{"report_id":"1079320b-8312-4a73-b9a7-682b44818ad3","version":6,"status":"done","tags":[],"date":"2026-05-27T01:33:40Z","url":{"schema":"https","addr":"vegas-pluscasino.org/","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"172.67.182.11","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vegas-pluscasino.org/","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"title":"VegasPlus Casino Online Ufficiale | Casinò con Slot e Giochi da Tavolo","dom":{"size":64791,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (52027)","md5":"0b67ac57df7baa74d1d09c57f8864bd5","sha1":"e5dad063e367779953cb3403d574f05410582b6b","sha256":"8ce23f6440a83bc989166bc39896fbbeba46f4bb0aa818519cba5827420c82ce","sha512":"7a8bb1661a276446480dae4efd230635a5de5efba06696c32dcaa639c8b42fde3127c713da43ce86edded96f164d49b620b4171f53f791f3c97b5cc727a49d79","ssdeep":"1536:+vos4Wgg2gusnjr1JRhQ0JSFGMD/7Ev5e0Oo8J/kw0rr+DP:+vos4Bg9njr1JRhQ0yx","tlshash":"5053c6d091ccfc26b26ba0c37406d69fd29e941ae29b2f507ddc8da446cf12f5a607e1","dom_hash":"domhash5451d0242ee91dbe1ee36b349458d86e","first_seen":"2026-05-27T01:33:42.483507Z","last_seen":"2026-05-27T01:33:42.483507Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"vegas-pluscasino.org/","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"172.67.182.11","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T01:33:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"vegas-pluscasino.org","ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-19","domain_rank":0,"first_seen":"2026-05-26T18:39:32.689909Z","last_seen":"2026-05-26T18:39:32.689909Z","alert_count":62,"request_count":31,"received_data":1315268,"sent_data":15308,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","size":2571,"data":"","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-07-30T14:06:06.789371Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/webpack-116bb063615317b7.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5182157b2fe79f1dfbf49d5f862f339d","sha1":"bcfd69918d8c376efefe03f473cc5f562ff4d65e","sha256":"d93555fdc3ba16bc7df9e97c3dfb68158cc58ace3c6748ec4f1df87058bd3416","sha512":"b22130e9dac7a0494cfcaf3b03015b30282a0c73051770f6bfd4d531b93692030714939c0f2e9860141786c0e19ea4de0a61e69c4e1f3b471782f45056028406","ssdeep":"96:6IAgDpEzqynRR5IEKjmvFqMug1kkNxNF9VTlVHO/jeE2UjKBOK6nRVG/OGfIfRY3:64Gzxnj5IEMOFLBkQNF9Xe7jKl6nRVG/","tlshash":"29c1c69e72a4f8b6174365a4493f905af13f207b781ed4a0c70ad9f4ac349688533fe5","size":5968,"data":"","first_seen":"2026-05-26T18:39:36.939789Z","last_seen":"2026-05-27T01:33:42.508671Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","size":141013,"data":"","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-08-07T18:40:27.122406Z","times_seen":298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/F0ze95eA97iERh9QuBvg6/_buildManifest.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6c10fa37cc2677b09963c328a879b16","sha1":"48dbb20625f5d0a4973d3d3d251adac1cb24f639","sha256":"3ea746ad551defe298b47bfe98751f30bd5de56af219079761631edb342e2619","sha512":"2474f0c029a436e381698a8aa93197d1a01116d8a276b684991343796253c949d09e385531d3614a6135739e0be14c5af3e8d0ddf85582bedc5ea55ddee98b13","ssdeep":"","tlshash":"9411bd82010ae61a2de8ed47373f13a3af52c07a663c0ab68bcc1d6c55900675f3a821","size":1014,"data":"","first_seen":"2026-05-26T18:39:36.960568Z","last_seen":"2026-05-27T01:33:42.510267Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","size":98327,"data":"","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-08-07T18:40:27.11743Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","size":2376,"data":"","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-08-07T18:40:27.13097Z","times_seen":278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","size":98298,"data":"","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-08-07T18:40:27.16061Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","size":828,"data":"","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-08-07T18:40:27.145505Z","times_seen":261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","size":8192,"data":"","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-08-07T18:40:27.121062Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/F0ze95eA97iERh9QuBvg6/_ssgManifest.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-16T19:00:25.472344Z","times_seen":253545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/pages/_app-de19ad7523e53e61.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4516a0c9e6196826f28c4b0668d0f20f","sha1":"829f3625dfb4c46c1950767d6b2d6d6951c3e990","sha256":"aaaa4f44411ea8c9e43ea55dd0d2c5b3872d56eabc27a4e6b86f00cb98a288ee","sha512":"2e9ce461190ed94789d0e67ddca81e2790ced2ed875ea4e28e002f89bd9c07f212dcdbff5cfb19979956ca542fa87985e77104be671a1633f7958ca70c4e0c98","ssdeep":"3072:KqJDcrse3siUIFlUo0kn5DU+dHh1ozNmwO56/oQX+OB6xOEowsB489M4cZkcxZ9r:KqKgeci1BOO5JQ3wkhJi1o1ejp","tlshash":"57a4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","size":487964,"data":"","first_seen":"2026-05-26T18:39:36.925341Z","last_seen":"2026-05-27T01:33:42.500721Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/59-3b081d5dd0e4dd50.