{"report_id":"feef40db-8258-40af-a910-127eaab6ef5f","version":6,"status":"done","tags":[],"date":"2025-12-23T15:59:59Z","url":{"schema":"http","addr":"kiomg.com","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kiomg.com/#/home","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"title":"Exchange","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kiomg.com","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-27T15:59:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-23T15:59:35Z","timestamp":1766505575,"ip_dst":{"addr":"172.18.0.17","port":50452,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"143.92.34.77","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 26","source":"{\"timestamp\":\"2025-12-23T15:59:35.236260+0000\",\"flow_id\":1635432217895063,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"143.92.34.77\",\"src_port\":443,\"dest_ip\":\"172.18.0.17\",\"dest_port\":50452,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400025,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 26\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2025-12-23T15:59:34.909463+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"cdn.bootcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"cdn.bootcdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"kiomg.com","ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":35,"request_count":35,"received_data":6353615,"sent_data":15556,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"amCharts","description":"amCharts is a JavaScript-based interactive charts and maps programming library and tool.","website":"https://amcharts.com","common_platform_enumeration":"","icon":"amCharts.svg","categories":["JavaScript graphics"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]}]},{"fqdn":"api.fgrcbit.com","ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-17","domain_rank":0,"first_seen":"2025-09-13T16:57:20.930036Z","last_seen":"2025-09-13T16:57:20.930036Z","alert_count":17,"request_count":17,"received_data":37889,"sent_data":9205,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-21T22:20:20.869237Z","alert_count":0,"request_count":1,"received_data":3780,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.bootcdn.net","ip":{"addr":"143.92.34.77","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2014-08-02","domain_rank":692530,"first_seen":"2019-03-12T16:59:36Z","last_seen":"2025-12-18T12:22:16.769875Z","alert_count":2,"request_count":1,"received_data":46519,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kiomg.com/static/libs/skroll.min.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c68530c7dbc64baca30b1cda39a0880b","sha1":"cc393b406c412fe3e2332aa63969129ae715ff11","sha256":"cadbdf90bb658eced8853fa02f088d60dbd89c3a9df68c89e3bcb35f18ab00d2","sha512":"778b90b872f0b1007786b364dd94be6393239ad0ef3079ccbc959ba7f3b60190d38f00e2df68951708e99982fcecd9ef4957554447863304426d215459b75b30","ssdeep":"96:z8PFR9CcA4kge9RrA5Sf5Q14f5zahcl0ZCIkBlkgdekLHkIeP9MCEAdyhxrdylGF:YdR9mMiRaYQQ4cj","tlshash":"c6d16dcda6a0104d49cb32b3d1cf5f54033990963ca299b8b375e18a5d736ce629bb9c","size":6177,"data":"","first_seen":"2023-03-10T08:16:23Z","last_seen":"2026-07-22T05:19:33.335463Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/js/manifest.8e6d3b8f5e43f40b6e46.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4646e0b4ef89d11491b67755b57003c","sha1":"95313689eec1170a5b1d6c4762aa12e90d5e4fd8","sha256":"c689bd8a9abfcd350629a7e8e18ecbbc9aea56ee47fbfd1d2bd32c2cbed31e7b","sha512":"57524f7a2a6761c756cfba4c332d86238039ba6136b5a3f71cf1f5a763819431386247cd45b8b95af4ab0f41da85830e499755054162110c6697feae7c6e19b8","ssdeep":"","tlshash":"a93165c632a6f5b613e75868503f9025f03d7923082ded84c34ad192bd35c564219fb5","size":1502,"data":"","first_seen":"2024-12-24T04:23:29.129322Z","last_seen":"2026-07-22T05:19:33.344025Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/js/custom.js?1","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02865efe8789a5c9931e8b0b377305d1","sha1":"4a579d187823e3838043ad07de535e2ad6a28a8d","sha256":"9eceaf6a7fcadd6dc86aa949affb9eef5f4fc875ede998e7f6a502a1ab78217b","sha512":"8f89d2f2995e2bdefa98532958f43ef87814bcff692d5de4adfc2e21ffa38ca23eda987ce768ebb61286f3757fbbaa89c9fcebc36903d0c22b9dbb1eee34a474","ssdeep":"384:ugaVFwJ7fVjLzPT4iZnQ6npW9ShQodhbU8kBxuETH82UO:ZnpW9ShQodhbU8YdHhx","tlshash":"26e28558ed6d12b65e7223aacbba5103e66090133501bb263cdc62761f3581863fdff6","size":32885,"data":"","first_seen":"2023-03-26T01:50:36Z","last_seen":"2026-07-22T05:19:33.313333Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/libs/jquery.mCustomScrollbar.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"50c803e1483b1bbb1531fea61f849d98","sha1":"6643dec32d981aeeda46f85ee130d74f14732bfe","sha256":"72f572c5dd07fac37e4163060402399196415573f52a70526f0e8a848bf1cff3","sha512":"0d629ec0f1124ecef1b8825683be82bdfad7bfdc108759b9b49a23f8471c85ef65ebb132fee861e7786f0f5e4c2f28f1685260f7f8b516c54757274bad5b1122","ssdeep":"1536:nEorxUmVhC3gSFeqmmmV6e57Otjb08ntV8:XKgSK48","tlshash":"f893c7823f0c34eb42efd31e543f8249ee2dd17b8301b4d9b4e8996869d055593afa78","size":95406,"data":"","first_seen":"2023-03-07T01:42:51Z","last_seen":"2026-07-26T09:45:25.840148Z","times_seen":329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5843dbdc71ff8014a5eafd346a262da","sha1":"127e1d971efab9341db8079f10663dc28e8e0a2f","sha256":"8e73a30d35c83ea6a597c3343324d2b7df097ad26e67b62efb5266ee12d317b5","sha512":"ac28dfa1a6fd09528e1ffc3f4fa19b0719c01f9033872e3eab51175b95c451179f1db22445b43ef9947e1810a5a37fdddeae7cdd7fe03b814a98e16e8642ab74","ssdeep":"","tlshash":"7e514241671662f381f60f36b12fb642713ad015140328b2b9bd9d90aba6deb5363d1e","size":2771,"data":"","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-07-26T21:52:22.121686Z","times_seen":16109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c895b2a2e0105ecc545f35b9b0ed0ba","sha1":"e86a32086850493b477adc7844dc414f39ffead9","sha256":"8c80461fb5c77b3147062f19933fb6dd48770d160956c2153c04cadc1eb6aabb","sha512":"5b21498d9f4c23bf07d28949970df66f22fb17d1273ad945c62e2bd7a476a813adcb7b00fbd0ae83f3d776bebf4d282d6a0eb5e1d2fcbc1b6379c85b3dd497d4","ssdeep":"","tlshash":"00d0a71b72d708330cdb3cef9a97b3506c600502a81d4505705da2445f15b44d067381","size":245,"data":"","first_seen":"2025-03-06T04:57:40.152116Z","last_seen":"2026-07-22T05:19:33.347127Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"791831c6afd07f98d584eb9a99f7182e","sha1":"52001689b42ebb7b314cc68468477e4d6fe74d9a","sha256":"4bcb8608085dc9d9c6cf762c3e34672314fedee8115a129ab68f5c1182c39266","sha512":"93d88e846d1d303b16a24db8cc8c51d327694ba3cd7ea9443301915f1d0f3ea481d8d2d1d9c4e5d4fe4d64ee9c744750416ebdbf43f0e2199a0ccb32859584d6","ssdeep":"","tlshash":"42f0e9dd56a31427562b3038afdba10232721057680dd800ba0c4b80bfc9e2746dbfdc","size":574,"data":"","first_seen":"2025-12-23T16:00:12.452434Z","last_seen":"2025-12-23T16:00:12.452434Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/libs/jquery-3.4.1.min.js?v3","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6b6350ee94a3ea74595c065cbf58af0","sha1":"b15f7cfa79519756dff1ad22553fd0ed09024343","sha256":"412b8ff9c5ab32b9019fcd84bcd4a54c0e265a14528474f4ee45b27a20abeaeb","sha512":"f5a9c6aee347c155e4dd796c51716b7447bc22ae44741fceb6bcfee02f955ad4063d38613f241108a3e1f3e1f540fcaed8d9848b9a0fb823c00955cf9a19efad","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmt:jgZm0H5HO5+gCKWZyPmHQ47GKR","tlshash":"a08319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88147,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-07-26T11:28:10.785976Z","times_seen":5557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/libs/amcharts.min.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ca5ce1959014a4221b3e11819b72e63","sha1":"55250b3b1b08ee71404e196ff8f40610d0c9b96c","sha256":"2da5f3fa2ff085aaafe5ade6a6009087869dc4a667fb798a0efa1de0a0f1e49d","sha512":"0922fd3301071245ebdc6dc504778f3708c4c09d5a30ac9c068ec51dde4556d7715e3df650c978754b8ec9cf36e93beffc443aec0daa625af00ddeea90e90561","ssdeep":"1536:G4R7FTK6LoxkJQ4YYYrZm3QiqCMy0dgJb8SJdHAoX+OUo+LJb2AKSfdtF8DfF+Ci:N9c5yfJxj7w","tlshash":"04e3a499f794ba21478361e8882f140ee33b259d882850ecb6b5c5e36c7554a133ffbd","size":144071,"data":"","first_seen":"2023-03-10T08:16:23Z","last_seen":"2026-07-22T05:19:33.334031Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-07-26T21:33:45.024416Z","times_seen":99182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/js/app.154940ff7081636c94f9.js?12","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"827ef14ad5ea16e2d43622cd9600e346","sha1":"1263b01a5762bff98ca5375c8d0c31aed0cbd46e","sha256":"49aa33f44134adb4d3f53e49d396dcf486a4ec8394098bdfe5240ecf7f242b70","sha512":"4782ef75c1d1bcfa3edbd3ffee11a1ae04d31c44599648576f47b2e9c802e30a596358e9a106da3838b34d855d704fce58148ee9f4b6350dce54462a228f7661","ssdeep":"49152:xu9O8iwSax2SaSBDN+VgeV+8W3MhsBAuByjeDWJXW3iZwPh:q","tlshash":"ba854936b0c8222d1433d105b15f2ea412be2fa6e150417a7e7f5868afcb4487a7bf5d","size":1834611,"data":"","first_seen":"2025-12-23T16:00:12.454385Z","last_seen":"2025-12-23T16:00:12.454385Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/libs/popper.min.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb572267def5eeb9c320e89ac4896691","sha1":"6f9bf6cbf9d34323fa0173181af910a02d7e970f","sha256":"3eb02ee1a4115989f36a398cce144d32dcbb104647363728188f53ccad635ce2","sha512":"3e1ef1b8a9838c17f8ef5fbd283d73aab403506ab1aae6640ea8bc889f5ed74726cb4bef118de085c0ff7d112ce21c75da4f4f827a599766fee2b7855f8fff0a","ssdeep":"768:R2oVnfhIiL13D+4bOSawrU3Xv0OdFTR2oLNhDR0MGiDi+XrJRs+dAOurfCSO7DRD:d5xT+4bOkruFTRPxhVR9M+deC/qmo/yb","tlshash":"f0e262887ad171358637f36ad96fc90df336166b1386600235bca0991f71da0927aefc","size":33835,"data":"","first_seen":"2023-03-26T01:50:35Z","last_seen":"2026-07-22T05:19:33.333535Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/libs/bootstrap.min.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87f286b5055b40e70fabe22e41971e26","sha1":"ad6c51220ed8619954709c043cf9981da2a6ac3a","sha256":"a12bc36f7735ba57765d1b7067ac88dd63aa08684f2545b0d558f449a116d466","sha512":"598a524448372587d89e5a062da78daf81d3f8e96f007bb32c663c0b0af6039eb1300684fbaa1accd2eddcd68d412ed3e8f8184cdfd9687dde09474977a66605","ssdeep":"768:EM7lRdQtk4nIiszRWlelFtYx8gCsRfyoRbMHZf0V27Q7pdl/l2+r7JsfLCUhITQL:EYRAxIigXF0mHOKrBWtEh1BLrp","tlshash":"c3737707b3a4793245abb036dc6f858af635669fa346411d717c80ec1f38858627aef8","size":74698,"data":"","first_seen":"2023-03-26T01:50:35Z","last_seen":"2026-07-22T05:19:33.343554Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/libs/swiper-5.3.8/package/js/swiper.min.