{"report_id":"667fba62-f662-4556-a93a-cf57a4c91765","version":0,"status":"done","tags":[],"date":"2026-08-07T11:39:34Z","url":{"schema":"https","addr":"mgmslotswin.com/","fqdn":"mgmslotswin.com","domain":"mgmslotswin.com","tld":"com"},"ip":{"addr":"172.67.188.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mgmslotswin.com/","fqdn":"mgmslotswin.com","domain":"mgmslotswin.com","tld":"com"},"title":"MGM Slots Win","dom":{"size":105576,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7427)","md5":"c1530aa775ed419a8ec2fe6b67da3aea","sha1":"b30bb996af88ec972f5b7ffa5066c0047dfe4abe","sha256":"2dcce3b04a5bcc18df57f179889a1fceab8a0668a189e2dd35a0ff986f098602","sha512":"74772c18d580ab1539db49a2474d3d01e49170d88e523ca353d21dadb7a25125b565a362f37d0e4adaac1a9b11c6114aebbdd910ec7167025579514481aa85c0","ssdeep":"1536:kd/ghobCO0sX8wd/wPSBHbjkVljR9qRt68XjlwPI6yDyCtbQSGvnliHYk:kBghm9/1dk7O/dTyCtbtSiHh","tlshash":"a0a32923b290113d70b38196a6a777ad35b99003e70689b4b56cb2688fc5ed70777fc8","dom_hash":"domhashc219b86ebd296ffb73bb1c0e404a2a78","first_seen":"2026-08-07T11:39:38.207312Z","last_seen":"2026-08-07T11:39:38.207312Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mgmslotswin.com/","fqdn":"mgmslotswin.com","domain":"mgmslotswin.com","tld":"com"},"ip":{"addr":"172.67.188.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-11T11:39:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"mgmslotswin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"mgmslotswin.com","ip":{"addr":"172.67.188.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-14","domain_rank":0,"first_seen":"2026-08-07T11:39:34.344883Z","last_seen":"2026-08-07T11:39:34.344883Z","alert_count":20,"request_count":5,"received_data":234849,"sent_data":2823,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":[{"level":"log","text":"[Аналитика] Сессия инициализирована: uid=анон | 2026-08-07T11:38:59.039Z","filename":"https://mgmslotswin.com/","line_number":991,"column_number":439},{"level":"log","text":"[Трекинг] Загрузка страницы: / (1626мс)","filename":"https://mgmslotswin.com/","line_number":991,"column_number":558}]},"http":[{"url":{"schema":"https","addr":"mgmslotswin.com/assets/InterVariable-subset.woff2","fqdn":"mgmslotswin.com","domain":"mgmslotswin.com","tld":"com"},"ip":{"addr":"172.67.188.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mgmslotswin.com/","date":"2026-08-07T11:38:59.044Z","timestamp":1786102739044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmslotswin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Jul 2026 15:12:17 GMT","end":"Mon, 12 Oct 2026 16:11:05 GMT"},"fingerprint":{"sha1":"EE:32:AB:93:8C:E2:91:A1:6E:6D:40:C6:3E:99:A1:10:44:49:0F:C6","sha256":"6B:3E:FE:C3:DD:8D:70:DC:FB:64:0B:F8:62:F6:DE:AA:A2:DB:CA:38:A9:87:BC:22:2E:77:0C:89:AB:FD:3C:31"}}},"request":{"raw":"GET /assets/InterVariable-subset.woff2 HTTP/1.1\r\nHost: mgmslotswin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mgmslotswin.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _vid=msivgdi3c51547142888; _fbc=fb.1.1786102738779.8389204055\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 11:38:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oB2cj6wJwsfBxQm2E594HIL7kruYtYyUuaktR67ZxVobzZkwIKHMGBKCO7BnG50uysOcdg8e0urSgh2jAqZtQMF75Qq0N%2FlJ4oB5hZ5LmpGTzlfLojQCUX5HldDjUHBdM1o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a275ff870f7eb4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 99732\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99732,"size_decoded":100361,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 99732, version 