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a911ae8af6f230343f24732ed9f118a","sha1":"21c9b05ebe44aa41c84ed944b39de7d30de12d3b","sha256":"c34f8c6063e37d2adb6d970e32e9e25ff726fdb3fada1b197f2b259f400d19bb","sha512":"15e6a0ffb49cbabfc5d24ab7aaa7274dcb920bb4a33a471ae43ab1e6e3ef9074d9ab0d926bda97b3c97799c3c135d571132f03223e5598455bb34775dd1c3852","ssdeep":"192:FkzBOuoW9JyxDE3Vr3vPw1rbirhDly81bqVhcIawuPYHyF9:OzBOpxmPw1rbShDcphcnwKR","tlshash":"0e62b46e498689ae0a3cc8e4c427810cd3ed6649f449bc30e7a1891776d7edc35b27cb","size":14830,"data":"","first_seen":"2026-05-26T18:39:36.95761Z","last_seen":"2026-05-27T01:33:42.509209Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/image/?url=https%3A%2F%2Fvegas-pluscasino.org%2Fuploads%2FIMG_3437_1_Photoroom_2d94f79c36.png\u0026w=750\u0026q=75","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-pluscasino.org%2Fuploads%2FIMG_3437_1_Photoroom_2d94f79c36.png\u0026w=750\u0026q=75 HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 46856\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: thBEcKUAnn0mqwaD-UMdfRFHbSIw-eLAgQTeqnaeK-E=\r\ncontent-disposition: inline; filename=\"IMG_3437_1_Photoroom_2d94f79c36.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O29BysStuAFoScOzRwIYLYUcq0973yyLTGYrFpLJ7OhdJi25sZOAF8BtfzxVVV3D%2BRmc9bOL%2F3B%2FnHUTe%2FmlwxCqoU%2BVu72I4HxHH7LgI%2BblZtDXfuitQ3lgSH972s78a2O9MlNB%2BA%3D%3D\"}]}\r\ncf-ray: a0214543086e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":46856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a987dab4b97e25a66a450a560f8006d7","sha1":"8ca8fd517722ddb757d3f63a89e33a536ae11aa7","sha256":"b6104470a5009e7d26ab0683fd431d7d11476d2230fde2c08104deaa769e2bf1","sha512":"cba04bbc8e531e7c4118cfaedd4dafce015c405a41cbe44cd198afbee3c7e151cfa5562e131b6e319155fd0c8f3e6e8871ad09ece1028e487f4b4cdbcbe5d834","ssdeep":"768:HwOu1y41aGJB9g9ihj632lnUcJQIA3+sEaecAYfm8/Etbupbq7T3JdMPoW:QpyRGJyiZqeFA3+x/GmuhqpGPB","tlshash":"45230216e4ff3e1661a3e24050038c916e4fec59e4d30dea736a677d9dcfa64c2210e9","first_seen":"2026-05-26T18:39:36.949723Z","last_seen":"2026-05-27T01:33:42.484814Z","times_seen":4,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/uploads/favicon_V2_2026_01_26_T142118_001_0a87137676.png","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:17.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /uploads/favicon_V2_2026_01_26_T142118_001_0a87137676.png HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 433\r\nserver: cloudflare\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\naccept-ranges: bytes\r\nlast-modified: Tue, 27 Jan 2026 10:54:57 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TUkXEYl%2Ff1J29KB4ihdeDjjz4BXd8B6JyWo4HuG%2FQnvyvWkgVFQ9k3fYPw2f%2FnDmO00Zo2oHVYJ%2FrrUkQQxpbAAHpULECVpIF7j2QPs82%2B8Irgy3VbJnv%2FSAUpIUOBMmWCS5edZpbQ%3D%3D\"}]}\r\ncf-ray: a0214546ec5e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":433,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"d546bdbd51f97a6ce048f09cffacb8aa","sha1":"01ec770987a5c3233d8ae80024d24fd945a4c014","sha256":"4518cdf20b77cb536ba23cd34bdafeca1538287cd55eb0a58801b98932b3785b","sha512":"58069c844d4b1ff6be57779d449d373c0ef1650c8e91f44f708b95b0e28c46ec0c4608ccc0cfff3405a615a07eac558a518fcb60ed516fad19149f38d6ee209a","ssdeep":"","tlshash":"b6e0a3ec6323b475d72e44c0040d0044b73f954c599a19fd372ef0b556129b5b756547","first_seen":"2026-05-26T18:39:36.936347Z","last_seen":"2026-05-27T01:33:42.485433Z","times_seen":4,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/chunks/927.a7dc7992c436ba78.js HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"a0b-19c47b1ecdd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24846\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXw5AvkdLIPVUzfkt%2FGstJPwrV45TVzYfaT04quUJqTh7xqgvEpnHYhfP8dSSQQh3MFZ98GDPO295nUycKQbozKLvrQLRG%2FAMOMncPd4MPvQoAV9JRt%2F4%2B61na7aSJBwNaWd1UUWHA%3D%3D\"}]}\r\ncf-ray: a0214542d8354e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2571,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2571), with no line terminators","md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-07-30T14:06:06.789371Z","times_seen":189,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/api/report-error","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:17.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"POST /api/report-error HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vegas-pluscasino.org/\r\nContent-Type: application/json\r\nContent-Length: 89\r\nOrigin: https://vegas-pluscasino.