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5faa037573ac81b834e6ae2f8d037eb8","sha1":"686df7c00c0face2a7855f2ff3c1b4a23b50c902","sha256":"e13f9bfd7e1c909c8d88b17650b1926ddfc66a9009f9447ea0729d2572a157eb","sha512":"948fd57feaa1665462384790747b2d4573c6b644b2b0a99f3161b9cad7c0d13e25a217c44e57aa7b79e895075fb1539705f2f4003440af82f532249352705cc2","ssdeep":"1536:uE2qXxfeSGcfkqi2ZrWK8ievlK/CiiSsWRLK7A3d6UKBjY4vHgZsUgeAq5qpBgTX:VNkopdepFscUKi+HgZsUgeAq5qMT82","tlshash":"56d3194eb39061a551e36257535e8241a3b72809b80ad0ac35b688d79dbde4c13bfffc","size":139797,"data":"","first_seen":"2023-03-07T14:36:18Z","last_seen":"2026-07-26T07:43:10.394084Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bootcdn.net/ajax/libs/pako/1.0.9/pako.min.js","fqdn":"cdn.bootcdn.net","domain":"bootcdn.net","tld":"net"},"ip":{"addr":"143.92.34.77","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"99d196b019b1c2035542014be7358561","sha1":"2fe7fa28b970449af2117b0cafc7c6a0a57a96ca","sha256":"2a25910b08844294ca56e2e05b9a18594cec5edd4c0e7a113b6983cd51c987ac","sha512":"210140ffd744322c76b04c97bba05ec7c78010ef93c2f66b38e48408949bff8e6c43578c74d7a40699d4d7fb5589c6bd2fde27412a6d4bb911ea2d3c1ae6faf2","ssdeep":"768:7feBE5B3FA8/nVPg0kKWslV7hF/PGjMh+AEIzg49f3cG:zeE/9hF/+jNAEIEG3cG","tlshash":"9f23f6a630f651a82be118d8919b2b96217051322c0519f9e378dde43cb4dcfe17fa7e","size":45935,"data":"","first_seen":"2023-03-10T08:16:23Z","last_seen":"2026-07-22T05:19:33.327149Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/addLang.js?1","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fe16ef6548cc72cdb7905bdad57f2eb","sha1":"679f69645598b6ecb8c5e127105ae7c7e9589d6a","sha256":"d0c05f2316f6c3a0f9331e15c5070b0f978825c89b10618c8226c0ef752df92c","sha512":"959ba6a5085775961ced05625ea0d3051f7d86278ed10fd0917f218c6a0bc9e1500d308d160eeeb7d270ac3a4be02b9d40e1448862c214a0ace408a9d803882a","ssdeep":"384:cC1CBbo1OAAkh1Nkh1+XhDtISwiegpelU:cC1C9kOAA8P84xXpgU","tlshash":"2cc222f603d954fc06a2c8db91b0b128919b31f74eb16d4dfb988e0b6bd01b8059fb95","size":28256,"data":"","first_seen":"2025-12-23T16:00:12.435795Z","last_seen":"2025-12-23T16:00:12.435795Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2c11ad618109583cd4cc3f8b472ac86","sha1":"9777237a25b719b66c1d5562001834c68b99d626","sha256":"a448736db9b7656c918ec6ede85eb4d81dad3a665c6da9055e4365f0ba08bd3a","sha512":"af0341f646a95949413354d6bb7c0ec7f75986879535ddf0eb6f152465556c01f3ebee3ec900cc16ceee191d6912871d920a12b2e8c93d3b6868bd1f34d98dc3","ssdeep":"","tlshash":"0b315a4f619db20864e7e0e0df6bbe287b1e185b6106824c3d0c5fcd9fa5251c5647f8","size":1668,"data":"","first_seen":"2025-11-22T23:36:52.810213Z","last_seen":"2026-04-11T05:21:41.484171Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/Kline/charting_library/charting_library.min.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b4daca49ae2c0225a9232dea2148df1","sha1":"fd3711c6a439061420442f2a57b0b3a2968d3625","sha256":"eed6506775e8d1fca20b61a590e91c42c82550d2befee83f5d08f163bae4b296","sha512":"259daa40d4b442672f4cbb730e8f148b3488ccd2d18db890875edc411bd093eda9a8fb8933dd2896915ddbdb0585d8bf3755c576d61375e780d68b3afec254ff","ssdeep":"192:9o937kYFUdQ+lr6lw2rfnJ8NRLP6tyPPv1id3Kuv/ISJhv+HIhJPh3F6R:StkYFUG+lD2rfnaNRLP6ty9iJKQ/ISJ0","tlshash":"90123258ed2479320acb40f4427f290f9235d278d84a44ed3c94e6ec59fd847a96fbb8","size":9902,"data":"","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-07-22T05:19:33.31693Z","times_seen":198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/libs/amcharts-core.min.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"768caccf33a9240c6ade6f6af57b7e93","sha1":"ac42c7e02b428bf8ba3b4ef984b9159834e72651","sha256":"9390b348ff1da5a704cf3664eae6e8f8b6e73cbb547b0de39529bc4847291ac8","sha512":"a27a1560c3f30ba06d66d089c4cc9eb512b50a9545e1f7e3e7de2a25414e14bc98afe622b2940d470c3ce8cf66680c85b7b2964c0f5c601ff2c7b44c9e67123b","ssdeep":"6144:jOn5RLpCGjKNEarkbI79Chru8+3vonV+1c7SiAfMTXZIuN9tQ4p8PoyNRanj6K:7Ear1WX+3zimibNc4SPoyNR6","tlshash":"0815d688b795762143c3a1e8442f150be33b24aca42940ecf675d8e6acbd94d217bf7d","size":945584,"data":"","first_seen":"2023-03-10T08:16:23Z","last_seen":"2026-07-22T05:19:33.327628Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/#/home","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"fcaea4b8885ca5c1fb3ddd5c490da5c6","sha1":"35745f87b37210d992a9ed534a593ae500b7adaa","sha256":"934c2008743c36db746a9d6ebd9f1b84ff11477edc55fbf7b599bbfa687f7272","sha512":"65e3bda5b8bd909b2fed0a25e3d6d3d7d2984601de4a906783c783097fcd8902ea1c2fa05d33619126415bc5000a72e8459eb81c971a85e2ddb374f9fd9231aa","ssdeep":"","tlshash":"889002c520d965518ad321a061261a46615a04f914a48c5091589c56287303092695bc","size":54,"data":"","first_seen":"2023-04-12T08:25:39Z","last_seen":"2026-07-26T21:56:58.274607Z","times_seen":23768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/js/vendor.4ebc45fe86993b751268.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a998765b74c5114df9bb28b7ebcfb7d","sha1":"8ef17aa20a7aef124e81ed6bafe5e7b68f2e9107","sha256":"a70001622ec00052cb22e1cb1433762d96623599cc21f3a2ba5c9c224d63434f","sha512":"b352a05e50f626b9fc6ec9c408f15f1726f88df18fc5611f06678eab9abafa02d5f9f4afdcb5c0fb5b3408f94643f11370cf79e347d6f55849df6f07cf19f167","ssdeep":"24576:4bilIxBMPajn0LguFV8ATr9d6L+yCcaD5O6Plhe:4bilIxBOajn0dnLrP6LrCckM6Plhe","tlshash":"e765f889f291b47147a361b0402f150bf237695da40a80acf6b9d8e66cbc98d613ff7d","size":1533432,"data":"","first_seen":"2024-12-24T04:23:29.121429Z","last_seen":"2026-07-22T05:19:33.350013Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/animation/js/index.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60d19456f6ec5a46b799807d0d4fd4c0","sha1":"25c73ebf34c7dfeadcc0ed474260e816d5632e15","sha256":"4020eb8990bb8510716c0a5ae98579a3274d0a9370f52848c48e9b37312cb64a","sha512":"066a213f777f9e2573e32c2096ddf33917f6673dc801670a42efbe940c8d91d9e184d6d3cbef4380ffa704b023e55c00ff71916cc920034431cd1dc199a292fc","ssdeep":"96:SvxqgHllEb0piWQfVf623+mEPCfvihI9SKcTc5+Emx7jDsgsNWf:Sppl5SfVintYvw0cTc5+tjDDsNq","tlshash":"c4c1ff69d9e21e74f567222d8fff15081642b0130589c919bd0ca28c4ff6844ebbfadd","size":6157,"data":"","first_seen":"2025-11-22T23:36:52.762535Z","last_seen":"2026-07-22T05:19:33.332481Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"49280fccf766accfd7baab84919842bd","sha1":"62c864a1fa6b241bcdda3e73f4d29623142c17b8","sha256":"7db233cb3582249183a9031b95290c3cdf48221a0cce6dad7a61f81c306c509d","sha512":"b7800f09c59538db5c5583fbebe48d7ed35c1f680e70935910f1c997e3a4c569f2301cea10cce9584bb6d0d112bcc014a2537754c4845fa99ffb585b73dd3202","ssdeep":"96:2XqiGBm/GZ9XIllE/q77gQ2/4sAaeY2DbkoBYhgQkAPOrza66Sa1z:26ZBuGXclEi7Q4sAaDQDYFSza66P1z","tlshash":"c7c164d960b706a24533f07f4b2b6ed471e892271044d81d3e6f8b902fd541a8de23ee","size":5837,"data":"","first_seen":"2025-12-23T16:00:12.457885Z","last_seen":"2025-12-23T16:00:12.457885Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kiomg.com/static/libs/amcharts.min.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/libs/amcharts.min.js HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Oct 2023 10:37:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e0-232c7\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hkhN13uorHkRYklRgSBW256Kk2avkPMD%2FX%2FcAx3JUTxWiPrrQJH2JnKNSkBAly%2BHxHDnGDj4ajPKFsA3v6ENn81Llop%2BZKPMFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112048c95ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144071,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"5ca5ce1959014a4221b3e11819b72e63","sha1":"55250b3b1b08ee71404e196ff8f40610d0c9b96c","sha256":"2da5f3fa2ff085aaafe5ade6a6009087869dc4a667fb798a0efa1de0a0f1e49d","sha512":"0922fd3301071245ebdc6dc504778f3708c4c09d5a30ac9c068ec51dde4556d7715e3df650c978754b8ec9cf36e93beffc443aec0daa625af00ddeea90e90561","ssdeep":"1536:G4R7FTK6LoxkJQ4YYYrZm3QiqCMy0dgJb8SJdHAoX+OUo+LJb2AKSfdtF8DfF+Ci:N9c5yfJxj7w","tlshash":"04e3a499f794ba21478361e8882f140ee33b259d882850ecb6b5c5e36c7554a133ffbd","first_seen":"2023-03-10T08:16:23Z","last_seen":"2026-07-22T05:19:33.334031Z","times_seen":104,"resource_available":true,"data":null}},"time_used":1093,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1089,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/js/app.154940ff7081636c94f9.js?12","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/js/app.154940ff7081636c94f9.js?12 HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 May 2025 09:29:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682eee8e-1bfe73\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ySdpvNTixFxnFQxnRMlOnttfGFB2jxZeIhFtXCuzHQy8tKon5u%2FMmAt7I4DQFYnBPudLojc1IL788CQt%2FN8AJyw8Y3Yc%2FhnFTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112058d85ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1834611,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65284), with no line terminators","md5":"c40be74a5f30ce565ea28b3fafa675e2","sha1":"b84e101b5ef125d741dbaf16537f147b9fb51395","sha256":"97229c4ed99e9a80153801a1ae06a405b2e81cf4682ae03c59965f3aa9d1a97b","sha512":"a919930cf94bb1ab1e5636ccc2aac30853a1faf76aa156fce170f92c17e6c00f795c3a5b15f48542c200fadc1ff6730b2b57e53535545b8b38216ec5de6760e7","ssdeep":"12288:76CPhzWpJgxX/A3HKV2JqCku1ErraYmsNxtZnOG2soSivYSaxbTAHS+bw:xWpJgoEtnO8iwSax28","tlshash":"75352a26f0c8222c1873d104716f1ab952bd2f85d014406bbe7e94a8afdb9583b6ff5d","first_seen":"2025-12-23T16:00:12.404825Z","last_seen":"2025-12-23T16:00:12.404825Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1058,"receive":1052,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"api.fgrcbit.com/ws1","fqdn":"api.fgrcbit.com","domain":"fgrcbit.com","tld":"com"},"ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fgrcbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 22:08:19 GMT","end":"Mon, 09 Mar 2026 23:06:59 GMT"},"fingerprint":{"sha1":"38:6C:D7:4C:44:F8:0F:A5:6E:96:55:32:0F:3C:23:BB:79:0C:C4:FF","sha256":"AF:3E:50:C8:78:8E:65:DC:F5:9F:DB:20:3D:6B:86:37:87:82:E6:9C:46:AA:3A:E9:F2:8F:49:7C:11:70:3A:32"}}},"request":{"raw":"GET /ws1 HTTP/1.1\r\nHost: api.fgrcbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kiomg.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ov7jIhJOp9mct4yvCKEJMQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 23 Dec 2025 15:59:38 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: Nefv82glWfZZ4V949S+3Z1F8JrE=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Cwhnw7%2BK9zIcf%2FI3x6nkH%2FmS2km3uLrfAhxx1%2FOzeIeK8RWBcbV6xdvoMAYGIyIsfM7c9brGX3AT%2B7s4a1tdaARkPnqpV%2F1SA3jXMXj73topTgST7vy2KV5Mj3GZWFLThr4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b2911323a3c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=571\u0026min_rtt=545\u0026rtt_var=158\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3112\u0026recv_bytes=1154\u0026delivery_rate=6611872\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=6dc462b8c113ea7d\u0026ts=873\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":930,"timings":{"blocked":0,"dns":25,"connect":25,"send":0,"wait":815,"receive":1,"ssl":86},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-23T15:59:33.