8avlZKQaNcmL3Y7EcZxbsOubXsfdT8KtLWD7rKu8fFT8m8kmWKRJHFUgRjw68FKomTlvyUdbu8AXb0jpZyIKNqAGQo5ZpiYZCS0G9BDc%2BzBtl8eslwVU%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e072c6db1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/king-ozel-poker-logo.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.576Z","timestamp":1791907852576,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/king-ozel-poker-logo.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 741584\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"fa1fbf2ecfbbdde77c3ade3f8a9dfda0\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7CPfEocTr3S1ty1bb2o%2B8HVy8CEFBHtd7M8JIalz2N%2FQKrsy7IcoleSaWKQ11ojoGD2wMUDyy2sch%2B5uRh%2Fvjnvtjun9CxUfJ68IUT4ERTQrwLY%2F3%2BcfITbzv4OMYbN3pvCLSGtC3uvs%2FDIh\"}]}\r\ncf-ray: a49f9dee9a3e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/30081.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.636Z","timestamp":1791907852636,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/30081.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30581\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"3994909703e45759aa404b2e583b8903\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:37 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1LWJ%2Ft1fPBldsQ2mXyYjYDwZJaHUxQmO%2BOSA2dYSVovB4QtqwWErQ3SBWMauZJ7vJShzRixX2964qS4FDej%2BSeC5KU6IWrEArVRt5cH02sYe9%2FqShY8Cgpg67NnMieFglu93KYJyJGvd4bp2\"}]}\r\ncf-ray: a49f9deefaa30b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/cc/mini.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.801Z","timestamp":1791907852801,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/cc/mini.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 4703\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"b94ec739946ef426343fe2e004cc0c74\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2Bsi4rafUGKS8kpOlzb8c0kpsUvjh3WDbOqfiAlyASg7VwuDXV4n%2Fl%2FbW%2Byl3aPSojkhV7QKF6wQcMa6u8jXnjDjkrKV0sXxrenRPv6rT9awMSJFTKvWABO4KXZoJA9JXQ%2BkP32Ei5YckDbW\"}]}\r\ncf-ray: a49f9deffb660b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/partners/madrid-bonus-1000.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.275Z","timestamp":1791907856275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/partners/madrid-bonus-1000.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2800071\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"e2cc5fb2656a412b931e0f3767183a75\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:48 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326186\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Knuu8YWhghn9Y%2Bl8nEpv%2B%2FaVuMIlfr%2Bd%2F%2FvFcVHjYslsfYpmwe27TCTkLI7w5KPHnB7HKqAHOoK1MNzQZKQTDxO3V0FtTk2X5R8TbW0bos4jzxFp6LhxE%2BBdk2%2B5DF5afR5d5r%2FrzWI0i2Aj\"}]}\r\ncf-ray: a49f9e05bb990b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2800071,"size_decoded":2800803,"mime_type":"image/gif","magic":"GIF image data, version 89a, 774 x 143","md5":"35d082bb97593e32ded0bdd64de43d7e","sha1":"172ce97a9257ade582dbb1ca9cd64a468642b2d4","sha256":"c0a3b25a21bb98223dadcd478eeda20461f9fb0bbf253160fe21b29572a5acc0","sha512":"40fd0829f76550212701f52b6ba487a45b0a008bc684c94e452f49310e67d3486579e0bd366a6638d472b834fc71ec548c8e64cc52c4baeaf8eaa809c5ecc45d","ssdeep":"24576:w/LXalfVEcLO7u8g1qLdLXliEbJGMTXRukEbcOoN2IWC7GhvbidKdb:UafE37H5d7l7XIkWRIWnt9","tlshash":"932533f40111aec142d15ffce1bb26865b5f4135186caa16ac2eabc4338ecfe65cda35","first_seen":"2025-12-30T10:16:59.991573Z","last_seen":"2026-10-13T16:12:52.340566Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1205,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/cc/major.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.487Z","timestamp":1791907856487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/cc/major.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 4735\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"4d1e2d956beec9688282cead9c6dbd10\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aM%2BtnYlLyF3AAzw0vNJrt5H7ab%2FEmY20FE7AmMIJWe1oKJ7z%2Fsi5A52xmoBZRzBUodAtVH2boyIQ%2F8A3z3A6nPiVE5f6oisbGiYzEYP%2BTCTslUvdhpkjLnbRVyUec4rLbA%2BTYiUTLil%2Bqcrr\"}]}\r\ncf-ray: a49f9e070cfa0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4735,"size_decoded":5460,"mime_type":"image/png","magic":"PNG image data, 45 x 43, 8-bit/color RGBA, non-interlaced","md5":"4d1e2d956beec9688282cead9c6dbd10","sha1":"8abd73bd822f19c2f5c4083c19ad28bb6ce87e9b","sha256":"d6e59442990048e324b3986ee865c2684285bd553c909c43a28ce5b91774a9e2","sha512":"004510390e7ffccd45abbecd639c9c788591d4d2c05b0d6b92e068183838c659ecfd9b03c1ffedd7db762029a3a177b0d78eb702f1e08074cbc3e5df0de4b121","ssdeep":"96:qBrL5+fYfHVDXCQfJBhL9CbXidU0GE3MiMBbmHic+9qY9Rs:AqsDXCI9CAe1J03","tlshash":"f9a17edf030b5761b6437957230aa96cf6dc169659b7e3cc0846149c39ea48012e8637","first_seen":"2026-04-11T14:16:59.586904Z","last_seen":"2026-10-13T16:12:52.341123Z","times_seen":6,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/plinko.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.374Z","timestamp":1791907856374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/plinko.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 6126\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"5bdb17d60b8471c5e9f5ec597b680778\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IduAR7XdpxITpiGm%2FXwBS9vn0LsMIi1nD8o%2BYws3%2FTKXE1z3ZqcjiUwhNuH8t8dH1W0dPSgPYIPedvlL7mNV46vApAKc9RKXRh16INcPOllcgvpcFBCyFiNPonVh5tRcVhyJgR%2BA5tSqlIlT\"}]}\r\ncf-ray: a49f9e065c470b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6126,"size_decoded":6845,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5bdb17d60b8471c5e9f5ec597b680778","sha1":"0625f1884eb47f51fcb8ee15ae1632c22b6f3a68","sha256":"9deee78482493dd34c6d1b3f48c32048f9fc8f0b6f1e7880d094d5d7e1f8b92a","sha512":"511ee822cf6fa8227b392dce86bea6273636f7acf52f430190a2f87f5eefb447a3b06923aa2ddc786a64c43097cfa96de2c83dc2533a6022e0682cfc0d083b52","ssdeep":"96:Lqf2a+uc+Q9Z1eEDWvy2Ye4wTAvHYs4dxyzPpVGa9cX/NmE9uShBk0vzJubufWhw:LqoucfZjSv9YfwlsiAPpVGaS3ThBk24Y","tlshash":"0bc1aea41d6a33327d93a97c55248bb0ad03f15000faaf605709a3fe8789aeb559c764","first_seen":"2025-12-30T10:17:00.012444Z","last_seen":"2026-10-13T16:12:52.341641Z","times_seen":11,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/raffle?_rsc=p37cr","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:59.524Z","timestamp":1791907859524,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /raffle?_rsc=p37cr HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/128aahewwf1we.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.324Z","timestamp":1791907852324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/128aahewwf1we.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-adcb\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44491,"size_decoded":11135,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24458)","md5":"cf874073eb2aecb3adb7c02079ba562b","sha1":"132f56b2fefe447e23f415b744b559997314b6f9","sha256":"db8151a57f0e61d9b7250ac30ae666c7067912a7268943a7fa0fa65732bd5dd7","sha512":"61ecc0a1cd960e31d240bd169e85f7718b055c8cb4ce81bcf5d2e7af9adcdbd9e9a7773aec0f300270255c0c66922b6790d36adf9a4fb2d695bef3128cbf838b","ssdeep":"768:MS6Dia4/coVPkpc/s+zYXExp7ly1V0U4v:MS6DiZ/coVqnY","tlshash":"bb13e7b132d4faa3539341e0e43f2016f2780d7520ad6470a7e89c9b754d88da6fefa5","first_seen":"2026-03-25T05:30:59.093629Z","last_seen":"2026-10-13T20:23:23.810334Z","times_seen":2434,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0gmoggs02qpg6.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.335Z","timestamp":1791907852335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0gmoggs02qpg6.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-a0c8\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41160,"size_decoded":14550,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31930)","md5":"c2fdac886fd59cba48e77f64c43df871","sha1":"8dd6f0dd90da40c6e89272442ecf9a6e5026168d","sha256":"9dcf5ad360b1c18a7b80b4910e585ede52a539f6fc8bc72e5ded357ee9a7910a","sha512":"67841a933f40dfa9bdbf72f15a3ae32551634a2e6740e97aff3401f6bfdcf2824490cb4b2cec4a1a5cd4a458c6ecae086119f30db328b2e8b7a0c70b88427f6b","ssdeep":"768:RIzhHJNPkOsCH71yZ8ATNTOYlTvLmHXG3v5aCEJG5LqKaBtl5N269Bx3jpIYYsHF:RIzhHJNPkOsMI9Tthp3v5aCE/v5RzHeU","tlshash":"7103b561a28672360e4343d9542903096fbe78b4678c541fb76c5ed72d22c8a4bbdff2","first_seen":"2026-08-14T22:59:23.870456Z","last_seen":"2026-10-13T16:12:52.343508Z","times_seen":19,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8af8c83d-8586-42f4-b327-2a7d1434123c.snippet.anjcdn.org/sealassets/520efb1caa6fb6ac6ea295d2f6b05554-mrking05744.com-9cc7cc9f00078e0fe44f617d0aa404752f92c7f8f08f7dcdc65a0c766c4260c425631402fe1586a99528421f1f1ca456-c2VhbC5wbmc%3D?status=valid","fqdn":"8af8c83d-8586-42f4-b327-2a7d1434123c.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"108.157.229.89","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.541Z","timestamp":1791907852541,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /sealassets/520efb1caa6fb6ac6ea295d2f6b05554-mrking05744.com-9cc7cc9f00078e0fe44f617d0aa404752f92c7f8f08f7dcdc65a0c766c4260c425631402fe1586a99528421f1f1ca456-c2VhbC5wbmc%3D?status=valid HTTP/1.1\r\nHost: 8af8c83d-8586-42f4-b327-2a7d1434123c.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 18204\r\ncf-ray: a49f8ed64d2ae98c-FRA\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncache-control: max-age=1200\r\netag: W/\"471c-t8NRZo8/bYWu0yVr5+S8xrXV7Fg\"\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 c76d87fd83a704b78afc1028fc7bcea2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: QjRnnPy9LTzUKgnYpy5ZeHwQpMkTEKj674AN5RIoKf9yqmLsyiuodA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/11gyiit97qm0m.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.154Z","timestamp":1791907856154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/11gyiit97qm0m.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-7eb3\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32435,"size_decoded":13263,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32297), with no line terminators","md5":"acca769c2dbed1652ae7ef8e91ba6374","sha1":"c408ffad278046c1786cff430cc4bf0fff480212","sha256":"05b33679fe0a82ca459af1d3140fb383b471cdc9d862bef78857707bdc764b0e","sha512":"743277747d86e5b0a19245b15c125baf368661443b5b80d54303add9ef9c6a46e81ab4cb0b149de94853b7a82a67e80d6974c2766dbbf18377bb22e4e297e7a9","ssdeep":"768:Tkiy15KkLTBV660rBozsf2v1AnFWEK/LhOXGwrN:TkqknBV6vcsf2d4","tlshash":"24e20ad927553928aba940e5911ed00c312f7d9c9c0f4838b6b85c6a292ddc1f6b3fde","first_seen":"2026-10-13T16:02:14.625738Z","last_seen":"2026-10-13T16:12:52.280821Z","times_seen":2,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/33447-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.563Z","timestamp":1791907852563,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/egt-digital/33447-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1036126\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"dbeecfa4a68d656a5c9506120058e2f5\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:29 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YIXKTXwmS%2FWe1L86iduNOFMRrU6REsDukkqZRPTI08%2Bor4M5FfV1B2uWqoadUoQjHHi4egaYkk8lO0jsr3RFabw3ipk5o8pLI70OBWdVTeQ7e%2BPtFC9IMJtQzA%2B1LXbGRQIR%2BJxE9jpDLcUY\"}]}\r\ncf-ray: a49f9dee8a2c0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/team_logos/6.jpg","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.834Z","timestamp":1791907852834,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /team_logos/6.jpg HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/team_logos/347.png","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.835Z","timestamp":1791907852835,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /team_logos/347.png HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/favicon.ico","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.995Z","timestamp":1791907858995,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/_next/static/media/2421d155e98c9717-s.p.03rg4xj3orddh.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/5c8bbc89ca099f34-s.p.0vk09kfe5b-gj.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/chunks/0m.f1yt-6hoh2.css\u003e; rel=preload; as=\"style\", \u003c/_next/static/chunks/0kk690al~dpdb.css\u003e; rel=preload; as=\"style\"\r\nx-powered-by: Next.js\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":92528,"size_decoded":24671,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63960), with no line terminators","md5":"58036956a3a5ae49c4d6b9d994170e33","sha1":"0bd60d88dbae9fda9878d09a4764c56fdb9e9864","sha256":"929ca24ac66600edfcaffd06d3916482f2d23ec1f4925afe3e3ac6d9519aa5be","sha512":"97e974a93635fb95dc52fbc9b31bbe64d045d30857fad86a60e5e77ea17ddf5a53db4741734daa5ad7015902049fcbff99171c6932130fa97731473e6cec8e71","ssdeep":"768:OOC77E5cJC7mMhS79Xbr3f476i3EUQnWoBsEfHiIqIVRJI9zEjcR1sEy6JPqwqr7:EBLs7PwFlZfyzEjxZtlOc","tlshash":"1f93858eb80dfc1bd551cc8f227e5f379489c877c4b2acb9e29cc95a506447a97e2d80","first_seen":"2026-10-13T16:12:52.344785Z","last_seen":"2026-10-13T16:12:52.344785Z","times_seen":1,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/dog.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.350Z","timestamp":1791907856350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/dog.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 3502\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"5cfedeffd7212f5601ecf341fe407b9b\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptmKT%2F8mBsGT0d3IiQ0FgzSlc3PxjkSEeS%2BvmopL1uvUxTpTPczpeCYZLp7%2BLTxBrGugTDuB%2BoVFVgwRE%2FqkgZWW6dsKiaIUbwg8SJ06oBuDlNQJlHzsXw0recq5oolqpCub%2Bs3VmDsweEg9\"}]}\r\ncf-ray: a49f9e062c0b0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3502,"size_decoded":4225,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cfedeffd7212f5601ecf341fe407b9b","sha1":"a20049e6bcd8950bbc9a2c7156e8ead5a6272fab","sha256":"23c123e9970548e7e5049c31b955369b964680c67227a61af67c00cd4250eb0c","sha512":"5a8cfb206b219b5e00a9a5a44cb02729e47b63540686a6b96509652d4ad6cd971e8efc1b6665888e38fab1f8d39b6871206e7eeea025206541e7f7b6119faf2c","ssdeep":"","tlshash":"07715bbdd91beeb45a546e09a2094f428e09b06493215299a2dacf2233be8e730f014c","first_seen":"2025-12-30T10:17:00.072936Z","last_seen":"2026-10-13T16:12:52.34658Z","times_seen":10,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T16:10:51.856Z","timestamp":1791907851856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mrking20056.com/\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"}],"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:51 GMT\r\ncontent-length: 0\r\nlocation: https://mrking20056.com/\r\nset-cookie: __hash_=d575a691012f038327b154b7f44b3001; Max-Age=1800; domain=.mrking20056.com; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001","quoted":false,"path":"/","domain":".mrking20056.com","max_age":1800,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__hash_=d575a691012f038327b154b7f44b3001; Max-Age=1800; domain=.mrking20056.com; Path=/"}],"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/25917.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.630Z","timestamp":1791907852630,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/25917.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31822\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"69816bbb4069c3168fc405ac50c22725\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:36 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mp5LRN35hKx7T%2Bxs36W0HLnMDSHyNfCobTG0MQr0ufL9uaq6CW2%2BeyPzVveSGofSxWTQuLUpDu%2FjesCh30YY6DBpnLe5%2FdLM6rYkL2NltlgBjdm5ot8ywfNv6gsO8GHAbG7AhX%2B8bc44IxVS\"}]}\r\ncf-ray: a49f9deeea9a0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/sanal.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.586Z","timestamp":1791907852586,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/sanal.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 4834\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"5a8fdc3298d8144bac1a43a7c789e01f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=99EoLvvpKTqzdjXig1%2FY1%2BRVAG0zBgPf96jwW2Y7yZP5KScsd8aNeWq1XO3HZpoKahOdbIyNQRVbibzuXA42hTPAFa2qzFwFuDj3%2FkS5tKA%2BBMjow%2BiQmhnoInmxH83WKTaak85foyJ6qZn2\"}]}\r\ncf-ray: a49f9deeaa4e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/27442.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.633Z","timestamp":1791907852633,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/egt-digital/27442.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 157888\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"17db3ff29d5a9109fa6a6aa2198b231f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIykCPQ81DIdzIK%2F5F80u0qcCAV0Bm8sO5zi8Wuqy3rh4ErggqC33X987vAHZddWKczGtdB2Iet2%2Bk4LIT7CWQfS5SoJTyXL8bgDUIXJ9Z9uwS2lre9h%2F2kLp78jYVRl%2BENWLzIpOFf8EKEf\"}]}\r\ncf-ray: a49f9deefaa00b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt/572.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.764Z","timestamp":1791907852764,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/egt/572.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55567\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"08a049fee518115b7b80f3ec3a7efe28\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=95Pk%2B9lkh0UltpYDFVe%2FKByCx2Tk3rnn90q8xXT5tuih0xCWBUYyc92m0iPAAeV9Q2e9RYJjucWVjtFIJBy%2Fdimd68QOdQ3QuewJ4%2B0H18JtHAE52WIvgsuJgfEZgmVUEgx5DRRbbYomyoM7\"}]}\r\ncf-ray: a49f9defcb2b0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/mk/mk-extra.css","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:55.872Z","timestamp":1791907855872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /mk/mk-extra.css HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:55 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=teEVjKubBIMwrz7bxMH7rj67N3MoE1u3tiXm2ljt0yN709b7%2FHs0nPPXNn8BQz8%2BQUI7Kr5bJ52cUoP8eMUBws%2B4qY3mqTMPwknx1xn83Xba6yAYRXLYSoqeiQ%2F5ZsnqEdVW9%2FWdt9bDDjqk\"}]}\r\nlast-modified: Tue, 13 Oct 2026 14:59:39 GMT\r\netag: W/\"67f89fd3ac5fdc8d5b33710963770a13\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 980\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e0329880b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10191,"size_decoded":4491,"mime_type":"text/css","magic":"HTML document, Unicode text, UTF-8 text","md5":"67f89fd3ac5fdc8d5b33710963770a13","sha1":"05f5dadaf7baf123ef735bd6a96575a05914759e","sha256":"15841bbbb2ae8be3543db1e0829dc0d5e4b953b54005a6c055f1fac1d08bbf32","sha512":"8b2e57492cc74e29ad5813700fe2bdf750ed835d919a4b5c08e29b0f7a44a9081b03bbaa79b4807fee342465c6d3a8fa895b8d503003121842cf40367deb083c","ssdeep":"192:vvRoJOJI9NqkCEcSZ4z9aCRCaPEMs8EK9skKVme1d4pKn2Mgnhet6v34aySt+IAR:v0IMM0t6v3xy0+IAUcT7H1P","tlshash":"b822d8294584bc7f0d7b863b95c15f4ba60e4c16a4b3fd1bb3476a1c8e8ff8911a8d80","first_seen":"2026-10-13T16:02:14.559505Z","last_seen":"2026-10-13T16:12:52.347165Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/33290-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.300Z","timestamp":1791907856300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/33290-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1758057\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"2463ff233640fa0583cb746d47a70eb9\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:38 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y7d1ai2Q1paukkD%2BdCPBIZ50yCG845G31fWU82jMdTXDIFENm0LRf%2BBd1HNSzhrc6hcQ%2BI0ji5r73unyosixRPeiEryRGf1Q7aQFEK6Pa1ObOJinubOpWbAgGCugh6t4ersBHis8rGbaNzUi\"}]}\r\ncf-ray: a49f9e05dbbd0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1758057,"size_decoded":1758777,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"e1fe0ae46c48bd85a4e31c02d6dd5b01","sha1":"ff1e2c675718296976b42b02d1a1741818ef6518","sha256":"2af885f200193319a5f02ac39da346451329000801749cb5f0531bf004244f78","sha512":"c6bbe31f7611e71f5d4ff8b3fa98a4c1f46ca82029a11fd73808e4095606170d096a13210dd648942b33eebeb0296e55bdbf9c59c9f28ab413c61efbc050ae3d","ssdeep":"24576:gLQpHFEWyNzPdrr5/5MoSpFT+dpxFc3g1uTEzY5jDNib6KJR:WQpCdnMJMpxFcIuwMJwbB3","tlshash":"d92533a4f5047747db7911b58c230b392d4e7af010276b76c2811a0ddabbf5ef6b48a8","first_seen":"2026-10-12T18:41:57.240828Z","last_seen":"2026-10-13T16:12:52.34813Z","times_seen":3,"resource_available":false,"data":null}},"time_used":771,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":751,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/jackpot/mega.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.481Z","timestamp":1791907856481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/jackpot/mega.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 88561\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"2b58f165a9a11611429a42236582dfbe\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bxu%2FazGCcWWCNx3XSTSL0qDuQakuClY39YFTy2QjqPkObobikdX3z3lWLE%2Bgbd3qQxS7Xj82WnWpdVUUH3j4WtjukRiaj6x%2Bv6cVswF4DXgoe8ixA%2FIUTjLvO3HX6ZXAaozVG8m1QmGvgxhb\"}]}\r\ncf-ray: a49f9e06fcf10b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88561,"size_decoded":89281,"mime_type":"image/png","magic":"PNG image data, 212 x 300, 8-bit/color RGBA, non-interlaced","md5":"2b58f165a9a11611429a42236582dfbe","sha1":"385e1509efba0aad74d6f4f25a3994be373f3cfd","sha256":"0e0586a20b33232f93363970c74d8d3cc36fab92d3f9802b87755c7f1ab4f2fe","sha512":"5d9ff12ac922ff74d5e162d21023897ec1e8837c524cb6e15919aa1bf508ad47c1f1f1df1d37ac423951d57bf1cc5f1d3c303d38f4704bd4ca83b7fc0b073726","ssdeep":"1536:AkYoRPgXsGVPfm7ghG7Lq/DJyM4/za7E0ACZIZltd8ug8NkXAHDy7:AkdPgXNVHm+G72tyM4/zdiq3D8ugiGh","tlshash":"8283022bf38919ecb2a50375cd89319693c9634d3b62d62bf85dd13a3bd4ca0295f0e4","first_seen":"2026-07-14T17:30:30.07599Z","last_seen":"2026-10-13T16:12:52.348971Z","times_seen":3,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/cf-fonts/s/titillium-web/5.2.8/latin/900/normal.woff2","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.690Z","timestamp":1791907857690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /cf-fonts/s/titillium-web/5.2.8/latin/900/normal.woff2 HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.kbkrw8839xwdwqe31.com/mk/titillium.css\r\nOrigin: https://mrking20056.com\r\nSec-GPC: 1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 10456\r\netag: \"bb5f8583ffc396f89c5beceb22e021b1\"\r\nlast-modified: Fri, 09 Oct 2026 21:31:21 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 4517\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t5IPINC%2FMIskN%2BOrg411QfpJ%2FmUmlgNAZUXIQrzPgIcaCY2wZtN0D%2FIfVXZPB%2FeKnxJXpXUfbx%2B5mWwIZ9U9b%2F8cV5jDZX7Z6Ir4I35Mtw15bXTtzuos0eBZ%2FhrvL%2F0hQAcvQ0h4zCaiCkSB\"}]}\r\ncf-ray: a49f9e0e8a3e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10456,"size_decoded":11231,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10456, version 1.0","md5":"bb5f8583ffc396f89c5beceb22e021b1","sha1":"b5bd0d3fbfb5eb1a86036c978cc04772121cf22e","sha256":"c04d7e94b56f110ceb18160aaede8f789c7d8d32740cf74b10ad24d304e6fde8","sha512":"025220cdd66789c35f6af24715d282baf253b9c081d23eb12d2da12855e472215d68706208452d5d5619a9ae543026f4b2c673b31accc685b8a25908d015104b","ssdeep":"192:E+IdUfLUPWLDV8U+JzGXJ3svxx3cAEXBTsBhsf14JS7RyTbVWsP7vHf8Mx:TIdagGwzGivxEdfESgdWsP7vUMx","tlshash":"1b22c00ef5ad1e3cee3a8668d49d55a615641ef13fb10bc9726b0dc705ac38d01f82ab","first_seen":"2025-06-05T01:27:15.241865Z","last_seen":"2026-10-13T16:12:52.349725Z","times_seen":550,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0.c-hfvt96sq3.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.359Z","timestamp":1791907852359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0.c-hfvt96sq3.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-1bb5\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/vip?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.894Z","timestamp":1791907858894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /vip?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208,"size_decoded":748,"mime_type":"text/x-component","magic":"ASCII text","md5":"7215bc5b761459dd38f0530c650ddfba","sha1":"26aa5906fc49007f000294682095a18ad04cc898","sha256":"42300dd1b66940b1c4c3aa4dfc3f3e0a9de9d79a3c3075a7935ccbcfec96c1c8","sha512":"2f8b8263be49f557d3f2d42d9b38a3cba1e6098128008f86d9c23caf402a7db3a2db407278fa611081d4a4f1945e8c71d9fd42c26a9eb4a1909ac3d8c622e499","ssdeep":"","tlshash":"5dd0c92b920519b61cfe10e5803ee84b664e563b22ec5cf0d0652e3937e727946971e3","first_seen":"2026-10-13T16:12:52.350442Z","last_seen":"2026-10-13T16:12:52.350442Z","times_seen":1,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/favicon.ico","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.994Z","timestamp":1791907858994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/_next/static/media/2421d155e98c9717-s.p.03rg4xj3orddh.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/5c8bbc89ca099f34-s.p.0vk09kfe5b-gj.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/chunks/0m.f1yt-6hoh2.css\u003e; rel=preload; as=\"style\", \u003c/_next/static/chunks/0kk690al~dpdb.css\u003e; rel=preload; as=\"style\"\r\nx-powered-by: Next.js\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92528,"size_decoded":24671,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63960), with no line terminators","md5":"58036956a3a5ae49c4d6b9d994170e33","sha1":"0bd60d88dbae9fda9878d09a4764c56fdb9e9864","sha256":"929ca24ac66600edfcaffd06d3916482f2d23ec1f4925afe3e3ac6d9519aa5be","sha512":"97e974a93635fb95dc52fbc9b31bbe64d045d30857fad86a60e5e77ea17ddf5a53db4741734daa5ad7015902049fcbff99171c6932130fa97731473e6cec8e71","ssdeep":"768:OOC77E5cJC7mMhS79Xbr3f476i3EUQnWoBsEfHiIqIVRJI9zEjcR1sEy6JPqwqr7:EBLs7PwFlZfyzEjxZtlOc","tlshash":"1f93858eb80dfc1bd551cc8f227e5f379489c877c4b2acb9e29cc95a506447a97e2d80","first_seen":"2026-10-13T16:12:52.344785Z","last_seen":"2026-10-13T16:12:52.344785Z","times_seen":1,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/media/2421d155e98c9717-s.p.03rg4xj3orddh.woff2","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.111Z","timestamp":1791907852111,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/media/2421d155e98c9717-s.p.03rg4xj3orddh.woff2 HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 16464\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: \"6ace4746-4050\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16464,"size_decoded":16752,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16464, version 1.0","md5":"a32c2d34c54a5eba3b0e40401150ce96","sha1":"30c10906cc89e728600e1eb53312829f0347ff1e","sha256":"2abe1ed29084b56909d14e0e3097ac292b513d4a2761241bb6267505ebf77145","sha512":"ee2a91d6cc27f56438d38975f0cf6339191672ca913046ffc4937d29d05d5caa2b63fca96a2edc50d7fea46a1b65e75b96e543f5b6990387e9c2e58ca3c34dca","ssdeep":"384:WTr1Acb7VmV7+t++7c1dFWCusccVzRGP+ndZw4uXX/kQYce:29NNtnifW7Dc/yIktTYce","tlshash":"4972d00d9789607971d30272cba6c335d411499d0b6f4c8bf9dda07b6ce9c2ee538728","first_seen":"2025-10-17T10:15:07.099889Z","last_seen":"2026-10-13T16:12:52.351913Z","times_seen":27,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/payments/guvenlihavale.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.539Z","timestamp":1791907852539,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/payments/guvenlihavale.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 24284\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"6d8ed81006f971dcb925f91e97e95d76\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:46 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wKagwE8SA64vOBlqavQ77C2c83mwQ6SS5iEj0%2F3zg3Nwg%2Bzi73FJUsstvy8wgSPPL7FIDL%2B67ullZaMGg4%2BS8HkmXpAcbdpZYYSkFZlbHvheB%2BSoHHCIgQVNgBIyRwI9C9wJ34Tyma4Uf0GQ\"}]}\r\ncf-ray: a49f9dee5a050b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/provider/pragmatic-play?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.819Z","timestamp":1791907857819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /slot/provider/pragmatic-play?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":307,"size_decoded":787,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (306)","md5":"963f3a6c3d74854ee8bd72827860eed1","sha1":"f87c1c5fcd3a5895b8d094b4493d82879c9decd6","sha256":"8c34a88164d9d2b4417f6e73cabae17d003444487c88de6134ab62fd02be3cf0","sha512":"c07428abb0706dfeb404085910e9279a2285b6c65d2c65d2605de708a5dc036b1d4ca341c4baba893823053d837adb620dc1a90f46c43d4937e7619af990a2ab","ssdeep":"","tlshash":"c3e08627c20425b25cbb00c5803ed84ba90e553b52ed0cf480a41e3567f317a06836e3","first_seen":"2026-10-13T16:02:14.563291Z","last_seen":"2026-10-13T16:12:52.35256Z","times_seen":2,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/provider/pragmaticplayjackpot?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.597Z","timestamp":1791907858597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /slot/provider/pragmaticplayjackpot?