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":89,"data":"{\"text\":\"https://explore-sunshine.top/bv5VSm?aff=eu-pop\",\"domain\":\"vegas-pluscasino.org\"}"}},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 27 May 2026 01:33:17 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4TeLyfZLetO2eIrVzszvbbkJfAS0J79%2Bm1mSLNdz7g9XDg1IVXjhfozTJPqwGfma3711hV3xDlLLRHIhHEa0vYZq7agccdoOJw5gWnwePXOpTjUXOx6a%2F9IFnqC4vgbvhx1Meav7KQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a02145466bd04e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9fe3cb2b7313dc79bb477bc8fde184a7","sha1":"4d7b3cb41e90618358d0ee066c45c76227a13747","sha256":"32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864","sha512":"c54ad4f5292784e50b4830a8210b0d4d4ee08b803f4975c9859e637d483b3af38cb0436ac501dea0c73867b1a2c41b39ef2c27dc3fb20f3f27519b719ea743db","ssdeep":"","tlshash":"2cc08c26351e2c0c96a322b402c36a50d092c3304c5a19004600420371c31168ac3315","first_seen":"2023-04-05T07:27:09Z","last_seen":"2026-08-16T17:57:55.389012Z","times_seen":98786,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/chunks/492-27fcff75637ccad1.js HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"18017-19c47b1ecdd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24846\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nFVt%2F2zaaBnot%2FeRPAGr3dkOFmqz05PKfOqjmCzuxNq%2B%2BuxLF3Q%2FX1tkj6u9HcUxRWjpCFJfjKhsYw2ALBW5TnoDYXn9sXoh%2B1dpGgPnuj8iRfvv45OlCwfJ9QdMTx8lEYwzz3ka3A%3D%3D\"}]}\r\ncf-ray: a021454308684e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":98327,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-08-07T18:40:27.11743Z","times_seen":281,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/media/c1b11e140b58cf5a-s.p.woff2","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/media/c1b11e140b58cf5a-s.p.woff2 HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vegas-pluscasino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15108\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"3b04-19c47b1ecd9\"\r\nage: 24846\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jN11XGFnsLWrujyUq8CKJnNncyihWw3bqqVERy9Wv1keo5WL4Qp7%2FSDRdlhrt0q2UCILW0SS4HETy3y%2Fy%2FGCsTwX41MVXROxbKBiJY%2F5b8UzFveWBf2Gi9L0MKxWoYQaz6Uc%2FS3KMA%3D%3D\"}]}\r\ncf-ray: a0214542c81d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15108, version 1.0","md5":"368f3e99ee207a4a2e2584eba7d3c82f","sha1":"9f907e41605807c4bf4f960745698b1e430a716b","sha256":"963fc62d2cf3e59e6f338db71b85b5ea86dd009fff859116d51a31a9b98d1d30","sha512":"2eb180c4cba21fa77eb89d801d6e55fd10acebe3a25e99228e3ca5861447a393aa60420a21f3cd573cedf5107dd391b5e5e1fcf5e09e799f2cbe7a6826eda2b2","ssdeep":"384:VHJTAkiZnTfVU4LSYdh7Db82J2Werb7VVX0m1+cz7aNw:VpTA9xTfVOA5o0erb7YmcGaNw","tlshash":"c562e16e92dc05534d2bd6f84eebd8cc7bd0f8548133af233905a62a854b810f218be1","first_seen":"2025-06-16T02:04:53.862041Z","last_seen":"2026-08-15T16:32:20.669521Z","times_seen":390,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/chunks/framework-10ae643bd7ba2303.js HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"226d5-19c47b1ecdd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FFo2WZwJB7bfcKFJlLJYYlVUD5Vhzxx6Zi7RP4LVImevep7Yav53NVUGLXC9v03wlLXO45%2BbQ%2FWpIcXBfJQRB%2FkeIevNjo1jCfKS5Z8%2BTXdSmcJzS0gKwkwtMJp4UIFyGa6weRMu8Q%3D%3D\"}]}\r\ncf-ray: a0214542d8404e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":141013,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65202)","md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-08-07T18:40:27.122406Z","times_seen":298,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"89fc-19c47b1ecd9\"\r\nage: 24846\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jPzx9s2Xg8H%2Fw1fo%2FZxEjXRmOAr5qB6b0GJveLegZFRlly8LipqDwey5ox08rBKs25drN5P21D2RxClXqkUusaD%2BkqUkBC2%2F6sYjEakNaus%2Fa8XeiwQi3e7mNs9%2BptBKOWI7VEyGA%3D%3D\"}]}\r\ncf-ray: a021454398fa4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-08-15T22:27:28.289291Z","times_seen":2411,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/image/?url=https%3A%2F%2Fvegas-pluscasino.org%2Fuploads%2Fimage_12_5_2_47f56ada03.webp\u0026w=1920\u0026q=75","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-pluscasino.org%2Fuploads%2Fimage_12_5_2_47f56ada03.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 48798\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: VnCf0G1QvV2zCuvDuasYGgi79V7zcbGel2zetsZ9rRE=\r\ncontent-disposition: inline; filename=\"image_12_5_2_47f56ada03.