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 15:59:34 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 15 Nov 2025 08:03:02 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZyoppAh5abICM38lA1p6GgGKnt2rRpG%2B4YxDYj%2F1679sYjoEtBDTnGc8XZik1790HJxwq5FPHaymz%2Fdx%2Bj2MmtvSYOSHMYhKag%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b2911197a888deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"amCharts","description":"amCharts is a JavaScript-based interactive charts and maps programming library and tool.","website":"https://amcharts.com","common_platform_enumeration":"","icon":"amCharts.svg","categories":["JavaScript graphics"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11564,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (683)","md5":"d8dccd85ac8866288e27d245b969e9e7","sha1":"a9004e43f884f6870cdc3fa3d03105b1b920cfcf","sha256":"286406385e701cf880b03a7bb5ed06f3423a5d4facf082fde3a5ec534dd4dfdf","sha512":"ade1200f9ac21756c65a9a7b854835286f353b1a12af80cb0fc67e55150c029d7a994a3bb4374ccba8ad0c9cffd6dfb80012047c62d2333711dc33eb27873ecd","ssdeep":"192:MntyyvMXWZZABilX93wFUc0Z1yMr6ZBuGXclEi7Q4sAaDQDYFSza66P1A:gQc2F2r6ZTXdiv6yj","tlshash":"cd32c68a1ca792151873f4be8f3bfa18b1e985172404c80c7e4d4fd4afd42998db27d9","first_seen":"2025-12-23T16:00:12.418266Z","last_seen":"2025-12-23T16:00:12.418266Z","times_seen":1,"resource_available":false,"data":null}},"time_used":904,"timings":{"blocked":36,"dns":12,"connect":1,"send":0,"wait":831,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/css/app.133507fa12b6c9c5c72d133f8d30704a.css","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/css/app.133507fa12b6c9c5c72d133f8d30704a.css HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-38e71\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z2pwYNQva7b%2B3JdOUac%2BqLCcIf6G94oCDRSbNc%2FaQXeZ3hOraS8xcx6heasWInlwUsuF9OG8XBtFezLftpGbYdvOKPE5zeM5HA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112038c15ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":233073,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6a3a9a62be5c540839233f074cb14b4d","sha1":"c6a36dc46e89f4001a2bd1427e92aab15c1bb931","sha256":"2e54d03ed7af1aa90c37269cbc5adea0629b12efc5b3b1f699c381f8c8f4d952","sha512":"5547c3c8b0aa336bc3ec2dad414f923317a6cce8ca7b8ac5f82831644daad513b72737cd9d6934784f292933254a81fbb53f5c336eafdae9bee7d2086d61a90f","ssdeep":"1536:u28Y7yrW3Y+2gVOdQ4nie/F4lVgW9tMEWHhp8OaiZkW1Yu8e2DVxeKZfBIcGw9Wr:zBWHNwfQwH/JZy","tlshash":"7e34b6218b172127612bda6cb6c0ba895f28c323d4325b7bfe95781cc7d35891267e1f","first_seen":"2023-06-28T18:20:09Z","last_seen":"2026-07-22T05:19:33.328137Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1085,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fgrcbit.com/api/services","fqdn":"api.fgrcbit.com","domain":"fgrcbit.com","tld":"com"},"ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fgrcbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 22:08:19 GMT","end":"Mon, 09 Mar 2026 23:06:59 GMT"},"fingerprint":{"sha1":"38:6C:D7:4C:44:F8:0F:A5:6E:96:55:32:0F:3C:23:BB:79:0C:C4:FF","sha256":"AF:3E:50:C8:78:8E:65:DC:F5:9F:DB:20:3D:6B:86:37:87:82:E6:9C:46:AA:3A:E9:F2:8F:49:7C:11:70:3A:32"}}},"request":{"raw":"OPTIONS /api/services HTTP/1.1\r\nHost: api.fgrcbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,x-requested-with\r\nReferer: https://kiomg.com/\r\nOrigin: https://kiomg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://kiomg.com\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization,lang,x-requested-with\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gWIQLP3V75teK3ZvszUUMzLlgPVeyT010mB2iyFAwbG6Ghjx57hOIdqCz3LXFTdCgoC%2FQAIs%2FZEwU%2BTsGXoiglxTmYyeY94tzIyTZ44%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2911327970b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":1042,"timings":{"blocked":37,"dns":2,"connect":6,"send":0,"wait":923,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fgrcbit.com/api/contact","fqdn":"api.fgrcbit.com","domain":"fgrcbit.com","tld":"com"},"ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fgrcbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 22:08:19 GMT","end":"Mon, 09 Mar 2026 23:06:59 GMT"},"fingerprint":{"sha1":"38:6C:D7:4C:44:F8:0F:A5:6E:96:55:32:0F:3C:23:BB:79:0C:C4:FF","sha256":"AF:3E:50:C8:78:8E:65:DC:F5:9F:DB:20:3D:6B:86:37:87:82:E6:9C:46:AA:3A:E9:F2:8F:49:7C:11:70:3A:32"}}},"request":{"raw":"OPTIONS /api/contact HTTP/1.1\r\nHost: api.fgrcbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,x-requested-with\r\nReferer: https://kiomg.com/\r\nOrigin: https://kiomg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://kiomg.com\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization,lang,x-requested-with\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N4yChlNuYRyyASJ4GvPSJumq0%2BfFtZhGkNZOAqD3YUsYegl4aUnAwrQqr%2FpRsbWbq5fg3fki94usG7F9m9q%2B0BzYSAWWZSPROeZfLGc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2911327977b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":1009,"timings":{"blocked":37,"dns":6,"connect":2,"send":0,"wait":918,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/css/jquery.mCustomScrollbar.min.css","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/css/jquery.mCustomScrollbar.min.css HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-a757\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJnbYv3klrL5cLpNAPuCpz%2BIvn8%2FnrvZe6H25BVIEjbZ7GnhuL%2BNttmkzHZMhwp%2B4Vg%2FvWnM3jF%2B3JN3LPv5oxCNBVtbNQly6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112038bd5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42839,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42839), with no line terminators","md5":"f59e3f4c0087b4d8ddc27bdd9c9ab92b","sha1":"fac9b521062feb5250c04d62128a8c3ddb312632","sha256":"247184981eb6f698a94e431a83d68c6b0df623cce57b6e29dc5a6c11e23aa195","sha512":"eaa92f05b0f29794c326d349882f1fa32115b81ea0c4c064acacbaed7a6a9c80f1caf2cb3c9ce64e3023d5d4497cd7665d6a83d7455b26878de29390a83c2f44","ssdeep":"768:hStyRbNWmYd7Z9t6vw7R01rnk6BcxL+zhRNxA5l2ng7ytcKaWDxQ:hStyRsmYd7Z9t6+R9","tlshash":"581317992a4336dffa4f447dbb81379a11fc37834552166cb0d75ca4ab88bf7a439402","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-07-26T20:38:48.170437Z","times_seen":15432,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/js/custom.js?1","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/js/custom.js?1 HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Oct 2025 07:58:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ff262e-8075\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QlGgDgq3x1maHr1LkSn7EKNOfMmXfCGgr0ReyXTmd%2FVqV2mO%2B4u%2BdLU%2FPNNZoaAcssUwGH5VULOIcOUXi5IHIJgZ093dP%2BeheA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112048c75ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32885,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"02865efe8789a5c9931e8b0b377305d1","sha1":"4a579d187823e3838043ad07de535e2ad6a28a8d","sha256":"9eceaf6a7fcadd6dc86aa949affb9eef5f4fc875ede998e7f6a502a1ab78217b","sha512":"8f89d2f2995e2bdefa98532958f43ef87814bcff692d5de4adfc2e21ffa38ca23eda987ce768ebb61286f3757fbbaa89c9fcebc36903d0c22b9dbb1eee34a474","ssdeep":"384:ugaVFwJ7fVjLzPT4iZnQ6npW9ShQodhbU8kBxuETH82UO:ZnpW9ShQodhbU8YdHhx","tlshash":"26e28558ed6d12b65e7223aacbba5103e66090133501bb263cdc62761f3581863fdff6","first_seen":"2023-03-26T01:50:36Z","last_seen":"2026-07-22T05:19:33.313333Z","times_seen":56,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/libs/skroll.min.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/libs/skroll.min.js HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Oct 2023 10:37:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e0-1821\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6QY1T85ASn%2FDYxpIWEjlGajBCXZE2c1zkaP7NyA1IDWw4iUUUo9Wx7lwzqveQcorzD0LaaPAjHEeUmCNHzI6PeUrHPC2asRi%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112048ca5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6177,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6177), with no line terminators","md5":"c68530c7dbc64baca30b1cda39a0880b","sha1":"cc393b406c412fe3e2332aa63969129ae715ff11","sha256":"cadbdf90bb658eced8853fa02f088d60dbd89c3a9df68c89e3bcb35f18ab00d2","sha512":"778b90b872f0b1007786b364dd94be6393239ad0ef3079ccbc959ba7f3b60190d38f00e2df68951708e99982fcecd9ef4957554447863304426d215459b75b30","ssdeep":"96:z8PFR9CcA4kge9RrA5Sf5Q14f5zahcl0ZCIkBlkgdekLHkIeP9MCEAdyhxrdylGF:YdR9mMiRaYQQ4cj","tlshash":"c6d16dcda6a0104d49cb32b3d1cf5f54033990963ca299b8b375e18a5d736ce629bb9c","first_seen":"2023-03-10T08:16:23Z","last_seen":"2026-07-22T05:19:33.335463Z","times_seen":88,"resource_available":true,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/img/analysis.651e8e1.png","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/img/analysis.651e8e1.png HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-7fdd\"\r\nexpires: Thu, 22 Jan 2026 15:59:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z5f9284v%2BrRxmyqHn5OTx%2B5AkoMkElE3DEzPrzESot%2BMZW3OZWP6c6OKGrrt1JlQPZ%2BUyG3x%2BD6PKIo%2BGbNW2be8QU8vEDik7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2911316a825ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32733,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"651e8e119b9c1effb6058b41c92dc4dc","sha1":"9072443cbc17cb0440cb4e1d346146926cf07f66","sha256":"6a4089280b4eadb3dbfdfe852d4a3748230b424b0d5a2c87802b2d5c0adac13b","sha512":"1d14638bd5606316cd2648da3aa3ce899c107c4a833ccce3b8c318ab1c2c3db83fc6c33eb371bcedd32bcd00bedaa9e1a686ae698a18978ab3918effdbe75d4b","ssdeep":"768:6HADA9lNKb5DUwFdRL3eBsqSV2eE0L84VNwNAC:wycNKb5Q8dx3eBhf54jC","tlshash":"3be2f126c090345be756d0c332e2eba285b74097c7f1f6c9ff266dc7906eaa105e529c","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.338259Z","times_seen":46,"resource_available":false,"data":null}},"time_used":1090,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1084,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/fonts/element-icons.535877f.woff","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/fonts/element-icons.535877f.woff HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/static/css/app.133507fa12b6c9c5c72d133f8d30704a.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\netag: \"6540d8e2-6e28\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Qi%2FG6RuYTvtMO%2BMD57YiuWdmfPzCGxFDnwbe88T08RlQ91RHQGVoEUrBo0CGhbxB9YiCepXioe9nR36KojwrwVLyF%2FJyOLUEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b2911324a975ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28200,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-07-26T20:51:40.690493Z","times_seen":26976,"resource_available":false,"data":null}},"time_used":1075,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fgrcbit.com/api/contact","fqdn":"api.fgrcbit.com","domain":"fgrcbit.com","tld":"com"},"ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:38.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fgrcbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 22:08:19 GMT","end":"Mon, 09 Mar 2026 23:06:59 GMT"},"fingerprint":{"sha1":"38:6C:D7:4C:44:F8:0F:A5:6E:96:55:32:0F:3C:23:BB:79:0C:C4:FF","sha256":"AF:3E:50:C8:78:8E:65:DC:F5:9F:DB:20:3D:6B:86:37:87:82:E6:9C:46:AA:3A:E9:F2:8F:49:7C:11:70:3A:32"}}},"request":{"raw":"GET /api/contact HTTP/1.1\r\nHost: api.fgrcbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nauthorization: bearer null\r\nOrigin: https://kiomg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://kiomg.