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":313,"size_decoded":796,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (312)","md5":"ccee8b5aebdd251c4ed1c50d4976d952","sha1":"4925074e5e9167ccd53cf922a5c8d9d8e418ff09","sha256":"eb92e19e8132ae0ea6a8b957610ad4d48c89fba2a6b2f14f3a8888bbd280372b","sha512":"f200bcbcd211d94b7ad7611b38b76ab89df22d45ad4f63feb508671002a892a2c26f6d9a75ace4a7fede5b7d5efa4186af3a2ffaa5de587c37000d9e32f02897","ssdeep":"","tlshash":"dbe08627c24425b25cfa04c5803ed84baa0e553b12e90cf4c0a41e3467e317b06832e2","first_seen":"2026-10-13T16:02:14.420667Z","last_seen":"2026-10-13T16:12:52.353495Z","times_seen":2,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/microgaming/34201-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.291Z","timestamp":1791907856291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/microgaming/34201-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1043630\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"2618290b62004840c527133e4c13f0cb\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:34 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kazj4jkhYu3JeRjSImFieS%2Ba8R4waZ3YqlnWNtEtFIeMlnO0FG%2BJ8r0AAZrytlmN7sAX5dG4YrEdNeDAg5EzVsdMIpaHX1zIUt4dBtMAgLk0PiCPUNyZ64fhrK33FVri8XJiEgejPtEMXEkL\"}]}\r\ncf-ray: a49f9e05cbb10b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1043630,"size_decoded":1044348,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"2618290b62004840c527133e4c13f0cb","sha1":"9fece943fc6b7f9318298e6ea77ec905ab0ba6d6","sha256":"12601d85f4c88cef41c10b702ac4b3ffd4b2ff97f39f13cf7a6516f86b2adeae","sha512":"2ab8a647efd22075c915a5c5e11b485457d816c78b4fb199f9e4988e187594f5a45d91aded4a80f3032602bcf20e9ffd6e9ea3772895da3178adbdb5f0d07d67","ssdeep":"24576:R/2tqXlbLT6hgmtFYPZrSaqmnsv/ooCnFXYtRj4xazOoukHJ:yqX5JCgZWaqmnsv/ortER","tlshash":"7e25333f082a42b43d55f54db2a16596cd26b82009b92ec9fddfc11673ef82bb841e5c","first_seen":"2026-10-12T18:41:57.164517Z","last_seen":"2026-10-13T16:12:52.354348Z","times_seen":3,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":505,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/golden-coin-link/GRAND_SYMBOL.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.500Z","timestamp":1791907856500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/golden-coin-link/GRAND_SYMBOL.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 524799\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"8b7795649b7fd992f21abab3a5ea3859\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4G8vyZtvDj4KuabJ7B4ZG%2Bx9mkJuDrtAOVlJGryiOY9EKelGLmlJVWnnvukK3khsYiAVHcpnEZrtrQZrSNFayp6vdn0KcF0%2B7JiktDoXjUZmybDQRFtPKm0FECcvxdaHftYWLvfTk85m7Mja\"}]}\r\ncf-ray: a49f9e071d0b0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":524799,"size_decoded":525516,"mime_type":"image/png","magic":"PNG image data, 930 x 848, 8-bit/color RGBA, non-interlaced","md5":"8b7795649b7fd992f21abab3a5ea3859","sha1":"0a355d9f6a1f2de9fed52146ef1539f93fbc8543","sha256":"52a047b66f48c6154ecd9649195887723ea159fa43d5c902f86b71a900e5a55a","sha512":"1633145aaf5596df747cafffdcece1cdb3b43a096437e705ccf5d689ffe3b01a8ebdc8f0baf83856472d67f791908edc7840ca11200ac852f14dbd19e78deb29","ssdeep":"12288:WxR6v/ZiIWn4TAaTAz19h0Bmpr7F1fT9svt9gh2sw4811U6BJ:WeXWn4TAaG19SBQ7PfT9OTgwBJ","tlshash":"9ab42315a8d493b9cb0d7d16eb633dc703812213b7fd43a7dcb59a5886ad7330898d8a","first_seen":"2026-09-19T02:54:18.305216Z","last_seen":"2026-10-13T16:12:52.354922Z","times_seen":4,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":453,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/redesign/merit-gif-logo.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.395Z","timestamp":1791907852395,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/redesign/merit-gif-logo.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1108132\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"8b2ab99e07dc0bad6faa5f8d2d9cd9c6\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=92v%2F%2F4lcmCpcJcunUMrzyOrEoTAWnMnAdqBbChu6KCWM2z8Y3%2BbDZ4fj2ydNoAuunjM9P0%2B85nnimKqmTKVw9mKr%2BnsRRLjDz4Cf082VUkuGmuPM7iG9aR3A8E0ati6H8kk4015cewsCQnJU\"}]}\r\ncf-ray: a49f9ded79630b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/team_logos/345.png","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.837Z","timestamp":1791907852837,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /team_logos/345.png HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/team_logos/55.png","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.829Z","timestamp":1791907852829,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /team_logos/55.png HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/banner-web.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.865Z","timestamp":1791907852865,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/banner-web.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 3723983\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"a0733d752b2f89b0b9ff9c083c5a6e2e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:42 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2FNuzGk5IWn661OlkT%2F%2FMgWvRl%2F2csmaliDv17%2FG8psxpzJcnEd9XYItVouhGM15rRdRawQexHOkT3I9D0wzaEh2IHW1HViY4d3Ard%2BXAD0NFR6VfCp%2B0aq8kTmV%2BC4trV63A8llumH%2B3K7t\"}]}\r\ncf-ray: a49f9df06bb40b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/jackpot/grand.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.792Z","timestamp":1791907852792,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/jackpot/grand.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 51078\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"37fc8785b033db1ed6f030554c755a9f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpwLTOrg0CyVQM7%2FEnKp%2F7uI40JQR0h4bmeCISfekK3amMsZJPreeshiMobE3KGbF86okrnbONcQWjCezfHZeyI7byLxFPrbpy0VRFCZOrrhfWQ639gfJjppnGRyY%2BA1UcNVHm4MkwP0qBeV\"}]}\r\ncf-ray: a49f9defeb590b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/golden-coin-link/MINOR_SYMBOL.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.809Z","timestamp":1791907852809,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/golden-coin-link/MINOR_SYMBOL.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 567658\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"37baf6561b656cd430a301a7f7cfb788\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W1Rfoz52yfQI%2Fq12EI5yzFJxHs3yjGCra6y77AOqbrwxoQW81y6huj3K4UiaDAuShP5Mdw8W20S3Gj6Sf8JMbDnQ4jPATOFlS0JpzutikN4i9aRN8ZcNxpdQb3Wx0TNq6YjzOS3YFTm9mXH%2B\"}]}\r\ncf-ray: a49f9df00b6f0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/baccarat.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.582Z","timestamp":1791907852582,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/baccarat.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 4654\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"e27c67f81a54b10091e243f512fe2e25\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2BgH2nESe8vRk2TQyK7DhrXS5dpVaL8QgU7ZTNQp6Y%2BAUBtbJ88ycuww6YkP7RB2%2B1TSrrMgAEGRxaAQTjMtyGKeGYNtBB%2FQzZKgQG3gT7fZNirmp9ipilAn%2FOvuRz7vkKLeE%2BO4C%2BJJUom5\"}]}\r\ncf-ray: a49f9dee9a470b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/23105.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.425Z","timestamp":1791907856425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/egt-digital/23105.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37562\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"c3fe33dd6f53338f651dbd4a5133b278\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bygI7jSRqYCAiGAZ5wvsQN7d4ZZjDknCaYYGwCDjnoF6EZ56C6gYdeyEhTjrsgkgZMBApvqAQt4zkU3Gf%2Bz78k2O6vX175KtGeEqhwwlPf5kz9p01Gq5ZjQq6b5Q2XMdBd0Swhmr01u%2Bf90y\"}]}\r\ncf-ray: a49f9e06ac950b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37562,"size_decoded":38279,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3fe33dd6f53338f651dbd4a5133b278","sha1":"baf316c332ffde28f90b684748b7bb65275f7565","sha256":"eff7ef76befb2aab5c9a0cb554f9d5f4bb1542a7fdc0725d69fe3dcb175e7a29","sha512":"98c5af943b9dc7bf6ab085e72fe99692c8465a24b17df6a65cf8d6ea46047ea6f361f26e192b66863efe840914f3272f7802af294c1ab41db548f246eba1a90c","ssdeep":"768:atKkiJeL5uviexaWhrixAn9d4u7KjO56hsMce0s9TzQ9Sd5VV5Cfia/:kwvie0WhricnG3K5eb9QKV5Caa/","tlshash":"2ef2f1137c3dc81ae936013324c8a96e8fbf8005f7044f429c6ebb4a17a7acb55a85dc","first_seen":"2026-02-20T16:45:36.83722Z","last_seen":"2026-10-13T16:12:52.355475Z","times_seen":5,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/13226.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.456Z","timestamp":1791907856456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/13226.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 42513\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"62befe595794edb1072eb414123ac2d3\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:35 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hCNEQJ54lrGDhHPmNi%2FiGj4ovqSoj0nSJUrXaCyQfomW7uNTP2jD6xFvvvhrtui338nP7fULH4rVafbk47EptjkwY9cbiOzXDsxXu3bZ%2FpeNQ2ayZ7t5EDc%2B4QYOWplUFKXL5xpXVb2cYXE\"}]}\r\ncf-ray: a49f9e06dcc70b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42513,"size_decoded":43231,"mime_type":"image/png","magic":"PNG image data, 325 x 234, 8-bit colormap, non-interlaced","md5":"62befe595794edb1072eb414123ac2d3","sha1":"aa279ae46a198de05c938d2f59006ab0a630f6f8","sha256":"13489afe8056a73831db345379799b4ac0d3a48a41162b29c7b060b3dc75fc58","sha512":"64b466e9801493086f54bacbe9ed75c68758b28bd8c3e96509c8991543c1e8f912263f0a5460c78ac0d2ce1ee09bc33b926f0b61758f681029f52cbca5b02d72","ssdeep":"768:eMAr1C6NsVatvekTCatfPI1YwRryAggRHqGintBTkbPT+GMxdR3SOd7:BRiZtvZLtfIY7AgUKXntibh1Od7","tlshash":"f913f29668a7937a373ff598c9ae537285f45b6603fbb0c508645a00216973e8053fcf","first_seen":"2025-11-05T03:48:50.454954Z","last_seen":"2026-10-13T16:12:52.35609Z","times_seen":14,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/amusnet.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.477Z","timestamp":1791907856477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/amusnet.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 165854\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"2a5458313282abb47744fde803d5f262\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K6jVgpbBMhbM5lomowTF3aofEm7FONARSYB0e3dQjM1Z469CUfVaG%2FUgYBpU%2FBOuB9qALdPjDrcvifYz3E76JtyuxaWwKfaRAjL4Uk%2B%2BmeWIDsAIndIg%2F%2BPbjyCYlRc3lqwuOzIiLE7ik1kF\"}]}\r\ncf-ray: a49f9e06fcea0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165854,"size_decoded":166579,"mime_type":"image/png","magic":"PNG image data, 534 x 182, 8-bit/color RGBA, non-interlaced","md5":"2a5458313282abb47744fde803d5f262","sha1":"6ed07d4f3d0a11439dcc5c572baa207c8148d258","sha256":"4d5a448d2c13ec6d0c664b84f4f2df3ef4d10f1a5656195f8215cd47277a6eb7","sha512":"0f51ff6920246d80d196685cc775f2e00e4294e35525b3e8074bb83c2511c5e2a727105735fd151084fa83f62f237af8b7de4d2c9e0077c689218717d14c1cd8","ssdeep":"3072:7XLsPIbRtS+RbkXsVZez2DaYvBWYHZ5QieAo6RVdCgq2hTvNFVlA:bLsIbRth7ea+G5angqEvNtA","tlshash":"04f3237b2ef68f8b11cd28bf3ca249bbf0913605e656d4607d1ccb0f4a8158175adac6","first_seen":"2024-10-04T10:11:53.32547Z","last_seen":"2026-10-13T16:12:52.356727Z","times_seen":18,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":280,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/33434-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.552Z","timestamp":1791907852552,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/egt-digital/33434-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 873614\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"095a5950126d8d3d6d8a9a8f3dd81603\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:29 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tugfgCLnebEbUjies7fa8az71X5YIpKtxbBhbnv9%2B9dcjQRyLhyLZetaPCmZi4setsBpDDM%2FkoLi5DDqb3Ns7zwXIbgF5zD35p9GMDE2pi0Sl%2Bkfojv5yT0Y2KoTK0VXnjxvUXTZmzgxy%2BCU\"}]}\r\ncf-ray: a49f9dee6a170b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/horse.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.348Z","timestamp":1791907856348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/horse.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 5838\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"1238a184fa247aa449ebcbb66f8c9e40\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F1Uf6W%2BoQXbVQDIwcSaGIXF7spxwZClHfEDQDzYAZlW8y4XhFDs%2BaTvpshhEhMqWAay2CSesnAbpzvO7gJI8E%2F9tYrVTEBsKe31bwd1PXctIcxEvBdB6g2AQPxlwgVEBDCYXjNITe82yE6EG\"}]}\r\ncf-ray: a49f9e062c070b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5838,"size_decoded":6555,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1238a184fa247aa449ebcbb66f8c9e40","sha1":"fc1dd06c59ecc44f979bb53124f51a7151718891","sha256":"137203090175b6517737722b70c3d7173a1ce1884e76a087da0550714b56a3aa","sha512":"52d49c4dd76a8ed1d0ec250351bb56e360a993d31c8601e3ecfa8c8ca955f476e5cbca6f0c47e1ec0ac386c85cb475e8cfbf507ee14abe5385b5cea522eee031","ssdeep":"96:Ds3WCrHrdIsahAq6qsbLK/KqITfKts86CilXGoH70MRsDnqIOze/tvAvOPpZamPP:cWCrLOLMS1Iets8PidBH71C6C/SGxZaA","tlshash":"0dc18eed6462d4184dc4abb30506d47a661374abe07fc4e352f24fe79c7691b112cc2e","first_seen":"2026-06-23T11:19:31.051239Z","last_seen":"2026-10-13T16:12:52.357331Z","times_seen":9,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8af8c83d-8586-42f4-b327-2a7d1434123c.snippet.anjcdn.org/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png","fqdn":"8af8c83d-8586-42f4-b327-2a7d1434123c.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"108.157.229.89","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.706Z","timestamp":1791907857706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anjcdn.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 27 Aug 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D0:41:CA:9E:BA:8F:D9:73:22:FD:D9:D8:06:56:23:12:67:2B:DF:BC","sha256":"DC:F4:41:EF:70:C9:93:48:02:9B:91:F0:50:4B:DC:94:B7:31:D5:20:19:1B:3F:B3:3E:4F:D8:BA:5B:33:73:7F"}}},"request":{"raw":"GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1\r\nHost: 8af8c83d-8586-42f4-b327-2a7d1434123c.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 68\r\naccept-ranges: bytes\r\ndate: Thu, 01 Oct 2026 01:36:31 GMT\r\nserver: AmazonS3\r\nlast-modified: Tue, 15 Dec 2020 08:04:53 GMT\r\netag: \"e679fbd466a2d656f194a5da4fa083cd\"\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c76d87fd83a704b78afc1028fc7bcea2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: GJaeJTb_HYWjdCIPqYOzHxvCluOjZEnlSG5hEdZTVkcSJ1VYF7E45g==\r\nage: 1089266\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":68,"size_decoded":575,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced","md5":"e679fbd466a2d656f194a5da4fa083cd","sha1":"2aa795c7607aa6ea41313be88f1b7a9c1ab516b3","sha256":"f309b7c03d9cae63a9bedbee6ed655f3dbcdb194132943639344dead5f3b9710","sha512":"50664f290367739604eb9e215554e7dc73e8e619f2e563fc597c831eb6b7cdd255425495a01bd73e8fb37ff2319d4e0943e11bca28651d19b2894e39bea9c9e5","ssdeep":"","tlshash":"9ba022c233c0bc3cc2ce0833c0000220f830000b0a088c08a000f0203e223e8008c3c2","first_seen":"2023-04-05T18:15:05Z","last_seen":"2026-10-13T18:41:04.702442Z","times_seen":10953,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/payments/manyqr.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.535Z","timestamp":1791907852535,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/payments/manyqr.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 85860\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"2956511d03bc782f161233299f4f3339\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:46 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sEnhyhzyNjMEhEzI1fyDdPALz5JBj68fEYHK7ZKuPRMYHWyx49Cw4uRzGiDX9TL2DmFQbrlI%2FaRddPfpFVzYP3nWWnMC3jxRRZ0GOvE%2BeFXlqn2A9gxl9Hvh2spTtZThpljgYCING9BD9nZV\"}]}\r\ncf-ray: a49f9dee59fd0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/payments/movenpay_credit_card.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.489Z","timestamp":1791907852489,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/payments/movenpay_credit_card.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 17436\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"dd557e67df255118ec7e586eaec62ca9\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:46 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ghcbXMkwkJy73Dgulj%2Bi%2FrHMKRbNhWhWF4h2Kp8%2BRnBfW%2BEJODAAnYBZqi1c4MZuwzoo583IX4indBi6JsEFfxrATMRuzZaUucwLnwzq9ILujniRs6jrqu6ye0jQ9xI%2BnImlQWji7cDZBT2j\"}]}\r\ncf-ray: a49f9dee09cf0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/cc/major.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.798Z","timestamp":1791907852798,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/cc/major.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 4735\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"4d1e2d956beec9688282cead9c6dbd10\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QIR9OXFoU6NGylUKlPamfIWB7EdFE8erLz%2BnpNiULVsQTGYdFY9Z4R2xmxR75w7TYeCebPeEMfZgb9tJVQcvCC4ut3ylkbbevnY9f5Y6rx%2FceOBUQ3pfu%2F4cunWIFLRElk411dRGP2WDVMyA\"}]}\r\ncf-ray: a49f9deffb630b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/virtual.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.348Z","timestamp":1791907856348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/virtual.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2544\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"913d30cd624098ca324e29d92eb42787\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4RE1ytu322fcGMPE5IgBgSQOyFSxHPVctddIpQjaQyiXcJlY9WYudwX31C8ggZbpDZ6lPh2kgbS5cUsbSpptAfRh8hv9vQyoSu2h1p0bQyckg55w0I%2Ba1MeV0x5EiTR64tK3ZfmdYa1v9RPA\"}]}\r\ncf-ray: a49f9e062c050b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2544,"size_decoded":3257,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"913d30cd624098ca324e29d92eb42787","sha1":"fbe2ecf008f520f4a691033caabb164aa084cd7a","sha256":"b177877bcb97228289268ff43bd4f132d4170844f102fdef55d5836d65ae6946","sha512":"3d3a347cccffbbd08adaeb21f23ba3482ff387e543f4053df9e87a558bb0535c6fa369c7a2b24faf2c558afa8091b94abf101145f8ce87030aa913d18afc413b","ssdeep":"","tlshash":"36513aeb2827b24b1cdb67e4e8d7ce14e1608d179b444dc358ab4bcec30d0aad0186c4","first_seen":"2025-12-30T10:17:00.051952Z","last_seen":"2026-10-13T16:12:52.358629Z","times_seen":11,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/award-slot3.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.517Z","timestamp":1791907856517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/award-slot3.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 28496\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"62278d72e58250bb9a0218af1c13fd2f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vCvx103GIJ1s41fng0eBR1QlnSmFWsb%2F%2Fs5LErqhUwY3ztOHsvA6KCwCdnHFKoMBEJymC5WyoEK%2BgdnOY16he1fvRLL%2FyMu1uIQ2M8wU23%2FWPpnTneJ1i7Vk7zUhnikOHCBjlUFIU6jDPBPA\"}]}\r\ncf-ray: a49f9e073d240b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28496,"size_decoded":29218,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"62278d72e58250bb9a0218af1c13fd2f","sha1":"954a8826ea0d5108150fc529e3b2e8f95ee321ee","sha256":"04f868d2d7acd4742b69e7eaa6511e27b98c933ae60c8b0633863c4a25d39177","sha512":"09dca3b3742b5875cfc292d48be16f76cf88f7791e2357e3d75df764e73f1ebdb84e8f37a06c3f8f3e3a7f6517b925c428fb336ea34deb47d9790e584c7808ef","ssdeep":"768:VtVI0djOy6C2+kBv3hMz76stef2Fa2eawFhE/c/Gm:VtVhOe2ZBvSf/0f/ScR","tlshash":"96d2e1c5422563c6f1b768d40abaa8149352cf6749b610b2e010cd793ecd48c9e7e3ef","first_seen":"2025-11-28T07:55:19.76755Z","last_seen":"2026-10-13T16:12:52.360337Z","times_seen":9,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/vip.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.621Z","timestamp":1791907852621,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/vip.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 3542\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"9888254367f1873a2a898b03a7fc0ac6\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326510\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ldXiz%2FiQjcGPS57%2FaQzq%2Fj9OmrQ%2FkPRNVL%2BLCsKeQIN2ntz2EEwz66QxxCQn8KICqsQ93mpiNmrbXGTgz7ISTYJwJYS3o3bmRcX5EMhalmYy5lEUfEyuA%2FbDwhlV%2FQwCCci1tS44MA7Ustfo\"}]}\r\ncf-ray: a49f9deeda850b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/24795.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.777Z","timestamp":1791907852777,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/24795.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37330\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"6a3aa9aace7aa6186f4fce2d75f89023\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:36 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ba9YEKFmeCRqUdONLILQwMvo0Nzfl1T9bFpnUbxpW2nnQhKirRJRkc7QQ9Q%2Fra754En5F8sg5nEJa4fojkXIf3g73AjYK6L0iD6LuPVGWvBbQJ3JKTMXMbQKaJoTiZwgVJ%2BOvCQ5GNzX8ffw\"}]}\r\ncf-ray: a49f9defdb400b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/raffle?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:55.508Z","timestamp":1791907855508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /raffle?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:55 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":211,"size_decoded":750,"mime_type":"text/x-component","magic":"ASCII text","md5":"0154f6cb53aac0a01e5cee8c2348f01c","sha1":"1ed160d2fe25253712bbfc18dd46261ce2ecad38","sha256":"607d163036d25b2a17fe940eba690c14056d74f69063cdac0555bf514271d29e","sha512":"70959f39673039e7fa8fbc6831c59ef76583998a7831d9b4e76f99c3322bfff30ae2d3bced70bd9fed307a1e50ea414e9879d7af63f1ef1afb6130b29db610d3","ssdeep":"","tlshash":"f1d0a72b420414b21cfe10d0803de807564e563b12ec5cf0c0641e3937e31794a972e3","first_seen":"2026-10-13T16:02:14.430581Z","last_seen":"2026-10-13T16:12:52.361075Z","times_seen":2,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/assets/games/am-435.jpg?v=2","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.267Z","timestamp":1791907858267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upaflex.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:25:58 GMT","end":"Wed, 30 Dec 2026 16:25:57 GMT"},"fingerprint":{"sha1":"E7:05:1F:1E:A4:FD:0B:B5:FC:09:40:CD:E0:55:E1:28:D6:5B:78:E5","sha256":"C3:D1:9F:1C:81:C8:C0:4A:93:F0:62:A5:B4:C1:36:3A:40:46:75:D2:82:B4:D7:29:40:40:38:94:09:F2:93:0D"}}},"request":{"raw":"GET /assets/games/am-435.jpg?v=2 HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 129450\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Aug 2026 17:22:21 GMT\r\netag: \"6a74c2cd-1f9aa\"\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=09Z4bSHfd8q7KAw5yJUVqAodO74L4JbpL%2BW2N%2FP5Io8u7e2BjfLvUepeunvCA5QO8uAmCZPv6KLKpaH330xozwsjrLhDJZrjTA%2Fk3mzuYyjppyLEhgYP7sB9ifiZNbVkUbgM3w4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49f9e122f6ab1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129450,"size_decoded":130102,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 580x900, components 3","md5":"0a090175858dace3bf68584340d8fe10","sha1":"ea67b4025d46141e04bfe5226bfba182bc1fa812","sha256":"74f729cd90336b72a537a40ff1a444e4af68b50f9c8ad25f5f29c158176f2eeb","sha512":"7a74ebe3484165bde17ddb0a4a7922e5b28df3e88bb1e5180da8af94d8a2fbeb64a35bd3cd4dc20a1ef5e2b4f5fee8faaac027e61fae7f0c3f358c70a117d80b","ssdeep":"3072:yJYFYeTcrix6Jbr8pEEDWf1B66JeWm8HpUN9S4hHy4pH2g:yQYSc5JbIp81U642JUNI4hSng","tlshash":"c2c312fc2718d1a1ed146b25879fdcc8c79705a552c090f0fa327a43ee9d3c92ea5a17","first_seen":"2026-10-13T16:12:52.3621Z","last_seen":"2026-10-13T16:12:52.3621Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/assets/games/egt-TSHSASlot.webp?v=1","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.266Z","timestamp":1791907858266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upaflex.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:25:58 GMT","end":"Wed, 30 Dec 2026 16:25:57 GMT"},"fingerprint":{"sha1":"E7:05:1F:1E:A4:FD:0B:B5:FC:09:40:CD:E0:55:E1:28:D6:5B:78:E5","sha256":"C3:D1:9F:1C:81:C8:C0:4A:93:F0:62:A5:B4:C1:36:3A:40:46:75:D2:82:B4:D7:29:40:40:38:94:09:F2:93:0D"}}},"request":{"raw":"GET /assets/games/egt-TSHSASlot.webp?v=1 HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45796\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Aug 2026 17:33:56 GMT\r\netag: \"6a74c584-b2e4\"\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NWpHZMji802bqSS1chhuarwzs0M3R7%2B8tUUwKvGFe9ftFHD1YlcKZKHGbhKTyrnzAiRpbZtP9%2B69MAB%2FVbOb7NBMrsqhqOw0hSmOIFaHOt65G2L6T9ZEf40EkRj040CSkAHF5BE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49f9e122f65b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45796,"size_decoded":46446,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a3ab995789e2e8c5e21ecb11833144de","sha1":"03ce18cfcf18577c1e2e2f97b010d6172463670f","sha256":"2250b05e085a9f56c195c0f62fca8cd7201f176fe0fd86a783455c3697c4c3ed","sha512":"661d36ca084fe5d54df6c83651a119fba040700aefadd96382a1604707ac28957fc5eb08865f9d55b8307ef9346bdff32a50e5d67be69d246d07c20bd73db2d7","ssdeep":"768:lBss7hQcRLdxJIdpjwFJo0sans0dIV+qoDETnCe+ZMI8EuY6NQyGIvX:bhrBxSPw4anNrqocnC/GRyyGIvX","tlshash":"fe23f14e6a974a7241cfc7fd01448ae7178d8392a34e597f0037a618caf794bb185e2f","first_seen":"2026-10-13T16:12:52.363976Z","last_seen":"2026-10-13T16:12:52.363976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/mk/mk-extra.css","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.314Z","timestamp":1791907852314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /mk/mk-extra.css HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7dYQhbqdg%2Bgz7tfTfS3jw%2Fmbc7dDmQiTl37PkSdgpIF%2BFa379yfElpTQZqTK4O9lQ4rmO0%2BOZEJ149ZmdgkwoYy50T86AT%2FmM%2FU%2BfB0ubKL2QYGUqFYNx4s8EmfW%2FghoG%2FNo3Rie8wlhrCPU\"}]}\r\nlast-modified: Tue, 13 Oct 2026 14:59:39 GMT\r\netag: W/\"67f89fd3ac5fdc8d5b33710963770a13\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 976\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9ded29340b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10191,"size_decoded":4499,"mime_type":"text/css","magic":"HTML document, Unicode text, UTF-8 text","md5":"67f89fd3ac5fdc8d5b33710963770a13","sha1":"05f5dadaf7baf123ef735bd6a96575a05914759e","sha256":"15841bbbb2ae8be3543db1e0829dc0d5e4b953b54005a6c055f1fac1d08bbf32","sha512":"8b2e57492cc74e29ad5813700fe2bdf750ed835d919a4b5c08e29b0f7a44a9081b03bbaa79b4807fee342465c6d3a8fa895b8d503003121842cf40367deb083c","ssdeep":"192:vvRoJOJI9NqkCEcSZ4z9aCRCaPEMs8EK9skKVme1d4pKn2Mgnhet6v34aySt+IAR:v0IMM0t6v3xy0+IAUcT7H1P","tlshash":"b822d8294584bc7f0d7b863b95c15f4ba60e4c16a4b3fd1bb3476a1c8e8ff8911a8d80","first_seen":"2026-10-13T16:02:14.559505Z","last_seen":"2026-10-13T16:12:52.347165Z","times_seen":2,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":32,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0eet8~56asqss.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.328Z","timestamp":1791907852328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0eet8~56asqss.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-2661\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9825,"size_decoded":4091,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6034)","md5":"7b332e938d882e2b5e994803cd6a4e5f","sha1":"909a4964f36a9b81f6d0f16798cde4db95fe3d1f","sha256":"66b1e9c387a16c29f5872d90e1ebf919e7566ed82a5d2390c767e21a0dfafe10","sha512":"2a1ef557168b072dda84dc0374ec99cb243c6d0dfac8ee874be4058dc7676e3d33cbf50917c71609682da7366bd09ec61080dab13e1b5a1df0f8e4521fc29689","ssdeep":"192:Nplga0M+1ksGvAj2ObGehS1AkKaX33hl5+M0jWvdlebPGSfYMg9/3zkzXQMR:N/J01ksGvVaGeyX331T0ylY5fYDAUMR","tlshash":"3312f9e976c6f872439a4095503b814bf7692e72240e9080d7e99cda3534e4e81f2f9e","first_seen":"2026-10-13T16:02:14.439273Z","last_seen":"2026-10-13T16:12:52.366467Z","times_seen":2,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/23113.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.704Z","timestamp":1791907852704,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/egt-digital/23113.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42316\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"c0b0fdfc6d79780d5c9310f58c2551d7\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dlYv3152uFoN%2FfkftJYk2dKDSyQQcjzQCRh3zBqgDXOponlxqwAAAqnzqZBZGq4fbhBhfj%2BmZIMV1ctwJCwhnI2uVFfuqksX9y1Gla8KMnZveLWjQqgjUIJQtcIurhLmcI%2BtVM%2BHN3%2Bd7tt\"}]}\r\ncf-ray: a49f9def6ae30b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/payments/movenpay_credit_card.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.277Z","timestamp":1791907856277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/payments/movenpay_credit_card.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 17436\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"dd557e67df255118ec7e586eaec62ca9\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:46 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sn73JI1LuQgWPo8YkLyRowoIWmhDOKCb6smmK1cVqJ7Kx1YbQdPXiG0PXDMVWtlA%2FWEeBcZ8%2B01q3wiXgB7VwoduggKsVCZ78wQt15j0uO%2BKO8Aqip2LnW%2BxmACDFEu7%2FIdGokyJ%2BWx%2B%2BdYm\"}]}\r\ncf-ray: a49f9e05bb9d0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17436,"size_decoded":18164,"mime_type":"image/png","magic":"PNG image data, 300 x 82, 8-bit/color RGBA, non-interlaced","md5":"dd557e67df255118ec7e586eaec62ca9","sha1":"256aff06489e701e1dff643c717e4ad14de35dac","sha256":"fc316bfea0b72ca15e3d8d60193265495046ceb3347e2850723ec27b4bedfeee","sha512":"6aef57cfbbc4bea175a9dfb23a4cfaebece8f767ff5077496ea4609badabf278edf17f32f954f4edb56a09fc6184fa88e000a221ce164c5072e6757d476370c3","ssdeep":"384:nXE05MIne9N3qbw/Sh60fvDrdq3gHKV1x2TQWdpyDmJudd:X35Ru0/XDrdKgqVnXuy4W","tlshash":"f272c00d5d23d8c27d1bd50248f5652917af83848ec08bf4bfcb086b946546fee0e2e2","first_seen":"2024-01-08T17:23:44Z","last_seen":"2026-10-13T16:12:52.36763Z","times_seen":29,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/payments/safecuzdan.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.537Z","timestamp":1791907852537,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/payments/safecuzdan.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 32685\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"c0731c8a7e10108bfb2129faea0feef9\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:46 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rzBrqBenrmLGuiZvqEY1f67C07H8w55Nd3SNkQ3UsU1YrTytQmrUCqQYGzFEk4DpVycRLmOK%2BiXNfS1HpUlpHznOinBD2kJNyF9vjVXHGfIOLdqtDWfMiH6KFe7VdYT%2BQ62DRV6d3FNuoVZ0\"}]}\r\ncf-ray: a49f9dee59fe0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt/16171.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.428Z","timestamp":1791907856428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/egt/16171.