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQ5cYIzZZQqr88d1IWLZjdj2PoO%2Fr5WxKJWsfpvYhrpBIDjAc2jtVrTrfzcXTcifucUexTcOtLicz85PKJp%2F%2FkCIgouVbuFiuuANLnE34B9Xgukl1XzywiwgkN7hsr266If%2FFW5RFw%3D%3D\"}]}\r\ncf-ray: a0214543b9234e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":48798,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 718x962, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ea514d813e16e0dedd1e4b86b5f26884","sha1":"8f3c73c3c53623be1f7162be4185c4b49b2d94f7","sha256":"56709fd06d50bd5db30aebc3b9ab181a08bbf55ef371b19e976cdeb6c67dad11","sha512":"203353d12aafd65db9adcdfa11a470982a74699014c75dff64b7bb9902f9817b2671de863abc4e528e338f5d69e2f275be9d0e643b55dfe7137fa132cab999d7","ssdeep":"768:dU40KHwRWK14XpEt4c1ZlYVNijl2kAMy0SxO77iUduCTq+sa9VAIB1nq4:h0KHwAOSpEt4YZYilrw0SxO7mUduCT7v","tlshash":"392302a7890fedd7b4f911f350063590bb331076c4f78978d816228a73b75298a6786e","first_seen":"2026-04-28T16:04:22.232007Z","last_seen":"2026-05-27T01:33:42.495378Z","times_seen":6,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/css/425cb6e228741817.css","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/css/425cb6e228741817.css HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"eee-19c47b1ecdd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24846\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XstDAVKVRvvoBeBOtFQbHeKdM%2FoV4WyGbq1iCbkVPmnjqsFhJbEqcGic3vKu7Gc%2BLjv94QrpgTXEaA5DKVS4lwT3izBwTwr9sz8zI1qMPspSRHUSR8GrMIFcCqG1R9Vrwc1SNrPLfw%3D%3D\"}]}\r\ncf-ray: a0214542d82a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3822,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3822), with no line terminators","md5":"18552a6e17838c46016a53e9762873c7","sha1":"3dd15aa95b79296b2894bfbd8fe4a53911f694d4","sha256":"66ecf375917e5eebcf9959e90773c31eff8f779803c5493fc5dd3760600542fc","sha512":"e1e0f9e0f622a0abca95b0eea21d599f23df0abf4d7e40bc5a85c69696ff5c6c97db03271d826ad105410cec045c6f279b66ce0ab29b9b5f4e29065d0265c9f8","ssdeep":"","tlshash":"a371f03a4fd0d438f4eb606f6ba2946d4b18c442ea275bdcff12d82bd1cb3d60562589","first_seen":"2025-04-29T14:40:21.773905Z","last_seen":"2026-07-30T14:06:06.774985Z","times_seen":179,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-67c545f8362cb3f5.js HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"33c-19c47b1ecdd\"\r\ncontent-encoding: gzip\r\nage: 24846\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6g0K5Mn61zj3JsixemYdZbVrNLZ4Dzk0m3MPZgK2wIyUngjk5Av%2B55dG3ESo9BrMUqjx0U6yuf4lF1Bji4Qf7epe5fylx0B7JXoOgOpF7Bm7Qc4QGYTHsVDy%2BjtjliYqpmTPbjEuDg%3D%3D\"}]}\r\ncf-ray: a0214543086b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":828,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (828), with no line terminators","md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-08-07T18:40:27.145505Z","times_seen":261,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/F0ze95eA97iERh9QuBvg6/_ssgManifest.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/F0ze95eA97iERh9QuBvg6/_ssgManifest.js HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"4d-19c47b1ecd9\"\r\ncontent-encoding: gzip\r\nage: 24846\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S21eLTrz5tdhs4m8gLPjzHE8aUOwqxdNXU0f3SkvT1Eq%2FC5ICRiSkztNkyDsjCWOmsRwaaaZ4W%2BBgzbLOAnT%2F7yrd5ZhyqTqbCDOiFx%2FDVa6c940mO1eqjLnynjN0pAkPeScVCMH3g%3D%3D\"}]}\r\ncf-ray: a0214543086d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-16T19:00:25.472344Z","times_seen":253545,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/image/?url=https%3A%2F%2Fvegas-pluscasino.org%2Fuploads%2FSnimok_ekrana_2026_01_26_142423_1_7589d816c1.png\u0026w=256\u0026q=75","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-pluscasino.org%2Fuploads%2FSnimok_ekrana_2026_01_26_142423_1_7589d816c1.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3500\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 2AuZNtAWMH0Z6oSOwbZlQVqKALEi9SCj+JvDmSV0JDk=\r\ncontent-disposition: inline; filename=\"Snimok_ekrana_2026_01_26_142423_1_7589d816c1.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bWgcIK2AAJ6nMbvBw7Y0Si8nG9QOdK3oq5umf2bH62jSgFT%2BqMU92lRmdiKpj5Ph8jvkAZXE7WJq%2FZ7YrvX%2FybWLG4CMQOBp9GenboglcwFyUP7SLdaLo8V6BMQNtAIf6PL3ZDhDAw%3D%3D\"}]}\r\ncf-ray: a0214543b9204e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3500,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d6a894aab2d9e72ac36c8e7b4285751","sha1":"eb3b8426e6833b7bb5554d568b8d466e4f1adfd1","sha256":"d80b9936d016307d19ea848ec1b665415a8a00b122f520a3f89bc39925742439","sha512":"631f7545a0480d4ea4ca40c9b3943a075562359437ab45fd45813742ae0243119f2fb83b593a06e0ff4fd4ec675232e35b72ee81217d2fd05d2ef6e4b586ec4f","ssdeep":"","tlshash":"cd717e084b70a692dc44331854762d8a3414cc3b0f28c3475886deb7d18b3ebb996595","first_seen":"2026-05-26T18:39:36.948087Z","last_seen":"2026-05-27T01:33:42.499509Z","times_seen":4,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/pages/_app-de19ad7523e53e61.