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0aZ%2By5Fnbub3VwDv1ycZ597R9MsymOvACwEvQJieX4lXC4v5r4i2UdtJRGzyt4OChuyngIczgcdUcMYJUXLtyIAQNvpRRSQllnybpu0%3D\"}]}\r\ncf-ray: 9b2911384e7ab4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bb7138d314c9111a86baed7534bea6b2","sha1":"0ff5e376ba5f8ac9157f6bce8af28a2f7aaf8717","sha256":"0c9f0576d4049675fff10cb1b6acef8b3a3168090167a4d6462c23123f42c694","sha512":"684b2dfc29fb99ff41c65f71e4864f097f592ed655be552684677f44229e3fbfa34ce8350b5f64d379096f20030d724feba05f9b8af9ab7fe76e59bf79f6ad13","ssdeep":"","tlshash":"5fa002222e746c582b8778d3350e1a076bd86590d38195b6d89cd66c8a9996cfc42928","first_seen":"2025-12-23T16:00:12.424242Z","last_seen":"2025-12-23T16:00:12.424242Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/animation.html","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:38.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /animation.html HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:39 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 May 2025 09:29:50 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Q1f489AsKFtNFVn5gtQYw%2F5ZuMkeAKX%2FGnjJx9y0nyZxAaSeAtnKHI4LMjjeIwLygyjTKbBSyQNX0ZXCXmkfK8tBkWNpDSa6w%3D%3D\"}]}\r\ncf-ray: 9b29113b9bce5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":871,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"ee0167fc978b25c1ef62b46eb87e3c62","sha1":"47899e1a0ca578cc7eee284c51fc17d653440a50","sha256":"80d452ada050a939a670e9abeec2b3e9395efdf5078d178a0440bb5d4adcb5e7","sha512":"8b63663cd539a89f6979c5bd56c78ed1719f141692ad1a4a1631f660ba61b249676e4af7fa73c2e93dcaf6a5621f9fd4538ef3d74938ffbf399c158ed79e5037","ssdeep":"","tlshash":"3011108658a3105c7026e5341f696a2cb94b1103a34ede6877ae2161cf45270c8a3aec","first_seen":"2025-12-23T16:00:12.425341Z","last_seen":"2026-07-22T05:19:33.340588Z","times_seen":4,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fgrcbit.com/api/index/logo","fqdn":"api.fgrcbit.com","domain":"fgrcbit.com","tld":"com"},"ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fgrcbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 22:08:19 GMT","end":"Mon, 09 Mar 2026 23:06:59 GMT"},"fingerprint":{"sha1":"38:6C:D7:4C:44:F8:0F:A5:6E:96:55:32:0F:3C:23:BB:79:0C:C4:FF","sha256":"AF:3E:50:C8:78:8E:65:DC:F5:9F:DB:20:3D:6B:86:37:87:82:E6:9C:46:AA:3A:E9:F2:8F:49:7C:11:70:3A:32"}}},"request":{"raw":"OPTIONS /api/index/logo HTTP/1.1\r\nHost: api.fgrcbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,x-requested-with\r\nReferer: https://kiomg.com/\r\nOrigin: https://kiomg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://kiomg.com\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization,lang,x-requested-with\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=13ajbe7kDqHwT1XX%2BCoqc8xdi3%2FH6gFal6eLHSDDXL7wN2y%2F8qtgHbgQ8T1EGgEZwNo1OcsESxmZJPeJy6Qz3mUFgbsZq2mfygyr7o0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2911325953b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":906,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":905,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fgrcbit.com/api/index/logo","fqdn":"api.fgrcbit.com","domain":"fgrcbit.com","tld":"com"},"ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:38.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fgrcbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 22:08:19 GMT","end":"Mon, 09 Mar 2026 23:06:59 GMT"},"fingerprint":{"sha1":"38:6C:D7:4C:44:F8:0F:A5:6E:96:55:32:0F:3C:23:BB:79:0C:C4:FF","sha256":"AF:3E:50:C8:78:8E:65:DC:F5:9F:DB:20:3D:6B:86:37:87:82:E6:9C:46:AA:3A:E9:F2:8F:49:7C:11:70:3A:32"}}},"request":{"raw":"GET /api/index/logo HTTP/1.1\r\nHost: api.fgrcbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nauthorization: bearer null\r\nOrigin: https://kiomg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://kiomg.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jepFn%2Bik%2B8N7BOL5jT5ssG12sYvPjN7%2Fwj6Ofa9QC2h6Sn1glO9lnanTmjKVQa21pQa%2Ffj%2B7jRx9jaoXGMSX0z6pAZo8KIRirHK39Lk%3D\"}]}\r\ncf-ray: 9b2911380e4eb4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":914,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dacd89861bc762bd2c561f48341b8ed2","sha1":"00f06d2f9d383583750dbee65d40dce187e0f620","sha256":"dd68152835dadfd379ea3cfc56a29be21f464312064983ff3cbc57fa7b3f746a","sha512":"e45d5cddfd25406acde0d3caa728a2e189a4fb117f20bc1fa471cc0c64e95e7cbd2977b00cc4b4bd18f5ad23c375024bbdb35d273db420aec423cfd65d984f9e","ssdeep":"","tlshash":"75117aad1b4854b7074222c93c9f3918cc9e325b7c09d2b7972fdcae88e8768750b497","first_seen":"2025-12-23T16:00:12.426535Z","last_seen":"2025-12-23T16:00:12.426535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/libs/swiper-5.3.8/package/js/swiper.min.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/libs/swiper-5.3.8/package/js/swiper.min.js HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-22215\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xn1rXHlj%2BIE%2BSdRn41TQUD6zJ3X6E0bs8gzwoYWOzTJ8rAkAczjO18Yg5YVo2YT8kjS0uJnD75QWZW%2BkzsJafRV2w3qoLukmIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112038bf5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139797,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65271), with CRLF line terminators","md5":"5faa037573ac81b834e6ae2f8d037eb8","sha1":"686df7c00c0face2a7855f2ff3c1b4a23b50c902","sha256":"e13f9bfd7e1c909c8d88b17650b1926ddfc66a9009f9447ea0729d2572a157eb","sha512":"948fd57feaa1665462384790747b2d4573c6b644b2b0a99f3161b9cad7c0d13e25a217c44e57aa7b79e895075fb1539705f2f4003440af82f532249352705cc2","ssdeep":"1536:uE2qXxfeSGcfkqi2ZrWK8ievlK/CiiSsWRLK7A3d6UKBjY4vHgZsUgeAq5qpBgTX:VNkopdepFscUKi+HgZsUgeAq5qMT82","tlshash":"56d3194eb39061a551e36257535e8241a3b72809b80ad0ac35b688d79dbde4c13bfffc","first_seen":"2023-03-07T14:36:18Z","last_seen":"2026-07-26T07:43:10.394084Z","times_seen":303,"resource_available":true,"data":null}},"time_used":1351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1084,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fgrcbit.com/api/articleList?id=18","fqdn":"api.fgrcbit.com","domain":"fgrcbit.com","tld":"com"},"ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fgrcbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 22:08:19 GMT","end":"Mon, 09 Mar 2026 23:06:59 GMT"},"fingerprint":{"sha1":"38:6C:D7:4C:44:F8:0F:A5:6E:96:55:32:0F:3C:23:BB:79:0C:C4:FF","sha256":"AF:3E:50:C8:78:8E:65:DC:F5:9F:DB:20:3D:6B:86:37:87:82:E6:9C:46:AA:3A:E9:F2:8F:49:7C:11:70:3A:32"}}},"request":{"raw":"OPTIONS /api/articleList?id=18 HTTP/1.1\r\nHost: api.fgrcbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,x-requested-with\r\nReferer: https://kiomg.com/\r\nOrigin: https://kiomg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://kiomg.com\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization,lang,x-requested-with\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v3R9L%2FTRQR6YPBbiJGcYlEeUWz%2BmVoKH890IABSvbNWm0Tu6nR1rzc4MHjfJSiSxysNmhkOwcQ%2FPBtFsQdf2lM2AeEJbJ59hTvAGUKs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2911326964b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":873,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":864,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fgrcbit.com/api/articleList?id=18","fqdn":"api.fgrcbit.com","domain":"fgrcbit.com","tld":"com"},"ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:38.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fgrcbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 22:08:19 GMT","end":"Mon, 09 Mar 2026 23:06:59 GMT"},"fingerprint":{"sha1":"38:6C:D7:4C:44:F8:0F:A5:6E:96:55:32:0F:3C:23:BB:79:0C:C4:FF","sha256":"AF:3E:50:C8:78:8E:65:DC:F5:9F:DB:20:3D:6B:86:37:87:82:E6:9C:46:AA:3A:E9:F2:8F:49:7C:11:70:3A:32"}}},"request":{"raw":"GET /api/articleList?id=18 HTTP/1.1\r\nHost: api.fgrcbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nauthorization: bearer null\r\nOrigin: https://kiomg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://kiomg.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C4F1Sfivkb62ePA0mHRdHgrDzU7qA%2Fk0r0roO0b9ZeVSlNaesz7%2Bxe13hIV83xkADF2CWiAtuN4icyFFfCyp6ZLm1dv%2Bs0rvvNTAOTE%3D\"}]}\r\ncf-ray: 9b291137de1fb4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fcbac133817d51d3f86a5eb50129c1d6","sha1":"1ae6444e39a7fa0bce6ed462c5dbbfac95a3167c","sha256":"17d23d0db7da15eb43d6534270daf62f55b786837fac25daec2b5d8c9638840b","sha512":"304290335d2842dc89a205c2a1c83e8d103943229243dc2545408f3c0d6a24d1712a796d490a526ebc87fb255c0ea07c7afa85ef06a40a5ed399686078507458","ssdeep":"","tlshash":"6a9004011d047c543f0334c5750f554410d43040c1501131cc5c513ccf00534f443d34","first_seen":"2023-08-06T17:52:17Z","last_seen":"2026-07-22T05:19:33.326608Z","times_seen":302,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/libs/jquery-3.4.1.min.js?v3","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/libs/jquery-3.4.1.min.js?v3 HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Oct 2025 09:17:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ff389f-15853\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSyLHhCrlLwJYNIxaDF%2BQtNx8GTdnyG9500fnEjnbhBwcFUWd4O0iBUyL52B3v12dzio9ka1WEIEe1PBrNnhirkD338IFsUVvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112038c25ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88147,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"a6b6350ee94a3ea74595c065cbf58af0","sha1":"b15f7cfa79519756dff1ad22553fd0ed09024343","sha256":"412b8ff9c5ab32b9019fcd84bcd4a54c0e265a14528474f4ee45b27a20abeaeb","sha512":"f5a9c6aee347c155e4dd796c51716b7447bc22ae44741fceb6bcfee02f955ad4063d38613f241108a3e1f3e1f540fcaed8d9848b9a0fb823c00955cf9a19efad","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmt:jgZm0H5HO5+gCKWZyPmHQ47GKR","tlshash":"a08319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-07-26T11:28:10.785976Z","times_seen":5557,"resource_available":true,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1090,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/libs/bootstrap.min.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/libs/bootstrap.min.js HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Oct 2023 10:37:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e0-123ca\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iIyFk9HF%2BVo5CZUY9VQBHoCXkxnAvv9yD99H%2FzB13UaVhyO%2F%2BDuHBYewlhmfzxBZDbunFuiOPqdzeMbAEQrJT3gUPD4pgYUchA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112038c55ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74698,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1365), with CRLF line terminators","md5":"87f286b5055b40e70fabe22e41971e26","sha1":"ad6c51220ed8619954709c043cf9981da2a6ac3a","sha256":"a12bc36f7735ba57765d1b7067ac88dd63aa08684f2545b0d558f449a116d466","sha512":"598a524448372587d89e5a062da78daf81d3f8e96f007bb32c663c0b0af6039eb1300684fbaa1accd2eddcd68d412ed3e8f8184cdfd9687dde09474977a66605","ssdeep":"768:EM7lRdQtk4nIiszRWlelFtYx8gCsRfyoRbMHZf0V27Q7pdl/l2+r7JsfLCUhITQL:EYRAxIigXF0mHOKrBWtEh1BLrp","tlshash":"c3737707b3a4793245abb036dc6f858af635669fa346411d717c80ec1f38858627aef8","first_seen":"2023-03-26T01:50:35Z","last_seen":"2026-07-22T05:19:33.343554Z","times_seen":63,"resource_available":true,"data":null}},"time_used":1063,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1059,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/animation/css/style.css","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kiomg.com/animation.html","date":"2025-12-23T15:59:39.