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31709\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"16322c8e839335fc5f512777c5a97388\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:27 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JCyj7ypvWozepuN9HulZqsWj1jCln4t%2FS3jk8lGFRiQ4ssJNWbEmLBgZdOic1Z7%2F7lFN8RCDNI%2BpPlC%2FEl1l1kPpr5KDc8KkE4%2FsWCg%2B9JLoObU8kLcns80r9wBI%2Bd%2B5mk508FL7fJMOGWjK\"}]}\r\ncf-ray: a49f9e06ac980b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31709,"size_decoded":32438,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3","md5":"16322c8e839335fc5f512777c5a97388","sha1":"f0ba2269060cb4f0672c0434dfb16a2010654bf3","sha256":"05c5b0a2aae1a7984935f8ca9b0f03a70019b3bb85f7a043875ef862f900ebd0","sha512":"f3e51765518f393fd89520d406bfccc80e0da13b2dc6351ff8fbe057b40d3e4b3bf174a903ce47d26dff8f126774304918aba46ff9ba3fc1b8bf3313478236d8","ssdeep":"768:CZP7YJaskJhvdsEZ3SvaCUeAowny/1zqkD4Nl:i8QsIveI3SvzUrny/1q44b","tlshash":"f7e2e01b7427727feca855ff26283ee5960d920a9ec48100c781e0ad44a9c5f6eee9d1","first_seen":"2026-04-11T14:16:59.747354Z","last_seen":"2026-10-13T16:12:52.368517Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/special-game/category/special-games?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.925Z","timestamp":1791907858925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /special-game/category/special-games?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":314,"size_decoded":786,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (313)","md5":"e7dd8e19f6e4ca6ea83799f3c297b66b","sha1":"5504c06f50afc54796068dcbb025d4e10e89c1b7","sha256":"af7b5f473bedfd1843dd0b77189828fac64be76dd132ebaab00ef92f6c141156","sha512":"03eca0d7cb6d8e9dbde873fa3280776a4d03249fb0a138f0062a158fdb7210cecf0f8624fc5e8543cb76ab72509d8e47e1a7a51e5e14c95e0cbc29b460a37f2f","ssdeep":"","tlshash":"2ee0862b834419b23cbf00c1803ee84ba94e153f12ed1cf190941e3427e717945432e2","first_seen":"2026-10-13T16:12:52.36968Z","last_seen":"2026-10-13T16:12:52.36968Z","times_seen":1,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/dog.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.591Z","timestamp":1791907852591,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/dog.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 3502\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"5cfedeffd7212f5601ecf341fe407b9b\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ARKGfsnaVhFPmGm8gzH7rrpXVocYhNLyZzem7ydLqm%2BKt0yO%2FQYafcdl9FpQSGavfDyd8X0tYDijGsKK8q4XC3xACeJ533WUPbNaNNFzVZkTUrq2EJueWYdOoheQrj8HwWfDPulUCEStholI\"}]}\r\ncf-ray: a49f9deeaa5a0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/16362.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.634Z","timestamp":1791907852634,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/16362.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 405901\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"bdcee7c90b5af95ae745690e68983e3b\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:35 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ckdbuMaZXZWHKSf7JI2DmQ6M5ho%2Bo%2B9uVF4TZmJjg5Gyeatf0D2%2Bs0b3pfwvZeH0v3kS8jCRhlcHfr%2FWihzrm1aTtgV711qNCC%2BKP6%2BxLHIA%2F3CQwwURHLv0l7N3%2Fs3%2F0dmfCdxHyGC499Lq\"}]}\r\ncf-ray: a49f9deefaa10b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/mk/mk-reset.css","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:55.868Z","timestamp":1791907855868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /mk/mk-reset.css HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:55 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mw4c3402FO01LNBFwSzHi8Z%2B11YQRFEDkMh64Syz%2BLO%2BKRVe6InpjFuU9BZqqPcyRhENe8tb4tNF6k3G3o2lIDKwXUrTAFYJLghBoz%2F%2FGybs0bkrStLLi6%2BeUeny1QDLtds3p0gwR5SOmCVv\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:31:20 GMT\r\netag: W/\"e14fb429065e97c99cfbc282e95bb732\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 980\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e0329820b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1645,"size_decoded":1495,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"e14fb429065e97c99cfbc282e95bb732","sha1":"bef8e30d78cbf3cbcd3875da52b740c8f9bad138","sha256":"e8edd55c587b8c14c67da4e4ea724afa2549dbef9e6010aa5e83ed376e79065a","sha512":"76c8fb22a3147dd2949b12060e41fe74bdfe8158966bd7eb933f67a66ba6b6b3213658854c2cc7cf1e0cf51ca17dd9ca66402713ba7162bb5fd0a1ade7e329bb","ssdeep":"","tlshash":"2231130f5109bc14af2f634b6a47aa1433657e913cf57334ab8f5c0d88aee882138787","first_seen":"2026-10-13T16:02:14.544672Z","last_seen":"2026-10-13T16:12:52.371926Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0m.f1yt-6hoh2.css","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.115Z","timestamp":1791907856115,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0m.f1yt-6hoh2.css HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-deb\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3563,"size_decoded":829,"mime_type":"text/css","magic":"ASCII text, with very long lines (3562)","md5":"a415c6f33b545ab513912fe521466bc7","sha1":"4936a18a3ebf812110cedbc15e5214eede8479d5","sha256":"5a1d7d229ff97e8360b0b805d58fdbf0f0a4e4d868666c7243fe65ddd8d99b19","sha512":"503f6a4d2bbd14f33271dcca84d40f1339669b11e15307d2d7ea80d4cbdc637f7a14e15404e7570a9e78f78c2a5dc022185a5350e3a57b86c170c8aff7890691","ssdeep":"","tlshash":"a871c034852a6408d6eb4d9338ce7d477819942007d26e23885d3eb88eaf93f37d1b24","first_seen":"2026-10-13T16:02:14.639273Z","last_seen":"2026-10-13T16:12:52.372991Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0gbhykt4izba9.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.343Z","timestamp":1791907852343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0gbhykt4izba9.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-a674\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42612,"size_decoded":16990,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41910)","md5":"4ee68bb88baa796209a61831a810f15d","sha1":"8c165914ec7c045eb0a68366e2c3a0cf5dd89f80","sha256":"27ed800d1849ac7699f810d8a2d17dcdbb917fcb33ae7fa66572aaf7ac227a02","sha512":"f6996d150be21f0560a088df32765449ef7d9ba5fad042d3598735891a84ed27aa48be64015fb9b7f4c9830dc3902fc91ce3960ce17a84efe32a3b0d02db23b8","ssdeep":"768:sOfRbx1DyMj8pM8NFc3vYQzJAB6+cabS1wZOz06qrgzUAursa:9fj1Dr8//QYQtAB6+cabSTz0Hk4Hrsa","tlshash":"65131a14f115bdb99f9e41d8402fc40c757d694e580d4820fbf9ecbe2869980b1abfab","first_seen":"2026-10-13T16:02:14.43253Z","last_seen":"2026-10-13T16:12:52.231977Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/25871.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.637Z","timestamp":1791907852637,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/25871.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40726\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"ad89d43adcb309afbfa50575fbf3f6f6\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:36 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wMkbft1xEND5AEK1xS9zfLCjK%2BFOChVrbrPrm6KZiQhbkFNZILE7XYkJgCiWMiPvCr29JRyS%2ByvhdGxQ7zC%2FBo3d9duHoBWdXw8sZ8m6DBBt4XJJY8%2FEvYUxcYA4t8hgh6ZzQicL1NFWxOcc\"}]}\r\ncf-ray: a49f9deefaa50b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/jetescape.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.609Z","timestamp":1791907852609,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/jetescape.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2598\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"79a88317f693b6d0e2d3437f8ad9d05e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06v2rAuGbP%2FhH0et%2Fgvyk7xq%2Fz3jYef9cLyyIpQd2WiljhLq4V5xyjYz%2Byr1GhiXZHQ57wJHLfqYrT9FZvJ%2F9A7U4xQ5p%2BeQYriO%2BwM3riIKJFQTIVK3yLGFJex6XiHs2Ius31VhzhK6bH1b\"}]}\r\ncf-ray: a49f9deeca750b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,500,700,900\u0026subset=latin,latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:53.569Z","timestamp":1791907853569,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /css?family=Roboto:300,400,500,700,900\u0026subset=latin,latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.kbkrw8839xwdwqe31.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0eet8~56asqss.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.150Z","timestamp":1791907856150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0eet8~56asqss.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-2661\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9825,"size_decoded":4091,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6034)","md5":"7b332e938d882e2b5e994803cd6a4e5f","sha1":"909a4964f36a9b81f6d0f16798cde4db95fe3d1f","sha256":"66b1e9c387a16c29f5872d90e1ebf919e7566ed82a5d2390c767e21a0dfafe10","sha512":"2a1ef557168b072dda84dc0374ec99cb243c6d0dfac8ee874be4058dc7676e3d33cbf50917c71609682da7366bd09ec61080dab13e1b5a1df0f8e4521fc29689","ssdeep":"192:Nplga0M+1ksGvAj2ObGehS1AkKaX33hl5+M0jWvdlebPGSfYMg9/3zkzXQMR:N/J01ksGvVaGeyX331T0ylY5fYDAUMR","tlshash":"3312f9e976c6f872439a4095503b814bf7692e72240e9080d7e99cda3534e4e81f2f9e","first_seen":"2026-10-13T16:02:14.439273Z","last_seen":"2026-10-13T16:12:52.366467Z","times_seen":2,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/23113.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.430Z","timestamp":1791907856430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/egt-digital/23113.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42316\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"c0b0fdfc6d79780d5c9310f58c2551d7\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tJU%2BdeDMKCURKK123jEa7PuS4dx%2BMu28vQCEDJLLUh2robZyfFDztm1J%2FqCIeF%2FwUJrnpSYscssfZCCpEu6JR22sBMEzIDPdarSooeLWtb%2B4SwWu797h2DNZljZ4iOE%2B%2FvM%2F9u9Om6Z%2FAzpM\"}]}\r\ncf-ray: a49f9e06aca10b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42316,"size_decoded":43047,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c0b0fdfc6d79780d5c9310f58c2551d7","sha1":"5f2ef9c4be4fd65f864cfb8cf9a34cf29f6de542","sha256":"6b97a897a78ca2915e390ef92a29aebebeded0100c62c6334ab3c388680f0ac5","sha512":"a09c218f50d44e886e10836368161f6ce852d1a048316ac822b8078bfe4530b77889f745146c37686aecedf485323da2ba926ccddc3d1bde297c85280089fdf7","ssdeep":"768:hDSxGboxxpimsZ3yq2MH2iMCBxbUXGUettgavvd+e0To+R+tOYxgs1UK0XCVF0:pYx8vZ3vlvfUly9wR+QXs15AIF0","tlshash":"bd13f1678e101880cf2e01bdf3d877e163b6bd09b6df38728467695b178d6460daa34b","first_seen":"2026-02-20T16:45:36.80322Z","last_seen":"2026-10-13T16:12:52.375182Z","times_seen":9,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/turbopack-0ac-0dsb__677.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.325Z","timestamp":1791907852325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-0ac-0dsb__677.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-2976\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10614,"size_decoded":4806,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10614), with no line terminators","md5":"16053cbf9683d6a4c7d9459940c2d9b5","sha1":"330d66e74aeb48b07a8c53fc48d6a7b38742014b","sha256":"cafbcaa83753d9f7bc45744fad0316ceb3e0104981184d5ab942a4424fe5cd74","sha512":"dc48eeab7df341a228cfdc7505354d8dc3e01b35e3d791023ae6f7806dd7387a866119c08cf0b3c20118a8c19c8dd42b5991fea018e339f077d418b5db2c1eab","ssdeep":"192:o4gM6B68gEsg6d2hE7oGkldTTN/8S3sBT4fCT3cXX6PpH2:o4gM6VLskl/0ssqCTM7","tlshash":"7d22b6da33a6f07343af94eb906f4004f17984a9145d141cd3aca8eb2c395aa85e7f76","first_seen":"2026-10-13T16:02:14.509162Z","last_seen":"2026-10-13T16:12:52.272248Z","times_seen":2,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/bahis.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.584Z","timestamp":1791907852584,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/bahis.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 6274\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"3c8ea9e6ddc3d0f1cb1e0469ac2227ba\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O4u0fCYopKAsN1d19AfYCE6%2F%2BqLCz8OGmE2IWE0TK%2Bg%2BIiZBJuVb%2BxhrxO63yWtwi7ReguI3K4XJ%2Fnil685luzQURiQtJlZNKP4JWkas%2B7zndDFmKr%2FcdFfqU46zBYCvYllIwLblaPj6Qlhd\"}]}\r\ncf-ray: a49f9deeaa4a0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0k0vihbgxlux4.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.171Z","timestamp":1791907856171,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0k0vihbgxlux4.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-fe\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":254,"size_decoded":503,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"2ad0f00c3d0d32516aed0d34234aef17","sha1":"3cb37c52cbb84beb1b826d2426fdc751dc5d68b9","sha256":"63db5dba23a84aa3b173d276d56fbefb8229d00846ceb360dae559290f4b377b","sha512":"658735b7446cd034e4f664f9cf2d67a97d105a4dadee15afc47505dc6a4cf4505d1fd8f571f199f67175c6b6b370b0115b8e3c8a6ad6f5331b9a6f2035ca3ad0","ssdeep":"","tlshash":"c3d097a83002fc941d8030c881b34a5a303928bc028e3026e1fe6c211534f1ea0a025f","first_seen":"2026-10-13T16:02:14.519445Z","last_seen":"2026-10-13T16:12:52.3766Z","times_seen":2,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/baccarat.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.339Z","timestamp":1791907856339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/baccarat.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 4654\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"e27c67f81a54b10091e243f512fe2e25\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gzgKe0xp1vCsMAjweDCxGjRW54Vlis6YPpuIX5TKdAp4QbyB28WS75%2FcMmQoaEw0dgp8eOrgb6IDlg4lD9M73UgjSPL0iJvZfpZeZxdVZsDE1w3qqV42Gg4DZMy5ESJHAEWZYpUC5Coj5e7Z\"}]}\r\ncf-ray: a49f9e061bf30b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4654,"size_decoded":5367,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e27c67f81a54b10091e243f512fe2e25","sha1":"d07d61ddf9d53ed5a4c86aa45371662aa955d185","sha256":"cab71b7a876192a9dd7ff3a0ab8a9be5b2cc65b9e773476b2d8fdc8ba9e51d55","sha512":"64e7e092fa3705f92bb6f478fe825ef61a757e0b0b975cf0bb73b9b0f34f43995033c654766c94caeb8f4163b79cfa7ea8d4ca3475bae58a6477c51a99c075f4","ssdeep":"96:CyUCFloBFAMbS5i0Lsglb2FqZb3SjH4XNt50nTsjTC/akba6z4+RjnA:Cyx/C2o/0CQtCjH4XNrqTQ6pbadB","tlshash":"bda18e8312ab044564bd99f2c04494353ecd33996bf817d1383a8bcb69a9893756f4f2","first_seen":"2026-06-23T11:19:31.137338Z","last_seen":"2026-10-13T16:12:52.377888Z","times_seen":9,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jvrwolveq00dcsx.online/casino-images/431422db-1d77-4f15-b498-4b00ea891074.jpg","fqdn":"cdn.jvrwolveq00dcsx.online","domain":"jvrwolveq00dcsx.online","tld":"online"},"ip":{"addr":"104.21.19.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.268Z","timestamp":1791907858268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cfa24eff.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Sep 2026 02:48:16 GMT","end":"Wed, 16 Dec 2026 03:48:11 GMT"},"fingerprint":{"sha1":"DA:EA:9C:15:AA:31:A0:7E:7D:CA:BF:B7:9B:BF:3E:1A:E2:89:75:6E","sha256":"22:04:8E:BF:D0:35:CE:DF:0D:63:40:30:2F:EC:2F:CE:7E:CF:29:5D:8E:37:F6:81:F5:4B:C8:3C:C5:A0:96:76"}}},"request":{"raw":"GET /casino-images/431422db-1d77-4f15-b498-4b00ea891074.jpg HTTP/1.1\r\nHost: cdn.jvrwolveq00dcsx.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 112397\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"601e50326fa61b47b12ef2bdcc1264fa\"\r\nlast-modified: Mon, 28 Sep 2026 07:34:48 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HUZx5pCZN7DZ%2FZ9h7BW%2BSa%2Fa7P00F%2FFPEJUbt%2BJqN7aCd7%2F2BR6IilJY04QJ9aDWh2BDzRdm0ySjBOgsSbBKmbu7AIDILlYMRiQUIaL43GWdG3MzcplaKSfsRbHVayLUsPINczfwEG5UVnD0Mg%3D%3D\"}]}\r\ncf-ray: a49f9e127f4eb4ed-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112397,"size_decoded":113100,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x510, components 3","md5":"601e50326fa61b47b12ef2bdcc1264fa","sha1":"a2609d4d32abac95228c1c408f92abd8a43b3541","sha256":"332105cffe0eef8ad69313447b4fdb6ab4be3084c12659da9b5eb048451a6c77","sha512":"988ead5995420ac6b6deb77e2cb12a055652fd237c66fbc786b0ceb7c2966c8a94a628c5bb69df58fdaab043f136ede96b5adc33c714fae0820afb5709386130","ssdeep":"3072:7pS6qG6iDiAsSgyR/t42Fg+SberL8otYg1TjFdx:9xqG6ingysSrYIVTTx","tlshash":"dcb31269a594de9856270172c63adfb8940e08710bc73c18643163d77bce6dfacbb1ac","first_seen":"2026-10-13T16:12:52.378874Z","last_seen":"2026-10-13T16:12:52.378874Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":71,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cdn.jvrwolveq00dcsx.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/aviator?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.892Z","timestamp":1791907858892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /aviator?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":761,"mime_type":"text/x-component","magic":"ASCII text","md5":"267418727ead9f79aeeabc7d35251d08","sha1":"3c9fcebed0b128072646773ba5e40bbe336935fd","sha256":"b420254cf00fbf8d754011405d851df946f3564783b345d9bc470aeb6734b818","sha512":"1fbf7312fe5d944ccd539ecd6500ffa29ae09670450a60a14da7b635e0b3261ff2282c3dfdcb602c91cc18513a774ed88d2cd6fc5fb839cb66594c128e5db604","ssdeep":"","tlshash":"89d05e2b920518b61cba10d0803dec4b6a4e553b22d95df080941e3927a31758a932a2","first_seen":"2026-10-13T16:12:52.380839Z","last_seen":"2026-10-13T16:12:52.380839Z","times_seen":1,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/16776.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.775Z","timestamp":1791907852775,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/16776.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 456382\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"86b39cda0417e59ee36b7142dbc6ddbd\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:35 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUXhotEIq8yIo8JrAS1EjMIJKQdiiMBW5zekiC0iNz6Xuw0y%2FzNEaplj2gLlUeOlvR6B4AGius8SDrdwooiWim7iESN1vJ5kh6Zf2hrPlzqbjuf69Dzt%2BKhBHQ88evJplIhytD1EcIdxud8R\"}]}\r\ncf-ray: a49f9defdb3c0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/17nd.qxyb_u01.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.166Z","timestamp":1791907856166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/17nd.qxyb_u01.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-b0c2\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45250,"size_decoded":14281,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44990), with no line terminators","md5":"380935e2ef39114b87e64c792c96284b","sha1":"b99b26ba194a432e98b328e1b4f4bf17f9e2cc81","sha256":"64675e169eedf66e3a2168f32ba8058a5f5fa7a084a997e3d2f1c437e9805960","sha512":"22e0e67aa2c596c02228baf5a8d6ef2865357ccc8a38c0fb00a717c9d8d02dfd5e3dc9032b6c9b7ac623ba0729237d8082ae2a423518536811c64346790dd7f2","ssdeep":"768:WXeVVCTlsgHz/Y0Hd+7yEvdQ55blaFd10QTsNAoL797J+GUx2mmEaJEi:WurC3YBveNaVyR797ANi","tlshash":"3a135644b155efecbe2615d4655ec40ca11e7b8cce1ecc68b9f838131d86ae0ba53b89","first_seen":"2026-10-13T16:02:14.527111Z","last_seen":"2026-10-13T16:12:52.381936Z","times_seen":2,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/aviator.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.359Z","timestamp":1791907856359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/aviator.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2736\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"953b29f5846435c2910697fc33bc573e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uIzFPLLxYOwsPzWhoLp34aXQkZOrf6aaNNaD3byRdqxtG4LqrTfHUgkeLZWGBEDD2nbe%2Bvyf2ZDnyMMiTf4kfoASiVH9GkXE755JA2OOokUhTVwyaHx4sZFhMExTTshIoSTtrp3JCGZBCCfb\"}]}\r\ncf-ray: a49f9e063c270b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2736,"size_decoded":3449,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"953b29f5846435c2910697fc33bc573e","sha1":"d9848a23b7a03bbec74e099d6a6de370c46d3cbb","sha256":"b34ac001b3b91f11240a70373c8159a674592df6c8ebab2ada2d8b5bc5d4e3ab","sha512":"3eba0fe281a9b518d89dc15714338c3f7635d2ae5f3b1705235bf59a582e33271d48a3becbcd729c0c2161753508a69d3a6414288a2cb1b770e3a861c17cc4ae","ssdeep":"","tlshash":"a8515bb0ec770dbc680da2e68216e0af6f29bcc08732d40419e44e3909b66c968fc1e0","first_seen":"2025-12-30T10:17:00.010134Z","last_seen":"2026-10-13T16:12:52.382709Z","times_seen":11,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/jackpot/minor.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.484Z","timestamp":1791907856484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/jackpot/minor.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 42792\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"ed04f2d6008542c43e71b855c26ddf05\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=emYuaQT4UWFLHjFKdgT8KbZP1ZGDycjEsPmRnFtuzS1uR7dB83p9000sozaBqPjoD75C5ky7qcTxU8smpKlTIAnJ626aODqWrYfokdlp6WjVd7J71msbz87QlJDUZGYa3Icpte%2BNhdOLYu6e\"}]}\r\ncf-ray: a49f9e070cf40b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42792,"size_decoded":43506,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ed04f2d6008542c43e71b855c26ddf05","sha1":"759de43c98b6a7a8574904aab3e4feaf3fc7453b","sha256":"fee89b49d2a1e741a6e6e79db19ffd2baf3d62870ed377d26d8b25da167e7f1c","sha512":"06be7e70dc02ef67f198a3187ea8303045fe99f541b1b3f8f1617dc4e58897cfb3eeb1629c8d657b61f86a23d0a3455e6910f83a7663d736ebce0b69421a6379","ssdeep":"768:8lrdh2jSkFJurNVIZHt1oaZVWFlCYbX+IMPWXIgNYcH0kUGmifJNkdO:edh2j7FMrEHHoaZIfD+Ijfd0kUGmifJr","tlshash":"c613f17c61bd8f2b58fe0470b40856777a30a4ef3358a76a69c1cac3e65106b189e7e1","first_seen":"2026-07-14T22:02:39.860681Z","last_seen":"2026-10-13T16:12:52.38328Z","times_seen":6,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/jetx?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.796Z","timestamp":1791907858796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /jetx?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":227,"size_decoded":759,"mime_type":"text/x-component","magic":"ASCII text","md5":"a7fc415f07265488c4a80d6f2b1a9773","sha1":"a8501eaf181ec20d00897b47376ea4545faea0e2","sha256":"e25735be3c43e154dfd43aab35395addd4a1883ff8c033f0e775b023ff66411e","sha512":"6d07450c404a3c9ef8af71716c7a6f6eb9745d6b7a8be95806839d34ad46f6cde79dbd7973ee124c410c508332d6f3a0f4a396efa5c4870d7466ea3f542add50","ssdeep":"","tlshash":"29d05e2b920418b21cba10d4803de84b6a4e553b22dd5cf080941e2927b317546931a2","first_seen":"2026-10-13T16:02:14.565277Z","last_seen":"2026-10-13T16:12:52.383769Z","times_seen":2,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/award-slot2.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.841Z","timestamp":1791907852841,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/award-slot2.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 21110\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"b555a248e5b0dc336a91749184825fd8\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FZZvNReLorKizWiOvLquwv7M8WSAgvJpXnY8U6JFvlVD8XvxFp5mmmwbKA4t9UBlk0WcKcNBKAMz2b8H9um1aQhyV7dJzAHwyBPbCdrFgmUowtLfci0LM0uu0upXIVWYpJDKb5rLplg2rOlU\"}]}\r\ncf-ray: a49f9df03b900b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/media/5c8bbc89ca099f34-s.p.0vk09kfe5b-gj.woff2","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.112Z","timestamp":1791907856112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/media/5c8bbc89ca099f34-s.p.0vk09kfe5b-gj.woff2 HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 27812\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: \"6ace4746-6ca4\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27812,"size_decoded":28100,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27812, version 1.0","md5":"40fbb0c52f0de3ff98a350da4c858f4c","sha1":"ba5c2e73488126b9499c4b69369244e3d3348496","sha256":"ce6e0dd89c3ffa4de97bda85f9b08bcb775bea4df456b3dbb7e819c1c879be50","sha512":"8aa12d4acc7d1db8fe2be410b0fe1496d9f26028cc87f51629b6e295e538e2a2706b2fccccb978cbda5e72146b331cb8b6322aae9d94a88f1242ac83e9b83b97","ssdeep":"768:bo1xUfxD/TF7Bc6xp6N6BAQQhAVeQh38A:bWiRpm6xzqQteQh3B","tlshash":"39c2e152060ae7df41f19039b8849b9257202c6f816a38814061bd5e078dfdedb9edb7","first_seen":"2025-06-07T00:31:13.543086Z","last_seen":"2026-10-13T17:50:43.898642Z","times_seen":816,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/aviator2.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.354Z","timestamp":1791907856354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/aviator2.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 3340\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"5ad8755ccf7f0e0e2c37fc4a6ac2a00e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FrmRouFax8HBnMREP4v5JwcenEaCxfBBB8QR2Fhq4nMzTjs7pLV%2F05HSDZ6VPIC16mzyvLMpPKMOqrq7nINeCcNLShOriA5x1KEKuiRlWlRrvbKUGH3RT%2Bwk16ub4Zv%2BWcELXhcyTEHF3zx0\"}]}\r\ncf-ray: a49f9e063c1e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3340,"size_decoded":4057,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5ad8755ccf7f0e0e2c37fc4a6ac2a00e","sha1":"9155aa817cd34e2b5e859f985a5df9bcfcf63c79","sha256":"b289caea870b15867c90d95e4b1e7c09a84e891c193c101ad09a49ca85d7162c","sha512":"f22c44361943a2574b24f565f209887a3952716211d9de2dbc8c72e21d064c5914e319bf26d9bf64c526203a727c48161b20852ebfc7f509bffca9a71dcba6b0","ssdeep":"","tlshash":"79616e6096a51a0939d8d080a1fcc551c1eb1c93a5372f4e1ff60f2726309e94dc8fb5","first_seen":"2026-06-23T11:19:31.108737Z","last_seen":"2026-10-13T16:12:52.384425Z","times_seen":9,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/27442.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.402Z","timestamp":1791907856402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/egt-digital/27442.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 157888\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"17db3ff29d5a9109fa6a6aa2198b231f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rb5OGiPSh03Lir6VFmGoYRQ%2F9UJeyG1i%2B1XEzA%2BGO7EK5vdY6HczlEKbiRd%2BaK%2FzJRoLBUfASiN%2BMaQtnteHJy4FX8LappEfFfAUE%2F6Q6OcrJpoXF4xiPf9eHHhzCGXdLAw%2FEYxZAWq1AqI5\"}]}\r\ncf-ray: a49f9e067c710b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157888,"size_decoded":158617,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced","md5":"17db3ff29d5a9109fa6a6aa2198b231f","sha1":"000b5663039d91e2bc4914203dae87d60571dd66","sha256":"9b9e4fed246c4cea06fe039eeebded2e27e493cb0e52d2df35562aa844b61c0a","sha512":"ba938c4f5fd82d432e22c8a49559cd14e39a34ea19b00f83b50430bbe0eb08df4c8304a103df4196ffdecadbfc5941e69b12f709707f03b306335a3de75a034f","ssdeep":"3072:0ZV80ergbE4+30T0dPO1mrKqWFgNy7BDFii2L20BpDaTB704Ets2q5:Sergw4s0T01trnVgtEL2OpDau4v","tlshash":"c1f3136b3708c70e3097a2f5573acf7595fba7e213d4538ebb50c07aa9b90c48ad6054","first_seen":"2026-10-13T16:02:14.607557Z","last_seen":"2026-10-13T16:12:52.384972Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/blog?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.241Z","timestamp":1791907858241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /blog?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":209,"size_decoded":749,"mime_type":"text/x-component","magic":"ASCII text","md5":"075101f80354585e94c1b4b3b7851c29","sha1":"441a7876eb57a95dd8a5c3a8d78c0663057b8e85","sha256":"31804eff6a7feb2aff18eb6c32f0fce1035a41a74d54006788de01fb106784d6","sha512":"8e9246c360583fcc3737ed93329a7c35b9cdaf692b7c17f4e8a0d9f7052203c7b628e15ba886532ca342cfd905e0780a6b4579605df598a7094da657f0d1ff39","ssdeep":"","tlshash":"fbd09e2a520515761caa10d5902de847564e563b12d858f0c0651e2927a717946971a6","first_seen":"2026-10-13T16:02:14.534149Z","last_seen":"2026-10-13T16:12:52.204302Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/madrid.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.468Z","timestamp":1791907856468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/madrid.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 23090\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"d3fa8311354f496f92d9aa15f7e07fd4\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5zIMtfBPpbUfOqSMZhZ2G8ECwFeuJh4NcO8hlVbjvoAjskxyObwVoI%2B54xAkMchXP5ftzAxOfUlQbFaG8QgSCL6OnDXoiCozQVlBeNoMEg50k%2BhPyO7n2I2CMu0GxrqMTUuajPcFz97njWS\"}]}\r\ncf-ray: a49f9e06ecde0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23090,"size_decoded":23808,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"d3fa8311354f496f92d9aa15f7e07fd4","sha1":"266c195d944252623877b2e4f8bb4d75bdb855ca","sha256":"e4032d987554f2f9f9f839742f52cd644a05e84c9f36525115343fdb70aaa786","sha512":"d292d5cd1134d3848c1fa8a65108dd0ae5e818789227f717bb4f8535edb1dfdbe90cf3343eb0e0ada09f183efcd83c6c77a2c135c2b82d7ed86cb574505b8334","ssdeep":"384:g5FPIxT8CpKzASh8bJYq5BkgZ7QAeGItnkvSvKd0ImyepNiZWaGMWoEKTZ4JXzkX:AFgxTDKzv8lYuBXZ7xeGIFOSid03yyYr","tlshash":"dca2e1bb9f41df3669a0824f12b911e25d163d24f8d3b37d4982ad7f534b2ba806f019","first_seen":"2025-11-02T17:43:04.991268Z","last_seen":"2026-10-13T16:12:52.385578Z","times_seen":7,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/bl/minor.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.474Z","timestamp":1791907856474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/bl/minor.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 51814\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"325285f779eb9781bbe042045bd9e54d\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2FG4PZANwZxe1cXOO4HIoc96tzuR3ufzAit4AiYTyDSwVmueA849Ray8WIROVKUy518A20FJLm4v1OdO5X1xl8RUEiPiweKfzEuWWaKXO7tZ8XV2exbLxE4OumyvSSP16nhofIctAApl%2FUBP\"}]}\r\ncf-ray: a49f9e06fce50b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51814,"size_decoded":52530,"mime_type":"image/png","magic":"PNG image data, 214 x 219, 8-bit/color RGBA, non-interlaced","md5":"325285f779eb9781bbe042045bd9e54d","sha1":"e0ae0ce201ce54709380c857e90edea6b2a56335","sha256":"290afb4a5aa9fec01c937c4d364f6ac8bb6419cb92fd3e9a9ae6f515bc447167","sha512":"7a359d3fb17bcc1ee5964eee59175af609b45a8e8105ecd6c8341af180080cfda10042c82b53c1e625e72a39e086e803b222c7b2ddb6ae50e9eb9eb5ddc267fb","ssdeep":"1536:UsvXXNhaT+HNjNzSYyEwo9B+GIcWVTSNJ19y:UsvXd/7+K2GIrGr19y","tlshash":"8c33016c6cac572d36077562ca14a1a062861528bc6df6d7ce69aacc01fcf4df3a8913","first_seen":"2026-04-11T14:16:59.657824Z","last_seen":"2026-10-13T16:12:52.38612Z","times_seen":6,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/pilot.