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-de19ad7523e53e61.js HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"7721c-19c47b1ecd9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SJFPfuzCYu6PymeCoJKa8J3sLChoyQDRDfd2eX2%2BqZmwrE5ajRbL6oR927YFzdqoKSSXgm6ywUO07zHuXq%2Fjjtz7oDnIbsrSXuy%2BpGHUxy3pt7HwnGbfWjw1Zk54lAlN4QsEP0ua2w%3D%3D\"}]}\r\ncf-ray: a021454308664e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":487964,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64562)","md5":"4516a0c9e6196826f28c4b0668d0f20f","sha1":"829f3625dfb4c46c1950767d6b2d6d6951c3e990","sha256":"aaaa4f44411ea8c9e43ea55dd0d2c5b3872d56eabc27a4e6b86f00cb98a288ee","sha512":"2e9ce461190ed94789d0e67ddca81e2790ced2ed875ea4e28e002f89bd9c07f212dcdbff5cfb19979956ca542fa87985e77104be671a1633f7958ca70c4e0c98","ssdeep":"3072:KqJDcrse3siUIFlUo0kn5DU+dHh1ozNmwO56/oQX+OB6xOEowsB489M4cZkcxZ9r:KqKgeci1BOO5JQ3wkhJi1o1ejp","tlshash":"57a4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","first_seen":"2026-05-26T18:39:36.925341Z","last_seen":"2026-05-27T01:33:42.500721Z","times_seen":4,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/chunks/546.767fc6323cdbff4e.js HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"948-19c47b1ecdd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24846\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZOpkjFLXK%2FvUOo%2FU0gvCMSxfst8Rc2sVK4N84rMPrkR3hXWZE3QOl1aOlhJ7%2FyRSFU5tX1a%2FQmCOvWtrCKBRFnFHy998%2BISbRGdvrbOssqb%2FaAW%2F84d2ZHK5pbhaNmxlYn996C3mVQ%3D%3D\"}]}\r\ncf-ray: a0214542d8304e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2376), with no line terminators","md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-08-07T18:40:27.13097Z","times_seen":278,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T01:33:15.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Next.js\r\ncache-control: public, s-maxage=10, stale-while-revalidate=59\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B6a5KK0mxy9nP3u%2BF9A31G4ENKI80Ybw3sfqrZ6%2FTgwvbaeubIxnF5ewPmnbzoe8ccwM89Dy91BoMuhXZ2JNPkwa0gX%2FM%2B%2BVrhYGXIRMX0DNiaIjrfDeVRC%2FsuNIJFU0DMGFMfqrWQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a021453f8cba4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":56277,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (53869)","md5":"d5e99bb03b0e62ff6f503d5aedc70baa","sha1":"dd9b42dbf94ac29310219e653b511f050201d62a","sha256":"e7759e216ab7f5e9a50dca65bb519338b278446ded3d0ae0fef8f5dabea286b2","sha512":"fb5587e79c2a0d4f23b0f7b64cf8a104de062b44becc7dad841a18bbcb2fd0f639f7de8f4656d4b0589964179e18fc79a893046e9a08192938408c7e4f4aaf0d","ssdeep":"1536:+wlgKsuknjr1JRhQxzSFGMD/7Ev5e0Oo8J/kw0rr+D+:+Eg5njr1JRhQTyU","tlshash":"1e43d6e195ccfc6672aaa0d7b006d24bd18b840ae5872f507ddc8d984bdf12f1a607f6","first_seen":"2026-05-26T18:39:36.942839Z","last_seen":"2026-05-27T01:33:42.502237Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1148,"timings":{"blocked":391,"dns":60,"connect":285,"send":0,"wait":361,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/chunks/main-69b63e2e16716907.js HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"17ffa-19c47b1ecd9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u8%2FX1lX7593IPys8Hj8jK4DH9wZKt21ygk84ugOJ4IKIP4voGbu0y44LW1h1ZQAEKGn4iUXXBU%2FFlr%2FyDDDc2qUus8Ug%2BIz3i2lNlSmxaXvYLLNDGafBwWL2DlyOTfuyH3McpEJvaQ%3D%3D\"}]}\r\ncf-ray: a021454308654e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98298,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-08-07T18:40:27.16061Z","times_seen":281,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/chunks/966-2601235ce9ca419d.js HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"2000-19c47b1ecdd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24846\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2Fo9DFwaWDAvXfm9vASZHA7pRnv5I0zj%2Fi3hLhcI5MwxzgEzgL89YRG%2FCGAUxKyFs9zJ9E2oPkzl4Ja3QC2DPXrYefb8%2BJM7peEYGocYGWW0bSRDG07P2EHKX6hE9ewH%2BOkZxKWENg%3D%3D\"}]}\r\ncf-ray: a0214543086a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8192,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8192), with no line terminators","md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-08-07T18:40:27.121062Z","times_seen":279,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/image/?url=https%3A%2F%2Fvegas-pluscasino.org%2Fuploads%2Fimage_12_2_bf31778226.webp\u0026w=1920\u0026q=75","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-pluscasino.org%2Fuploads%2Fimage_12_2_bf31778226.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 67314\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: E4qD7FTTmCW-5kUXAdRONK10+ndlTKMU5ISgBeq-DAM=\r\ncontent-disposition: inline; filename=\"image_12_2_bf31778226.