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /animation/css/style.css HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/animation.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:39 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Fri, 18 Oct 2024 01:56:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 24 Dec 2025 03:59:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6711c044-36\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKEK57%2FNgGC9hiXx%2Fs37T%2FztwbbzKsKUHFR6XPBrTtrandkRRPYkuAlyRYNykQAj9CVf8IHmj%2FWj7oPSWBi5iMxok0EECVT8Gw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9b29113dcc2a5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9bafc1da6677fe0f53b3ae6f1ddd9a27","sha1":"1401cc32d28ae8e5e278bcd57a65340564bedd94","sha256":"c6ec3986b7db0c27c2582cac1be0b3eccedcc8123505fbfcc521fd5f4f53cc1f","sha512":"2fce23cd72b66554fc63a64875d3a399bc1810ed4e641eb6710c1e4ed4662113bc329241c6e92c0e44c68f355cf428f9b91e77c0949cbd3b09d2799062ca95c4","ssdeep":"","tlshash":"d790022119705196c516d5808df2175adb306d15449561a795488f22491e056d468d7b","first_seen":"2025-11-22T23:36:52.75874Z","last_seen":"2026-07-22T05:19:33.312281Z","times_seen":6,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/libs/amcharts-core.min.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/libs/amcharts-core.min.js HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Oct 2023 10:37:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e0-e6db0\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2hxCjpN2HwFkpW7UttgPT0%2FlkNCfmntBVV2OSoohnz1aVJ2Ne2UCenZhcd%2FdJBhSDw%2Bigb9Fg43iaJ718OWVY8COT%2B6bgiL%2BMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112048c65ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":945584,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"768caccf33a9240c6ade6f6af57b7e93","sha1":"ac42c7e02b428bf8ba3b4ef984b9159834e72651","sha256":"9390b348ff1da5a704cf3664eae6e8f8b6e73cbb547b0de39529bc4847291ac8","sha512":"a27a1560c3f30ba06d66d089c4cc9eb512b50a9545e1f7e3e7de2a25414e14bc98afe622b2940d470c3ce8cf66680c85b7b2964c0f5c601ff2c7b44c9e67123b","ssdeep":"6144:jOn5RLpCGjKNEarkbI79Chru8+3vonV+1c7SiAfMTXZIuN9tQ4p8PoyNRanj6K:7Ear1WX+3zimibNc4SPoyNR6","tlshash":"0815d688b795762143c3a1e8442f150be33b24aca42940ecf675d8e6acbd94d217bf7d","first_seen":"2023-03-10T08:16:23Z","last_seen":"2026-07-22T05:19:33.327628Z","times_seen":100,"resource_available":true,"data":null}},"time_used":1869,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1067,"receive":802,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/js/vendor.4ebc45fe86993b751268.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/js/vendor.4ebc45fe86993b751268.js HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-1765f8\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U0OLixQctC3ftZbe1vLO3QHkrSneHwvfPNaREYv7hvY5lbPUByn9TPlW1O2SOwVEZf6FcyFIEPm4NEXarUVevqgrtTLR9pyt8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112058d55ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1533432,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42886)","md5":"96f49cc016b286e190e76deb217da3ba","sha1":"54888b7326ae7f2d177204300fc3b2c503910292","sha256":"95793e07b5d9a6cc8ff563e8b1c195802f9cb2162cb83d9b2e7f78e49f0b924e","sha512":"3b45272ffa7b5443a81e3491c2f73b474a3ca2c0b1d0973047bcce17afa29d18791e6d2bad4efad1dcf8e9a0dabe5f157b37187386f5e4cbdfd875d0de1fb80a","ssdeep":"12288:4WUipJVGfxBMPvinwP0nU2gWI4FV8AJSKPBFj9d6LV:4bilIxBMPajnU2guFV8ATr9d6LV","tlshash":"1425e7cdf291b07143a371f1502f160bf237686d644a84a8f6a5d8e66cb898d613bf3d","first_seen":"2025-12-23T16:00:12.432139Z","last_seen":"2025-12-23T16:00:12.432139Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1070,"receive":1066,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fgrcbit.com/api/index/logo","fqdn":"api.fgrcbit.com","domain":"fgrcbit.com","tld":"com"},"ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fgrcbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 22:08:19 GMT","end":"Mon, 09 Mar 2026 23:06:59 GMT"},"fingerprint":{"sha1":"38:6C:D7:4C:44:F8:0F:A5:6E:96:55:32:0F:3C:23:BB:79:0C:C4:FF","sha256":"AF:3E:50:C8:78:8E:65:DC:F5:9F:DB:20:3D:6B:86:37:87:82:E6:9C:46:AA:3A:E9:F2:8F:49:7C:11:70:3A:32"}}},"request":{"raw":"OPTIONS /api/index/logo HTTP/1.1\r\nHost: api.fgrcbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,x-requested-with\r\nReferer: https://kiomg.com/\r\nOrigin: https://kiomg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://kiomg.com\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization,lang,x-requested-with\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8rhidPXPOWHckjBM6ivwNoXtx0pBr%2F3XQCcggUvLYIA%2FAVQwkpTSTj7DUaeNMznQ%2BIYKNOilHAtGF1dhz1OiMesvsQBi1zuRxT%2BH0oM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b291132696ab4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":1023,"timings":{"blocked":71,"dns":1,"connect":6,"send":0,"wait":876,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/js/manifest.8e6d3b8f5e43f40b6e46.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/js/manifest.8e6d3b8f5e43f40b6e46.js HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-5de\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eahc9WFiqcySzIDcJ8ADMjQ%2FFDk3e5Q5f90yFC41bU4VBGSh2oWbIbJtAfhNeGcmO0OvAOgrz3kwznurnqWRXvPcIToh0SW17g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112048ce5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1502,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1502), with no line terminators","md5":"b4646e0b4ef89d11491b67755b57003c","sha1":"95313689eec1170a5b1d6c4762aa12e90d5e4fd8","sha256":"c689bd8a9abfcd350629a7e8e18ecbbc9aea56ee47fbfd1d2bd32c2cbed31e7b","sha512":"57524f7a2a6761c756cfba4c332d86238039ba6136b5a3f71cf1f5a763819431386247cd45b8b95af4ab0f41da85830e499755054162110c6697feae7c6e19b8","ssdeep":"","tlshash":"a93165c632a6f5b613e75868503f9025f03d7923082ded84c34ad192bd35c564219fb5","first_seen":"2024-12-24T04:23:29.129322Z","last_seen":"2026-07-22T05:19:33.344025Z","times_seen":10,"resource_available":true,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:36.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 15:59:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1046\r\ncf-ray: 9b29112d9d8632fa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec2-ad3\"\r\nlast-modified: Mon, 04 May 2020 16:11:46 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 299497\r\nexpires: Sun, 13 Dec 2026 15:59:36 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=c8R9QIMWBYBUPOHZBHG3MR2C94bWlgnJj6G7xxBbwU8MJIuelbbPtgNFI8a6PJAOoka40ZpjzJKQv59KbH6qmoi8q44eG3ntYlIIWDqbYF4yu9yI2FDLlOqEHL9DmNttTOj7dT1m\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2771,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2609)","md5":"d5843dbdc71ff8014a5eafd346a262da","sha1":"127e1d971efab9341db8079f10663dc28e8e0a2f","sha256":"8e73a30d35c83ea6a597c3343324d2b7df097ad26e67b62efb5266ee12d317b5","sha512":"ac28dfa1a6fd09528e1ffc3f4fa19b0719c01f9033872e3eab51175b95c451179f1db22445b43ef9947e1810a5a37fdddeae7cdd7fe03b814a98e16e8642ab74","ssdeep":"","tlshash":"7e514241671662f381f60f36b12fb642713ad015140328b2b9bd9d90aba6deb5363d1e","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-07-26T21:52:22.121686Z","times_seen":16109,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":24,"dns":1,"connect":1,"send":0,"wait":10,"receive":2,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/img/trade-thumb.344e618.png","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/img/trade-thumb.344e618.png HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-2aa5\"\r\nexpires: Thu, 22 Jan 2026 15:59:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KjUU2BwFGVhlTfkp89lns3c1Om1I3onFNCEVZtGr0GrPHwqlw1CXJ%2Feox8wd3ckZyMyqKmCdgU5%2BhG7kpiQAlziXMjTDRVHEog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2911314a7e5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10917,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"344e618aa9b19f14a303b0c0242a2f5a","sha1":"9cae5cdf740481e5c8228f4c6654ec6c0a7a1142","sha256":"ba1d8e25851bd113a514bf5cfdf19c32a1f056c4ee3a99e7870eafcb6f451ff6","sha512":"cbaf65f5963d0da0ec01fc9873b1235fe752c6a38049b8d3c16d9d4a9a4729786ba91eb44a01f0557da6897db7d24684b204d3de7f694bb9e7eb26a4025b0952","ssdeep":"192:kpsWXf5KmKeqMy9c/L7ezpm2FFFBkp/eZBiCzw+v5C5hzlWHb7:zqKLa5e02LF6/sPRsh2b7","tlshash":"2332c02b5342dc0a600e1dc00cd4d0008fd63ecc51e7e870a19bd4616ca6befd865abf","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.334474Z","times_seen":46,"resource_available":false,"data":null}},"time_used":1042,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1042,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/addLang.js?1","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /addLang.js?1 HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Jun 2025 05:46:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68510140-7014\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8NfsM3Uu3zJ64Sm%2BjYkC4UR%2Bnz9AUVoOVQAvR51IX7MDrTQmn7CwnGrMpWljPeQ9vbiVMc3IEvMGNaemWH19T4NWdWzzZLqU0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112048cd5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28692,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1450)","md5":"8fe16ef6548cc72cdb7905bdad57f2eb","sha1":"679f69645598b6ecb8c5e127105ae7c7e9589d6a","sha256":"d0c05f2316f6c3a0f9331e15c5070b0f978825c89b10618c8226c0ef752df92c","sha512":"959ba6a5085775961ced05625ea0d3051f7d86278ed10fd0917f218c6a0bc9e1500d308d160eeeb7d270ac3a4be02b9d40e1448862c214a0ace408a9d803882a","ssdeep":"384:cC1CBbo1OAAkh1Nkh1+XhDtISwiegpelU:cC1C9kOAA8P84xXpgU","tlshash":"2cc222f603d954fc06a2c8db91b0b128919b31f74eb16d4dfb988e0b6bd01b8059fb95","first_seen":"2025-12-23T16:00:12.435795Z","last_seen":"2025-12-23T16:00:12.435795Z","times_seen":1,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":821,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fgrcbit.com/api/services","fqdn":"api.fgrcbit.com","domain":"fgrcbit.com","tld":"com"},"ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:38.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fgrcbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 22:08:19 GMT","end":"Mon, 09 Mar 2026 23:06:59 GMT"},"fingerprint":{"sha1":"38:6C:D7:4C:44:F8:0F:A5:6E:96:55:32:0F:3C:23:BB:79:0C:C4:FF","sha256":"AF:3E:50:C8:78:8E:65:DC:F5:9F:DB:20:3D:6B:86:37:87:82:E6:9C:46:AA:3A:E9:F2:8F:49:7C:11:70:3A:32"}}},"request":{"raw":"GET /api/services HTTP/1.1\r\nHost: api.fgrcbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nauthorization: bearer null\r\nOrigin: https://kiomg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://kiomg.