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.606Z","timestamp":1791907852606,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/pilot.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2730\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"ebada2b5fdd3903c9aa7a67a4b2c935d\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hd51K03GU%2F4DZe7DC8gAcUK%2FkVSEps0jhZdJUI0nGsDXIy04lPF3Ga%2Fse76prpBup7b6SgOXCp8vqvQD72ZmIqxatAlCk%2BhzJeAaUXNz4ybsnNPz6cp7SYYp2wy9%2Ff5sqifrFlR07D%2BcFrg4\"}]}\r\ncf-ray: a49f9deeca710b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/provider/pragmaticplayjackpot?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:55.819Z","timestamp":1791907855819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /slot/provider/pragmaticplayjackpot?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:55 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":313,"size_decoded":796,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (312)","md5":"ccee8b5aebdd251c4ed1c50d4976d952","sha1":"4925074e5e9167ccd53cf922a5c8d9d8e418ff09","sha256":"eb92e19e8132ae0ea6a8b957610ad4d48c89fba2a6b2f14f3a8888bbd280372b","sha512":"f200bcbcd211d94b7ad7611b38b76ab89df22d45ad4f63feb508671002a892a2c26f6d9a75ace4a7fede5b7d5efa4186af3a2ffaa5de587c37000d9e32f02897","ssdeep":"","tlshash":"dbe08627c24425b25cfa04c5803ed84baa0e553b12e90cf4c0a41e3467e317b06832e2","first_seen":"2026-10-13T16:02:14.420667Z","last_seen":"2026-10-13T16:12:52.353495Z","times_seen":2,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/2.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.434Z","timestamp":1791907856434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/2.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41672\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"026f37e13829abb361525e61fa844391\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:36 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1iMJSQFrfhCrzT0IX9eIhRnXFKipTd8b1%2BD54EDdvOaF3jxmKdrkKDXKL9nw1cOyVGkwMLn6Gq%2B2dd552yG8Cr%2BOQ9y3uak%2FvaeWAbk9d43RNXzzyNjpRLDY9i3DiKv91dS3DZDHoC0oTzWY\"}]}\r\ncf-ray: a49f9e06bca50b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41672,"size_decoded":42393,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x225, components 3","md5":"026f37e13829abb361525e61fa844391","sha1":"54d5c3018d08fea1608f6ae89b88dad398d53f11","sha256":"1f5f4f580cc6d6a82f94cfaa349266389247561c7c4f01b10d818975a95d6793","sha512":"cc076df6300303461163ba26ad9d24c51b2c9fca65de6221fe2a055a4879116d26cde02b0877baaa9e448f0cfafbe9e0eb8b23f8bcc405bc93607be1be678906","ssdeep":"768:POap8eHtyCqdk9s/TVSUy9VhbSvLJxLPTZx+G5eTu1hM7/0mz3LD+TvDz1SNxkaO:maftyPk93dbALJxLrZEGquQKTvwzkaO","tlshash":"8b13025cd1aab017d16f2c3a059a2ea3d4188c06c031bfab85e05bc9bf1bd57952e9d4","first_seen":"2026-09-25T15:32:37.922065Z","last_seen":"2026-10-13T16:12:52.386711Z","times_seen":4,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/category/vip-bell-link?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.702Z","timestamp":1791907858702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /slot/category/vip-bell-link?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":306,"size_decoded":789,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (305)","md5":"31d7de0181ef6fa164ddad1d5b8ce8e3","sha1":"5ac99e45615d43264f53bca4f9ca1f90341d259c","sha256":"cd914f89fcfab204f49a0e2bf000f68ab837385440bcbc01873e0fc537e65f98","sha512":"204d28dc69e9b5b3a6f458eedf3987bfebcf1e3ae3db4be0dfa308bbc984055f81c78fafe8ba001a91c87f53f44ee2ae5a66e59cb713b020e72e448d7664e267","ssdeep":"","tlshash":"86e0862b824429b21cbe00c0803ed84fa90e563b12ed1cf080a41f3427e717a15432e2","first_seen":"2026-10-13T16:02:14.484328Z","last_seen":"2026-10-13T16:12:52.302111Z","times_seen":2,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/golden-coin-link/MAJOR_SYMBOL.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.807Z","timestamp":1791907852807,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/golden-coin-link/MAJOR_SYMBOL.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 535052\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"499a72c51aa0290d55771eae6f51e5e3\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OXWKNZXiMjv6t5od1IkizY8XxvTMAhbMMvJXXiwOHftMJVKcRzdM%2BrVGe5%2B3a8goI6SGn4OE%2F%2BW%2FwhTfDbGYeSJGc1SAHmZ0bWltcHu%2FasveGJZ45chgP7QlPIWtxd0af86tkLoJgltcu%2BNi\"}]}\r\ncf-ray: a49f9df00b6e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/rulet.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.336Z","timestamp":1791907856336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/rulet.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 10050\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"e37999775ca29d8e01c9fbe32d0d3d54\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwuZ%2FbDzBqWkcY1ffkmPhIbIYIV0umLzjRROVisVieU6DF3fClUYI0WR3qzUW%2FHhUoOoc08k7Mh1ZkOINo6W8tjXcYW5A3mm3Ejv5q6BExoNsxN4eivGUTO%2FhOCYI9W%2Bu3r5WLXvKDAy9aIo\"}]}\r\ncf-ray: a49f9e061bef0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10050,"size_decoded":10770,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e37999775ca29d8e01c9fbe32d0d3d54","sha1":"f3b5865a1f6fc7b20b7c1914c8f4c9d7db4a8564","sha256":"73c8837cb4f9e3d5e48da2f4580ea10438522c65323374a757a26cc6e27c3497","sha512":"7f77e156326e0074c1587280f8856161232c0ccd904b3be41f8556ff4a1ea9c02fb5e4cea0f39461082c69890a82ef3fa183dbf03d31b723063b656019c1e2e5","ssdeep":"192:2obfDqKxOA72XOq4r7G8ziXwg1GM5h+h/LKrqqhOP+hBlIS:2obr54n4nG8zYwg1GMOhLKrpnhBlp","tlshash":"a022c08e9f60ca6245944b980e87073d43d3959be146f64168ed665447c3b18c1afbb0","first_seen":"2025-12-30T10:16:59.960739Z","last_seen":"2026-10-13T16:12:52.387286Z","times_seen":11,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/17918.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.461Z","timestamp":1791907856461,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/17918.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 482562\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"eeb63e36dc258f439742b8381db10d2b\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:36 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9NxBcK4iD7GJRSvQ5lA4DrojKZqf9gIe0C6YsRAEuXtsUUNWcwdcZrWvCUE0pZumHlTDAwWqMu9lzXKNFM2sKTTKKdc3FnL5F7m4r1PwCtwaKHrbli9hPQ5ICGXpttUbM%2BIYp1h530Rc02A0\"}]}\r\ncf-ray: a49f9e06dcd20b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":482562,"size_decoded":483277,"mime_type":"image/gif","magic":"GIF image data, version 89a, 320 x 240","md5":"eeb63e36dc258f439742b8381db10d2b","sha1":"b62fd919e7ccf9f0a8b0fa83324497619c15c666","sha256":"1c2899f73eb2f4e0cc4573c88cdb159968668877f8371d98db196abdd6eaa27f","sha512":"02069f3e2525341095c0c45da114bc751024136dcb4bf556e651809ffaa01a2dd89c2c2b4d5a55726e8f546a606d985b9a11fa393e4076c127e06222e3e9b62e","ssdeep":"12288:fC/Dsa0hMvQTuWUDnSmjLyXzHmGjJTN/xL/+LQJphtJgYfJeF:fXa+ASmjUr/xLWAXTeF","tlshash":"7fa4230e5cbb261d0e4f7e2871f50e4ab5565c729830b603e4c95ef62acea2fb0dd944","first_seen":"2025-05-06T03:00:53.588433Z","last_seen":"2026-10-13T16:12:52.387818Z","times_seen":23,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":431,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/tombala.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.371Z","timestamp":1791907856371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/tombala.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 8668\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"e2c089f1b70fc2eae6707e21f7763309\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=blKNnvgEbZrq1sQcfcSOdYrTtHOVyOypeiq%2FsEq7UbvbdcW5ki4Upv7epUV415fiZRsJJ5FyMS6NT9N1ZFJkznScjFWo%2BYfceB4Jj9f6s%2B2FMlHgk%2BLPuKvmCKtQOxgLK8%2F3lHZy45wUD3Ik\"}]}\r\ncf-ray: a49f9e064c3e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8668,"size_decoded":9389,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e2c089f1b70fc2eae6707e21f7763309","sha1":"65941c93b8adbbbf6b1839f0f3a878e1e2a44bf7","sha256":"63de584a05bd52aa6cd97c7d6727933e4e2837bd4101db8c5db6eb7a28fe67fb","sha512":"539917a941b885d3764f8fbca54c7ce47b58e3a14afbeaab62d217b7f6e66ac24596d8b8398d0cae6b937aa06e266ec2094232db6208555f01b157fe039e0dc8","ssdeep":"192:wsglPw7jk/U4dJSXrLK996HAbOYFkLzo1GKFSl7oprI7tut:NGo7wsAEy99+EOUuzonFnprity","tlshash":"a302bf675ce93d47aea0b00c88c951527a061eb7af103c911e3ff984e8712791b363dd","first_seen":"2025-12-30T10:16:59.986653Z","last_seen":"2026-10-13T16:12:52.388382Z","times_seen":11,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/bossoran?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.545Z","timestamp":1791907858545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /bossoran?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":213,"size_decoded":752,"mime_type":"text/x-component","magic":"ASCII text","md5":"b20ed0a50904d23561c7a764ad7c4a7c","sha1":"291de9b5005994a0ca7c5adbcaca8d3a3aff0883","sha256":"fb14e5af4d4ddace1f844daa7ba87a0e1ff36f3d528bb1e9ad8b2d52699fe664","sha512":"743542051de3c2d36e0e765e398622b9e5782dba57c0e6e8048a77e58b6b0550cdf7aa98523d37327a69c571f2171d37ec6e9de7d40d46ed1965bcc3e9bbb4f3","ssdeep":"","tlshash":"ced05e2a520414721caa10d0803de807564a5a3b12d85cf0c0641e2937a727946931f2","first_seen":"2026-10-13T16:02:14.673998Z","last_seen":"2026-10-13T16:12:52.388887Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/16776.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.459Z","timestamp":1791907856459,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/16776.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 456382\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"86b39cda0417e59ee36b7142dbc6ddbd\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:35 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dtPjFzX%2B69rvJnV%2BlQfK3Bu3Pj%2B3JTlnmAHAmtkqtRx13k4OtT2XDVZdFfUMHfRuYgI8XE4othzGAie%2FSjJ1nv91aDIY1PjToT1e3E4u1S%2F0Sj0s%2BUguuyjfyYDeeViCrOQoJTDzpWiupRm9\"}]}\r\ncf-ray: a49f9e06dcd10b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":456382,"size_decoded":457107,"mime_type":"image/gif","magic":"GIF image data, version 89a, 215 x 145","md5":"86b39cda0417e59ee36b7142dbc6ddbd","sha1":"38e4ea9fbd84183d18c4689b26e03e1fffbaf0ed","sha256":"4f521c680d858627edf8f28b8b3b7ed80ace3a0d7fe87ede2ef22a77662f0048","sha512":"299c31677443fd65b213242fd96b5332fd162a37a95ed03b406c2291a04a95d7c195c172be8dbf1f703c3d9dedbeffcaae8be1cb09b5c6229ce1bd48f93d056c","ssdeep":"12288:9NuKfa9b6RaISwJ494l1I/VifJMx5SkUJZP1/KN9:9EKa6IB04O/I/V6ZkUJE","tlshash":"d6a42378c5550cf8fce7a172e2db1e404849a1d0aa43b03feea41f96b5e162d615f3ac","first_seen":"2026-07-14T22:05:39.747329Z","last_seen":"2026-10-13T16:12:52.389537Z","times_seen":3,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":438,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/mk/mk-reset.css","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.309Z","timestamp":1791907852309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /mk/mk-reset.css HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dq%2Byom0IiM2YGTuCjuL25tWLwxnPk8bTAp7O%2BbhKz8MXNkuzuT2eZJ2YUjdESlyWVpeFeHEsuygAax0G7N28rwSiso59%2FRYqOOg%2FYrNw%2FrQWL%2BIq3AeX1UYWaAwMfRfSYz38HznoLCfz44TZ\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:31:20 GMT\r\netag: W/\"e14fb429065e97c99cfbc282e95bb732\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 977\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9ded29300b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1645,"size_decoded":1495,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"e14fb429065e97c99cfbc282e95bb732","sha1":"bef8e30d78cbf3cbcd3875da52b740c8f9bad138","sha256":"e8edd55c587b8c14c67da4e4ea724afa2549dbef9e6010aa5e83ed376e79065a","sha512":"76c8fb22a3147dd2949b12060e41fe74bdfe8158966bd7eb933f67a66ba6b6b3213658854c2cc7cf1e0cf51ca17dd9ca66402713ba7162bb5fd0a1ade7e329bb","ssdeep":"","tlshash":"2231130f5109bc14af2f634b6a47aa1433657e913cf57334ab8f5c0d88aee882138787","first_seen":"2026-10-13T16:02:14.544672Z","last_seen":"2026-10-13T16:12:52.371926Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/23105.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.700Z","timestamp":1791907852700,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/egt-digital/23105.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37562\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"c3fe33dd6f53338f651dbd4a5133b278\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Tl4hO5HVdoXjhL0AClzgsLximgsSi31bVSBdRwrJSgKRktBOy99HO15%2F2ClWlbSwT9d92fZa3%2FZAYXMN2tdqHPmyzqML%2FMFKOY9gWvlS65isoJsrRGpjxZKACgq75dEbGiOtduehFidPtkH\"}]}\r\ncf-ray: a49f9def5add0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/team_logos/404.jpg","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.828Z","timestamp":1791907852828,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /team_logos/404.jpg HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/award-casino2.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.863Z","timestamp":1791907852863,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/award-casino2.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/media/2421d155e98c9717-s.p.03rg4xj3orddh.woff2","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.108Z","timestamp":1791907856108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/media/2421d155e98c9717-s.p.03rg4xj3orddh.woff2 HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 16464\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: \"6ace4746-4050\"\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16464,"size_decoded":16752,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16464, version 1.0","md5":"a32c2d34c54a5eba3b0e40401150ce96","sha1":"30c10906cc89e728600e1eb53312829f0347ff1e","sha256":"2abe1ed29084b56909d14e0e3097ac292b513d4a2761241bb6267505ebf77145","sha512":"ee2a91d6cc27f56438d38975f0cf6339191672ca913046ffc4937d29d05d5caa2b63fca96a2edc50d7fea46a1b65e75b96e543f5b6990387e9c2e58ca3c34dca","ssdeep":"384:WTr1Acb7VmV7+t++7c1dFWCusccVzRGP+ndZw4uXX/kQYce:29NNtnifW7Dc/yIktTYce","tlshash":"4972d00d9789607971d30272cba6c335d411499d0b6f4c8bf9dda07b6ce9c2ee538728","first_seen":"2025-10-17T10:15:07.099889Z","last_seen":"2026-10-13T16:12:52.351913Z","times_seen":27,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/poker.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.340Z","timestamp":1791907856340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/poker.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 4074\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"3bc2bd455ed18b766687178facce5cc9\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=es%2BluHvoYd1u6S95ntGC8YX4Y5IQCr4zgo0sfKV0ND4gNQKKZmDbXYNweQ90NwoPpaFsYjUY8%2FzJOZV6168xqm%2BnIbFRpuLLK2UNDNJYGrOmEx2KM1yCgBqJY2VJpZq6hQIMAwIX8wr19GQA\"}]}\r\ncf-ray: a49f9e061bf80b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4074,"size_decoded":4791,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3bc2bd455ed18b766687178facce5cc9","sha1":"04787b15e3d9ddf988f708a46dd184c5aadcab87","sha256":"abca2e7303cea77ca232736f033c85e40f7fdbf4545a3d3ec09cd5c8a5c0fd72","sha512":"fd203aab37babe244aa0d5eff5158f0180e5b2f9e372b393dd94b3e97a851617e8821edf92c6189e14c62e6c99040cca90310f9bcdea9a8f7d5a9f6f8ebc9762","ssdeep":"","tlshash":"45816d9982e6ac77c2dd58524b10671a80ce26280fb5a7e71ecc9cf207b9f903c17317","first_seen":"2026-06-23T11:19:31.049734Z","last_seen":"2026-10-13T16:12:52.390101Z","times_seen":9,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/5952.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.449Z","timestamp":1791907856449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/5952.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40053\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"450a7ec3956b22e5a7a45b41776cfd11\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:38 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wa5cMbaVS%2BCvhUDWY7Iao4XhldIJnv5zy2V%2B0PKPPfYVnN1wjjitOPK6F2dhow6hM02hnZOJGblQwSkTKeIFhf08HDp0xnX9c93o3nG0R6NBoRMBIJb0lUc6ERPdb%2FvwCvw%2FSkUQbx00F%2Fwr\"}]}\r\ncf-ray: a49f9e06ccbc0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40053,"size_decoded":40776,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 215x145, components 3","md5":"450a7ec3956b22e5a7a45b41776cfd11","sha1":"7d52b555c0eac06f4f4adb65d6f96f69709b49ca","sha256":"d586660b8d88c8a5f12c90d4977050106eca5cb86557c7070d31bf56fb379827","sha512":"aacf3dabadad8eb8feb6d1627d2c3f955ec330f972b0e6074a4935ab7f36cf79fc4bd1b62befff3c6e4d3f2a267229117c9055485d717af46619ccead07b45a9","ssdeep":"768:hbkS3i8zYlyVTP3l34dHT7nq1XCxy+Ob+zI0BircpYlCvcM6Vi19M:hbDy8klqTZ4By1uX1I0IrOeMyiDM","tlshash":"0303e136b90fb91278a22a77b17122d47972cd05d0524918b4dc671f3988be5cc2ffb8","first_seen":"2023-07-14T05:06:51Z","last_seen":"2026-10-13T16:12:52.390665Z","times_seen":16,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/million?_rsc=p37cr","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:59.743Z","timestamp":1791907859743,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /million?_rsc=p37cr HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/22230.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.640Z","timestamp":1791907852640,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/egt-digital/22230.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23288\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"e4caea9a5cb4a4c2d66b3f977fd9dd0f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5fMA0K5yR1BEUgZv6rsk0j%2BQE7FtBKEIYYqHXhuZrPdMCGh7CHkbGf2vDjBylW1DohfqTTU7j36uq1Yue2Qd9dZ2IrfVLLc%2FOdNfYD%2BMI%2F1qbUP0OfB0o2u4iQcFTNYRWov1zFGoWYRH6jnL\"}]}\r\ncf-ray: a49f9deefaaa0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/2.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.760Z","timestamp":1791907852760,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/2.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41672\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"026f37e13829abb361525e61fa844391\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:36 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a6k55KrPhwUY8pQbP57o8gDwvyfQYluAQJ8xirxVU%2FhaZsMqF29%2BBtifKgUhI38PKcNh8Mb6itPXREWGL2caD4mln7MaCgSZKjl8AhjxHpdzynFu7zKMTnHu40skZV0NjDWu%2BYEbec3YiQ1L\"}]}\r\ncf-ray: a49f9defbb1f0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/cc/minor.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.489Z","timestamp":1791907856489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/cc/minor.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 4117\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"f8f3189d6339b55551539decbfcc35f3\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r2sKjdlErS6AHG6QivE3w15wQaKyVMRAUHGUAdnv72m2ecjZcCjKiBBnzZ7kfvZDUcARsJwRAQuXtjnCZ61xq6AbsV4diuCC6euD54q3Wl9qdN5BX9IYgwTc3xniJHGFQAoh8IqphB621GE9\"}]}\r\ncf-ray: a49f9e070cfb0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4117,"size_decoded":4828,"mime_type":"image/png","magic":"PNG image data, 45 x 43, 8-bit/color RGBA, non-interlaced","md5":"f8f3189d6339b55551539decbfcc35f3","sha1":"f042beaf8426621aa993a7f4e3e329e4d86011fe","sha256":"a24f82e97a6d593af397eccf356bd5da87b994f571f820e99cbface64f7f7e18","sha512":"728e4c2b90651d736c94e4f8be64e0a8a2bcd8034e9a81ea8873a7b8896ea4fa9a11da65873f5b88d62ce1b1df4bd682a54f748b95b35c303d75b87c88a95f15","ssdeep":"96:QfCrdLu+5wI+X7O0u0wg/8s8bAvfc73bH7Jvs/nl1:8CBLuEs7HJj5qLHlv61","tlshash":"06816c96d5906c11ac001dada0f9461b3c67d7f2d48ca664ead2a4050bfb18e4ca2b79","first_seen":"2026-04-11T14:16:59.581264Z","last_seen":"2026-10-13T16:12:52.391407Z","times_seen":6,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/team_logos/390.png","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.508Z","timestamp":1791907856508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upaflex.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:25:58 GMT","end":"Wed, 30 Dec 2026 16:25:57 GMT"},"fingerprint":{"sha1":"E7:05:1F:1E:A4:FD:0B:B5:FC:09:40:CD:E0:55:E1:28:D6:5B:78:E5","sha256":"C3:D1:9F:1C:81:C8:C0:4A:93:F0:62:A5:B4:C1:36:3A:40:46:75:D2:82:B4:D7:29:40:40:38:94:09:F2:93:0D"}}},"request":{"raw":"GET /team_logos/390.png HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mmyhR8nREHjkTY9YRjzhO%2B2pPTtnML4OWBslSQPSvONLGjFnT8mp3J790LPXWWCuB8fGehRhE38kCxLTJpTMa4FAgME9mEHU7riehsqSxIu3Xc3Mjzqcsj26Ynbl5BvC4LmtExk%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e072c66b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/assets/games/egt-FVBPSlot.webp?v=1","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.256Z","timestamp":1791907858256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upaflex.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:25:58 GMT","end":"Wed, 30 Dec 2026 16:25:57 GMT"},"fingerprint":{"sha1":"E7:05:1F:1E:A4:FD:0B:B5:FC:09:40:CD:E0:55:E1:28:D6:5B:78:E5","sha256":"C3:D1:9F:1C:81:C8:C0:4A:93:F0:62:A5:B4:C1:36:3A:40:46:75:D2:82:B4:D7:29:40:40:38:94:09:F2:93:0D"}}},"request":{"raw":"GET /assets/games/egt-FVBPSlot.webp?v=1 HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 48252\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Aug 2026 17:34:12 GMT\r\netag: \"6a74c594-bc7c\"\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WeMUhe5xXSIls4OkPKh3NH98zzKoML4jOHebnqG3T4%2FelwAVnas4sU6FcfxQApHDX3SnlTToGCLdxe0GWyQK9PNKpUURE3gbrU%2BtShBdlLOe6ufEaFoDPYHfAel75xpToCrpP88%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49f9e121f25b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48252,"size_decoded":48900,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"798084e88991e2c93e0f6176691f078f","sha1":"decef49c60ba037f842d3f3d481fa2875d12885a","sha256":"5f8a3035972cba6fc43b5cee646cd771628977bc4ab8462e11867db119ce4d21","sha512":"2d7b50e7504db7b670662ae5149bcb49472fcf311e143c84787f81fec139f7b8eb426105fae24bf9d7154fc0f6c61e1f35a8b93698e84eb403854a63f061b9d5","ssdeep":"768:nQmzn/wbg1gUxU3qzfCt8/rzaXTx+SI0fJ3cC4tw4OwWeAjHwCc/Aibw8z5x0wzQ:ndb/M8x7bCt8DelbfhcIYWXRF8z5xHk","tlshash":"3c23021fff06f03cf5f3507e9f96d66071958c0cb247d64ad8e9d816e8066812eb6a14","first_seen":"2025-07-01T11:47:16.771646Z","last_seen":"2026-10-13T16:12:52.392079Z","times_seen":3,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/partners/madrid-bonus-1000.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.483Z","timestamp":1791907852483,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/partners/madrid-bonus-1000.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2800071\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"e2cc5fb2656a412b931e0f3767183a75\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:48 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3UBLQU%2BGxDcXEh9fLgRB5%2FT%2BURLQ9q1dSo5u0HJhWTCdrRRqZn%2Bhz%2B%2Fe7rkBBqWV0v7hiTCEOvpyoMoJLwYZQTmsQgLc%2FP6RRqk%2FEAH87vB78NGIXEgzW1qx7QKMcsol7wfwpGemL5Ly2Wwa\"}]}\r\ncf-ray: a49f9dedf9cb0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/redesign/award-game.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.704Z","timestamp":1791907857704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/redesign/award-game.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.kbkrw8839xwdwqe31.com/mk/app.css\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 39170\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"eae50a23ddb84062ad698fead2e1f28b\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326188\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lOeLVWwRA1PE5tVSKk8YjI2etyhpAMw89Jx4mdVTnuc5TbLviuLSf3NoyKKFObsQm6fmRDOWj%2FWgH0oiB0U4fJSHnmgY%2BRc6A5B%2FperJSyDxVgC7j1ey6dDzaMD4QNxavcEnHFGYCm7kstLZ\"}]}\r\ncf-ray: a49f9e0eaa590b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39170,"size_decoded":39888,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eae50a23ddb84062ad698fead2e1f28b","sha1":"d7b45ea47c29ff783dea3658aead9c49d72a3d41","sha256":"72027edcd9436e869ce56b8bce32b9983f96469e03238c73fd79407632d4c6f7","sha512":"a1c8d06cfeec20f743a103317aa117a90cc5cb9fc56034af78ba953874532b4e1b75e6954fbe8f210073541fcc079e680ca08e4d0e82707c04c0e13ad6ec71bc","ssdeep":"768:QqTjvXS0SNBH30Z3GLVQji5s1DZiZPV13RUYia73Ubzf6A:bT+0SNBaG5Qjiu1DIZtZRUYX7EbzSA","tlshash":"6703f162d4eab4944ff16e3c964b5822cecaa50406709549fa23fc3dcf3375e88d49ad","first_seen":"2025-11-28T07:55:19.748285Z","last_seen":"2026-10-13T16:12:52.39361Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/mk/titillium.css","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:55.865Z","timestamp":1791907855865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /mk/titillium.css HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:55 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VVQ0Wpsj9G%2BTMLW8nTKk8nBdO3TO0T08V7kws%2BNKaxAxtFkLbW8jPlobNtOHorUhXTxe5qij%2BnG2hWWakgnkBGtWmNqPb%2FqJ5kj63hdYu%2Bm4%2BEh6Ot91%2BbXO9aWHj92sS5B5t%2B63M72EFAFA\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:31:20 GMT\r\netag: W/\"aed948f0de6ccb1009da7b530e69ffed\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 980\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e0329800b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3399,"size_decoded":1075,"mime_type":"text/css","magic":"ASCII text, with very long lines (354)","md5":"aed948f0de6ccb1009da7b530e69ffed","sha1":"37cfc07075945364925454d39d8987237b8dc9db","sha256":"74381bf352e50dc5bdec2bffd1332e3785c4838e34bdff3a07813fe3aaf45da3","sha512":"d69747c533331124f2e35229d6f96f0003e44554710c7732cbb17074f0b51f2f6dffe8e051886bd00b3821b741f176819adcbcc05f35832e5ecd7d32ec0b880d","ssdeep":"","tlshash":"ce614935082bb604d6fbcd3230ce3e472818616295ea2512de5609f88eebd7ad397706","first_seen":"2026-10-13T16:02:14.508258Z","last_seen":"2026-10-13T16:12:52.32539Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/evoplay/31617-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.308Z","timestamp":1791907856308,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/evoplay/31617-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1910289\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"738b47f9f85c2b5ef9f92cb727c1178f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:31 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=np6mpLq8Bh13Ceh%2FFDzn3TCSgrl3Bc1Lt3n2W2qB4o2Wt2IgBPwTzOaNDT79SxsyGhuyZHJ7QYvoJZABTTUxPjGAdsmQhCQ6Q5ZH1BjLzPZ6yl4u3eIydVq2YFmz7LJJrcYHrtFe3PGonPpr\"}]}\r\ncf-ray: a49f9e05ebc40b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1910289,"size_decoded":1911005,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"3ff7a182144840f18616a04f6b0cff04","sha1":"a90b684538195d6f3f41e26403375a4750278994","sha256":"8d12ad46b715b79d5e064fac0b45c9a0fbb9173b3d7bfad8dffc913200a13202","sha512":"d7d6f95f8d69597223ca99f18ff0e33a75631118ad191977ac2a16f3497b057a8300b6156cafa18b3c5d55ad8d5824a3a15ac1ed9907d24ba095ddeda6af259c","ssdeep":"24576:2MEZ9mKQFkz6dS1sXN7Y0hAenF++V13A7MwAYwLX:2dZMKQkz6dcIVduMSwj","tlshash":"9725337d9b8c43db6d293db62d021fa3579ebf1da5005481b32785e3318a73164dc9b8","first_seen":"2026-10-12T18:41:56.950024Z","last_seen":"2026-10-13T16:12:52.394363Z","times_seen":3,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":784,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/33447-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.314Z","timestamp":1791907856314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/egt-digital/33447-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1036126\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"dbeecfa4a68d656a5c9506120058e2f5\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:29 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=goHRhFNWyP4NSZQ8mTi047UkTIrMlZy2FbpA0RllO3LcW0fQ4MuvIvTzkAv2lA1pYHr%2FHehIa8itY6c6m2LmOgTJTgkGqdpciB7vFW587MtCspBg8k2%2Brl3uhMaAY7fGUulgyx2K7xQLdDuT\"}]}\r\ncf-ray: a49f9e05fbcc0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1036126,"size_decoded":1036844,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"dbeecfa4a68d656a5c9506120058e2f5","sha1":"897e93e28f1c1f47781819bd958361ae59ea6fd6","sha256":"dfc351f8b7f7bd57c648a85bc63e0cbd056391a1a4bfe25aafb1b3a7e970a523","sha512":"74156fcc882bf0fd0bf3a65ff23681960ad309a340c5d455e91ade2ca6f31d75b9f77a0eb2b9abc319d4649ff90114af1fc51de62816a85fc70f6e8be414c0d5","ssdeep":"24576:uT3Nal5exMOmMe1DEEeqzD2KcxVZ2XiJ27+I0Z88n0H7Cx:A3AlbttqV0SJ2vfJmx","tlshash":"fe25330dcd33184dbaf23ca617f6bdbb9293d7d74a64092d500a34b43a21976606ecdb","first_seen":"2026-10-12T18:41:57.260711Z","last_seen":"2026-10-13T16:12:52.395621Z","times_seen":3,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":580,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/king-ozel-poker-logo.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.331Z","timestamp":1791907856331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/king-ozel-poker-logo.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 741584\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"fa1fbf2ecfbbdde77c3ade3f8a9dfda0\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BPrFO30H8m43ljbrayYAJ22IS14DMmefCD40jJWQ9WTSqBowayON5%2FPkz19Aydd2ORFxuhlbIriX1tdu6xYTKFDVk6cLfqDLqmF2tnUj0n33Pw7q7uqTKVH6plEEct6%2B5LsbHaPXxtneANMs\"}]}\r\ncf-ray: a49f9e060be70b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":741584,"size_decoded":742303,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fa1fbf2ecfbbdde77c3ade3f8a9dfda0","sha1":"df6abef632db5f35dae6c5d893eb971f38322724","sha256":"3f818da264947db1f805ed75c546df94e7f14f9ee82e3a83cfa4c47147b71f12","sha512":"45f1a59ed01e92c6fb6ba46537bb6154a3e67ec781211e47d11efd5372e8d5c50e4c53dc2a34b4e3ff57639db7577ca5f532885ab1edd978d1c091a4d56ed5c9","ssdeep":"12288:ng+eCRHwLVMC9Ld+eHQcCpIe9zqPzYB48AAXxHevAyzPEqfe4mvLy7qX8:ng6RHKVPB1QcATzqPYAAXxHevAy4oe4V","tlshash":"69f433a1355d1589ebefeb30c15586cea2fecccdc75c09a20367cc2e4a70619ee970a5","first_seen":"2026-06-23T11:19:31.028627Z","last_seen":"2026-10-13T16:12:52.396254Z","times_seen":9,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":463,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/22230.