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mgaTO2HqYACryM0kkxeYRdUpJPsLpUaKLRL6Z8c6TzUNYd56qk3GlEeN62dW6YNY%2F%2BkVGjSg%2FjCX3Uq6QchBMOFdSAi%2BSwHKWRkkKFUJZ1mHL6r4vUbVs%2Bo%2Bd%2B13g66duu18weADg%3D%3D\"}]}\r\ncf-ray: a0214543c9284e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67314,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aafd664b5f70c225238ab27c9c79339d","sha1":"4d4e13dd18894c18c45b5cbd778ac745d54fb9f9","sha256":"138a83ec54d39825bfe6451701d44e34ad74fa77654ca314e484a005eabf0c03","sha512":"52934fc7e9aa656238eb5c0a863d5b584ae6d2bc88ec6ec958a416c660f0df8650acb7a170c37530637393381ed30dcb2276f6ad2886386ff7eeae45edf3407b","ssdeep":"1536:UKw1T0Dwwjz7Gb9qYVkA8SoJX7bx7J3rPdSHr8lGZ:hCTmhgfdQX799PkHgl0","tlshash":"706302def223712d15bda6efd620a1eddd8fbc0e1653756ed8ccb4a653346a4022448c","first_seen":"2026-05-26T18:39:36.962115Z","last_seen":"2026-05-27T01:33:42.504592Z","times_seen":4,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/image/?url=https%3A%2F%2Fvegas-pluscasino.org%2Fuploads%2Fredgenn_Aztec_Fire_a0354a3410.webp\u0026w=1920\u0026q=75","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-pluscasino.org%2Fuploads%2Fredgenn_Aztec_Fire_a0354a3410.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25844\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: Qjca2t4FFCpzd3zunTeUXhK1MnJTIQEAlb-jVJ1ChaY=\r\ncontent-disposition: inline; filename=\"redgenn_Aztec_Fire_a0354a3410.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wcib85euhyZ3iSOe%2Fq70Oy6XkiQAt9kCb%2BXv42AA4vHS8SQMbzjtg7obJbA%2F0EcJQFR8HUe2mXrBoJtQeQkWokBnMxffvsMEl5ZSgDEg4cP0VknW3uRgrTv05pV%2BBY2vTiwwHtj1Pg%3D%3D\"}]}\r\ncf-ray: a0214543c92b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":25844,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"45d7d5f632e5f1b427b3f62cadd78c33","sha1":"a99bc5bb5ba8a1c18af90ea3dcd3666d4f3acb8e","sha256":"42371adade05142a73777cee9d37945e12b532725321010095bfe3549d4285a6","sha512":"40063a7bfd610eb1c5e2190bbd44602e1257b5fc9e3d54bfbbe9d30a259c7b423ae3b6ebc0c65e0109af128fc349807c5d1a2c1d467bf2701b34124546f790cd","ssdeep":"768:iEbKMoXUgrNdmhuTBKXsICRuc6cwd5sU7F:cHHKhuJICEJ5sUZ","tlshash":"2bc2f27f28bc2ed65a996b36062d7d8b8edd5c04cd4d54cf1084ecc7b399d9cb110620","first_seen":"2025-06-06T04:18:20.802746Z","last_seen":"2026-06-02T03:03:58.998266Z","times_seen":11,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:17.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vegas-pluscasino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:17 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"1759-19c47b1ecd9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24847\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1wbfwmSt5i%2FKEAXcBkwqyjEDZHWsj8VmsvsH3Y1wYrledl813gdDnoRumzivWAmZNdPsTYA2l7G3KV%2BYphbvwBeRKM%2FXf9YDn3Hs%2BntbPr7wFvFgrQyWJmKVvcDLYARC3iKAR6muAA%3D%3D\"}]}\r\ncf-ray: a0214546fc7c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-08-07T18:40:27.109447Z","times_seen":274,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/image/?url=https%3A%2F%2Fvegas-pluscasino.org%2Fuploads%2F1719821723100_400x6005sevensholdwin_1_2_959db0dbfc.webp\u0026w=1920\u0026q=75","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-pluscasino.org%2Fuploads%2F1719821723100_400x6005sevensholdwin_1_2_959db0dbfc.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8032\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: OVPVQov1e1pKKRH83KF9WK245B+EOyxJeBvpxQF0VBo=\r\ncontent-disposition: inline; filename=\"1719821723100_400x6005sevensholdwin_1_2_959db0dbfc.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rzEGdpap6UFA%2Botr19Z3oHpmK4I3VS0ifBVQUpDoOvizpRMjZO94gN5N%2Bn5kEbaqjnVpVqFCxjKXcoyf3grHif1QK01K7OWnVxFwHBPAiXts8pMf343%2BHKLVB6OWib9bOnBA7BqrHw%3D%3D\"}]}\r\ncf-ray: a0214543b9244e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8032,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"50c5f67285a159136e2129767f322266","sha1":"901992005462e297e9abdbc4fd77461d0d6deaf6","sha256":"3953d5428bf57b5a4a2911fcdca17d58adb8e41f843b2c49781be9c50174541a","sha512":"4d41f71c8097f3d4f7e105bac494ac3215f590d747880bd64b96287859b675bf85f0c6a0ca942a4b99165eac5821cbd2a10a66cb67a7adc774ff4b58d30bc10a","ssdeep":"192:BTsTVHaFFg343yalb5OZzWf5KuDIoJGXCI99G9F:1s56lDMhWRKubaCTv","tlshash":"e3f1bf7d7b586c90edf0bd845a876282b0c2205fb0b783d424a83ef39c313529599670","first_seen":"2026-04-28T16:04:22.231051Z","last_seen":"2026-05-27T01:33:42.506662Z","times_seen":6,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/image/?url=https%3A%2F%2Fvegas-pluscasino.org%2Fuploads%2Faviator_game_50a6649a2d.webp\u0026w=1920\u0026q=75","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-pluscasino.org%2Fuploads%2Faviator_game_50a6649a2d.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5738\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 8C5ijHfyv4VL5Id9kvjfKIpZMGhqlln9vLlhXjiw0f4=\r\ncontent-disposition: inline; filename=\"aviator_game_50a6649a2d.