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2BvtjovTt9StlRkhf2pGiJ8wmDqrjqWbbgQhI0bk94tfuB5t3FSWEyUHXE4VgXQUQvFa8JtT6h%2F6Y3LvdfLsv37DSocpOx4492hrvpQ%3D\"}]}\r\ncf-ray: 9b2911383e6eb4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":169,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"91f2fd0c9db202cbb14968d2a02a82f6","sha1":"8a9ae1d5be6fc98f7622d7643dd6a1ba84350d47","sha256":"d9ab6045427979bd218dd5a8b7eb715d209102e09ea0a7ec9958f7ee7f83232a","sha512":"b5cb5fafc1ae4cce329684c0d79540bc72715ee3dc16aed9f0d2c6ff5c5eea14ff2d4117693a44f9bb8aee9db32149f37544fa970f225cb2d2186684e29b94c1","ssdeep":"","tlshash":"f8c08ccf2805ad6cf606b8612e8ba3c870c13486a0cc1c1148841a1c5302ae04052132","first_seen":"2024-08-20T14:44:13.092139Z","last_seen":"2026-07-22T05:19:33.324749Z","times_seen":58,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/animation.html","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:38.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /animation.html HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/libs/popper.min.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/libs/popper.min.js HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Oct 2023 10:37:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e0-842b\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nPqzspE05o%2B9TbO7QHvBpY%2B5VfJ%2Fx7nJFByffyG3ZNQViAu5WllmqfWbWs40ZyDiOMgzDFZMQtLV8Xb%2FiNslb4zVOG%2FzZ6Vsyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112038c45ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33835,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (855), with CRLF line terminators","md5":"bb572267def5eeb9c320e89ac4896691","sha1":"6f9bf6cbf9d34323fa0173181af910a02d7e970f","sha256":"3eb02ee1a4115989f36a398cce144d32dcbb104647363728188f53ccad635ce2","sha512":"3e1ef1b8a9838c17f8ef5fbd283d73aab403506ab1aae6640ea8bc889f5ed74726cb4bef118de085c0ff7d112ce21c75da4f4f827a599766fee2b7855f8fff0a","ssdeep":"768:R2oVnfhIiL13D+4bOSawrU3Xv0OdFTR2oLNhDR0MGiDi+XrJRs+dAOurfCSO7DRD:d5xT+4bOkruFTRPxhVR9M+deC/qmo/yb","tlshash":"f0e262887ad171358637f36ad96fc90df336166b1386600235bca0991f71da0927aefc","first_seen":"2023-03-26T01:50:35Z","last_seen":"2026-07-22T05:19:33.333535Z","times_seen":62,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/img/home_bg.3183fa5.png","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/img/home_bg.3183fa5.png HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-87fb1\"\r\nexpires: Thu, 22 Jan 2026 15:59:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=71GaloJiKQjs44BUBJBEj9j%2B9c1SsyRBjANxZdvdodT8i%2FlKwTOPfgEeAxKyobkldq7iSN2MvPJl1YKU5FfIBbr5wmWcoHeJEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2911318a885ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":556977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2880 x 1200, 8-bit/color RGBA, non-interlaced","md5":"3183fa5c610a5babaf3b1dff37f15ab2","sha1":"24a1d08f165295f4465bf6b48792fb74f937bf26","sha256":"e862ea55b2f358e1798606bad2fc2960244f86ed2c9af51254fa708aacdc416f","sha512":"a04e3b9a2835efb313d93abb88146a444aab0d6ccdf95c5d3c8b854906a036c47cd8001d194729c568168b4a176cc6cdb98c7b4c97ab296eca45df295398ffdc","ssdeep":"12288:3ezLOmRIfFlQAhWahMTd6RO/c6FgdqDnZvR7NpFVK7sgga/eUr:xRQCWX6RO9FFJZp7egg","tlshash":"77c4ad169380487aabd4de4567c708d1c05e7a3ffd1fca902b5326db7a87bdc1938a09","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.323747Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":1066,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/favicon.ico","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:39.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:40 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Thu, 22 May 2025 09:33:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"682eef7a-5dbd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lx0WJJaliHTW8Ux0i2nEQINQF03uA1SBp0ql%2BG0i2257S3Xz3cn%2BHHrrS80Rx%2B3HUPs1urV4d9gYi9GoFCWAcuCiv6iZxdhtiw%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9b29113e0c2e5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23997,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"f3201021c60c5c21e576a4996ef2aae1","sha1":"be71033b2d4396603a2602d7edc18aa5ee660698","sha256":"20edc8d2f411feafb571bf4e18678ca0c4eb68de2660b568da8998427185e920","sha512":"c679bf136b7aeff3feda10f96742f6e5d7c4c9e7d53b0ff9a0d25bc958dcaa0bb2ea4b6d03c6936be5ac4b98d1a1eb5c4cb0be87a9f073d4a1a2e1155ca290b9","ssdeep":"384:bmB5bxy2m9BOLe06WlTL4w3y3etVFzxTfnlzGm3V36EOqaJb51fGw3hBx:bmbl3m9Yt6W5L4wbFVTflzGm3V36Pz13","tlshash":"79b2e14a5e978bf0827a040b53ffab00b426f68bb6033b66798654e97907a017f4537c","first_seen":"2025-12-23T16:00:12.43867Z","last_seen":"2025-12-23T16:00:12.43867Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1089,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/css/bootstrap.min.css","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/css/bootstrap.min.css HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-354c3\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4SA%2B6xalWwTn3gWr4gN0m40BPeXWRViJ2vbuQrj37i7UcZOqQszlehVwOGxAqg32pjt4yNH3DPOpovcLKhyqooxMJhO94u2srQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112028bb5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":218307,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (625), with CRLF line terminators","md5":"5f6601df027bd7e6193d3f6d49ec7a61","sha1":"21c8b4ed7edc69fbccd0be15f2156a7c3d6936a1","sha256":"09562d67f2fe2ed6acac5200946feed3a0ac12c6b7c5eaedceccd9e2e1270762","sha512":"93f765eeee4bcaa3602460c2e59cef669a4b4ba6f8433aa26d58f2a20256d9c0e6b4cdfff49d60468c69391eaf796b763fcbebe2b1fe2c6dd0758c1013e8037e","ssdeep":"1536:8puz5JZGvZ8Sm7MvvrCNcYyB7FM8eMdd3jIj8E5OQRCvi/0+EwR3rXP+bJG3xBJn:Ojh8SMDwSyGB4EajgLrugzrj","tlshash":"55246616e601210a9573cb7c53e16775ebbe0167ca02c5aa7eaf73444fb97d08d22e8c","first_seen":"2023-11-30T21:06:09Z","last_seen":"2026-07-22T05:19:33.336953Z","times_seen":58,"resource_available":false,"data":null}},"time_used":1108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1054,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/img/safe-thumb.ce748e7.png","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/img/safe-thumb.ce748e7.png HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-272c\"\r\nexpires: Thu, 22 Jan 2026 15:59:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0AqwCiO4tpFKZIJ9OpbU6jRpG%2FKIAE%2FWyn2G0aSWr%2FV%2Flf7W9T3EVM2ZJTnTDdheAaTAZHcFWn%2BHlUOxs%2FDcUY1S%2B8VTpT6zjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2911314a805ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10028,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"ce748e7ccfa7f31555610d7f3b2edcb1","sha1":"f13f43b2d17c639f7e2c7dd94395fab59653829c","sha256":"b2fbb5eb0ee93f28b2bdda964c84dfaa8e45452456b8ec1b63d1e09b7d52cbc3","sha512":"f17877f4e77a99f7d027a6d3f80f166abbd59797447fa61e7b5ab5f0b65c86978c688f864abed149047165ae5268daa9a5b91fc43010ff282606455cf41346a0","ssdeep":"192:kp4H3P1J7nnW1IeqT436yqO0bVLxb3ha5a7suG5BcoAg4CryM:/fReq9yqtbVLxLTKXrA7Cr/","tlshash":"6922bf68bf06cfb0e62c446284671c379d1796b4c4a112ec6c29609c8dde3fbe52e7c6","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.334976Z","times_seen":46,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/img/trade.4fbbd27.png","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/img/trade.4fbbd27.png HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-368e\"\r\nexpires: Thu, 22 Jan 2026 15:59:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qsw9h54AGf6Bb5F9q91Z4JeNhuERUdkpcDVos1jhWCcaMavayJnTZKvQh94qyFT5Dq2kAj9t3VpfJRf88mvwujOWK9Pp4i72MQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2911314a7f5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13966,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"4fbbd27b57382c869a54791bc5374fdf","sha1":"95e2ff055693c78a104e93f20167083293062935","sha256":"0756b3ad5e8d6afe02057dd98ccf31180687fe6b5edeccc61fb54f7d7e24f2c6","sha512":"0a9c4e29a469106a832dbe5a42da3b287336feb3bc46f712f02b4036e241c571c9085db3fab3176f344fa106c5c24441f942b6fe1e246ce01c14de9a4544475f","ssdeep":"192:X52iFcUOE2+s9fUdNVjYP+yFsaIJ8wcPXloDu6c5bmB+NGn2ft5o2TvvbAqK91s4:QdE2+cwbyfE8wmCq60bmQGn6o2/KdDX","tlshash":"7252d150cd7e986cbf6d364414e54a3d84c295d7db48c07aea2507c5ec04b2359d6dcb","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.32087Z","times_seen":45,"resource_available":false,"data":null}},"time_used":1079,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1079,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/img/tech.930409a.png","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/img/tech.930409a.png HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-5f60\"\r\nexpires: Thu, 22 Jan 2026 15:59:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CuEBQhZZBirax9GtDqr7Ldnu1xzJnThlB9ngMNU53H55mt1fwKUlfX58hc7kmMqHvfPirHF%2FivjBYr9j6RmpK9t9ZbjCXrwVNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2911316a845ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24416,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"930409aceb2d06ababa68f3c87d34745","sha1":"ec030443abd7c6e11851ef2f6c269df88459f69e","sha256":"7426622ace5688b52c6b8e709809da6f55566fe4e88ac09a7bce89518b913912","sha512":"c695837167c479ae41eb57ba4e75854d0602c14a7e94f885ce929683062d74403ad3d09a3c0c043bc9a6a16d3d1ba1b0336dc6f59db8d4138b899b0f93cb1d17","ssdeep":"384:UVDY2NnWGf0mgtHMNog18/nimd661cPkxsyUghGZCPJRYZFhCQkxD2Z:TQT0mkMmnt4a+yUgPJaFhHkxDA","tlshash":"d6b2d033ffab8152c91df8471ceb0866a9355db455805b70830f494daeaa2e625ff10e","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.32424Z","times_seen":46,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/img/img18.6d9f195.jpg","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/img/img18.6d9f195.jpg HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-f9c6\"\r\nexpires: Thu, 22 Jan 2026 15:59:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JyxN5%2BiFw5DarDV%2BDrFV3Lt56xmBZkEV2lQ8TRv3%2Bhd5kVOvxYz8WYIeW3UXUdXm0FcK8gzXrTVDg47Fm0NB5FtgDfH9Uf6VBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2911318a895ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63942,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2880x580, components 3","md5":"6d9f1951adf4e5fe56fbede747e84d34","sha1":"f3d559d06472705496f54ac94a989ebb7ac4928a","sha256":"e376149ab9b0ce6a92599e821515fa096e78d8e97d4dbd8b0beec711ac50b352","sha512":"9e56e1ad9ae24bd8e135bc6d7362a18afae41f6470087d79b0a342d1afc8bef3fc821f35adf30d1872497977ea4eff049f531150d292da64cd647290befec426","ssdeep":"768:CM+kioK9BWObP36Jx26Lufa8KcU7ok2ioVBRZKgJS+xY3bby4KbIxQLGn:CEMWOb/OChK5kk2ioTbVk+xAe4KTGn","tlshash":"f953f16673856045dc2803b990a743159fa3eda9eb17ce323c7689bbda717d2bc0d324","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.315411Z","times_seen":39,"resource_available":false,"data":null}},"time_used":1317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1056,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fgrcbit.com/api/index/logo","fqdn":"api.fgrcbit.com","domain":"fgrcbit.com","tld":"com"},"ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:38.