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.417Z","timestamp":1791907856417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/egt-digital/22230.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23288\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"e4caea9a5cb4a4c2d66b3f977fd9dd0f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7lqCs6ne66DfjjE6JtjUB3zIkWobnE0VovC6y%2BITlR379y52opEQDlgOYmIVnDEuFIGSZD1IYtKn4gI%2BgUo2ELbDSXIQiHuvXUojgYgo0%2BBom5fhzo6GUtJi8nTJfwYXfS5%2BKfhffoVlUeTm\"}]}\r\ncf-ray: a49f9e069c810b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23288,"size_decoded":24009,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e4caea9a5cb4a4c2d66b3f977fd9dd0f","sha1":"b86e2b4a2bf6658ea0196e4d66e4bfb9ebd62c88","sha256":"013fe01465de8dcb2c659cee52ab02602e773cc9278f454b9623e47c43aa2d28","sha512":"f05f490d757d7beb6a710a740b9ec026699f53781dc93e50d02ff571e215bf465ef99b648de4e58fb598ff2ad7454afb2da744e4b7f8503dae3062b9d6a2e48c","ssdeep":"384:cW+eo/Gq5dULSKPIWMjlI41FQSZYedNPq8JCofW1Zq+Ahl2d6xRbOrIhKC92I:caoz+mjl51FhyePi8ZfWbyl1dzH92I","tlshash":"08a2e10c8667c7679132da34d6d4a1c4ea30f60c8c9980e694c81edf44b3bbd38d7e5a","first_seen":"2026-07-14T22:05:39.697638Z","last_seen":"2026-10-13T16:12:52.397091Z","times_seen":3,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/cf-fonts/s/titillium-web/5.2.8/latin/400/normal.woff2","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.672Z","timestamp":1791907857672,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /cf-fonts/s/titillium-web/5.2.8/latin/400/normal.woff2 HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.kbkrw8839xwdwqe31.com/mk/titillium.css\r\nOrigin: https://mrking20056.com\r\nSec-GPC: 1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 12344\r\netag: \"cfb5bec034d29df6c0f56c2c1a0e8340\"\r\nlast-modified: Fri, 09 Oct 2026 21:31:21 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 6011\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C42j%2FV57%2FsX%2BlcKprSrGtH2KXvq7x%2BzoCwMzUpq%2BNXpUivgbaw8yAHzZ1ot8vwBbZ%2F%2FtsPw3cTZdJ4fwetQeJJMhFZxd2wu%2BlEJXowLqjMf1sd167nu5Jad8WQc6YfGw4BFuOjMFwBEww2rz\"}]}\r\ncf-ray: a49f9e0e6a250b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12344,"size_decoded":13117,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12344, version 1.0","md5":"cfb5bec034d29df6c0f56c2c1a0e8340","sha1":"05f51cc85c5fe3b64b2203b363cb48c31f84ce44","sha256":"861b80b49d2a634d8746e2e45c672309d9ba69a2fdd95da2af034d7a1d09b3f9","sha512":"885fbe35410197a048133cebc5e21afda24d4a901fa54923627a0c4124fde39300b235cb1cb7f18779882f57b76380cb1b11477e55ce3e66574eb37f334e6edf","ssdeep":"384:YRKdoBN+5RRu4r3Pjt+Iu82luQVE/26qlNR:YrBQ5Rvr3PjA672/lNR","tlshash":"9242c0764667a3fac442683f2edb19fe897e3215cff65234440aeb9a02d834291dc731","first_seen":"2025-06-03T23:22:11.216712Z","last_seen":"2026-10-13T20:06:07.312274Z","times_seen":7018,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/provider/egtdigital?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.593Z","timestamp":1791907858593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /slot/provider/egtdigital?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":303,"size_decoded":783,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (302)","md5":"adc7e7144d7baba678717cb4ba71be83","sha1":"480618a768d8a5a69e759d1ad0579b4f4d87ae87","sha256":"c85f74f4a0e43db819ff713d14f2d3a44915a7c6bd4d67933194a9c2f06b663f","sha512":"1a21dafc9a941af91586366c5ae742ca5bb8d2cc2702c8d29bbc3a90ea2a81949117d96e56443bb5cbbfd202f5d4c07df0c341e4c3ce6c011542a2a8bcad7933","ssdeep":"","tlshash":"18e08627820415b31cba10c0803ed84baa0e513b12e91cf080a51f3467e317a06832e2","first_seen":"2026-10-13T16:02:14.512477Z","last_seen":"2026-10-13T16:12:52.214048Z","times_seen":2,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/press?_rsc=p37cr","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:59.425Z","timestamp":1791907859425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /press?_rsc=p37cr HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:59 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2624,"size_decoded":1681,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1608)","md5":"9e66a8dc557f0486108ac282fead90fd","sha1":"9c4285cb1dee31b5bfa6566ca55fb025ba28fe4d","sha256":"abc6cbfe26664f22b0daf1a92ad5d06387cf6059333904591269100bba247dce","sha512":"fc69771cacf1e8d07774b5e9d978e69b36167fbf6a2800f8db5fcf954908a784ca7757d7f792b0c6c299a9dac16dd8ed62a1d69eac76b5c866694091ae2ca18f","ssdeep":"","tlshash":"87510f3fa900dc2daae7948500efa30e674c573b97607c76c54d9e1a26c927e5fa13a0","first_seen":"2026-10-13T16:12:52.398606Z","last_seen":"2026-10-13T16:12:52.398606Z","times_seen":1,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/4370.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.429Z","timestamp":1791907856429,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/4370.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 53084\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"c3c9377f9b5e16b74fd70a0314a88fd3\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:38 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6C%2F%2FQl2hdLtpbM55J0Fc9ARVpYHAJxAFL5C3dp%2B5dLQJBhJMU7UwNS0Db1czTlDhcUw5zfbzGUJ76TlJ6%2F2LdaIblyIrmpJNsymompXYrBqzfcK6NfbLK3158BLeGenTyB%2FNR97BXbSt4FPF\"}]}\r\ncf-ray: a49f9e06ac9f0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53084,"size_decoded":53807,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x213, components 3","md5":"c3c9377f9b5e16b74fd70a0314a88fd3","sha1":"a0eca9e7fc68ef698350e94eeffc96b65c5405ce","sha256":"1e2ff52e4d1bf070b0015318b183ab095b8f35bca17b523de4fd13f89b2f8f97","sha512":"0dac61576f2970343cbe1dbc6df89829124d33c3cf46b8268bca138a104070f7a341df897ba377a2a565e28d636f0cdabf2373dfaae8f7d8509676a405d1a74d","ssdeep":"1536:IS87h8GzNs6orvF35ZA/okhnWzKlidf8I+ezB:aF8GTktJZMofzdkezB","tlshash":"69330224dd4518d1bf3a90fb483ae8ae1a651b19ca1df943e37475a42ec0741fa37d4c","first_seen":"2026-10-13T16:02:14.425869Z","last_seen":"2026-10-13T16:12:52.399862Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/api/live-feed?type=all\u0026limit=50","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.785Z","timestamp":1791907857785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /api/live-feed?type=all\u0026limit=50 HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nX-Device-Id: 92ec062d0022be1f\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://cdn.jsdelivr.net;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;img-src 'self' data: blob: https: http:;font-src 'self' https://fonts.gstatic.com data:;connect-src 'self' wss: ws: https:;frame-src 'self' https:;object-src 'none';upgrade-insecure-requests;base-uri 'self';form-action 'self';frame-ancestors 'self';script-src-attr 'none'\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"4680-GRew7elWLx8wfl4pUxtE3MT1Gss\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18048,"size_decoded":4218,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e6bfae897eb8c241b2a87ac68d29cffc","sha1":"1917b0ede9562f1f307e5e29531b44dcc4f51acb","sha256":"b350521eccf22183104210bd5f77511b400e0cf257292dff6fb85254e34480b6","sha512":"6d55145cdd1bc5a462aff8700a3a9506185dbb485338e34e184cfb861889dc7f6d9a920649289db43ffeec69949754e7df93958f10a3b2524f72151a764b6f53","ssdeep":"384:1vI1dOkQF5rGujfsARGWu8ihuxG5r45/rf2Whwmsbu8k/mhijk7lEhH9Xr5QQv+y:1ykfvzTPG7YxGVqrv/mmOhiA7yhBNdvb","tlshash":"9782de6f774aacf5d3f12542694f3dd960dd901f6082ced8f5eeaf2095a8a1006364e3","first_seen":"2026-10-13T16:12:52.221379Z","last_seen":"2026-10-13T16:12:52.221379Z","times_seen":1,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/category/populer-oyunlar?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:59.416Z","timestamp":1791907859416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /slot/category/populer-oyunlar?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:59 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":308,"size_decoded":789,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (307)","md5":"c0f546f4eb072f7345d1277794f3356f","sha1":"1f094a21624607226bbc367a0f65a8f9aeee7775","sha256":"dcc5c69cb9e136e97b87ae23cc29b78188d1f8ccb31f8987cb9139528c0c02b7","sha512":"5582ba44c91fcc535d9c59262ea305970d4a1c7095af4c1277d633a199cdb7b55b7020ccaac84f53930eceb2f408254ff69c36e2b6bc2fde40e1e2f77773d74d","ssdeep":"","tlshash":"1fe0862b920429b31cbb00c4803ed84b690e163b52ee1cf080941f3527e317a55572e2","first_seen":"2026-10-13T16:02:14.524654Z","last_seen":"2026-10-13T16:12:52.180734Z","times_seen":2,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/category/slot-mania?_rsc=p37cr","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:59.521Z","timestamp":1791907859521,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /slot/category/slot-mania?_rsc=p37cr HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/27441.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.643Z","timestamp":1791907852643,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/egt-digital/27441.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 152618\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"0bcd24a669e87f4f092a946eb72d2ea4\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aFMcdpL6eiGajTavRxDHqdqK601IEEVXzdEutki2FCBfaC8UwtSCAdgAen54MlyZbLSilPQlhFcrnyVg9a5VLpHKZw4EySXkWr%2B%2BQPhsP99%2FsAy3NZ8MckeqLyuI7tQb1jtZ9kBI7qvAod%2F3\"}]}\r\ncf-ray: a49f9def0aae0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/jetescape.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.366Z","timestamp":1791907856366,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/jetescape.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2598\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"79a88317f693b6d0e2d3437f8ad9d05e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=trwAmqS%2B%2FVKxLf%2Bf1GFmdRjkAHMjh5jl28qgLfwyDT9bJsTLD8A09p3PMZyA0N2Zj3iAt6Gxqjv4PBCzJHLsPOIIuSepQvCLKdHSZxf%2FHn91UiP1C%2BC0yxoUxC8nvwqCrcfxvAf6d1ZIsVGr\"}]}\r\ncf-ray: a49f9e064c3a0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2598,"size_decoded":3319,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"79a88317f693b6d0e2d3437f8ad9d05e","sha1":"c70ea8fab046ed390c67ca299502bba317998493","sha256":"73e74acc418ae7eda4ff7abe400514802cccf349c4861856c9fc6019cca6b703","sha512":"9a70f41a9b7844f1bd67f48b98500219b5b27ae2681f1e155d5dbc7b86dd5bac153c66cca728807259adc8ca946ddb039c7fd419a7010837ae60fa0a190d99fc","ssdeep":"","tlshash":"81513c58ad77592ec6c570c75cd99f64a84ab3cfb49ca14d5201189f3c9a02073ad548","first_seen":"2026-06-23T11:19:31.083674Z","last_seen":"2026-10-13T16:12:52.401151Z","times_seen":9,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/team_logos/404.jpg","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.505Z","timestamp":1791907856505,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upaflex.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:25:58 GMT","end":"Wed, 30 Dec 2026 16:25:57 GMT"},"fingerprint":{"sha1":"E7:05:1F:1E:A4:FD:0B:B5:FC:09:40:CD:E0:55:E1:28:D6:5B:78:E5","sha256":"C3:D1:9F:1C:81:C8:C0:4A:93:F0:62:A5:B4:C1:36:3A:40:46:75:D2:82:B4:D7:29:40:40:38:94:09:F2:93:0D"}}},"request":{"raw":"GET /team_logos/404.jpg HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xTURm5J%2BimzCxg0HZkHn1OREMb9n3eIzJBNFfn1fGk3Lym9UHs2%2BQXdDP6t2SJRtmfYTQidakhsd6C06En7uxOIAtX3f%2FpJlmRjvwVSqb3c8l4xX6xSJf1aTa9qcxd5UIeejhFE%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e072c51b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/178a4ynnpox30.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.320Z","timestamp":1791907852320,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/178a4ynnpox30.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-21900\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":137472,"size_decoded":44582,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"31e940b8885837b8067becb13aeae3cc","sha1":"2e87847a922aa878e3b89ada9055d1a501622ba0","sha256":"2d2cc0cde1fd3ba3992919e6fb97fa3f31b129fa13f57839bd0cd08ba6601593","sha512":"a7b8f74e17ba95c742727adcb3907ef14df62cbc241be98968f751266eff633feb2782ecf3baa45d93c514b4f36516e580844f1f179c5ef338f37f6f7198f0be","ssdeep":"3072:JiabPWocZ2mXOOQd4gzMdY7Y7Wy0CwGOB:JiabPWocZnXOOQGgAdX7LwGOB","tlshash":"38d3e6f935d1f482076b50aac03f0006f22c4d77189e6860e3e5edda756465de2b3faa","first_seen":"2026-03-25T05:30:59.068842Z","last_seen":"2026-10-13T16:12:52.401823Z","times_seen":171,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/23104.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.759Z","timestamp":1791907852759,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/egt-digital/23104.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39042\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"db2a40526217022cda669ef499d7758b\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=snyfv4%2Fm3JZOqMpUAKT0GqkrI0ucdsuJAaabqRIAjBOScSMt1ksklpGex%2FczqErfVMwo9ZIh0Qi4qcWcTw%2FFS5NfOpfwP0Mhuw%2B3Ri4KK1w6pGy0Lf2yIlP%2B0vL01v3H95XrWYuY8WDNioEL\"}]}\r\ncf-ray: a49f9defbb1e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/178a4ynnpox30.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.145Z","timestamp":1791907856145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/178a4ynnpox30.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-21900\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":137472,"size_decoded":44582,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"31e940b8885837b8067becb13aeae3cc","sha1":"2e87847a922aa878e3b89ada9055d1a501622ba0","sha256":"2d2cc0cde1fd3ba3992919e6fb97fa3f31b129fa13f57839bd0cd08ba6601593","sha512":"a7b8f74e17ba95c742727adcb3907ef14df62cbc241be98968f751266eff633feb2782ecf3baa45d93c514b4f36516e580844f1f179c5ef338f37f6f7198f0be","ssdeep":"3072:JiabPWocZ2mXOOQd4gzMdY7Y7Wy0CwGOB:JiabPWocZnXOOQGgAdX7LwGOB","tlshash":"38d3e6f935d1f482076b50aac03f0006f22c4d77189e6860e3e5edda756465de2b3faa","first_seen":"2026-03-25T05:30:59.068842Z","last_seen":"2026-10-13T16:12:52.401823Z","times_seen":171,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt/30619.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.418Z","timestamp":1791907856418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/egt/30619.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19626\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"75bcf88c2fe301d942e0dec50978678c\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YZPpBxPnggMu1pt3s%2BgMztyEk7Tyd9Y9meDig3xTjOWCFli3Rx8FtPzA4EmifvaCQaUHxU1fMxbA4s2jziAMJWBYRYzSPWhbSYmWnV3Ii1vHy2yZyQnX72ri7W3EkRVzCTBzBqdyrtREWbaf\"}]}\r\ncf-ray: a49f9e069c820b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19626,"size_decoded":20341,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75bcf88c2fe301d942e0dec50978678c","sha1":"406059b46ef47c98a73e0f613b8b9b53af39bd2b","sha256":"72fa7cc2cb1511030e3e1f6c710b8e6b6e742f8a67b827441af98cf0d846b9c6","sha512":"400e5d93120c9e16aded64eb1d791dd3e9fc7325f9507532c58881851b94a714e4579cf4fd4ee2986fccc0bcab395378954d5152f2ef0e43ce854fad8099980e","ssdeep":"384:fw03lMPg0GJP8TAADDnFIPsccbynWi1FUBAtkcEgpjQv99QnZIm:4WliGeTRHcTc4lFQAtLEIsuZ1","tlshash":"8f92d168c36211aee1075bbd3b5ef6aabf813c1930e44301b36001764158bfd237da8e","first_seen":"2026-10-13T16:02:14.584022Z","last_seen":"2026-10-13T16:12:52.402424Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/golden-coin-link/MINI_SYMBOL.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.504Z","timestamp":1791907856504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/golden-coin-link/MINI_SYMBOL.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 561456\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"1504dfb90ec6b96b3947260b0ffb0819\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nB2Kc9flW%2FGpLf%2BkVGOOLAi4Fi5DPmNIdxYPneb4j%2FCDmroZJQGftYog7%2FNdZTlzJkJTC1Kj5uwH46fosRkzCfArD8YlKvNn0eOLfnljSOm7Eat8wOCGEGYC7IFJI9UiTD44I9ApcguxIeZ9\"}]}\r\ncf-ray: a49f9e072d1a0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":561456,"size_decoded":562177,"mime_type":"image/png","magic":"PNG image data, 930 x 848, 8-bit/color RGBA, non-interlaced","md5":"1504dfb90ec6b96b3947260b0ffb0819","sha1":"58f24554ce3b2637be406c0ad9f3cf03d261e2d0","sha256":"8e5ab0ee06ef3b1fddd8ed054f8485742a993ff86fc9f2ad180559251bffe745","sha512":"6adf098dff0d119a6eeed7ef727f03baa27adf445de6df6c89e779fc2437c7e3fb0712470549f3b958abfd67e3bf91c1334c0352cb4cdac427947eb3190acd6f","ssdeep":"12288:I/R/0+XS1eyn+Tuv+nbvpbWqPIzDlfY8+kdBSCYvZC:I/x0+XUmTO+nlxPIfW8+xU","tlshash":"f2c423b9c9eca1eb8ae282b3d14d20305f8e7452c774d654eef98847654236cac527cf","first_seen":"2026-09-19T02:54:18.434769Z","last_seen":"2026-10-13T16:12:52.403249Z","times_seen":4,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":453,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/05-~33cr6_165.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.361Z","timestamp":1791907852361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/05-~33cr6_165.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-9ba1\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/pragmatic.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.571Z","timestamp":1791907852571,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/pragmatic.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2794\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"c2c54968fd8f4c52df605c2902253c1a\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5u1RqQcGQQ5A%2FabohahOKbmgJaMGKdnypIZcXukt1zcQl6XqQO%2BwTlNO8SXG6bzYZuU9Vrjo2sb1BNul%2Fq4HrLEmwqXf5bNBmISv5uuqioHwXe3Ll3CI%2BioyuWqDKVAQF0OBG4KV8P%2FXtKiS\"}]}\r\ncf-ray: a49f9dee8a360b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/bl/major.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.786Z","timestamp":1791907852786,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/bl/major.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 45591\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"f3f02f42f5fe749c65b2faa2dda66189\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1kC87GQzAEXxSmBCl0FUqmiuUL%2Bs8HDrnaFO4nIsPSQCPZ%2B670YE3EiGcwyOX6BV2USh1CAn2gypYoXPyaI%2F5ge5cw3z%2FvWB2L0lqZSwvNZ7NeXA2rfKkY8hanYZuFq8RGPhaTQxAkVH7gB3\"}]}\r\ncf-ray: a49f9defeb4e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0zfai8bmc40xb.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.169Z","timestamp":1791907856169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0zfai8bmc40xb.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-f8f\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3983,"size_decoded":2112,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3965), with no line terminators","md5":"2dff1338246397b0e034da0016698c1a","sha1":"e1be3741d0aebd0783c94dd8e12f669c1917355a","sha256":"198f67d23375692d2a931b328d3b6b20c4a86258b7e633032a67847b5cd592f2","sha512":"7f1c2ddb2dcdb9d1408b001a745faa6d36dafaf8fc271c21568752938eb6f5b8c70cd8329e637ae1d6392b6b933b0750907f840f2b0689ca022d02273c206359","ssdeep":"","tlshash":"0a815428a545adecbf5e5e8c3627640ce72f274846de1934bab84cf0653439132a2fdd","first_seen":"2026-10-13T16:02:14.459451Z","last_seen":"2026-10-13T16:12:52.403825Z","times_seen":2,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/redesign/megaphone.svg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.628Z","timestamp":1791907852628,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/redesign/megaphone.svg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cMfGwOhxfksZVq6Iui2CQPS%2FmOGX3YEQ8yYOIOvOEoIBI%2F8Qz498dMeD5H8ngmNSr9RybqDF3Zcr71SrrtAKtvjbQb1UKHcUsPHuq5MuEs3q9FE4uaafcP5YUxtfr7QoZ0WSBGO60rC%2FsLMd\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\netag: W/\"c08799dec60d0ad79f9dbc0c12cf4623\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9deeea950b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/31606.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.769Z","timestamp":1791907852769,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/31606.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 492065\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"aa3e21a0b91c118b16e6a9f84568083e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:39 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xB7W%2BFrJIxyPR5vdMy5OBtkjQnxeNv4Z6kmwhUHgdhxIljW5uOCcMCA09dkCDuO%2FD9JaTus%2BYCRhgdObo73IcxohdkMyoy0WCCpF09Hg9UAo8oTxx5Odan9wvoBLby9GiMayRR6M1CfmdwGY\"}]}\r\ncf-ray: a49f9defcb310b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt/572.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.445Z","timestamp":1791907856445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/egt/572.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55567\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"08a049fee518115b7b80f3ec3a7efe28\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=977jsEH%2BEGB%2FGVLMMA1Y6IPiphEfk4W%2FG28%2FJPBF2NI9dGPjqvvaeZEbitWsiQfGJ4%2B4TS1976HKJR9hqc8dCZ4ySVEVPQfBKwtq40TdJioJEUXEX%2BweCwprZdrtc0EVNkyWo0OwycRtbBFp\"}]}\r\ncf-ray: a49f9e06ccb60b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55567,"size_decoded":56292,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x471, components 3","md5":"08a049fee518115b7b80f3ec3a7efe28","sha1":"ad82e39154be80b1ef38a174a1df513a2b6ed568","sha256":"89c9f8050986fc6034f8ed906adc14019d67ec000bcba0222fcb2a5c13cd3d3a","sha512":"8e07d5eebfccf0eb2aa8110403d707246bba80c23dd3c4d1cc9a923451aa6b3598a2cc2b0c53ee435b8110e54b67a0153c81477ec88ad578a48d55cb55e70d5d","ssdeep":"1536:ZebZwuANdcj4sg8CmGBakx03z728+ip/js:4wlncu8ClBCD7b+ipo","tlshash":"3243f2976340f7154631f47342bd285b7edab628692dd81d742c069adbb83e03260beb","first_seen":"2026-04-11T14:16:59.712244Z","last_seen":"2026-10-13T16:12:52.404573Z","times_seen":6,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/cf-fonts/s/titillium-web/5.2.8/latin-ext/700/normal.woff2","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.685Z","timestamp":1791907857685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /cf-fonts/s/titillium-web/5.2.8/latin-ext/700/normal.woff2 HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.kbkrw8839xwdwqe31.com/mk/titillium.css\r\nOrigin: https://mrking20056.com\r\nSec-GPC: 1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 6676\r\netag: \"74b01ace6370356fe3abb3ac291374f4\"\r\nlast-modified: Fri, 09 Oct 2026 21:31:21 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 6011\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bpB7RNH52qOK3dltWeiGlNWUwHsrO%2F9cku4isC62bI3cOeUuGjCfgt92KLKM04cZqL5i%2BjDX98NfbkrdTlibhUC7WMnyvbVv03j1coYHGrwBRmcAe2%2F1jRGCqOqP4tJwW0o3AiSOChphnrSo\"}]}\r\ncf-ray: a49f9e0e8a320b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6676,"size_decoded":7438,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 6676, version 1.0","md5":"74b01ace6370356fe3abb3ac291374f4","sha1":"0fea18bb68e5e0f0eaed74acc23df587bc56b2b2","sha256":"ecacf58d7980d1446d142077950407cee02f6e7ec3b6c914a5cbbaedce0a9b60","sha512":"901f13a50b3188221432d1d347397ef46061d60b78e1e4308e24387751dfa03848d60b0389adcc9d64a130783e4a43e7bdb15c40bb989f58ba94566f5c901157","ssdeep":"96:0ep9XRvj3IgQD9k/3v9PBB+pikPjyd9cZ3usZtp9y7w6jwhh3+BCv+IRUdGI:0qpTUS3FPup/PjyXwes3pkwns+7G0I","tlshash":"18d1cf772716ef162817eafe8404bad7380811f8eb807b064897e7bf2b3c012a654534","first_seen":"2025-06-11T21:12:41.114994Z","last_seen":"2026-10-13T16:12:52.405155Z","times_seen":697,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0zfai8bmc40xb.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.355Z","timestamp":1791907852355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0zfai8bmc40xb.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-f8f\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0k0vihbgxlux4.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.357Z","timestamp":1791907852357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0k0vihbgxlux4.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-fe\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/mr_king.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.781Z","timestamp":1791907852781,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/mr_king.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 246043\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"72c0afac217b1de705632dc98688af2f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uzR7s2o6qw6DXTb%2BDrPvIWnJ2PNbwTONlrLo6fZgAxnyR2R%2BC50DaZP4%2B4A8Q%2Ba5HcHptrBlGTj%2FEqOnJpVPWel7iJ8oAlKzDQ%2FVgpbuSSbH8VX6SqZTFUDVySCwWON73le48RCBHfgnvkFP\"}]}\r\ncf-ray: a49f9defdb460b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/destek.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.317Z","timestamp":1791907856317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/destek.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 5014\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"d1cc13674114ea1225b2d56381c79259\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hS5gVuSJxtthFghwbY3po%2FJoZpw4B7rGjB8Y8m4G1rkIxhDcE0%2FdJKZVys2LuSlbsg6KJPmZUFb5SNz3vtPGRjDse0Qq3fBwlnahw4nmhbvthRUQg1sdC33d31aJmc1KJSm6WDv3WK7nxDrz\"}]}\r\ncf-ray: a49f9e05fbd20b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5014,"size_decoded":5729,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d1cc13674114ea1225b2d56381c79259","sha1":"e90d5b94bf05602e301e74ed974caff337416212","sha256":"e42fedbe7a640331044fbcb7b7d8769ea5cf18e1c09cc99f525dcbb5a657d145","sha512":"d58c45c20cebe4f699522df6657e19c253d0ef3167ef82bef959157ee45fa454f9e3324653b3b18c96d32c5bf618db29978216394b45560260f26e882dd66e1e","ssdeep":"96:ii1GtvDs+Ju5lliHRbjefwLzCxe+5HhkMN5dyHy7lKsjMyBaeA4h:zGtv9GlUHRbje9ICp0HOlKDI7Xh","tlshash":"39a16dbe3bfed5bf55e488206c5814ce62113fe066729e2775ba45222cf52340f8c9b5","first_seen":"2026-06-23T11:19:31.084799Z","last_seen":"2026-10-13T16:12:52.405741Z","times_seen":12,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/award-casino1.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.523Z","timestamp":1791907856523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/award-casino1.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 74818\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"e656fe54d444a1e573e2816ae3d8ade2\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bKgQtSktRS9aewrXMMoRSrDRNW%2F8yjbRz8y1IFV3c5ZWkQywMxbd2QIkt%2Fm%2FNExPJswFL8Ruzry02bwOg9%2FoAxxUGgZwddqMsywSvGB2Mm9FZm5lZbV0gF%2BZvx6pYrRihCc2X95ycU1rN1u3\"}]}\r\ncf-ray: a49f9e074d300b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74818,"size_decoded":75540,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e656fe54d444a1e573e2816ae3d8ade2","sha1":"9c82cdb9854dbd8cba3073cb72188a15530787c3","sha256":"208ca47b9420321369728014489ae6a1697b8b00ebceb69158bcf4a66047da29","sha512":"c93382dcbbc40683a134846d243906d5399456cf501ecf3b46f494bd6a0c99a40b372b8afee87099e46d20bc481bac569cc86823c317ad38d7d0ca03a7296c00","ssdeep":"1536:WqsyxPK76y85PjVnYQQRqZ4LiITyzj2IFsW1buJcO:mSS7qjVn3QgqLqj2q4","tlshash":"047302b93389c06b2a037c292b3ec77d5f970045b6e1d5c29f199c2a7ca2dad5b21172","first_seen":"2026-07-14T17:30:30.010107Z","last_seen":"2026-10-13T16:12:52.406312Z","times_seen":7,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/aviator2.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.594Z","timestamp":1791907852594,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/aviator2.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 3340\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"5ad8755ccf7f0e0e2c37fc4a6ac2a00e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ELNbrmmTokU%2FQOUNJIpwLSxIJwu5YoWX%2FuwgOhOyuakV3vRUuwk5TdhD0yBgV0Qkc6rgjOG0OMIrAt19Gak33XS4MXAK6E3nqXPJZKEcBbTDejjAgNP8S59NHbT%2FICkqU9el2GyqScGe6ryp\"}]}\r\ncf-ray: a49f9deeba5b0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/22243.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.767Z","timestamp":1791907852767,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/egt-digital/22243.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25022\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"597424197d2080b7528211b5111278c0\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8BUdnzxYYxKbZvMx1V8rzKrADN4cxjHRAFcAuB0w3QU9Oaeal%2BkwDllJRMQJVg7RT8DRRs%2FOwo5kfEd51ITJVonUfnWi1Mj9kAhUxa5eHhvUrGu3KDMKG71D2QvQXhehneQsUNemOjZ19Ndx\"}]}\r\ncf-ray: a49f9defcb2e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/17060.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.432Z","timestamp":1791907856432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/17060.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 485906\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"de904100c5272a09ed4b3760583bc135\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:35 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2Fzakq93lsKHisj39zMO%2FASqQyfrY9ISFh2aywSL4kPYQ6sam565pKD2TQicg%2FGL3ZqM0VYukuSEDTfHWtB3EE71vXlHlDHaD0lvObDh3ZtUaxueaTdBh8oCKJeXKeTDofueCwQ75zI514HY\"}]}\r\ncf-ray: a49f9e06aca30b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485906,"size_decoded":486625,"mime_type":"image/gif","magic":"GIF image data, version 89a, 215 x 145","md5":"de904100c5272a09ed4b3760583bc135","sha1":"26dbcad0e558f318a65c086930d0bb2d7fdf5bf3","sha256":"a25be7bbef24637c3bcfc9f390dedb36d4a715f7abb7306300c7a8dbec29adf6","sha512":"fdf93158985862dd83c70350e86e49f90eef462752050a5a7f7ec2b5ad98243ad521d1aaab6a11a5f3ec54c9069c8f560fa5f4e955048133aeca0c78ab69a71a","ssdeep":"6144:nZuT9iYu3KcWIsOU1Kh4YbgGCeGNvjm+TM5lZtIolLq2LLitJIVTDSav3n/cUypA:k9i9b6oGNqN/rL/2jav3/cZpVz10boS","tlshash":"38a42392ecad124cf7ee7c5c2721596948493ab7fc93fbf01c884396866287f9c14b52","first_seen":"2025-05-06T03:00:53.559216Z","last_seen":"2026-10-13T16:12:52.407757Z","times_seen":23,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":434,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/high-wins/65.