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nzfeRdKTo25MPz6kCYUYnE2HeNVNr6Jlx%2BXd2gojT5TxTVV1PRUySYZ%2FH5ZBMTWIECXR19m6iZs5bXWzIXpecVjw6Ac1V%2FWbY9HFoomW1qQ1Oe2GyaIEdKo%2Fi%2Fi4EcPs82PAuLIaPw%3D%3D\"}]}\r\ncf-ray: a0214543c9254e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5738,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e7164618d79485b8ef0f4f80b5cae051","sha1":"b9f02d6827b2944d4ce6dbdc1c0762a1d5f44848","sha256":"f02e628c77f2bf854be4877d92f8df288a5930686a9659fdbcb9615e38b0d1fe","sha512":"de19d1b6202ccc35df04effada7cedcb410fdd663e8c01d47e5365fcec60e8d0d97cf136fac8ddb64816a0271c204ec53066816ba59f93d39649bea64e674fab","ssdeep":"96:jQ7AP3KW1v+ZKQT19cQR07YDsJfBEo9gMdH7H465WCHoSfm8a2pE7ZMzGWt7USqz:jQsiWpoWQRRsYo9gMdT465WCHoSO8aau","tlshash":"75c1afac42539b9dbc382cb4323e1294406e8d4790774880b18b1d0419b9bae9e6fe8d","first_seen":"2026-01-09T01:21:35.352012Z","last_seen":"2026-06-02T03:03:59.002741Z","times_seen":8,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/media/9f0283fb0a17d415-s.p.woff2","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/media/9f0283fb0a17d415-s.p.woff2 HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vegas-pluscasino.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21336\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"5358-19c47b1ecd9\"\r\nage: 24846\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d1qHne7nEMC%2F3uae9FL1wQ8twvqbTnE6jeyPJcXvb91gBGV01zuzguPG%2F9fzjzBCwPHHr6qgE5SHE5USpuSZDtivUWXV%2FAgbgN%2F3nP3yiuQHp2ORiYUApNoD70lrM3K13PlFQS3qlQ%3D%3D\"}]}\r\ncf-ray: a0214542c8214e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21336, version 1.0","md5":"0e35c6fd40c2ab9ef2d5b97baeca2f2d","sha1":"781b1852315aad9bcf111a3017ca734ab6dcd6b9","sha256":"07a6f958db51de42694ef87e2c01b9cf5ee415047b2fd17ab1c313c772a6804e","sha512":"7f76da76841e131252106ff1d70e22908753364d612e9b807d9332f89b13c759b1b9d05ac5983055b48bf99b441a2a07301db2c93fbb79323e492c238df1d7a9","ssdeep":"384:h9WnIiwq4BeuEc4AZTT4ZWgC9UCzpulxbC9WzQFvCY98IW1NoTXVY23sC6:LWIix4BayT0ZMUQpulJCuQF6IW1NgP3O","tlshash":"4ba2e1080f4b3a18eda72c8972acb57498741c208f8ee2770cd42859365e652fe3fe57","first_seen":"2025-10-20T15:26:06.98799Z","last_seen":"2026-08-07T18:40:27.111166Z","times_seen":280,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/css/dd79dc2c5a9a9197.css","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/css/dd79dc2c5a9a9197.css HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"a112-19c47b1ecd9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24846\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eqa4Hamqi5MESoPtVEzAox%2F%2FnyErl5j7DBwwP4dJPL2n4lgzAkXTjbwqI%2Frz7dkeMdcJCuF6Ip2%2FnLDIIuzQeHuPFGd0WSRFf1w7gZclMjShQB850OUgGikwW%2F3eq%2F9QGv6S9awtEg%3D%3D\"}]}\r\ncf-ray: a0214542c8224e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":41234,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (26798)","md5":"93e37c199f0ae59faefffcafacc5f00c","sha1":"a18665363dc58467e599d2bd59c1d63443bf8902","sha256":"d91a05b2ad13ad076307787468b87cd94e7dec4beefa460fb9b6c1e13473ccb5","sha512":"22f1cce98b2a8190e8fe8a83f883915899f1eeed64ebc5006757b2e0bcdba68ac5ef53f2f69439648c2dd3a9d58d0cce4585b5e5b79516718e9e2e3d73959d28","ssdeep":"384:gi4OZg6oxkmT0Ew2zXf0MrREq/XisHZ7aVWMMqLswaDGvi1vPTnx6G8S3yvVQW78:f4OZwQ2x8jeDqeTnwVA","tlshash":"4003c921e619702dd8fbcc6732ca7f1766184402f5950d69fa1b866ccecb9271b93bc8","first_seen":"2026-01-03T15:12:30.994041Z","last_seen":"2026-08-07T18:40:27.147707Z","times_seen":266,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"1759-19c47b1ecd9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24846\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ttyHFgbUEyGfDzvyFOoC%2Bu6ndaJiH%2BqOpi5%2FubbK0IbY%2FWlW0UTcP%2Fb3vQTFPkiv9vECQmTlkoMbaEqNDQ4ZaHeCP0S0scM6PX2aIARnWAIYAoUJxFtZv49R7Ol5oAi1NFErtFHb%2BQ%3D%3D\"}]}\r\ncf-ray: a0214542d8244e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-08-07T18:40:27.109447Z","times_seen":274,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/webpack-116bb063615317b7.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/chunks/webpack-116bb063615317b7.js HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"1750-19c47b1ecdd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ivXPtnR4Nf%2Bnt%2F6eaQEkmKMS5sNpsk4IVUFFfogtJlJJRhIt1iuOFChIZhP9f4uTWyxz4%2FId4Ql8mWJzBlB%2B3NWcYSCTLgZQtj4ObtrdhYPORcrdgoUOBYxpiaV4qcoksRChkYiWSg%3D%3D\"}]}\r\ncf-ray: a0214542d83f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5968,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5968), with no line terminators","md5":"5182157b2fe79f1dfbf49d5f862f339d","sha1":"bcfd69918d8c376efefe03f473cc5f562ff4d65e","sha256":"d93555fdc3ba16bc7df9e97c3dfb68158cc58ace3c6748ec4f1df87058bd3416","sha512":"b22130e9dac7a0494cfcaf3b03015b30282a0c73051770f6bfd4d531b93692030714939c0f2e9860141786c0e19ea4de0a61e69c4e1f3b471782f45056028406","ssdeep":"96:6IAgDpEzqynRR5IEKjmvFqMug1kkNxNF9VTlVHO/jeE2UjKBOK6nRVG/OGfIfRY3:64Gzxnj5IEMOFLBkQNF9Xe7jKl6nRVG/","tlshash":"29c1c69e72a4f8b6174365a4493f905af13f207b781ed4a0c70ad9f4ac349688533fe5","first_seen":"2026-05-26T18:39:36.939789Z","last_seen":"2026-05-27T01:33:42.508671Z","times_seen":4,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/chunks/59-3b081d5dd0e4dd50.