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fgrcbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 22:08:19 GMT","end":"Mon, 09 Mar 2026 23:06:59 GMT"},"fingerprint":{"sha1":"38:6C:D7:4C:44:F8:0F:A5:6E:96:55:32:0F:3C:23:BB:79:0C:C4:FF","sha256":"AF:3E:50:C8:78:8E:65:DC:F5:9F:DB:20:3D:6B:86:37:87:82:E6:9C:46:AA:3A:E9:F2:8F:49:7C:11:70:3A:32"}}},"request":{"raw":"GET /api/index/logo HTTP/1.1\r\nHost: api.fgrcbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nauthorization: bearer null\r\nOrigin: https://kiomg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://kiomg.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PeVTSh6u0KFRo5YgulqSUmDXGC49LRXK9mchBGfKudao%2FrWrmxdtMika2xM35YffxTMgnmSEAHv5mH7PZi7ZQWHgxt2FkVHBwuzb3Xg%3D\"}]}\r\ncf-ray: 9b291137ee39b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":914,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dacd89861bc762bd2c561f48341b8ed2","sha1":"00f06d2f9d383583750dbee65d40dce187e0f620","sha256":"dd68152835dadfd379ea3cfc56a29be21f464312064983ff3cbc57fa7b3f746a","sha512":"e45d5cddfd25406acde0d3caa728a2e189a4fb117f20bc1fa471cc0c64e95e7cbd2977b00cc4b4bd18f5ad23c375024bbdb35d273db420aec423cfd65d984f9e","ssdeep":"","tlshash":"75117aad1b4854b7074222c93c9f3918cc9e325b7c09d2b7972fdcae88e8768750b497","first_seen":"2025-12-23T16:00:12.426535Z","last_seen":"2025-12-23T16:00:12.426535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/img/tech-thumb.5e1d4ef.png","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/img/tech-thumb.5e1d4ef.png HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-2989\"\r\nexpires: Thu, 22 Jan 2026 15:59:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zVHNSSKOj09WjizgJvgPQblLzjpv0DOa9brOnW2fIsoOs3u0N55J8Iv6Vda2Vb3q5bsfAa2OmmTxh8Ea2yTU4JUm%2BiFE0hMK2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2911316a835ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"5e1d4efa1b84c10c786a3c9a92fa8179","sha1":"5d59253f718d1028b3dd69802f68b8bab63da3db","sha256":"8316e5394d40b719c9ce2c8ffc900ee6b3f00f212a77a2a03870b516edbfa16d","sha512":"f14e93e98b1981d60c917d6e2fa68fd783063bef2eb7d2ca70e20263d642f3e25bf4a740fe2fa29163ea69824eadd4f3d1f9f84b274687a3915dad9ac4a2cd43","ssdeep":"192:kpOM8mg2UPVMx27DuO4woFEIgu+0TKBPy4yTdi9TdOMYoEPEXyLNm:i8VN37DQZFEI+aaPodi9xIE1","tlshash":"b322bf34f1f554274ec9e80d20b5b1c0a8418f059ba1694df9f26a2b8970bb3cdea5cb","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.338744Z","times_seen":45,"resource_available":false,"data":null}},"time_used":1081,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1081,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fgrcbit.com/api/indexList","fqdn":"api.fgrcbit.com","domain":"fgrcbit.com","tld":"com"},"ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fgrcbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 22:08:19 GMT","end":"Mon, 09 Mar 2026 23:06:59 GMT"},"fingerprint":{"sha1":"38:6C:D7:4C:44:F8:0F:A5:6E:96:55:32:0F:3C:23:BB:79:0C:C4:FF","sha256":"AF:3E:50:C8:78:8E:65:DC:F5:9F:DB:20:3D:6B:86:37:87:82:E6:9C:46:AA:3A:E9:F2:8F:49:7C:11:70:3A:32"}}},"request":{"raw":"OPTIONS /api/indexList HTTP/1.1\r\nHost: api.fgrcbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,x-requested-with\r\nReferer: https://kiomg.com/\r\nOrigin: https://kiomg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://kiomg.com\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization,lang,x-requested-with\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6hc1QErCAnFXjkjUJ%2FjpzxqfM%2B7jtpMhmsdFTb9m%2B4P8iTP%2Fw5y%2FDM6gGV8StHXO3HIeNnVvmRVM2y2ScXsGMcn6O1wk5R9d0vlpc1Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2911325950b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":964,"timings":{"blocked":3,"dns":1,"connect":1,"send":0,"wait":884,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/animation/js/index.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kiomg.com/animation.html","date":"2025-12-23T15:59:39.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /animation/js/index.js HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/animation.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 18 Oct 2024 01:56:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6711c044-180d\"\r\nexpires: Wed, 24 Dec 2025 03:59:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o1o%2Bt8Zqky6iHPd0lnFfY4YMZw%2BNDh3LZEEvjjOKi43Myn7v%2BrapZyu3afjjMIYgvRDAmyVvQUOlK6qJib3bslgyCiPo0C4yBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29113dcc2b5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6157,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"60d19456f6ec5a46b799807d0d4fd4c0","sha1":"25c73ebf34c7dfeadcc0ed474260e816d5632e15","sha256":"4020eb8990bb8510716c0a5ae98579a3274d0a9370f52848c48e9b37312cb64a","sha512":"066a213f777f9e2573e32c2096ddf33917f6673dc801670a42efbe940c8d91d9e184d6d3cbef4380ffa704b023e55c00ff71916cc920034431cd1dc199a292fc","ssdeep":"96:SvxqgHllEb0piWQfVf623+mEPCfvihI9SKcTc5+Emx7jDsgsNWf:Sppl5SfVintYvw0cTc5+tjDDsNq","tlshash":"c4c1ff69d9e21e74f567222d8fff15081642b0130589c919bd0ca28c4ff6844ebbfadd","first_seen":"2025-11-22T23:36:52.762535Z","last_seen":"2026-07-22T05:19:33.332481Z","times_seen":6,"resource_available":true,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":821,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/css/ionicons.min.css","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/css/ionicons.min.css HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-b0a5\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fHwR1u1HwWMqZdidahuSPCqkHBbY%2FgkrfzoqpXkcAaVOaaW5DUdhDpmcFZP5WhLrrc4btaZCcwJGrSXVYpt%2BdDeyDQyEYsnx%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112028bc5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45221,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (43353), with CRLF line terminators","md5":"3fe81a59908562fa88da73e4a0da9c15","sha1":"8e6ccd51f7b4a9a1352d8b9c2e37a87cc3b59bc8","sha256":"55ae7533b6bbc9ca2bf6773b81ea3dbf41c114e0a91d8e5601a0414354a1fd4f","sha512":"9a83b6f7994e3162c6240e94c09ada15b1b2aac97b61b415b340654d44f9b1fc912b085a8d70b2259a0669fe8eef2c6908f9e8ba4c5c85b611b43f559260a465","ssdeep":"768:Y4OFr0VnCv3Kci/sBLRyY99GZ+d4cJRsxVonU6hP:Y4ir0VE3KBsaY5RAW","tlshash":"d513dfe9d04e0cd06b32c853830a7b5d2835f6f6e1445de9e02fc5ad6acb215a6e5b3c","first_seen":"2025-04-11T04:20:19.44813Z","last_seen":"2026-07-22T05:19:33.316456Z","times_seen":54,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":792,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/libs/swiper-5.3.8/package/css/swiper.min.css","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/libs/swiper-5.3.8/package/css/swiper.min.css HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-357a\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZTlWzuIYKlnvjul11jDfQKEwZHQs%2FxfV0m2CjyyiNdw9OUPzK%2FCGDmMPcykuFieouEBsu5lbg8W4nW0sazX09QBm8I4o1KXkGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112038c05ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13690,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13425), with CRLF line terminators","md5":"5eaa41b0ba32cbe56094525b97f776bb","sha1":"20bad4ebf046c9cd1b53e9601bd2d4a331655792","sha256":"26131597dbca0b6967b126410695c81499c6695a950f71e8fcd1bffa27f305b2","sha512":"bedd6543466f0609f0f5b6e3002347726f3cc572afc7f114a97c8a9f3f299151739494dca56de0d6f6a120919004aa5931da42703cf24429b877f41c9507ab6e","ssdeep":"384:NQUbeQS7Rgx9BU0m/XCcif65W/1mXA82FHpx:N5b67gbhm/XDif65W/1mXA82Fn","tlshash":"2f52236417003837f3774f6e46a1e6b59f60cc838a934d9db2c0dd44d6f98b9121eb95","first_seen":"2023-04-18T23:35:15Z","last_seen":"2026-07-25T08:22:33.809145Z","times_seen":179,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":799,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/libs/jquery.mCustomScrollbar.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/libs/jquery.mCustomScrollbar.js HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Oct 2023 10:37:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e0-174ae\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CaeYour%2FXLeLkKWmw7ZQX5XT%2BV73FckJ93ET%2Fb28szwJ%2FewJg%2B3tUDX94Rx9%2BNn3iuaEZOLgXs273oYQ5PAisQhRckOK4gITQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112048c85ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (732), with CRLF line terminators","md5":"50c803e1483b1bbb1531fea61f849d98","sha1":"6643dec32d981aeeda46f85ee130d74f14732bfe","sha256":"72f572c5dd07fac37e4163060402399196415573f52a70526f0e8a848bf1cff3","sha512":"0d629ec0f1124ecef1b8825683be82bdfad7bfdc108759b9b49a23f8471c85ef65ebb132fee861e7786f0f5e4c2f28f1685260f7f8b516c54757274bad5b1122","ssdeep":"1536:nEorxUmVhC3gSFeqmmmV6e57Otjb08ntV8:XKgSK48","tlshash":"f893c7823f0c34eb42efd31e543f8249ee2dd17b8301b4d9b4e8996869d055593afa78","first_seen":"2023-03-07T01:42:51Z","last_seen":"2026-07-26T09:45:25.840148Z","times_seen":329,"resource_available":true,"data":null}},"time_used":1084,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1070,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/img/analysis-thumb.ad12687.png","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/img/analysis-thumb.ad12687.png HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-2dfb\"\r\nexpires: Thu, 22 Jan 2026 15:59:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CwOpStgjTDpmJv8X9NEuvnLBg327RwucjLY1RSXahIZVP1r%2BZ6VlRf0g8k39q%2FjGtVzTSJWId7j7NfMFXXptU8vJWd39d5YUvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2911316a815ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11771,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"ad12687d6f943a28ce564607a9440fa0","sha1":"fb5b80ebac555a0c66c0bee1bdd28d89d1351313","sha256":"8fe66d2a6135490129a2ef9c183da297eee96d06c5b265da50ef309c78dbd8c1","sha512":"634fb2eb82db1c6b9652976c3e9462cb1f461c508c068729bc9e20d5f45f2ee9d802d61a8ff54517eccb0754b6b5cf3561788778910123288435cce1e2045448","ssdeep":"192:kpu0lQA3Yp2WOmVIqhCSOhO0VoWvTdz1W5bY/SxgyupcV7zucVjqNpeK5Pqj0:9xA3QO9qkVj7diOSwpcVnSpeKu0","tlshash":"e832d18d6e2bb50c66dac241339a543adce749427dd29a0cb1ea4ed34c301a6a4493cf","first_seen":"2023-09-20T06:42:39Z","last_seen":"2026-07-22T05:19:33.328987Z","times_seen":45,"resource_available":false,"data":null}},"time_used":1071,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1071,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fgrcbit.com/api/indexList","fqdn":"api.fgrcbit.com","domain":"fgrcbit.com","tld":"com"},"ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:38.