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.743Z","timestamp":1791907857743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/high-wins/65.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 284066\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"985ab2f3794831a13887bb5f344a16fc\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SnORBVwNC0RghVw%2BjM%2FqIktM5rhR9yt1x0YjRuzTL4lOyANAtV5JW8tXgd3dwGmOVcUlq9I2uTSVMHGAcbHoj5Qb4d39V9OiyGNFhLGxBBDn%2Fu4b%2FNFEGMZovHOvOQdfRYG%2Byoe1PfMOsqFj\"}]}\r\ncf-ray: a49f9e0eea9a0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":284066,"size_decoded":284790,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 696x1260, components 3","md5":"985ab2f3794831a13887bb5f344a16fc","sha1":"7bad48710f3153aa073354bedc226473512a844e","sha256":"d01d5905c298ec6b4c6b6bfd676fee0623e6d7e26938bf54f5a76224716f4e15","sha512":"b0276c5a10ce0bfdf3ce96c5523f42cffe79b8b601307309bcea08f0668aab2b9b0662ecf9f32f3a4496f6a932ba6fb0b53057fb8b51c4bb01185ab213bd2e8f","ssdeep":"6144:lJlNPrXi5PAyt09A+N0iI+nh5fMp442ghjyUSU:lJfXi5IqYAWI6huCGrF","tlshash":"1a542334b108be461f456adc5e85e8f8ccdaac3a6e4c29df4d43b114267073a539c6ed","first_seen":"2026-04-11T14:16:59.749347Z","last_seen":"2026-10-13T16:12:52.408535Z","times_seen":4,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/mk/app.css","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:55.870Z","timestamp":1791907855870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /mk/app.css HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:55 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bFaAldSq5lx4Kn7p%2Fyg3ogpbE%2F3b%2BR0b00E2z7%2F5peFBg%2FOgXJw3zZqMID8E4GWQpY1gWZKhqxQJym3ft5%2BN%2Fb6PfnOlumRq5ZAfROzfXNRR0l0VUwOEFmFx39IJU9KrOrMIdPQYZh0LwQWJ\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:31:20 GMT\r\netag: W/\"553b64e82a8de58e775623382148dce1\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 980\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e0329860b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":755587,"size_decoded":131951,"mime_type":"text/css","magic":"ASCII text, with very long lines (65432)","md5":"553b64e82a8de58e775623382148dce1","sha1":"a03ca5600b14ab268fd2cbb1bbdfa36e4b32383b","sha256":"614960703ca2c811095f46daff72d4e5307d1290e7fcdc698bf8f0acf1fdc851","sha512":"5d025edc827636ffc032000567a9b021e1b3192fcc03a191fb6f8fb6b5fbfe8222cb9d41ac05e3835edba58863c78b0bcfed64d06f75239a1ba7e3a769380743","ssdeep":"12288:NopUQsG4wDBCaaHGbntS5c4IyXffiv6OiA9l7e6KraodId8SgSmj/9eAvath0AXF:iyXQ6UtGpfoNL8+D6nMA5Xa","tlshash":"5ff40728795c211cb07bd625a4e19fcc422cf213d6071badb653a9398ecb5873b37a5c","first_seen":"2026-10-13T16:02:14.535577Z","last_seen":"2026-10-13T16:12:52.225472Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0.c-hfvt96sq3.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.174Z","timestamp":1791907856174,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0.c-hfvt96sq3.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-1bb5\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7093,"size_decoded":3466,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7087), with no line terminators","md5":"9ea8d274fa4e1a6c4edc61eedb1eeecb","sha1":"1a20999ad5059ced8328f97413bfd82df11fafa3","sha256":"16ad4df1c754713c2a1751f67ce5e885960a067f4523bf42ccfdc1c4c0fbd93c","sha512":"499b9e8cc24bbb73ee22d67dadcd7068babb8fbc522b133a28fec42dc30c5e11507df47ac32d27cfb9baf662018e8fa372e2b8b2415917dbae741268666558c8","ssdeep":"96:JdZWAtjmup/QpLt6vVckhfDZ52GCOdvA/1KA5Fi/QG+447zQOHKsOLqjiokW5AVJ:JdZWAtquSJcvWeDZrvUKWxxvQlsOs/07","tlshash":"e3e1c711b395f9987a6a04d8802f910c373f5e5d860e85397bf86cb53d3a28475a3fac","first_seen":"2026-10-13T16:02:14.479478Z","last_seen":"2026-10-13T16:12:52.40925Z","times_seen":2,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/cc/grand.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.486Z","timestamp":1791907856486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/cc/grand.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 4669\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"75b27eb09fa121127c7b150f2c9caad7\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FthxcZHAeTPQ%2FjauP3pNELKxZ0Tefw2S3LMLvrNltwUFTQYihAinxpiz5u6jI3qLGqZK8Rku93LiP0vli2H0KKA4FYD2s9Cmq7zbKCg4qe6DyMCP0E3WAr8fYAx5Y6KdUDc0UAisF4AdU%2BVq\"}]}\r\ncf-ray: a49f9e070cf80b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4669,"size_decoded":5384,"mime_type":"image/png","magic":"PNG image data, 45 x 43, 8-bit/color RGBA, non-interlaced","md5":"75b27eb09fa121127c7b150f2c9caad7","sha1":"d512bef2b96b66b083695f50a20ac36a49cbb4ed","sha256":"33f695a4cfee04f8641f128416a1bd480f8ad4d8263939d901d9f798df3d38b2","sha512":"7204339e113a553d4390cdd383515f81d3dbae8d65cc7c1ec97654557dfd9143893503aafcc0c8b5ca70f6fedf4ed2ca150e4e6277456886a1d32ab25195c046","ssdeep":"96:4pKi4tFUcfZoTjNAJjcho6lce8MxNfvAqtVDIOWSfk6CbTlH7:4kLtYjOjc/xBvAqtVsOZQTlH7","tlshash":"6ba16d04f8d517f68303827e63332e62f6aac7925262737725730b6db15332c9e58361","first_seen":"2026-04-11T14:16:59.701019Z","last_seen":"2026-10-13T16:12:52.410047Z","times_seen":6,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/28753-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.519Z","timestamp":1791907856519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/28753-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1434471\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"af9172afe3be82ce068d4152f31a3cf0\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:37 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gTiXPCQU2Cg07uf8HxLfVwNCF7woUSgHVBmN12B0d8X%2Bbohus64EwxdZDkb3J7zzzDhB%2FVu0cMPdZ%2Fh3UbRBRK%2BjCsyoY1pLO9BuUhlJ0m7CI1piAZ68jH%2FiWRf1HM3NU5ePVQY9vKcbFb3A\"}]}\r\ncf-ray: a49f9e073d290b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1434471,"size_decoded":1435195,"mime_type":"image/gif","magic":"GIF image data, version 89a, 380 x 400","md5":"839421f8e579ead2f04f733e8d0c712b","sha1":"1dc8140088631cbaea3c461f9a2978ec4caf5ab6","sha256":"2007edea68962b276c03b3683a3028f9d887b287aad01b9a3e8c64b87cfce7ef","sha512":"39cb9c2aa929a7fa37912e0824ec2f155e5630e4f596bfc504a21e01092c2190d8e563a36b12f146f6026adbf17bddaf7eedcc6d02e8590b8819cb6109976302","ssdeep":"24576:keYEirCMzC6ntb6Q0PQJmkxqPaiyGaQyW7KivQe:keWtPteQ0YYkxOaofX","tlshash":"6e253358d3ab34fa7eb2e180398f228581180fdef42ecb53b27a2c4557b34395ad9355","first_seen":"2026-07-14T17:30:30.094925Z","last_seen":"2026-10-13T16:12:52.410634Z","times_seen":5,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":558,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt/30619.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.641Z","timestamp":1791907852641,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/egt/30619.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19626\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"75bcf88c2fe301d942e0dec50978678c\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SA9PlHPPSSdLeSbl24tdGxstbD1er3%2ByKAYLYfNwfCgDYieltLlJPIZYnaDUhqgtADt3DbPx4NFD2mMPK%2FA6vMyLuCktBSPRmFoQEhmBxgkSuxz6kyr4TyAindCk5ApcHEfqsfqufOiUQRJG\"}]}\r\ncf-ray: a49f9deefaac0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/comments?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:55.666Z","timestamp":1791907855666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /comments?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:55 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":213,"size_decoded":753,"mime_type":"text/x-component","magic":"ASCII text","md5":"0dc24fe56a4b8ec02658692bab367ed2","sha1":"9230fa7ccb3cbc9741dab48868b2975efaff529e","sha256":"05b39a35d70a5a5acdfbedbd9bfde4b4a22061349358d9679b6fbc6781a5c413","sha512":"93ba7b1421c77a7a1fde2c6a80acfa23a354f719dc7adffd994ece11df54dafe410596ebf19c0756cac66045856f7ff8fe3462372dae5108a4ce73046d6b2013","ssdeep":"","tlshash":"2ad0a72b420414721cfe10d0803de807564e563b12dc5cf0c0651e3937e327946931e3","first_seen":"2026-10-13T16:02:14.564257Z","last_seen":"2026-10-13T16:12:52.254838Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/22243.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.448Z","timestamp":1791907856448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/egt-digital/22243.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25022\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"597424197d2080b7528211b5111278c0\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yNdUHBNsxqvupdXPK1%2BqJCkiCVPKvUCoTFojMONz71Jz0p43doKjuBwmRZtI3dZR933x7QMsJRy4gtn39oxMBJlWoqZiS2jN7%2Fj%2BrhKA4xfn4T6G7n1f5MnqJj7J1ODnXH1x8XJGikBzQWGM\"}]}\r\ncf-ray: a49f9e06ccbb0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25022,"size_decoded":25741,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"597424197d2080b7528211b5111278c0","sha1":"3238103851b89abd70c80ce946a7d39164d1e26e","sha256":"c58bc5550eb2ee5f6ed65f37de6f25f292f18b91e82c7d0275359a96446bbadc","sha512":"0368000924d4a815c4a1c1844c24719b3afb229821aa422e23f2d19491c17e996de1aaea3c23d41fa55153d1dafa52a5acf89afeb056c05c8d7d3418f582ce7a","ssdeep":"768:OyUEA//l2jcYvSPHT4k6CT2yF8tvlmFfwd1E:OyUr5YaNTT20yvl4Ki","tlshash":"ecb2f29596b37ce488561193f5ee408c3b93634d9ca6f59b09e2a9d373acd0006cf0a3","first_seen":"2026-10-12T18:41:57.054755Z","last_seen":"2026-10-13T16:12:52.411249Z","times_seen":3,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/cc.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.485Z","timestamp":1791907856485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/cc.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 25816\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"40cafe00ee3bce445ea1a8751c0fd444\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=43m%2BZ4nzF3swhs8P7hCqXOtYnX6LKeEa4RnOfT4S8FXJPk%2BKxQPKbg4%2FTfBWl9r%2FETdY81aUN7c6ft3JgVkm6hK1x6lgdjTuSzSmlBHne%2BWV%2BoqyBwpRaub5qafM497snlXhHkFSlHGxLJ3K\"}]}\r\ncf-ray: a49f9e070cf70b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25816,"size_decoded":26540,"mime_type":"image/png","magic":"PNG image data, 300 x 305, 8-bit colormap, non-interlaced","md5":"40cafe00ee3bce445ea1a8751c0fd444","sha1":"308ade28c21fb7277482eb8c957c930269ade9ef","sha256":"e14972ade16208730e97b5d7be2b8c211b13b1f3a296df500e18d0fc637a9039","sha512":"c203ba3237130841100ae10bf0a14a7a6146a2d861806e2d422c02259284f3a2ed67f8d34a64c69c2984e9ad5e2f479f3307a17d548fe9cd79997ab38c8651ad","ssdeep":"768:CHKQk/lsT/Jxy+IuQwGxAZyumCAOMDqB+/CvdM++oZna8:M1xhrQw0AZyumCAOI++/V6Za8","tlshash":"57c2e18d2ccc0b156aab05d77bb86187a952d69238fe156f4a1b11133ccd5fc348b581","first_seen":"2025-11-02T17:43:05.013966Z","last_seen":"2026-10-13T16:12:52.411901Z","times_seen":8,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/banners/23825-5.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.730Z","timestamp":1791907857730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/banners/23825-5.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2132472\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"71a8109771c1f92689cf81fc91e9db26\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:24 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326188\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VKxDQZnT1hu72wgIVYCWVdCc22DP0Dgb5Utm9ak7iHp2N8A%2B59CAAJjsxy4mqKL6%2F8tf6Hfwj3LfCjmw%2B3T5ujoGjjojjIwXGFpP3rM0A%2BsE3RMVUTuG9PCq31QGKVxZ7N%2FmmxUnzg1EFX5G\"}]}\r\ncf-ray: a49f9e0eca830b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2132472,"size_decoded":2133197,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 3840x1280, components 3","md5":"311863b410d8479f31684ce335fb0746","sha1":"8d1a0def1d97c9bf45308817dcf24e65e5e4d3f4","sha256":"10471828a79d87468395e3983775442f8c8c17f433b35253ed2846dddbc84269","sha512":"27a5c71dc3ce84b4210218abf74bbd09275fd8403b470b8c0ece4201558aaf32c4600ce6eb474446eb1071a54f6c0fb8cc1f118d8aa164cb8819c2b682f4a7ab","ssdeep":"24576:VexVMpmRuVn2fMTRVKlCnZtRRBh0xfzXsmu5IXQC4FR:V6WA820KlCnZtRpKfz8msC2","tlshash":"b025331139dd0686cc3b6af9042ecd4c90028bbc2fa97cf7567533a8d262bd658fd598","first_seen":"2026-09-25T15:32:37.883775Z","last_seen":"2026-10-13T16:12:52.412563Z","times_seen":4,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0d_xkp6sugfpq.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.345Z","timestamp":1791907852345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0d_xkp6sugfpq.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-ad76\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/chicken-road.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.610Z","timestamp":1791907852610,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/chicken-road.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 12422\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"15caf4b23228f6f8488b900f3c8a0045\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iM7T9D0xL%2F%2BTKlmtgwE84s3IzOenag6FqIuYMW%2FssiTY%2FIgjQEaW0yx8HKvy%2FYVgX6ilhR45JAeO2ImFmxBR9ZHxlUbaUxJCuyE%2FPuMghthMghAIoMPNiUpBYrzJMGDyX1ICYwZB9J54GwFQ\"}]}\r\ncf-ray: a49f9deeca7a0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/sanal.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.345Z","timestamp":1791907856345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/sanal.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 4834\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"5a8fdc3298d8144bac1a43a7c789e01f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iV%2F5MIGdTBB6Jha5SNNuEv3UV1XLnYiYXsEq5F33iuYx4vXHlPOClw9VR4JfUfBYVbscg4Lter2Bp3hz7QnWxr7%2FP6zjocOEEqXe6H41pEn4n0%2BuEIVVkCr5FQpEtqCMkxKtGYPXLkleEl2Y\"}]}\r\ncf-ray: a49f9e062c020b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4834,"size_decoded":5551,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5a8fdc3298d8144bac1a43a7c789e01f","sha1":"9e4c59eb9f14da5a31b26f0a9d9f46e9196a85bb","sha256":"bf3787e1632711208a017844daed22a5fd34643cbf17201793df60d404b4af67","sha512":"f3416f49c4f2ab023f54ce299886a8a1fa7659fd68097294b8a23858f8f9d07fcbc5c2b4d57b5570beb37cad32b01eb711ce69e7851175fa20a913ca5fe92349","ssdeep":"96:BVPnChDVEw4Hd39WJsuwNbTdmtyHQDCEMSdagk126iJHyAJAIkVkQXO1pFei7Jmn:nua95uoomQDCEJOi5yAJA3VkrpUi7En","tlshash":"50a17d4c889a682d051e87656c38240d239d9cf1f329fc61622bb58f358d4ebe1cf56a","first_seen":"2026-06-23T11:19:31.111131Z","last_seen":"2026-10-13T16:12:52.413145Z","times_seen":9,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/award-slot1.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.839Z","timestamp":1791907852839,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/award-slot1.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 78744\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"08af28f24da47828721ecc1e7fd6c7df\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WIKhJPUOgiOBKX7YerZQWwB%2BvNiVfGnzLvtJNfZV0V%2FEwV86TRyKvEl%2BzhoXYnOTqxiPYKmFler0dCFKYKq34olLxjMyH%2FRIyTy%2BeVe%2B4A24vjj2XSMh0%2FCEkoHXWOkkRSSiod2SRHJVjXUJ\"}]}\r\ncf-ray: a49f9df03b8e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/128aahewwf1we.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.147Z","timestamp":1791907856147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/128aahewwf1we.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-adcb\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44491,"size_decoded":11135,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24458)","md5":"cf874073eb2aecb3adb7c02079ba562b","sha1":"132f56b2fefe447e23f415b744b559997314b6f9","sha256":"db8151a57f0e61d9b7250ac30ae666c7067912a7268943a7fa0fa65732bd5dd7","sha512":"61ecc0a1cd960e31d240bd169e85f7718b055c8cb4ce81bcf5d2e7af9adcdbd9e9a7773aec0f300270255c0c66922b6790d36adf9a4fb2d695bef3128cbf838b","ssdeep":"768:MS6Dia4/coVPkpc/s+zYXExp7ly1V0U4v:MS6DiZ/coVqnY","tlshash":"bb13e7b132d4faa3539341e0e43f2016f2780d7520ad6470a7e89c9b754d88da6fefa5","first_seen":"2026-03-25T05:30:59.093629Z","last_seen":"2026-10-13T20:23:23.810334Z","times_seen":2434,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/bahis.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.341Z","timestamp":1791907856341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/bahis.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 6274\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"3c8ea9e6ddc3d0f1cb1e0469ac2227ba\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ABIQvguPju%2FvrictPwU1ak4rXCmfuqFdtrwjh1KdjQKo4Uhg97anq6zaKlHPrhG7DfAPn6fbe4Urx9f7kj7eKVPHBFEhp22kqVLIc5sQG2rTgV8Q4xsqhirr7eMzI%2FYvlPsJN4D8SMlxa8Hy\"}]}\r\ncf-ray: a49f9e061bfa0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6274,"size_decoded":6989,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3c8ea9e6ddc3d0f1cb1e0469ac2227ba","sha1":"b23562aaee98eb4b9bb5e9ab4180867734884f7d","sha256":"6e41b1c8654ac8696b5359a817d721d03b539d7306e88ab009b0d8135d07b06c","sha512":"8486baca09bdbbf18ff163eda0f7f6875b644a2464131df1e4d1c41cd3eeca96c957be86af4a5a1a5cb9aaaab407ec701c3422fda5633f1f5f4ea2661c2f9469","ssdeep":"192:foGvvO/kc7T7q+TxTiUYZBkFxRW+ikdvr5r:fRvudTLUilZdT9","tlshash":"add1ae5d8825b4fdbec8207e877448bc336e55f685e26e3f2154d65043d12e2cd44d0c","first_seen":"2026-06-23T11:19:31.065854Z","last_seen":"2026-10-13T16:12:52.413688Z","times_seen":9,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/vip-bl.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.470Z","timestamp":1791907856470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/vip-bl.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 39015\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"d76b689c770d99d13023b76c4dce0662\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326186\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6LexIcxLbeFOk0HFtzEg7Uj5MBZKTacAU%2BeMw8piTePXNvD4oZCIXuHGxQ1xjBHLWpKxcDsvqrACjOdcrz27UZ%2B0yGSvXmvwHoZJlv2ewuW7q6Eyy3w9Gu2Sxolz5ooNXC3XKqqhbwDHngrz\"}]}\r\ncf-ray: a49f9e06ecdf0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39015,"size_decoded":39731,"mime_type":"image/png","magic":"PNG image data, 136 x 166, 8-bit/color RGBA, non-interlaced","md5":"d76b689c770d99d13023b76c4dce0662","sha1":"e611069ec327c84a7dae171b4e0522981fe8e949","sha256":"c3eb6f00f9f6d7ff785b0799f0fc5e69e1940d29366eb53d029aed067559c644","sha512":"aa3cf94f7e713b801cac6bc117dbdd24a537dd05d3a3c3c77e079369612e4cd2d97d18867d3e1d262296d5b08a537d962af794e1851c53e33899fe8b9e80b9aa","ssdeep":"768:xpTm5dGYAUVrQgGNaxgvU46iFRE8gUprZ6v/uZQA1e+tv1XBW7YUe:CdLYNWeUCNpqCeiLF","tlshash":"8103f15726bd31cbdc434530bb761c6c02a21f02badba64bb04cdee656719c3964b4ed","first_seen":"2025-11-02T17:43:05.004609Z","last_seen":"2026-10-13T16:12:52.4144Z","times_seen":8,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/vip-bl.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.785Z","timestamp":1791907852785,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/vip-bl.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 39015\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"d76b689c770d99d13023b76c4dce0662\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVWwdKgnwiyfEOxGo2az%2FTM6%2FbUR7hXJVHiZFZX0xXF6JsylDUl6A2SptxKz3PxnyuIR9HiEj9RgtiVK%2FPHFlHtcAomw8ZR17bsUT00eJBvpUbg63olzL2qIlbvi6Bp0el8aLd%2FzNfqvJYTf\"}]}\r\ncf-ray: a49f9defeb4b0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/bl/major.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.472Z","timestamp":1791907856472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/bl/major.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 45591\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"f3f02f42f5fe749c65b2faa2dda66189\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vYnF%2B7gu8cLEvt57fIi8AojOOieT%2FjjDRcCXKT09cbX%2FXeTA7ihVJ5Npo%2F7cdv4Rx49akvJJAabRXDr0UFI5uSR%2FH%2BOpVja%2BbSJ5WaEQo3buooBFgJSqhoXop62DSGpKqhoM5N0rbhM3Ez2R\"}]}\r\ncf-ray: a49f9e06ece30b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45591,"size_decoded":46317,"mime_type":"image/png","magic":"PNG image data, 214 x 219, 8-bit/color RGBA, non-interlaced","md5":"f3f02f42f5fe749c65b2faa2dda66189","sha1":"48fc57735fd385abe6024da356aaa1be86a3285c","sha256":"80da30e200035d4d16975696b2cdd7226b100a463b1d096d300dbb5069dc26ea","sha512":"1b86445d204f506eee2cb40296966537bbb2fae14cb929ac8a0e10ecc959990c0d820b9b9168df1354b3bc5d1d919cf4e4117a77c7205179bd95e2bc0338a133","ssdeep":"768:+93np2zGD9RfxaYTJRImbEL5d56rMjdwgKJy5b9xN9EUAFVcRYO0HTu8UET1w3K0:2yQ9Vx9tR5bE9dgrMj9YylDN90GRYPHk","tlshash":"a323f181790320a778e4c50ce552f9f2758e7bbb28492a6410527ea1bcb6737cdb9933","first_seen":"2026-04-11T14:16:59.703633Z","last_seen":"2026-10-13T16:12:52.415058Z","times_seen":6,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/award-slot1.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.514Z","timestamp":1791907856514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/award-slot1.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 78744\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"08af28f24da47828721ecc1e7fd6c7df\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K9yULHxb9CqCdxhfF6LEwOjeGT5OSK6eheDOyb2ODL6dTXjqOk8NekTF%2FxQJycfF0tWrD9se2NCGrnDVfBF2jnOs0MgK31olc%2BEfDRSeHR%2FMRTWzsaOegLCie%2FKpTwA3OQE3rDwCN%2B1jwlMe\"}]}\r\ncf-ray: a49f9e073d200b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78744,"size_decoded":79466,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"08af28f24da47828721ecc1e7fd6c7df","sha1":"5f4ebee2ba8e840a2deab3ab64fd175417488be4","sha256":"e06c5e99c99a882ded4cbcc03aa57e010a50174fd78a007aba624e31e589bd96","sha512":"84c0e22b373b08f4fe6317cc1ce15acd0c45ca168ff9ab3e59990145bf91f95d41ee9a796a81412eda930e3f939fa6776f321f7f431e25e0c89a249a1cccec84","ssdeep":"1536:4RFLHNbUuzDRhumgOTBAoEufJQRNXDzLdBVXQerX1UYYigK0:4RFL5V9hvgtO2RtDzlQerX1UZ00","tlshash":"b17302b3352691a79fd821cc4cd7fb84a258bb7485e2aae40a45e3f0ed435427cc8739","first_seen":"2026-07-14T22:02:39.943608Z","last_seen":"2026-10-13T16:12:52.415563Z","times_seen":5,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/evoplay/31617-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.553Z","timestamp":1791907852553,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/evoplay/31617-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1910289\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"738b47f9f85c2b5ef9f92cb727c1178f\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:31 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2cF3Q3rnEu9TBXHoASkgixZpp0yTCzJ100XZUSrNKEh2%2FK3QKsMeJcgmiECvuOqNhoOSlcm3zb1TFfoaPXhTL%2BAZeD1OjdAfTI4fKfIIVVXUxeAY75WcpHAtXicQMZfILPAzdhZxCDe%2FlIQ%2F\"}]}\r\ncf-ray: a49f9dee7a190b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/raffle?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.240Z","timestamp":1791907858240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /raffle?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":211,"size_decoded":750,"mime_type":"text/x-component","magic":"ASCII text","md5":"0154f6cb53aac0a01e5cee8c2348f01c","sha1":"1ed160d2fe25253712bbfc18dd46261ce2ecad38","sha256":"607d163036d25b2a17fe940eba690c14056d74f69063cdac0555bf514271d29e","sha512":"70959f39673039e7fa8fbc6831c59ef76583998a7831d9b4e76f99c3322bfff30ae2d3bced70bd9fed307a1e50ea414e9879d7af63f1ef1afb6130b29db610d3","ssdeep":"","tlshash":"f1d0a72b420414b21cfe10d0803de807564e563b12ec5cf0c0641e3937e31794a972e3","first_seen":"2026-10-13T16:02:14.430581Z","last_seen":"2026-10-13T16:12:52.361075Z","times_seen":2,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt/11657.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.264Z","timestamp":1791907858264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/egt/11657.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22718\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"af60e2235b23cb37601921b73fb1125d\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:27 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pgIClPMjyUXj5WV%2FDlyl5ongBy5zt4nW25wfgf2W3w2OC%2F6tOYFnsDZ7qTchvpxs2fzFI2EF2qbYZStPhMVbdwm06twmIkD6d26VXGO%2BfW9CWEyTJHHLgPk66VO9k13zu%2FKFjL35wgBRjpyd\"}]}\r\ncf-ray: a49f9e122d4c0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22718,"size_decoded":23426,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x217, components 3","md5":"af60e2235b23cb37601921b73fb1125d","sha1":"d45720f1f10ae8b28bd02dd061e356a96a4071fe","sha256":"f1756833a6e161ac984e7feb4a603c71011e8a350044ae9a27ce567ca2e11d69","sha512":"4686a131e4c421abc44829d3fc9180d591d7baaaf026c108b9724d32e4e521704030d21d5d6915de7d3c92c9006eb14e793e3500fb53175a208cc7ecbbd36428","ssdeep":"384:MKL9X3o0iWpmO6GEdH/1+Z+phiI/MxDV0vi33bh6+Nlvmn6mopru8KMXE:MKL20/bY1+kKyw50vin96+IkKWE","tlshash":"dfa2d0febc08f1c4dab05678c2944fc347d9b2bc508ab81d6823d3c8ad28ab5744145f","first_seen":"2026-10-13T16:12:52.416141Z","last_seen":"2026-10-13T16:12:52.416141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/17nd.qxyb_u01.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.350Z","timestamp":1791907852350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/17nd.qxyb_u01.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-b0c2\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/blackjack.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.581Z","timestamp":1791907852581,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/blackjack.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 6434\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"ab7fd50cee91b1899c97107135182fb7\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rHBGkx1qQUrKHiz2f1g5pqtYFOl69wQNynHJcJCneLIPhMiyevAUo7bLfsfQT7wmMOvRGJgDBjzNBbFDPD87yQZZPHVbkzA5eedRMZF5Kebip%2FSnaT7Tn%2BWqJDkwrTd7INSwcC44JF60559l\"}]}\r\ncf-ray: a49f9dee9a450b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/ninja_parkour.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.358Z","timestamp":1791907856358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/ninja_parkour.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 19182\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"0abd4a1fff837422ebb03bbd44744f13\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zmTzt8HEpdJHiu1n2ZxJn2rRCXPnBNEDOLJ7ZASKlJ7D7U5P6w%2Fm6iDjW69VaNq1rCS636R8FdRJ4SZLNbB67IVTxCSgicvsUwUhgSfQLydtnPMmtUaHrx9PYx8dBRkos59EVrUPtQ8ZefUv\"}]}\r\ncf-ray: a49f9e063c250b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19182,"size_decoded":19896,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0abd4a1fff837422ebb03bbd44744f13","sha1":"8b793a54455aa990007fd5f85a3014dedcc94c01","sha256":"b0160bb3f68df326d079d0057f8e24b04f87f0c8f0ca8a819c857495786dae64","sha512":"f631aab7b57fcd7d230f1cec21cb90a9806575cafb9f65daa0fcb7cb5be5dd00a1d614a089d3a1fa93b045128d4f55fecd8a63b560b1e3627b19a3421b4dc68b","ssdeep":"384:+1twhhjI5S59pE+2WHeY9WD59T27rM4zafHpiV9bXc4H0ZQUgc3FPZBtnkb:W2T59K+2WHaDL4ze8l0ZQUgikb","tlshash":"5582d035198257382cc1a541eb08b5b7c997ee3244e9c7b6f0499e6013635c2f9a4ded","first_seen":"2026-09-25T15:32:37.875941Z","last_seen":"2026-10-13T16:12:52.418149Z","times_seen":4,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/favicon.ico","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:50.848Z","timestamp":1791907850848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mrking20056.com/\r\nCookie: __js_p_=850,1800,0,0,0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:50 GMT\r\ncontent-length: 13602\r\ncache-control: no-cache\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: __js_p_=850,1800,0,0,0; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__js_p_=850,1800,0,0,0; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13602,"size_decoded":13830,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (9177)","md5":"e1f2c4fc9a0d479e448fcb683b5114f1","sha1":"769afc3ec42ca148db0fdd7771a8ba444b21fb7d","sha256":"d0db68a344d1ad23628a7baec8bdbdf58a763073717bd3cf01ebba3d3478e8ef","sha512":"4cd45ae652b39a3f56c0727b5ef83b28af1939c2a3ff1cc0b89b519664e6d5f11683cd518e4154d92bc408366afbf0519fd8818846395da4c5bb1e0279c43fad","ssdeep":"192:8I96MKMSnA/3V3TE1WK4JrdqdGqT//PHvOwyW30WAibgrh9kXElz7VUZHUgc5a+i:mMKvSTw49dePHvdE66Q0lzBst","tlshash":"0c526b782807752a575338a91ebf134d6cb705635598f404bc4c93d46fa8f0689bbdec","first_seen":"2026-03-25T22:18:30.064372Z","last_seen":"2026-10-13T16:12:52.207146Z","times_seen":1566,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/footer/service.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.406Z","timestamp":1791907852406,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/footer/service.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 14865\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"cff0b0557a379fc3c1df71b14e22a75b\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:24 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rBzRb8Ym60GNl%2B4EDka1k7KWWPXRFg1jQYO4HTBEAkmTZTYQaTtYVK4Yc9QZo9NZsQmspFsHbVeQ47D%2BGil6F1rlz31AwI0kG94%2F5KCnBNwQG4hOL9KShOcASJTrOV9aYM9GjXDdzi5BVNxi\"}]}\r\ncf-ray: a49f9ded89770b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/tombala.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.616Z","timestamp":1791907852616,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/tombala.