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/chunks/59-3b081d5dd0e4dd50.js HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"39ee-19c47b1ecdd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24846\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jbixTrDQj0eno3%2FfQvXEW12s5fUrmces1xU34Uy%2FHZNzgqvgZT9DG5zO2MIno1c2dO84Hb5xfUp9qZM8wa0hw7TvhLvQ6SuTiGLu3GH9az5tbKRjo0Vkrj%2BD4UZOeR9XrQh6T4GROw%3D%3D\"}]}\r\ncf-ray: a021454308694e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":14830,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14830), with no line terminators","md5":"0a911ae8af6f230343f24732ed9f118a","sha1":"21c9b05ebe44aa41c84ed944b39de7d30de12d3b","sha256":"c34f8c6063e37d2adb6d970e32e9e25ff726fdb3fada1b197f2b259f400d19bb","sha512":"15e6a0ffb49cbabfc5d24ab7aaa7274dcb920bb4a33a471ae43ab1e6e3ef9074d9ab0d926bda97b3c97799c3c135d571132f03223e5598455bb34775dd1c3852","ssdeep":"192:FkzBOuoW9JyxDE3Vr3vPw1rbirhDly81bqVhcIawuPYHyF9:OzBOpxmPw1rbShDcphcnwKR","tlshash":"0e62b46e498689ae0a3cc8e4c427810cd3ed6649f449bc30e7a1891776d7edc35b27cb","first_seen":"2026-05-26T18:39:36.95761Z","last_seen":"2026-05-27T01:33:42.509209Z","times_seen":4,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/F0ze95eA97iERh9QuBvg6/_buildManifest.js","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/F0ze95eA97iERh9QuBvg6/_buildManifest.js HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"3f6-19c47b1ecd9\"\r\ncontent-encoding: gzip\r\nage: 24846\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wrHus8Ubo22uPnfKu8gsI9P1mUC7EbslFmF2nLySFcCPkAG98F6qksOYygxftagbSuQZPAfGX%2BTPztsnxZVDepeegfZ9taFTkj1wJ64WrTpcLrlC4BJxzqMjvAvIAXFRR7cNLpAKoQ%3D%3D\"}]}\r\ncf-ray: a0214543086c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1014), with no line terminators","md5":"a6c10fa37cc2677b09963c328a879b16","sha1":"48dbb20625f5d0a4973d3d3d251adac1cb24f639","sha256":"3ea746ad551defe298b47bfe98751f30bd5de56af219079761631edb342e2619","sha512":"2474f0c029a436e381698a8aa93197d1a01116d8a276b684991343796253c949d09e385531d3614a6135739e0be14c5af3e8d0ddf85582bedc5ea55ddee98b13","ssdeep":"","tlshash":"9411bd82010ae61a2de8ed47373f13a3af52c07a663c0ab68bcc1d6c55900675f3a821","first_seen":"2026-05-26T18:39:36.960568Z","last_seen":"2026-05-27T01:33:42.510267Z","times_seen":4,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"89fc-19c47b1ecd9\"\r\nage: 24846\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pv2RsnCp9rPnM%2F6NGiU0hkokOUQ22Mr%2FeMCoAyavnnxfyQnlI4R4vRKr4sp%2BgywCxYiiIj0F44oRAohSrgrpGolNvIFEVcoqhQOlyUdHk%2Ff7VOQiDgf2481qjxmayhoJxkRR518esw%3D%3D\"}]}\r\ncf-ray: a021454398f84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-08-15T22:27:28.289291Z","times_seen":2411,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-pluscasino.org/_next/static/css/352d5236847d301d.css","fqdn":"vegas-pluscasino.org","domain":"vegas-pluscasino.org","tld":"org"},"ip":{"addr":"104.21.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas-pluscasino.org/","date":"2026-05-27T01:33:16.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-pluscasino.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 07:49:26 GMT","end":"Sun, 23 Aug 2026 08:47:03 GMT"},"fingerprint":{"sha1":"E8:08:41:7C:1A:86:C5:70:A6:E7:53:D5:A9:BE:67:12:C4:89:EC:A4","sha256":"CC:B1:2D:78:32:00:EF:DB:1D:D7:7D:3E:92:C8:B4:9F:58:95:8D:9B:01:18:2C:D0:A8:07:11:74:02:B7:80:C9"}}},"request":{"raw":"GET /_next/static/css/352d5236847d301d.css HTTP/1.1\r\nHost: vegas-pluscasino.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-pluscasino.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:33:16 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 10 Feb 2026 13:16:08 GMT\r\netag: W/\"644-19c47b1ecdd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24846\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DFy1g3ZKgAktfyjM%2B6pGlRwL%2Fg70%2FZVnAmx0YXWMaqLHDjI4MchypncLhkXp%2BkZZhv8PDHGMOOfxrBoeuRJtcnMyk7j9rXz3RuQSNGVugGzIreFVKYMnEZxFcT6CPuuGvB%2BWmtpi4Q%3D%3D\"}]}\r\ncf-ray: a0214542d8284e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1604,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1604), with no line terminators","md5":"d861c7ab0c20ce2a7a153e0a29f1f60a","sha1":"fc6bd3dab3f134d21c58832d9de3f830d62f1ec9","sha256":"4ded20bf9809d391e7e962e1395b3522283ca30f52fe7a86155d1d5b4b3789d5","sha512":"0f8ba9f03c97e33b8a6a9c2cda9bb1a130f8e2b72e70254c382de16ba63d39be6516245f7e740cb52a947fb85c32939217c29b9d982f330bed19c438322db91f","ssdeep":"","tlshash":"0a31bf1195c2af35f9bba4a95fe0367f7816584887fa0ddac2d5f35582ce0d2831c54c","first_seen":"2025-03-27T03:50:55.637284Z","last_seen":"2026-08-07T18:40:27.159991Z","times_seen":278,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"vegas-pluscasino.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}