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fgrcbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 22:08:19 GMT","end":"Mon, 09 Mar 2026 23:06:59 GMT"},"fingerprint":{"sha1":"38:6C:D7:4C:44:F8:0F:A5:6E:96:55:32:0F:3C:23:BB:79:0C:C4:FF","sha256":"AF:3E:50:C8:78:8E:65:DC:F5:9F:DB:20:3D:6B:86:37:87:82:E6:9C:46:AA:3A:E9:F2:8F:49:7C:11:70:3A:32"}}},"request":{"raw":"GET /api/indexList HTTP/1.1\r\nHost: api.fgrcbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nauthorization: bearer null\r\nOrigin: https://kiomg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://kiomg.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uPNVFeGJixdf6WNF3%2BV9f6oGGXu32zw9GGSgh%2FoX73LKWLYqSIDqe80hrnqu8o%2BUuahrbOju3RsAhufd5HKbYIkxO3PoYpelsWAeeF4%3D\"}]}\r\ncf-ray: 9b291137de29b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20693,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"93dba1e0404bdf0ae4a847d2da05d55c","sha1":"1b6f7a466a28c50ced1bcb18566bd79322bd8d18","sha256":"9404bde491a88ab8c9844a3e6627c522eb4a8248e789528f96d79ce14732b26b","sha512":"b80f105169b8414418ffe058537c426bf59bde090d6756069738b8cfa844e2f4e998aefdf50ef0abcecc73a7de0ee124b4f6f588a206921b6b855b5b7df6f331","ssdeep":"384:70QMI8WvK45DAwrbg8aXN/TfqgKxByWG8trRKQrpUbrm:gQMI8WvK45DAwrbg8ad/bqDA/8trkQr/","tlshash":"2f924003771e126ee5b477c11c9b3a561cec210e7a819f5b87a7df6d82a02be6313921","first_seen":"2025-12-23T16:00:12.448208Z","last_seen":"2025-12-23T16:00:12.448208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kiomg.com/static/Kline/charting_library/charting_library.min.js","fqdn":"kiomg.com","domain":"kiomg.com","tld":"com"},"ip":{"addr":"104.21.32.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kiomg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:10:55 GMT","end":"Fri, 13 Feb 2026 10:08:39 GMT"},"fingerprint":{"sha1":"D9:0F:61:E2:E9:52:BE:A7:2C:22:A4:62:64:9D:89:C6:FC:78:6E:6C","sha256":"FC:60:D0:4F:5B:5C:A6:EF:BD:00:69:1C:AD:67:73:70:3C:0E:0B:7A:33:FF:65:D7:7E:3E:CA:15:DE:B6:80:B7"}}},"request":{"raw":"GET /static/Kline/charting_library/charting_library.min.js HTTP/1.1\r\nHost: kiomg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Oct 2023 10:37:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6540d8e2-26ae\"\r\nexpires: Wed, 24 Dec 2025 03:59:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yw6aecsSRLxT2RtOFIlRBe0muWoS46hNcZFaaH1fl%2F4YtDEr1qlCKJJPxqlp4XiBANW0R7wqe5Lre4PkHlFlvUypWg3lI%2FsDQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b29112038be5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9902,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9900), with CRLF line terminators","md5":"1b4daca49ae2c0225a9232dea2148df1","sha1":"fd3711c6a439061420442f2a57b0b3a2968d3625","sha256":"eed6506775e8d1fca20b61a590e91c42c82550d2befee83f5d08f163bae4b296","sha512":"259daa40d4b442672f4cbb730e8f148b3488ccd2d18db890875edc411bd093eda9a8fb8933dd2896915ddbdb0585d8bf3755c576d61375e780d68b3afec254ff","ssdeep":"192:9o937kYFUdQ+lr6lw2rfnJ8NRLP6tyPPv1id3Kuv/ISJhv+HIhJPh3F6R:StkYFUG+lD2rfnaNRLP6ty9iJKQ/ISJ0","tlshash":"90123258ed2479320acb40f4427f290f9235d278d84a44ed3c94e6ec59fd847a96fbb8","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-07-22T05:19:33.31693Z","times_seen":198,"resource_available":true,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"kiomg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bootcdn.net/ajax/libs/pako/1.0.9/pako.min.js","fqdn":"cdn.bootcdn.net","domain":"bootcdn.net","tld":"net"},"ip":{"addr":"143.92.34.77","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:34.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootcdn.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 21:14:24 GMT","end":"Thu, 19 Feb 2026 21:14:23 GMT"},"fingerprint":{"sha1":"77:96:9E:F6:42:EF:97:57:72:DC:E2:2C:04:10:29:15:82:AD:F6:26","sha256":"D8:0E:9A:68:17:07:9D:DF:C2:5B:A4:53:DB:9B:28:C0:4C:15:97:D9:26:43:5E:82:8F:9F:B8:96:97:9B:6D:FB"}}},"request":{"raw":"GET /ajax/libs/pako/1.0.9/pako.min.js HTTP/1.1\r\nHost: cdn.bootcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodifed-Since, X-CSRF-TOKEN, X-Requested-With,token\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Tue, 23 Dec 2025 15:59:35 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-cache: BYPASS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45935,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45934)","md5":"99d196b019b1c2035542014be7358561","sha1":"2fe7fa28b970449af2117b0cafc7c6a0a57a96ca","sha256":"2a25910b08844294ca56e2e05b9a18594cec5edd4c0e7a113b6983cd51c987ac","sha512":"210140ffd744322c76b04c97bba05ec7c78010ef93c2f66b38e48408949bff8e6c43578c74d7a40699d4d7fb5589c6bd2fde27412a6d4bb911ea2d3c1ae6faf2","ssdeep":"768:7feBE5B3FA8/nVPg0kKWslV7hF/PGjMh+AEIzg49f3cG:zeE/9hF/+jNAEIEG3cG","tlshash":"9f23f6a630f651a82be118d8919b2b96217051322c0519f9e378dde43cb4dcfe17fa7e","first_seen":"2023-03-10T08:16:23Z","last_seen":"2026-07-22T05:19:33.327149Z","times_seen":82,"resource_available":true,"data":null}},"time_used":2576,"timings":{"blocked":1095,"dns":463,"connect":327,"send":0,"wait":346,"receive":0,"ssl":341},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"cdn.bootcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"cdn.bootcdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fgrcbit.com/api/categoryList","fqdn":"api.fgrcbit.com","domain":"fgrcbit.com","tld":"com"},"ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fgrcbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 22:08:19 GMT","end":"Mon, 09 Mar 2026 23:06:59 GMT"},"fingerprint":{"sha1":"38:6C:D7:4C:44:F8:0F:A5:6E:96:55:32:0F:3C:23:BB:79:0C:C4:FF","sha256":"AF:3E:50:C8:78:8E:65:DC:F5:9F:DB:20:3D:6B:86:37:87:82:E6:9C:46:AA:3A:E9:F2:8F:49:7C:11:70:3A:32"}}},"request":{"raw":"OPTIONS /api/categoryList HTTP/1.1\r\nHost: api.fgrcbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,x-requested-with\r\nReferer: https://kiomg.com/\r\nOrigin: https://kiomg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://kiomg.com\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization,lang,x-requested-with\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NboyvfRrZ2auVSNEdlhPJIxkj257SK%2BfR39SQ5fCUc0%2Ff9cKDZImhirNvl7V8BXE6C6HaRI8sUFUZrBl3dWrD0nLpuIsjROnEgP2qrk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b291132796cb4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":1014,"timings":{"blocked":55,"dns":1,"connect":6,"send":0,"wait":881,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fgrcbit.com/api/index/logo","fqdn":"api.fgrcbit.com","domain":"fgrcbit.com","tld":"com"},"ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:38.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fgrcbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 22:08:19 GMT","end":"Mon, 09 Mar 2026 23:06:59 GMT"},"fingerprint":{"sha1":"38:6C:D7:4C:44:F8:0F:A5:6E:96:55:32:0F:3C:23:BB:79:0C:C4:FF","sha256":"AF:3E:50:C8:78:8E:65:DC:F5:9F:DB:20:3D:6B:86:37:87:82:E6:9C:46:AA:3A:E9:F2:8F:49:7C:11:70:3A:32"}}},"request":{"raw":"GET /api/index/logo HTTP/1.1\r\nHost: api.fgrcbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nauthorization: bearer null\r\nOrigin: https://kiomg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://kiomg.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QbInEcN17zN2UKCKovPQ6YRYJl%2FvSiuT1Lr72q9D9E8hiWNR3jbnLq0NXLq5bK3ia8yDtJuApsjTxnqr%2BKdMuTy4v0DuKaEnilXV0DY%3D\"}]}\r\ncf-ray: 9b291137ee34b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":914,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dacd89861bc762bd2c561f48341b8ed2","sha1":"00f06d2f9d383583750dbee65d40dce187e0f620","sha256":"dd68152835dadfd379ea3cfc56a29be21f464312064983ff3cbc57fa7b3f746a","sha512":"e45d5cddfd25406acde0d3caa728a2e189a4fb117f20bc1fa471cc0c64e95e7cbd2977b00cc4b4bd18f5ad23c375024bbdb35d273db420aec423cfd65d984f9e","ssdeep":"","tlshash":"75117aad1b4854b7074222c93c9f3918cc9e325b7c09d2b7972fdcae88e8768750b497","first_seen":"2025-12-23T16:00:12.426535Z","last_seen":"2025-12-23T16:00:12.426535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fgrcbit.com/api/categoryList","fqdn":"api.fgrcbit.com","domain":"fgrcbit.com","tld":"com"},"ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:38.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fgrcbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 22:08:19 GMT","end":"Mon, 09 Mar 2026 23:06:59 GMT"},"fingerprint":{"sha1":"38:6C:D7:4C:44:F8:0F:A5:6E:96:55:32:0F:3C:23:BB:79:0C:C4:FF","sha256":"AF:3E:50:C8:78:8E:65:DC:F5:9F:DB:20:3D:6B:86:37:87:82:E6:9C:46:AA:3A:E9:F2:8F:49:7C:11:70:3A:32"}}},"request":{"raw":"GET /api/categoryList HTTP/1.1\r\nHost: api.fgrcbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nauthorization: bearer null\r\nOrigin: https://kiomg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kiomg.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://kiomg.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xaNWFD18UE%2B2U4MChdhkcgAjI%2BYVUQ0XCtNo%2Ft4CY%2FGUNfNAiJftDA8EZ4FmcSJgK4RX5BiPUjcGk1aTh4mjwCtQFb4ADOrieBWE3UQ%3D\"}]}\r\ncf-ray: 9b291137fe49b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"eabe7d7b52cdb1fe60efd41fbdc0efc6","sha1":"2f86114de0d6300fbd7ebc7e1231775f909c5e4c","sha256":"3305a7f98ea071ea02a0cc78e3634fa3bc6f5f5dd933ce690d5934f24bf56b8d","sha512":"dfd7f8b4e2ef905af090188ab54b2a5c8e0de9caf285b5cd5fc49c49ab63f5565c53296dfd2d42da94cd04931a798e1143f96e865300760a5dfc323f34baab56","ssdeep":"","tlshash":"cbd02b9c571c6c6f8bc07dd02d8ff714a3cabc0712c14c816680dea802104d421376f5","first_seen":"2025-04-11T04:20:19.396438Z","last_seen":"2026-07-22T05:19:33.339195Z","times_seen":41,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fgrcbit.com/api/index/logo","fqdn":"api.fgrcbit.com","domain":"fgrcbit.com","tld":"com"},"ip":{"addr":"104.21.60.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kiomg.com/","date":"2025-12-23T15:59:37.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fgrcbit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 22:08:19 GMT","end":"Mon, 09 Mar 2026 23:06:59 GMT"},"fingerprint":{"sha1":"38:6C:D7:4C:44:F8:0F:A5:6E:96:55:32:0F:3C:23:BB:79:0C:C4:FF","sha256":"AF:3E:50:C8:78:8E:65:DC:F5:9F:DB:20:3D:6B:86:37:87:82:E6:9C:46:AA:3A:E9:F2:8F:49:7C:11:70:3A:32"}}},"request":{"raw":"OPTIONS /api/index/logo HTTP/1.1\r\nHost: api.fgrcbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,x-requested-with\r\nReferer: https://kiomg.com/\r\nOrigin: https://kiomg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 23 Dec 2025 15:59:38 GMT\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://kiomg.com\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization,lang,x-requested-with\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lXLUfTb4Mc3BJmB54NONmh0xEBMAejfQHC1V63ND9x8hfrYos88HFhzr2di6RKvPtHmWYv8%2FCps%2FKCdWhGfQxM33mq6rBBxE8gFzbx4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b2911326968b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":1041,"timings":{"blocked":78,"dns":5,"connect":5,"send":0,"wait":877,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"api.fgrcbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}