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 8668\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"e2c089f1b70fc2eae6707e21f7763309\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XgsmK0%2F2o%2FhfheGB%2FaVEs2FxMfM7WkyoxHx0C1gxT6rYkZobyBrICLDceU8R7n%2F3aioCkqDmDgD9aosOIp7Z%2BpdN04j3HyoGJUig3OUGsVbdIknhZBDBpcQe9RGYIPAdRUOIJkf%2BQnk8T0XO\"}]}\r\ncf-ray: a49f9deeda7f0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/footer/youtube.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.404Z","timestamp":1791907852404,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/footer/youtube.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 18633\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"93a89c32a87116285df1025f81b39298\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:24 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ivUwUYd1pnF8Aah8hYjNdpSN%2Fx%2FOqg6h5uFW67UxM9wiB06ZUF4U99QBwsa%2F247ecdPVF0KnnNNolLmyEe2IoaTWqNU3P2%2FQb4Q3dvkDbvgz44NL84VJcZtToZUmy0FlZYRhyWInTOTcwgFZ\"}]}\r\ncf-ray: a49f9ded896e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/destek.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.569Z","timestamp":1791907852569,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/destek.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 5014\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"d1cc13674114ea1225b2d56381c79259\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R7qsr%2BVL1Am2LjRJkQdikSfefMw0orFIql50AP4vLoFxn6Y7CQ83M7H3EuMRlO79GlchC327tPxT2p8ZRVrHWZC2R%2BaaDQtw6qq6HWLDyAGjfN79X7SArzjP9fcmxYEg1cvocgf0qFQ2zQzv\"}]}\r\ncf-ray: a49f9dee8a320b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt/16171.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.702Z","timestamp":1791907852702,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/egt/16171.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31709\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"16322c8e839335fc5f512777c5a97388\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:27 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RilcKo7tNI9GZ%2Bg3Tk6i3xXtwPWyjDHT%2F34YpBVoUC5CcJLndKO2vuxxICW3uQYv2sayXw7sbyWpvfwAr1VZfvkjNPDzvd4OBLx%2BX4f3GHpzOhPtEMQ8J3rvaLZykh9Lt5cP6xgcCIcvFAEn\"}]}\r\ncf-ray: a49f9def6ae10b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/payments/Fast_1.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.280Z","timestamp":1791907856280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/payments/Fast_1.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 8650\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"4db2213b7a04adbfc6afe5036cec8a79\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:46 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=INwe0Mj%2BglyYyBkcbIUfNVjebMOJp%2FGP7adHKkAC6dkVteJz%2Fn%2BfEUpwkQe2QXaDdCGumHDSS3weLyoji76iH6UqBk3GoPZDsUefFIBvqYZ%2FvwOu%2F8JlY%2FtaaNJZPsxGNX7Q0glxSTXZduMj\"}]}\r\ncf-ray: a49f9e05bba00b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8650,"size_decoded":9375,"mime_type":"image/png","magic":"PNG image data, 300 x 82, 8-bit/color RGBA, non-interlaced","md5":"4db2213b7a04adbfc6afe5036cec8a79","sha1":"770dcc7b6b1459d993f52b28708eba63851dfb5d","sha256":"7f8383a17be0efe422984a740b48e14cb2ca0f28d8c2471f1ad5ab30404ea2e7","sha512":"327eff4e3d8fb40c3bc73ea665b8a620a328e2762daf3e76614fa757cefaf1c9a5f31ee633ac4addd847faca54cb25601c76efae061dba2ee1d49f77dc21eb2b","ssdeep":"192:qSqXjXA9qnvxJWnwLPnRMi8xuzb6c28iabe/rSWlHPx/X8rZj0Dyp9:l8XRDWgGi8glrKDSWlhMlID89","tlshash":"2202bfd082496446eb0cdbe8dfac07297999df8b0790c2687634c4ce58de2b52378066","first_seen":"2024-01-08T17:23:44Z","last_seen":"2026-10-13T16:12:52.419376Z","times_seen":29,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/site/de-bossoran.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.316Z","timestamp":1791907856316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/site/de-bossoran.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1049885\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"92aac415c3364470de2f73987876beb5\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:53 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gp4iS%2FOgp5MON1Zj%2F0vas2FGtV7aBauLqCz%2B%2B4pCoDHaS6%2FPTs7C2FxxUqdJTG6gyZmYbCLwsbXDBtvKYNQ4cSHgSsP351xReCcEJbqMOC47nWhtU3s5Z8rm63izJ%2BwFDqrsclhb1T0%2Bxbs1\"}]}\r\ncf-ray: a49f9e05fbd00b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1049885,"size_decoded":1050613,"mime_type":"image/gif","magic":"GIF image data, version 89a, 800 x 200","md5":"603aa4ff0b64fcf20fb082036df53cff","sha1":"529fe8761b48f8b1ab008de0e64bc2e92f84b473","sha256":"9b5f17686ddb79669d6dcdfaca8fb2878f5f0ba9c77745f9c261024678a54f60","sha512":"14e55ddc0a66d8e48d85fd74d380fb8bcc5e32daee9a63861494323a0c14c47b1aac5d7d18afb36f6406beaef65019e9ca221ef898ed0b03ca9fb1907d6ed7fa","ssdeep":"24576:CiY4k+X3Oe0zxnyr03q8BOYrhPILG46GjaDWg/:C74NnOHzh93hBhNcGTWg/","tlshash":"cd25237769e58b005bfb7131bce016883a95893c243429ccd2e4afcde4b61b9f1d9672","first_seen":"2026-10-12T18:41:57.035512Z","last_seen":"2026-10-13T16:12:52.419965Z","times_seen":3,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":632,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/14158.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.442Z","timestamp":1791907856442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/14158.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 548489\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"4a7f91291a7601ffc586095b5daed664\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:35 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326514\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4utqW4hZEYwUwFDOOresHnOveWKzppAabxmGP7r9dl9fv0dkNCaTcFeCR1T5An6c8DXixWN88WEXxv%2F1RUgA2i5gIOEO9IcOZQMi4Y4kw5kxb4m8x%2FjxtLLTJol%2FGaJftazTWP%2Fzk6vYWZB1\"}]}\r\ncf-ray: a49f9e06bcaf0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":548489,"size_decoded":549210,"mime_type":"image/gif","magic":"GIF image data, version 89a, 215 x 145","md5":"4a7f91291a7601ffc586095b5daed664","sha1":"8772f8184dd80c83b6bdb3987aefc8da27000c79","sha256":"da87160a9ca731607c244fa3d43488d3ef4bc5e639e01324f960d46510c84f1a","sha512":"c11a431ebddbeba0df61dd2aa96ec02eda13dde41bb72fa9552607f06fb0dc8901762e1d2ec3d88367213eb845b3f54fa727f10db07ecc15c33bbcff108effb7","ssdeep":"12288:jUUaNGO+qopPIF73UnMVCpxwxZ5i9/54tYO+WMpEyCUiqTEcK:8NxHnF73UMVq6i9/54tiWfyKqPK","tlshash":"55c423168de5e5ae731b7edad1cb11bb0df344928c215481a04cb8a774f217fa0ac39e","first_seen":"2025-05-06T03:00:53.633006Z","last_seen":"2026-10-13T16:12:52.420567Z","times_seen":23,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":491,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/slot/provider/egt?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:55.820Z","timestamp":1791907855820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /slot/provider/egt?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:55 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":296,"size_decoded":778,"mime_type":"text/x-component","magic":"ASCII text","md5":"cc105529278681ed92ab6386268cb78f","sha1":"16260ca7931de1e09e0587dce0e123eb57ac7782","sha256":"9af8e6c1b1157c33ab4e35bd7f7f58a4ae3a577f56735faa43270f6e578ac15b","sha512":"b7db86a11d90138c1e7eb718ad148cacd5da8b8ecc45daecf8bbc063e72ecc5b3ee96cff513e3236ec4f0201935e3f1b7425fc38083edb51fbeddf12dbeda310","ssdeep":"","tlshash":"51e08627820415b71cba10c0803ed84ba90e513b12e90cf480a41e3427e317a05432e2","first_seen":"2026-10-13T16:02:14.51031Z","last_seen":"2026-10-13T16:12:52.201366Z","times_seen":2,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/logo.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.382Z","timestamp":1791907856382,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 606896\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"3fbfcebc7112815a45b2f91fa961cc5a\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cnf1%2BP9QgW92sQOXfiTS7pMBJUbp%2B%2FBvbfgL47IiC0crmj1TjbuQGLFWFbFpUa%2BdWX3mUjCIboRcQJu2WTr2NhVQXKODBCdQxCwDa0HN78mk2IzGcNpHbtCvTwMqqgolGNE56wGojkOi4gwG\"}]}\r\ncf-ray: a49f9e065c520b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":606896,"size_decoded":607617,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3fbfcebc7112815a45b2f91fa961cc5a","sha1":"1946d574d22d55ecdd8713f7b69cb0bc81f2df16","sha256":"855e8f1fb31d634cae1b8e4946390fa356ca5c740e2c3ff9bd3bd5b030a4406f","sha512":"51cd800c1b5781f9bc0e569380a17df20e0b16359ef0f44a9f267ff1975e1b94171497ea6ad99f15e0508d8c5adad3d6b466819fc1b1188744685bc23c1059e1","ssdeep":"12288:RN/9ecaH3amWQM5aECSe6PSlZxokYt4DwL4Zi0iNxnuGL2r:X9ecaXa8maye6KDy4DVebHar","tlshash":"bdd42313bed3cbc4c610e90a708d75fa801ca7b81e67f8d7c8355e47b4526446abad2b","first_seen":"2026-07-14T17:30:30.2557Z","last_seen":"2026-10-13T16:12:52.421139Z","times_seen":10,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":455,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/30692.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.415Z","timestamp":1791907856415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/30692.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38938\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"f8e2b6dd4df219e0991bfac286b2c4af\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:37 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VAqS%2FgD2JYRKyBbLB4AepmnJ2teFM%2BgesCbJ3gcEiEbibncXHD8BhUvCuNbAhhD63Y77QexIta492dMmyisbeO3GTAEKeRzwJcNQMHqduNgXsriVNJ7X8ebD8x7UGC2mUqIagnB81FGRe%2BD0\"}]}\r\ncf-ray: a49f9e069c7f0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38938,"size_decoded":39657,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8e2b6dd4df219e0991bfac286b2c4af","sha1":"527bfa8ea47730afab70abb9a8bd28ed2a93e17c","sha256":"7c185d388cfda785ce8cbe0e70da1d6072e3118d5a8444c6c0d6c2f7efcb6ce4","sha512":"a2706728c5683ac7bde3ca34d1117485d2abc2a73a781382fa97e11b63e75eff8cbf31260bd065f2ac5b93e738bb0d9d68ad0d08a91cdfd14ddd534e65f32205","ssdeep":"768:UDX7ciYnZoF31nd7/udyfvj0YUHl61AL/a7JQB8IP85Z7yk:sJIZilQjYcCJ88mk","tlshash":"da03f219f3864980c871b6b8197db86a74101a435c7d792fb4e34f787d0b90dbf9688b","first_seen":"2026-07-14T22:05:39.835324Z","last_seen":"2026-10-13T16:12:52.422526Z","times_seen":3,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/26446.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.698Z","timestamp":1791907852698,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/26446.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36850\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"7490449ab0fb1c973a914650e4de26bc\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:36 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SNtue07%2FAiv7xsgEsus2zPXOxUAf4j78QeKu%2BJcUzgNYXsQLMHip4ZrYpUaBWUZzhmh7suwAWCi8BSQJh0lTcjpyZHm1f1ASg8OxgCjm%2B%2Fh7nzDDTXcvNu2AorYqVvsqX2syzm%2BiKt%2FTvuB1\"}]}\r\ncf-ray: a49f9def5ad80b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0m97bbjp.vgzu.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.143Z","timestamp":1791907856143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0m97bbjp.vgzu.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-199e\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6558,"size_decoded":2740,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3119)","md5":"f98b1049da2dbbdd15077835f8113ee0","sha1":"181cce91546bdc2ab83b6278f5013dbeda5c6044","sha256":"bcf5020ac0266a80668e75fe1d7c08d3c4bf8c9ca4441496334d15653ccfa126","sha512":"c3c62a6f3ed685c9e48cda3a26e3ee1ee7ff90a72cf0fdd37fcc04eadb4e9c377eb4d1e47dbf5d35a03843e8e70379b41149d9c05960c41b1e9f0f4c34acc280","ssdeep":"96:mnQigpuv2J/Hx52j45y5Iie0RES0/0QPf5v2yA7sa6Rbxmqv2P:KQigp5MDhEB/0IMyAZox2P","tlshash":"b4d1d820f285e89b775a00985477a00ef214342a9bb4f87177dc54f21bc05f67d6abe8","first_seen":"2026-03-26T05:53:20.913278Z","last_seen":"2026-10-13T20:23:23.739094Z","times_seen":917,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/bigwin.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.465Z","timestamp":1791907856465,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/bigwin.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 21797\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"9a580766de1384136042b3b959117709\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cOfiGTFD0dmI6v0VZcDhYjBcYlxLYNSgv%2FBOLtQxGBcT%2FwSLnOsYEEN60otmm537CjVSFenAOzVwHsZW9O%2FZoEEEyjhtuNCKjio98%2FmEfpTSnwDOPPVEzsQ%2F9N6gwhd3jjg3ZAKhIpVYXlLx\"}]}\r\ncf-ray: a49f9e06ecda0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21797,"size_decoded":22519,"mime_type":"image/png","magic":"PNG image data, 300 x 281, 8-bit colormap, non-interlaced","md5":"9a580766de1384136042b3b959117709","sha1":"758ae5cc591a5a7b9963f14602559b34fc01135e","sha256":"e0a5dcb52e20e2c1f9b6ed85480bb50766d2af73d7fa0fc5bb9283b51420a9e6","sha512":"4c32f954483998aec420e8766f5ce75ace743fa18ac9661ff8240d1cf3ee01b14ffa2a493d6429f24fcacc034628c6610ae765f0981dc64835a606f158dc72b2","ssdeep":"384:ve6wIsZzd/gEPHpzuMvNJjMKcg6LckSP4c4ghuN/i3ki1JFO/6MLQNE:bwI6zmEvp7vjJV6Lckp/gcK0IqdLQW","tlshash":"03a2e1d599a255b93e20cc23490164b3a500b347e2c1fb8e233bdc1671e24df5eac993","first_seen":"2023-12-01T09:21:02Z","last_seen":"2026-10-13T16:12:52.423624Z","times_seen":18,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/site/de-milyoner.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.566Z","timestamp":1791907852566,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/site/de-milyoner.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2052024\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"043d28658dce852af7439447d182b7f9\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:52 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UcaBXnG39dji9N1VXJGwIQtqSwIovNVPfaUp5J0%2BUxI%2BrtOV2asqTPwshaRFhWRSwJTZu711TCmn%2BpktnPltuCnLAzgv5GWRxS6O7C21YoNYreQTwFpIzCX7StQxcuMJrwoP1YehXq%2BoNoqM\"}]}\r\ncf-ray: a49f9dee8a2f0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/bl/minor.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.788Z","timestamp":1791907852788,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/bl/minor.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 51814\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"325285f779eb9781bbe042045bd9e54d\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rb2Kdh9D8p4PX1GcvZkXE7Rfgexx5Y7VMBuiTDbL4CAFUnLKCs5lSeifzDHdLd9xU1M%2F4DOjT%2FIaPm9d9hlVBhGoyqhaM02S1YRyGSrKO73EK6UlJUrMC43HTEo51oArIRyzHv5kUj4WMQW%2F\"}]}\r\ncf-ray: a49f9defeb520b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/cc/grand.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.797Z","timestamp":1791907852797,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/cc/grand.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 4669\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"75b27eb09fa121127c7b150f2c9caad7\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A56nXTcXfpVzKEFi%2BrjWf3vLJSDRhYjD3xKuJi%2FKGuzti91m38cvSF1ZLspgfunaFnp8eG%2FZlrmZrbNzKYqmv%2BhvD%2BxSjhJaTr4qTqmJfDE0R6mDqZywuLGVYfI2N%2FAzHCVFJEoULZVG%2FTk%2B\"}]}\r\ncf-ray: a49f9deffb620b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/redesign/logo-event.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.703Z","timestamp":1791907857703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/redesign/logo-event.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.kbkrw8839xwdwqe31.com/mk/app.css\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 10270\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"44b844a882649682337405751b294ed7\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 3723\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hT37XMQ6Od%2Fg5pqcwkI01S9q8SmYW74WTqfW4rTL2U7sepQ4EpU0u2AifD4%2FBbgOVO4LKAcqmIs5Jpiom%2BickF5Zfu4INNDWg9WPj%2BmlVW5XeTLW4lgtSA%2B7Hbl9aUfevv%2ByYH2oeICUbijK\"}]}\r\ncf-ray: a49f9e0eaa560b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10270,"size_decoded":10992,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"44b844a882649682337405751b294ed7","sha1":"3187727599152fd678bcc09fd17228f77a7232bc","sha256":"38566c94ecd0d8d65db4eb80baa9c93f92a1a67646210e1b93e1e01b05b3e0cf","sha512":"d4c1d4657dfd32f55071a609af526779ae2f2fff7c84dd34087a997532cf0cb2d9e1e5bfe3aa3f444f98b1709025dbfe353d09ec735e9fe5ba9e16a1c2926c6d","ssdeep":"192:3IEi2REoNOZPFfoa2yBZilDluhZc382xwLBRgtV96LJiGMMjWtGtjpSjgHcsgnzo:riqMoa2yuyhXuuJ5MMqctS+7","tlshash":"d122c0af303f82a1e4cdb55904bca72ab73e30ed542459504721af8c7f1fe45993e409","first_seen":"2026-04-11T14:16:59.741378Z","last_seen":"2026-10-13T16:12:52.424325Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/reevo/33392-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.549Z","timestamp":1791907852549,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/reevo/33392-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1871205\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"d42342b056d047270f036e7de73003a3\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:39 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N35smSR35XzoCXCM8yt5%2B290Y2J2IC%2FKv2WE8yTyiv2Q96br1LDu8KXDj5IEqU5O69pU9cdJ0%2FVb2ncmqWfQFH2TvHx%2FG7kQE0t9lH%2BLnK6JUMQ6CXqIrBKgZgz4AsUaPMqfH7FXLNZbMaX1\"}]}\r\ncf-ray: a49f9dee6a140b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/spinomenal/33468-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.297Z","timestamp":1791907856297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/spinomenal/33468-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 946970\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"610bca2a61c8cdb85e33838c873eb266\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:40 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5juNdWBzgoOY43z%2Ffc%2BGFVU199MvCb4tgFekPA9cuoC3a8GrbUpAE1xbET4jXm1jmtiuscD0i45QT0Mw0RjN1j8uGsUoojsbLP6d4ldFiMVoCTEESfk815rN2kqg891LE2JGQwsFjTbGPLI\"}]}\r\ncf-ray: a49f9e05dbb80b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":946970,"size_decoded":947689,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"610bca2a61c8cdb85e33838c873eb266","sha1":"cd3a09c64d462c2d09cfd663651de26d6968d51a","sha256":"1e5fc96fe74a3b49b6991afbd56ead54bc6bcb085fd3ff87ec9ad2ada5768cdc","sha512":"24cb2d4d96bef250409f07dc82c9be822de07f13abb7d938f86ba65637d3827e300880fc69551acb691ea7ab479af3ab79a0c84d6c6a7e637e2ff23e1e2711af","ssdeep":"12288:yyEkiIIQ2CmFPvmMGuz53AgSwbE1ZVCs2xmrPMisGt2R/x+8KGpW6dsS:LRL+kgjbEgfULBwxtpld7","tlshash":"e015236b5102dc7b3b27a6385c931450f973909c3abe6c756cebc5a4e82996cb6df00c","first_seen":"2026-10-12T18:41:57.266315Z","last_seen":"2026-10-13T16:12:52.424948Z","times_seen":3,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":541,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/canli-bahis.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.344Z","timestamp":1791907856344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/canli-bahis.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2894\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"458216871b9816e3ed42d7fe3708fc31\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J64m2MnwKs3y8mnVf%2Fd8EGkNdOYdFgzFfx81deiX3Vr4oXa5cGk6sTOVwu0s3F%2FeCsj%2Fj0AypCy875DP%2Bd%2FDnY2z%2BnwWLagqgQHWwlEFrLKcbOCA64xRf2iDJbshNV9hu4vMSTwKIHibwqat\"}]}\r\ncf-ray: a49f9e062bff0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2894,"size_decoded":3617,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"458216871b9816e3ed42d7fe3708fc31","sha1":"1fccc3e656a5af1a471e7fa0182b55fed6c74f40","sha256":"71dd9f5c5cb6d1efac2bb87815269c4efa1d9ac76fd556ee951dca7bb51b61f8","sha512":"674f56006e944316ac258403500d2fa1c661c27051bee7018ca7bdf0c903b35b95ef7bfb1e1e385062c192dde34062bf66aa6b2550d3fb33eac42e8e94dad674","ssdeep":"","tlshash":"6d514e1811125c75cdcf227c70d4efe65044e08596650eb46f78e699c01cd5b954d74a","first_seen":"2025-12-30T10:16:59.99243Z","last_seen":"2026-10-13T16:12:52.425477Z","times_seen":11,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0m.f1yt-6hoh2.css","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.114Z","timestamp":1791907852114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0m.f1yt-6hoh2.css HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-deb\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3563,"size_decoded":829,"mime_type":"text/css","magic":"ASCII text, with very long lines (3562)","md5":"a415c6f33b545ab513912fe521466bc7","sha1":"4936a18a3ebf812110cedbc15e5214eede8479d5","sha256":"5a1d7d229ff97e8360b0b805d58fdbf0f0a4e4d868666c7243fe65ddd8d99b19","sha512":"503f6a4d2bbd14f33271dcca84d40f1339669b11e15307d2d7ea80d4cbdc637f7a14e15404e7570a9e78f78c2a5dc022185a5350e3a57b86c170c8aff7890691","ssdeep":"","tlshash":"a871c034852a6408d6eb4d9338ce7d477819942007d26e23885d3eb88eaf93f37d1b24","first_seen":"2026-10-13T16:02:14.639273Z","last_seen":"2026-10-13T16:12:52.372991Z","times_seen":2,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/bigwin.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.780Z","timestamp":1791907852780,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/bigwin.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 21797\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"9a580766de1384136042b3b959117709\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t2cmTIFwyIsz5NClsbUChWPd1uPaXPLJtjGIRovChiEAN5fnqkMRPgXNQbeRdCFXKiGbzrEMPGPEx0KBhXQXwcuseRFaXvAvc%2FwgF6zaX9IJKWrop%2Bl4xW35E0fQvCIXylZnJ6TYPpSeqx%2FB\"}]}\r\ncf-ray: a49f9defdb430b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/madrid.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.783Z","timestamp":1791907852783,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/madrid.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 23090\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"d3fa8311354f496f92d9aa15f7e07fd4\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jPbEnUrtqxKJ9jlanDkQvmQ2LuAeAJRzZrYnjR8DccZb3M2cs2l%2FEm81mZk0eeXNrBqqZhqlhApe9eKzQftE4TTOdvBeS0LfLxQ3u1q6w2VoumTlmCzdVusKe4PWOTWaVIjTNuXCZnXlaTkB\"}]}\r\ncf-ray: a49f9defeb4a0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/25917.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.389Z","timestamp":1791907856389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/25917.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31822\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"69816bbb4069c3168fc405ac50c22725\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:36 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VS2jv%2FIzpGyb%2FSmhbyxvSR5LRQvWQzeaElC8n9nomSnESnQ8IhW%2F8B2lpcBI0jL2did5oCl6ZAnOZhc20Z2ib62cVTxJdTQlP4LPLZh9UUPa%2BpMuno19o399hDtq7uCGh6c791ReN0RudZWy\"}]}\r\ncf-ray: a49f9e067c680b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31822,"size_decoded":32543,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"69816bbb4069c3168fc405ac50c22725","sha1":"e706391606035320f107caac6f56188dae8445f6","sha256":"979fa516faad3bdd2d4ca4b1b36e53c630b4fadb6bf62c7954c6152f6c649ae3","sha512":"f436862f0c7c0b84bddd182c2b63a4e23774ab8160138ebb52b59c2a8df18f59686524ab4a7ad805ce10ca9e5ceed62a0ff1110b91a6119660f418edadde54c9","ssdeep":"768:0jeXTCDTDS8myVwafvIcfRNvD3mZy6To6p6MDbn+1r9vK6R+9yh:1XTCDRmyWaoUdzmJM6lHn+59y6R1","tlshash":"6ae2f13ccd053031e8ad6873129a3926b7cccf96e3413e07465b5ee74935a9c658627f","first_seen":"2026-02-20T16:45:36.922119Z","last_seen":"2026-10-13T16:12:52.426234Z","times_seen":6,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/high-wins/18.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.739Z","timestamp":1791907857739,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/high-wins/18.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 253835\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"13c5d0827ba4d0c8b518785592f595af\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:40 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UTzL817R6RBaANBvM4AeU%2BXKopD1y%2FTUKSiQfmu7L%2Bnb4iU5VLcN%2Fp8hOPGal3PugEyFn6O9JeWfbII9dSLSa%2FYTOouHEPom6TyVKxwWwp47%2Flf7fmr3RQXAQENoCLmv2%2FXH6UEJ6jJk6wOZ\"}]}\r\ncf-ray: a49f9e0eda950b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253835,"size_decoded":254563,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 696x1260, components 3","md5":"13c5d0827ba4d0c8b518785592f595af","sha1":"612dd1c36721e6da9c614cb71164d938d9abc1a4","sha256":"f6489b1c7debd73c99e4f54376caacb4dac0f41bf1b0e7a97cf0d7f098af6e83","sha512":"6e7821d3d7fa3238ede151fe84e652220826f520a7559d1da1c59c54c080ba8fe2acc530df123a48f4b96ebea0c2ba1766ae830726121ea1cd2f4169f7050153","ssdeep":"6144:5+4znqXWrU8STIxqgg7OM+gdhYq6QSUzJmaFYte:QSnqbDsolQq6QNz8KYte","tlshash":"454423a3db53e7e5c4737cb4168abc126931731d2842c98151a7bc1ba731da80ddc6f8","first_seen":"2026-04-11T14:16:59.744366Z","last_seen":"2026-10-13T16:12:52.428212Z","times_seen":4,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/high-wins/2752.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.744Z","timestamp":1791907857744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/high-wins/2752.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 1558173\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"81cf742e16c63bb791e3bf47604b0ed0\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:40 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XW0sN21Z1vrPq%2Fic3bquRML1vSPGzl0MWI5wxkmPLeG1ZncCvfOk1H5qA%2BFeze%2F9YIDm4eXE2%2F%2BYIsPLrSz5IhMjMDfJvrIhibC2rkf%2BXJSedslLWs7wwNvtsr2gAvAddoi5GTn1ptbLaP9o\"}]}\r\ncf-ray: a49f9e0eea9d0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1558173,"size_decoded":1558899,"mime_type":"image/png","magic":"PNG image data, 696 x 1260, 8-bit/color RGB, interlaced","md5":"7da8b90229ad50f543a247e0ffb3c679","sha1":"ed3d38c4e9e7c5066465eee42b832816727df1a7","sha256":"2ff10f3a89ace4c9fcdf2ce99bc6104fd6c9f82732b491c8918f7c2e7eabb2c6","sha512":"1d0a67fe5e33658af8a362dc100833ee19c134c4e00826650166ccb374cb6ff12bc349c22030bfa6ae2ed89d5c40599355af166205a9c5d7bf985ea3473b9ff7","ssdeep":"24576:nDlhEl/rayJZHuiqWS5/+717/k1tEsmHzL9JJ:g+WZOil71ct9St","tlshash":"1c2533366a263500da6d44fb31e74d4b8815c3f39cd4dbada58f60dbef8436140d1aba","first_seen":"2026-09-25T15:32:43.585466Z","last_seen":"2026-10-13T16:12:52.43081Z","times_seen":3,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/12901.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.446Z","timestamp":1791907856446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/12901.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32204\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"6a9ca90f6e81fb0914b2aab270c4cc3c\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:35 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mu2rn5Px4ECAkUA8SjAuo4LJkK%2B%2FZcNNcF7m3T%2FL7jyY1tPXLbCdQQCKfXoddPfe844AvrNZFd2LovIUUrTwaKRgBw5bPuBtDPb51uco64frBvmZ0TmJeehbOpkHv65bqKbXWldT%2FqoIb4Qn\"}]}\r\ncf-ray: a49f9e06ccb70b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32204,"size_decoded":32925,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3","md5":"6a9ca90f6e81fb0914b2aab270c4cc3c","sha1":"781747f4af26940eb6f6d1404f812952b5d4f941","sha256":"cb527061d27e7aa01d625e7c6e5f3159c4d004f2878336abd3d9043e31754e98","sha512":"3c351b2f4ada37170c3dda17c4fc37a0d60c39070bc44b958db8fc882d0c717e00ba3255a88b876b07abfbd893f2d5764fc221d7aba6042fe0dc92ef62d08f99","ssdeep":"768:doE1egpo9+OAjJH61ASFaRsVWis3vlxzeR4W54Mbld:j7pHlJH6vdzKxaRl2old","tlshash":"9ce2e11114441003fc28a9b21f5eab73bffe67679c282d3c7e8571eaa617c462f24b55","first_seen":"2026-10-13T16:02:14.603945Z","last_seen":"2026-10-13T16:12:52.431551Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/press?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.814Z","timestamp":1791907857814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /press?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":210,"size_decoded":749,"mime_type":"text/x-component","magic":"ASCII text","md5":"47f73e4eb8600832ee9a0ff339eb8acf","sha1":"d9e36bd5c01c6a19cc4ead338c38325ab6fae4e2","sha256":"c06fea1853ec7920ba9fa3bc5ba586fade136853a0f7af5cd1386fdd594ed66e","sha512":"40843e58b0bbf3bc26b94d9ed92b5f8d3d50745a7e2f315d50f16f5452f47fda84552cb588833c49e36e3e6b0b8eda27132bc2bb62d1fd487b73eca09c204b62","ssdeep":"","tlshash":"53d0c72b524519761cff10e5803de847564e563b12dc5cf0c0651e3937e717d46971e3","first_seen":"2026-10-13T16:02:14.606254Z","last_seen":"2026-10-13T16:12:52.433077Z","times_seen":2,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/auth/login?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:59.421Z","timestamp":1791907859421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /auth/login?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:59 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232,"size_decoded":754,"mime_type":"text/x-component","magic":"ASCII text","md5":"c2f17c3465ae713d09e0e23aa8b03491","sha1":"4f157d3ebf99cb5f041c62e1b56435c76b40e5e7","sha256":"6aa76a239eff3904bb67d227460f06827fe7547d5de3ec71394ba06d38069626","sha512":"43bc987629070a69de684c7ebf9f4bf1d9739341ecb482a91b840f026a0fe38590b0148041962694fd64cb77f53bd9bd71bc21310b67951f01e0b94149c33764","ssdeep":"","tlshash":"61d05e2b830425b21cfe10d0803ee84ba64e563b12ac5cf0c0742e3927e317946972f7","first_seen":"2026-10-13T16:12:52.434203Z","last_seen":"2026-10-13T16:12:52.434203Z","times_seen":1,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/golden-coin-link/GRAND_SYMBOL.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.805Z","timestamp":1791907852805,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/jackpots/golden-coin-link/GRAND_SYMBOL.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 524799\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"8b7795649b7fd992f21abab3a5ea3859\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p1lfPNxdjm85ak7i9P894%2FiTRkY2x4mtfFo4wgod74DBBqKCMHbITruPiURmXhzqGnEr8Szc8sZi2SXj%2BxpPidzDWJlRn2ULKgpr3Nr6qoIUZjYeeWivjMr%2FDcNXjyK6iIa1cPlkZvCbiNSM\"}]}\r\ncf-ray: a49f9df00b6a0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8af8c83d-8586-42f4-b327-2a7d1434123c.snippet.anjcdn.org/sealassets/520efb1caa6fb6ac6ea295d2f6b05554-mrking05744.com-9cc7cc9f00078e0fe44f617d0aa404752f92c7f8f08f7dcdc65a0c766c4260c425631402fe1586a99528421f1f1ca456-c2VhbC5wbmc%3D?status=valid","fqdn":"8af8c83d-8586-42f4-b327-2a7d1434123c.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"108.157.229.89","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.286Z","timestamp":1791907856286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anjcdn.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 27 Aug 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D0:41:CA:9E:BA:8F:D9:73:22:FD:D9:D8:06:56:23:12:67:2B:DF:BC","sha256":"DC:F4:41:EF:70:C9:93:48:02:9B:91:F0:50:4B:DC:94:B7:31:D5:20:19:1B:3F:B3:3E:4F:D8:BA:5B:33:73:7F"}}},"request":{"raw":"GET /sealassets/520efb1caa6fb6ac6ea295d2f6b05554-mrking05744.com-9cc7cc9f00078e0fe44f617d0aa404752f92c7f8f08f7dcdc65a0c766c4260c425631402fe1586a99528421f1f1ca456-c2VhbC5wbmc%3D?status=valid HTTP/1.1\r\nHost: 8af8c83d-8586-42f4-b327-2a7d1434123c.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 18204\r\ncf-ray: a49f8ed64d2ae98c-FRA\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncache-control: max-age=1200\r\netag: W/\"471c-t8NRZo8/bYWu0yVr5+S8xrXV7Fg\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c76d87fd83a704b78afc1028fc7bcea2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: 6zouXWUjup3u1ClyXhgAv7QCJrK17A9-uYeIMAf0ClSaPNqM79_AiQ==\r\nage: 4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18204,"size_decoded":18741,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"25ab3452e6e4a6bc1d861a81dff22116","sha1":"b7c351668f3f6d85aed3256be7e4bcc6b5d5ec58","sha256":"1e9fd3a32db5d42700823a8fe518dbee9acde90a0de24d5fd6661b89e1f6fce6","sha512":"139e88e2d128682b6a4ccc969d45bb372d00bea7f3524643c663cd9d1eaa27cb70fcfce275caebffa672c43526cce5b9d9666ea983e958e14a6694894756449c","ssdeep":"384:zmVDGhJHKN/Lxc+n+ujbXp4dq8ZuIT1acD2LI9HmSHvQ/k:M+uZMP2s9Hmlc","tlshash":"db82cf8c0b02a721a74d123470db7750cf6bcacbef7940237b5eba5848b27a4c9b54e4","first_seen":"2024-08-19T15:44:52.388828Z","last_seen":"2026-10-13T16:12:52.435928Z","times_seen":386,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/aviajet.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.596Z","timestamp":1791907852596,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/menu-icons/aviajet.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 10576\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"645b1d1abec114a41367a69eba8b38e9\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:55 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjSGp%2BHeeMzl4y84Lokjo3UFMY4p7hUxtxAHKnSpi6ilm%2BlX85kfvrsg7OmDd0%2BGga7PC6xwncV2QUP9S2tPBVzeMmOBP0%2FFt6sHUcXYbrUAVIA0%2B2PxKPOp7U7GhtWNmi0fjPnFauQ%2BQdWL\"}]}\r\ncf-ray: a49f9deeba600b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/logo.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.623Z","timestamp":1791907852623,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 606896\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"3fbfcebc7112815a45b2f91fa961cc5a\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ET%2FfWwC3mLFCWOVy4nOp00a0pN8uPhkmmjO1l9cKzC4egN08C7rUvCgPUnmeD7Pvkcg7CUhgexrQPn3RukOHo5PxRmiUHvBf662e0%2BOfQdwmscrERdh9l1P%2FosBApHIOAnseOtW0H0Xx0jcu\"}]}\r\ncf-ray: a49f9deeea8a0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/canli-casino.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.333Z","timestamp":1791907856333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/canli-casino.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 9984\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"c7aac9f27122021b04c5d9bb4d71f522\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tP%2FYKxdpYp7Z0q%2B2gxUpveHhNpGxNGjfbAu0oDh0ju0NKPxjgX%2BUHclnF%2BthC%2FiBo1jFSfbnlbVRld%2F2Hk3CtfZHWidf7v%2BZPceNbC9WT%2B0%2FL8WlapezkLaPharVw0olR76INWn4Z5ry%2B4CM\"}]}\r\ncf-ray: a49f9e061beb0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9984,"size_decoded":10715,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"c7aac9f27122021b04c5d9bb4d71f522","sha1":"11c120e0123479b15c68bd01375920da0d35d8cd","sha256":"6e155db42643e730103f7c75caf4b9c701ba56c06b8720e0681a802195e36946","sha512":"6a4aeca0ea5ed7adb3467e668320bf29660045d57c98b88c05e66faad2e902902fad6f1df0b766268fb9ae140520c9847f7222048cd508c945f2d2a40e391aed","ssdeep":"192:LWoSA5D5zQU6hUhXn3ml51yP6ahR8ZhYmrvGczBSg35AH1Uf:7SiDuU6hU9n3wvc6aX8ZBVlT5+1Uf","tlshash":"d2229f993a6279ca711950c1d0f76f4365d00c1fb5192683ea147f6aeaf8b89be1c207","first_seen":"2024-10-04T09:11:10Z","last_seen":"2026-10-13T16:12:52.43706Z","times_seen":7,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/api/settings/popups/public","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.800Z","timestamp":1791907857800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /api/settings/popups/public HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://cdn.jsdelivr.net;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;img-src 'self' data: blob: https: http:;font-src 'self' https://fonts.gstatic.com data:;connect-src 'self' wss: ws: https:;frame-src 'self' https:;object-src 'none';upgrade-insecure-requests;base-uri 'self';form-action 'self';frame-ancestors 'self';script-src-attr 'none'\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\netag: W/\"d78-dZ7tIFCgAweMUsGhYphkBLWDWK0\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3448,"size_decoded":2214,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"acdb05c745d829fddb865ae63e860fa4","sha1":"759eed2050a003078c52c1a162986404b58358ad","sha256":"7da6064243a8e5e393f4ecf6976aca05ab59cc059550c6a258a77f5cd0e4f07e","sha512":"8a8770699b9bcbf0d270e96be3b16922622ca80c4dd6c5944ecead6d3566c1415dc09058233e933c2f4b6753b503dc7e558ef23f841d79835a73aac29d4d74cb","ssdeep":"","tlshash":"bb6166d2ea2d55b6ab9133895cc73dad289ef119f1c56c80f28cc97c20c49a64d163d3","first_seen":"2026-10-13T16:02:14.630669Z","last_seen":"2026-10-13T16:12:52.438244Z","times_seen":2,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/spaceman?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:58.795Z","timestamp":1791907858795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /spaceman?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:58 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231,"size_decoded":761,"mime_type":"text/x-component","magic":"ASCII text","md5":"ef7feef331e7d809e4ba55c236bfef6e","sha1":"5e198160ea95d51d5da7df065b3d0adcebfa5d86","sha256":"5918e701c231e89ab93c3fed8a04454efbbfc2cb22d03b4bb2db3768a692f9be","sha512":"d9aff12e8a16c9ce310c3ab434ac81bef5ce198e2cc5889763c6de824451c61edfcd5e1feb35dddc37e4abd51ff88d98677eefba78e967ae75040c69eb884614","ssdeep":"","tlshash":"b2d05e2b920514b61cbe10d0c03de84b6a4e553b22d95cf080a51e3927a317546931a2","first_seen":"2026-10-13T16:02:14.422035Z","last_seen":"2026-10-13T16:12:52.439305Z","times_seen":2,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/footer/instagram.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.401Z","timestamp":1791907852401,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/footer/instagram.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 27226\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"9d588e7e3781e7eb07ab32f10869302d\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:24 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lTmksUy5S%2BOb11WrhkuRe93HlbHgOJ6n%2BHzBAA89N4wPPF%2BQ8rG%2BOLkWgBPRc9Iq3qnUW9dsl2xySfkvxDv%2FZneQ9olISwm3sIVaN%2BFwho%2FWoLu9tt14M%2FeIyAs5MAbayu5KBGYxbkeCCW9P\"}]}\r\ncf-ray: a49f9ded796a0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/gamecheck-seal.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.542Z","timestamp":1791907852542,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/gamecheck-seal.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 25196\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"c506e4eb149acb08f2ee53d7d39bb8f4\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w6GHvUQwhsnBgRfQuQXWIUu8wVvIDbR5%2FYCAvkSFrduuq6q1dKH7yCDM2I%2Bdk%2BpdhSemMMbFaBsosg21yH6V6I3cXvAWhH4xeRRMvFfelIi6tlBHaPqRbYFJPr9Ao7oLeoqLGqXo3YTR5GWO\"}]}\r\ncf-ray: a49f9dee5a090b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/34148.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.632Z","timestamp":1791907852632,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/34148.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 562994\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"24818d14438b346d681f326ec51f82f7\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:38 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7S8poJlp%2BXpQeQi9wRZM0IQmlL3PI1fWQ6hnuu8hzw9zhOEmU0QOgO4KrXr9Dwpc5K5uS7XJDlX0HHE0mmRDHD5Gvz7aTm%2BdAckqgqh3woSDiUHsl2%2FjmFwbdyOeLLdFgTPJ4bUlZvYydyPR\"}]}\r\ncf-ray: a49f9deeea9f0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/jackpots/cc/mini.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.490Z","timestamp":1791907856490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/jackpots/cc/mini.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 4703\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"b94ec739946ef426343fe2e004cc0c74\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:41 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KJebjvqZvSb8Oym8oyI1tDEPtn0NFMIOS5cxYfwfa0SwYtZXB5z1MZjIM6HaYxeJudyDdB3%2FWPvUMG%2BdIP6ujRJXybbFxKdmYtoU3n82Wq7iXi6Y9nhBdeHDJYyA8pzXapx0ahhmzMAgvrg%2B\"}]}\r\ncf-ray: a49f9e070cfd0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4703,"size_decoded":5420,"mime_type":"image/png","magic":"PNG image data, 45 x 43, 8-bit/color RGBA, non-interlaced","md5":"b94ec739946ef426343fe2e004cc0c74","sha1":"61b7cc587791d17050a3c8f260de0b5cf387e0f6","sha256":"4e6b56bb7b026f4c6f9042030212d2c9856f2af79a6e5fe731f89afbd8f99552","sha512":"be1b6d51fcb08324125e6f8761ad3e1e442dd98a14cffed25a8fcac7abc2d53bed7243a1d85b7b9bafcfe6962c1ed5403d6219c7c9e58b32ef03147bb1606ddb","ssdeep":"96:+rRfvHk6/SE6YYygdRint/Q4ByC3tdBP8eg7q9k+/VDpkjbxvcZxw1I2Rk5UY5A1:cpk6T6YYZdQntJByMdgRxPxUYI2Z1","tlshash":"2ba18d4b4fafd2b797611b64431a60327ada40e0c7868e18501f87c626dfb29a0b1e4e","first_seen":"2026-04-11T14:16:59.673935Z","last_seen":"2026-10-13T16:12:52.440388Z","times_seen":6,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/cf-fonts/s/titillium-web/5.2.8/latin-ext/600/normal.woff2","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:57.686Z","timestamp":1791907857686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /cf-fonts/s/titillium-web/5.2.8/latin-ext/600/normal.woff2 HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.kbkrw8839xwdwqe31.com/mk/titillium.css\r\nOrigin: https://mrking20056.com\r\nSec-GPC: 1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 6776\r\netag: \"087727664a1037572d33a1b1e8482b3a\"\r\nlast-modified: Fri, 09 Oct 2026 21:31:21 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 6011\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vKlWZtLjbDcTf%2BclE7vI7WLU6z%2B3ak%2FSQohP35MD4ONCb4zwERXXAGmWDYal6%2BaVzbue918Y9FdpaT8V7Wga5sM9M5jG5KJvH7j%2FtLYrlW70YITL3ciNex7%2FiW60mpSTMiCFF%2BUPSWQ7XuJ8\"}]}\r\ncf-ray: a49f9e0e8a340b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6776,"size_decoded":7546,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 6776, version 1.0","md5":"087727664a1037572d33a1b1e8482b3a","sha1":"62d4eb62246e36b28b922e21708275c0c40fb847","sha256":"99cebfd10359dddb7912c59b84fcd1fcef078235e36530aae3e267046943eb17","sha512":"faa3eb105ea363225a928aee6ff35695649786e164401b3d1211f319c0df187f38fb17ef85863d91ff8c2a4e4b2be29319fbe5c831fa38f9246dabee69920192","ssdeep":"96:yWv57m8fgh5ZqRioluIB+fa1q943qXnyxLALyvgJDb455nDh7+Wwt4mGUB7J83Fn:yS57Dgh9olu0ksYyxLALyvgdMnwuTuOV","tlshash":"55e19e53f316cd16f2d5822ea34d10b49d5bd9ecbb60d139b5d8c080a738c6794ba5b3","first_seen":"2025-06-19T14:19:51.862798Z","last_seen":"2026-10-13T16:12:52.441086Z","times_seen":598,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/egt-digital/23107.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.701Z","timestamp":1791907852701,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/egt-digital/23107.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45460\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"bc6be31c1d8e0e6fdffa8510224244d6\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2FWTZe1os7Ei0xnT7yiQ%2FUwW8FeowvTNOzOXcghvYWJ%2F2cPdnIwpnBQSAKq2z9hqlcyeXAX%2F4wTSelZU1dhg1mMR7pLDhuNIMEDe4UPQEmq6cCQfNqszs%2BvKh89w%2BCZ73OWiDWHHJzwGgITo\"}]}\r\ncf-ray: a49f9def5adf0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/payments/coinpay_coinpay.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.278Z","timestamp":1791907856278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/payments/coinpay_coinpay.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 27354\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"00abdaf6bc12a1751e8b7106c60a0b3e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:46 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=doswvXd3j0GlkPPscB9EsDnR6QjfJHhvHu%2FJqxBXwLemfiAc6Y6yXlRMhRDmDVlc2L7sxNf69necR0cdUeLIqRSPQfeyHFn%2Fdg0ZwzHb3ReofCeQBTZvA9MjaLusbOwE4buKmK47VJ3%2B036L\"}]}\r\ncf-ray: a49f9e05bb9e0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27354,"size_decoded":28072,"mime_type":"image/png","magic":"PNG image data, 718 x 150, 8-bit/color RGBA, non-interlaced","md5":"00abdaf6bc12a1751e8b7106c60a0b3e","sha1":"0947a67f5f96a07d45d4de3b57c9149c37f95913","sha256":"4aa236ae4861e8f2f5eb58bb9340517ab738aac335464901ee8c738f21b5f563","sha512":"e6f8f2a5026972af8f3002f597ea5812066fe7fa753d0b9d217139e6b898180fc259530bad5451e9bd1cd558699828af8ebb038b4c426c5150fa0fd0d08db74a","ssdeep":"768:varyfU93zMMichfQrz56JOLfgGxSNh1el0TkQGn:varzzMMvYrzIJO70cAy","tlshash":"7dc2e1478adc0492935912b9110390811eb7bc9a23e1df2370a37c965b876b25ffff12","first_seen":"2025-11-28T07:55:19.723014Z","last_seen":"2026-10-13T16:12:52.442319Z","times_seen":13,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/menu-icons/chicken-road.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.367Z","timestamp":1791907856367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/menu-icons/chicken-road.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 12422\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"15caf4b23228f6f8488b900f3c8a0045\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LjFSf3AgzJD6KHKN2G3WqaO1Kz6grh0yk%2BzMm3%2FE0PJDxYRmCypB%2FRpuyoV35UH20CUtSXyW46u8lwiN%2F%2BfNvJyX%2Fc%2FmX%2FCp%2BAcBgMjtXxtzmjLJ9T6SfjvgIi2eKN%2FNHyC9LBtkLEr2Whpm\"}]}\r\ncf-ray: a49f9e064c3c0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12422,"size_decoded":13154,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15caf4b23228f6f8488b900f3c8a0045","sha1":"21fa5ad79fc6be426fd7dd6639095ae602607e7e","sha256":"790698eeab203a13fb7a756db170162eab2e31965f00d7b1ead2a90d0117b7e2","sha512":"1358c85335cc1277245df01009355434a0ffdb0e270f3f851b0f0e8a93d290ab5a7bbe94c3f9b21f6b54dcbf0178411eddec2f8aa4cc60b7c8f35b257015df10","ssdeep":"192:DfUeFA1+MRde2KIc6nKqUO3zfz25P5MIrxsprKHDEUk6vU0ylBNuC/ub:zDSbRclq1DfC5P5EprKHwUk/0SN/m","tlshash":"6a42c0246a6780d8264f2ec682f8bf9552c5c4297f46fdb38c4bfd536992e7c028d055","first_seen":"2025-12-30T10:16:59.966356Z","last_seen":"2026-10-13T16:12:52.443393Z","times_seen":11,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.upaflex.online/team_logos/55.png","fqdn":"api.upaflex.online","domain":"upaflex.online","tld":"online"},"ip":{"addr":"172.67.176.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.507Z","timestamp":1791907856507,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upaflex.online","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:25:58 GMT","end":"Wed, 30 Dec 2026 16:25:57 GMT"},"fingerprint":{"sha1":"E7:05:1F:1E:A4:FD:0B:B5:FC:09:40:CD:E0:55:E1:28:D6:5B:78:E5","sha256":"C3:D1:9F:1C:81:C8:C0:4A:93:F0:62:A5:B4:C1:36:3A:40:46:75:D2:82:B4:D7:29:40:40:38:94:09:F2:93:0D"}}},"request":{"raw":"GET /team_logos/55.png HTTP/1.1\r\nHost: api.upaflex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yOHbk8nvoN2l3MxcuZr%2BQ7c6Q%2B4KjJEEc%2BtRy%2FJNyVA3IhU5svdKHdFCySSoFDjv0eA2tcp37h8VxXBNgn4v1d2PGGoLZGYXH6OvFFzbn0cjnw28yrvD7hKh63SYm0NIu6j4pfU%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a49f9e072c60b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0kk690al~dpdb.css","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.115Z","timestamp":1791907852115,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0kk690al~dpdb.css HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-21b15\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":138005,"size_decoded":26710,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e7ba62bc8da5243db39ef6c76fab4074","sha1":"fed3b2b1a6682dbe89fc5a5a5c1dd308c695715e","sha256":"c12bc1d7fd2aaced32bc20b94343d79f92e58e696c0820502bc2a8be04c77e09","sha512":"db8e277568345246d09e367d9127c5f63bff9f673394c4a91c3200c74ddd9aceb9b8d48e272ea41e55f993657bd7b1ae0ac53277567b6c390886f65e3a4a84e8","ssdeep":"3072:anFVzZMjCz703OQWJSyLD0R9azxwGZ3mIOK+tYcKhRjZm5Rgohg7g76zoyE1peKA:anFVzZMjCz703OQWJSyLD0R9azxwGZ3B","tlshash":"d4d38491b234e53fbc3370fad3dce88d761ab091de228ae8b950212217d77f61d56a14","first_seen":"2026-10-13T16:02:14.62856Z","last_seen":"2026-10-13T16:12:52.330774Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/reevo/33917-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.546Z","timestamp":1791907852546,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/reevo/33917-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1758572\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"d4fadbbcb2486b0d53a8ba64337ed10d\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:39 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nlZkQCVo0ABzgVLZMpOoFltQnjxHzyHS0myRNeSkdSDTH1qSvLN%2BbxWsPrrMPLecoQf5KgHSxEG75nbFGWrK5fdpuABHjC8LR%2FKSLuPUIzoOkPAB%2Fp3%2Fe2fFsGf9Aqdir9mgLiMFyexLXpEu\"}]}\r\ncf-ray: a49f9dee6a110b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0gmoggs02qpg6.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.157Z","timestamp":1791907856157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0gmoggs02qpg6.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-a0c8\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41160,"size_decoded":14550,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31930)","md5":"c2fdac886fd59cba48e77f64c43df871","sha1":"8dd6f0dd90da40c6e89272442ecf9a6e5026168d","sha256":"9dcf5ad360b1c18a7b80b4910e585ede52a539f6fc8bc72e5ded357ee9a7910a","sha512":"67841a933f40dfa9bdbf72f15a3ae32551634a2e6740e97aff3401f6bfdcf2824490cb4b2cec4a1a5cd4a458c6ecae086119f30db328b2e8b7a0c70b88427f6b","ssdeep":"768:RIzhHJNPkOsCH71yZ8ATNTOYlTvLmHXG3v5aCEJG5LqKaBtl5N269Bx3jpIYYsHF:RIzhHJNPkOsMI9Tthp3v5aCE/v5RzHeU","tlshash":"7103b561a28672360e4343d9542903096fbe78b4678c541fb76c5ed72d22c8a4bbdff2","first_seen":"2026-08-14T22:59:23.870456Z","last_seen":"2026-10-13T16:12:52.343508Z","times_seen":19,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/award-casino3.png","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.527Z","timestamp":1791907856527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /images/award-casino3.png HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 133178\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"5a1fa36f50b30c5355a1cb66b2a34cc0\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:54 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CcOgPNyTVgPs1IuDSNBe6UpoRAAswneTeBWhzW6Nn44HQac97PPzX8MdjdDfaDWoImXg1%2FUilSSdIU87ePHcUhYDJdvbzFO116insLa9jNnIL1Cz%2FUF8TVMIKYAFVq9%2BUmwvy5C8zm%2BkAvTz\"}]}\r\ncf-ray: a49f9e074d340b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133178,"size_decoded":133899,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5a1fa36f50b30c5355a1cb66b2a34cc0","sha1":"de2b7b6f2c858cd3d1d2117852b4dc9262f2419f","sha256":"5ffde6ec8944dc68302d0fea761b6efae4e8c6cf5ec3b144a12b6a0d69666f95","sha512":"54650736c616f4743ca3e8d1d02829392c1fd98beb7f282f0a14ed4be2bb1a83836cc108706b07786773bd651e0dfef15bd682179d44bf8a8fef82c4055fc502","ssdeep":"3072:sv+AofL9o+1u5M2f6MyBGr9BZbZ7QxuE7zkQNxEMYCiXbrO:svrmv1QGGrrhNQMokMKMYCiXbrO","tlshash":"dad3121ce59fe4003d614f9c4ba99540e3ec2c551eba48eafef685d89a32b3414c6dec","first_seen":"2026-07-14T17:30:30.257882Z","last_seen":"2026-10-13T16:12:52.458117Z","times_seen":7,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":279,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/whatsapp.svg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.400Z","timestamp":1791907852400,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/whatsapp.svg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XgMTYxKz6H0zdGHwlbsD2qh%2Bn1d7G6bKAZU5x%2BC1MdPMMyY8RLoHQsC8eeBPMwvU%2F0JIASS5FZXacIsfdHNiTaEebmcrH67%2FaMe4zolSVyjN46CxdVZGXFnJ5fA5JlM5FNpbmAJyifuQo%2Faa\"}]}\r\nlast-modified: Fri, 09 Oct 2026 21:28:56 GMT\r\netag: W/\"113c371f0a63913cb24beb2b9bf2bdbc\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49f9ded79690b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/4370.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.703Z","timestamp":1791907852703,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/4370.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 53084\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"c3c9377f9b5e16b74fd70a0314a88fd3\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:38 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NkoKNkgtDVioDHubJob703j1HCdVGyfmeAchQBwTJIugeu8IUwZPu2ONVyqHBhx43fnn7yMSdyojQaZWct2HjLcVJ38S0XQNwJLhaaR2ols26h%2BndxtbFf%2BhyT8pUeg6Y0JrgTA%2Bvcxa6WXD\"}]}\r\ncf-ray: a49f9def6ae20b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/reevo/31251-background.gif","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.312Z","timestamp":1791907856312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/reevo/31251-background.gif HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1968394\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"ef606ed64ffc6abb0e43830eb24af13e\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:39 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DmW4f8uX85hlCvaiyGVpS%2BuO4ZkxVaIw5c2obZ7q2zUghKKo6YjF4c9zYwrvitQFRe15sZm9nGdB7pM8MLTFKlGBc%2BLljSyBjK4faeysf5sBg7y%2FRoBGf1coSn4hi7Mk9NMN2jpDJuPYtyzz\"}]}\r\ncf-ray: a49f9e05ebca0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1968394,"size_decoded":1969114,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"fae8622ae9bc8bbec19e0be4a358388a","sha1":"57569c71449eb8f39c3f91a7ccdd059c2438c7b8","sha256":"8d0e888102cef64e530608d42158d9d404523560c47503fed9184ffebad4bd8d","sha512":"4bec4b9596798c7b7b8fd70ffe3ad83ecf82ad5066bd2bbb99c23e6435a82af0150edb72d16ac0e376a171b9f9c528059d2eacec5f8bab225ce4016d245c7d21","ssdeep":"24576:DA5zbldAeUAU1R28YykXOTl2ImuF0itGMpV1RQHPDbyYD:GbldAeslkqJm2G4FAT","tlshash":"a62533639165d02db37ae22babef2444b775c49c3ba06607043d3363aa4978771b4cf9","first_seen":"2026-10-12T18:41:57.276069Z","last_seen":"2026-10-13T16:12:52.459331Z","times_seen":3,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":798,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/12901.jpg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.765Z","timestamp":1791907852765,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/games/pragmatic-play/12901.jpg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32204\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"6a9ca90f6e81fb0914b2aab270c4cc3c\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:35 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jtl7h6g8szFjy2kv%2FbfkUpxqz%2F3O3YBYjKVpE9iT7J1mbEdaQ0KBzhVYAEP5UglwtgyiIBcEViuAo%2BnQ12CnYYWgTkZRzHOpV3718bWl0RJneUM%2FFXBn%2F89CUgBVWgnGSh2mJGH7UIIt50AC\"}]}\r\ncf-ray: a49f9defcb2d0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/_next/static/chunks/0i.l9589uvx0j.js","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.151Z","timestamp":1791907856151,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /_next/static/chunks/0i.l9589uvx0j.js HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Oct 2026 14:59:18 GMT\r\netag: W/\"6ace4746-d5eb\"\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54763,"size_decoded":15452,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54761), with no line terminators","md5":"8c982aaf9931256dfe2108595a389574","sha1":"4d38e8269a118fa3dd23e80a150d832c889be978","sha256":"32e9576b2b87cbc03075cbfde10797120b73b5c6e486723cd9e58a66d99c585d","sha512":"396749247a899dd4f29ef98a6d0bd622b3fa08d5909f76535c778a3befb72b9a325ad137f45f224ea59f9b02acfea1850d416bd24a27d89f321acf9f2e029756","ssdeep":"768:ChBJUWstOo8LEImqD9nhKFuvCDFZMQqi/mV:ChHJNEIZNieV","tlshash":"6433d9b53295faa302db91d9c0370012f2780d71309d64b4b394d8af799dd8a92f6f6a","first_seen":"2026-03-25T05:30:59.063144Z","last_seen":"2026-10-13T20:38:36.039302Z","times_seen":5170,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/images/tr.svg","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:52.844Z","timestamp":1791907852844,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /images/tr.svg HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T20:42:37.727127Z","times_seen":19090553,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrking20056.com/bossoran?_rsc=1r34m","fqdn":"mrking20056.com","domain":"mrking20056.com","tld":"com"},"ip":{"addr":"193.233.15.184","port":443,"asn":42745,"as":"Safe Value Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:55.669Z","timestamp":1791907855669,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrking20056.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Oct 2026 13:27:22 GMT","end":"Mon, 11 Jan 2027 13:27:21 GMT"},"fingerprint":{"sha1":"FB:22:95:23:2E:8D:5C:9D:24:2C:5F:34:2C:EC:35:1D:BA:58:1D:2C","sha256":"7D:3E:72:1F:65:04:03:69:0B:CD:F5:D6:15:8C:33:18:60:5A:5E:3E:BC:DB:54:92:D1:74:5E:4C:8F:CA:99:85"}}},"request":{"raw":"GET /bossoran?_rsc=1r34m HTTP/1.1\r\nHost: mrking20056.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: __js_p_=850,1800,0,0,0; __jhash_=954; __jua_=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; __hash_=d575a691012f038327b154b7f44b3001; __lhash_=7604399a5ca116fdf316a7301488d11d\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__js_p_","value":"850,1800,0,0,0"},{"name":"__jhash_","value":"954"},{"name":"__jua_","value":"Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"__hash_","value":"d575a691012f038327b154b7f44b3001"},{"name":"__lhash_","value":"7604399a5ca116fdf316a7301488d11d"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 193.233.15.184\r\ndate: Tue, 13 Oct 2026 16:10:55 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":213,"size_decoded":752,"mime_type":"text/x-component","magic":"ASCII text","md5":"b20ed0a50904d23561c7a764ad7c4a7c","sha1":"291de9b5005994a0ca7c5adbcaca8d3a3aff0883","sha256":"fb14e5af4d4ddace1f844daa7ba87a0e1ff36f3d528bb1e9ad8b2d52699fe664","sha512":"743542051de3c2d36e0e765e398622b9e5782dba57c0e6e8048a77e58b6b0550cdf7aa98523d37327a69c571f2171d37ec6e9de7d40d46ed1965bcc3e9bbb4f3","ssdeep":"","tlshash":"ced05e2a520414721caa10d0803de807564a5a3b12d85cf0c0641e2937a727946931f2","first_seen":"2026-10-13T16:02:14.673998Z","last_seen":"2026-10-13T16:12:52.388887Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"mrking20056.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kbkrw8839xwdwqe31.com/media/games/pragmatic-play/24795.webp","fqdn":"cdn.kbkrw8839xwdwqe31.com","domain":"kbkrw8839xwdwqe31.com","tld":"com"},"ip":{"addr":"104.21.28.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrking20056.com/","date":"2026-10-13T16:10:56.462Z","timestamp":1791907856462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eaa20275.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Oct 2026 20:25:58 GMT","end":"Thu, 07 Jan 2027 21:25:53 GMT"},"fingerprint":{"sha1":"10:2A:63:61:6D:94:38:16:46:7D:8A:42:08:80:73:5A:DC:7D:6F:BF","sha256":"91:92:6A:40:63:41:39:F4:E4:72:D6:0F:B3:34:98:96:16:FC:73:1C:54:12:6D:74:6F:7D:4A:11:AA:BE:45:56"}}},"request":{"raw":"GET /media/games/pragmatic-play/24795.webp HTTP/1.1\r\nHost: cdn.kbkrw8839xwdwqe31.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mrking20056.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 16:10:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37330\r\ncache-control: public, max-age=2592000, stale-while-revalidate=86400\r\netag: \"6a3aa9aace7aa6186f4fce2d75f89023\"\r\nlast-modified: Fri, 09 Oct 2026 21:28:36 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 326187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pqy44d61%2Fi8gyHgPcM%2FRRm5THwoTeWVjoZdyvvQ3XP7ngmWuNOierIB67XXT7%2FJc3AzVYv8wQO5oCMM8%2BhiJErEIUZ6HmVtje2Gtqr%2Bqa4c1THchMzmvmzcvEt256wiFLlrBur2aAY8X0b4h\"}]}\r\ncf-ray: a49f9e06dcd40b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37330,"size_decoded":38053,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6a3aa9aace7aa6186f4fce2d75f89023","sha1":"973c1336008e6a4aefae60cdefd37d89c40227a1","sha256":"42a56bb82d0d55f5d260c821a82eb63897ce28b16e8a918037ae25b7611b8b8b","sha512":"4f00a306f8ca74f54238ff071488609a1d40cabf1e268582d7fb28225dc7a398d975af668f90de78d301febfa237875f4ea5b413d2f5758657ce5cdb55ad422a","ssdeep":"768:PTiHSLvyR+UURnAfpeWUga3Z0dFXqZ1gJMGGu:GUykrn6peWU4maKZu","tlshash":"97f2e19d0ff72775ecae5afa15003b27e6982c19b41f821fa58445c58b1b3eca62c235","first_seen":"2026-02-20T16:45:36.856427Z","last_seen":"2026-10-13T16:12:52.460603Z","times_seen":6,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}