4.66","md5":"004dd38d15eda8a9214c41994beb8e97","sha1":"e40dfc111f30fc2a8f6160136625f020aecd5ca1","sha256":"6729dfb89cf8331936bba17c452d74207b5850c96d550e5ad8351db4aa97b287","sha512":"0b0d6d623ade27c159bcfb4882d523b403111171580f36f13cfec7fc0f4399818238305e9f116422e269bdff936deb20cc8a10ef6d45a25ed891ec5a4cff38f3","ssdeep":"3072:RPONyuVp0bPAs2JMNVxLSgISn4xiQoIaD:RkmAs2C31SgfyiQolD","tlshash":"92a312931c3ec6b06a61222580d8fffb858598aeb355f395c54c52e14baa394b423f73","first_seen":"2025-11-17T13:12:04.960091Z","last_seen":"2026-08-07T12:00:50.269614Z","times_seen":30,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"mgmslotswin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mgmslotswin.com/assets/rock_back_compressedn43.webp","fqdn":"mgmslotswin.com","domain":"mgmslotswin.com","tld":"com"},"ip":{"addr":"172.67.188.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mgmslotswin.com/","date":"2026-08-07T11:38:59.052Z","timestamp":1786102739052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmslotswin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Jul 2026 15:12:17 GMT","end":"Mon, 12 Oct 2026 16:11:05 GMT"},"fingerprint":{"sha1":"EE:32:AB:93:8C:E2:91:A1:6E:6D:40:C6:3E:99:A1:10:44:49:0F:C6","sha256":"6B:3E:FE:C3:DD:8D:70:DC:FB:64:0B:F8:62:F6:DE:AA:A2:DB:CA:38:A9:87:BC:22:2E:77:0C:89:AB:FD:3C:31"}}},"request":{"raw":"GET /assets/rock_back_compressedn43.webp HTTP/1.1\r\nHost: mgmslotswin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmslotswin.com/\r\nCookie: _vid=msivgdi3c51547142888; _fbc=fb.1.1786102738779.8389204055\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 11:38:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VpgaBTLGZ9uzqv2T%2FFCgsmFqfmKGwdP721wz9tGIkYMGVzQNKKZIgg1lH4JL%2FcPoGjUjMzVS7ZCPjO0Ck2r1eoDGjUPstOn%2Bju2QOBzprWrmEbUrWsE19LtWA%2FzuT%2FO4Ldo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a275ff871f82b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25064\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25064,"size_decoded":25698,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 950x475, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"13612f18018e0295c79d2642d620b6a3","sha1":"78dc58296f91cc57d5cf670703333f5b9b58b378","sha256":"e300c4cacd1c4da9a04c51ed2dc3526f226492b1b21848ebad66274b3568c0b7","sha512":"4b8e3da31ec759d21770b8707b817e1c23cf8a051cce42fb92354c7451c12a9b7056e948d077e2771c41d231739e34f9a02a632793bc3e3194fb2eac0b4b976c","ssdeep":"768:LuX+oqS6Y9z9oVb5QhG9a8Amw7IbEWA+jN0euS/4:SNqUz9thWAmSIo5+R0euS/4","tlshash":"8eb2e03252b94210fc933b68dd0a1d90d91fe813496b332f8f911d36999b9af541bcbb","first_seen":"2026-08-07T11:37:25.26655Z","last_seen":"2026-08-07T12:00:50.268945Z","times_seen":24,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"mgmslotswin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mgmslotswin.com/api/analytics/event","fqdn":"mgmslotswin.com","domain":"mgmslotswin.com","tld":"com"},"ip":{"addr":"172.67.188.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://mgmslotswin.com/","date":"2026-08-07T11:38:59.056Z","timestamp":1786102739056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmslotswin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Jul 2026 15:12:17 GMT","end":"Mon, 12 Oct 2026 16:11:05 GMT"},"fingerprint":{"sha1":"EE:32:AB:93:8C:E2:91:A1:6E:6D:40:C6:3E:99:A1:10:44:49:0F:C6","sha256":"6B:3E:FE:C3:DD:8D:70:DC:FB:64:0B:F8:62:F6:DE:AA:A2:DB:CA:38:A9:87:BC:22:2E:77:0C:89:AB:FD:3C:31"}}},"request":{"raw":"POST /api/analytics/event HTTP/1.1\r\nHost: mgmslotswin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 97\r\nOrigin: https://mgmslotswin.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmslotswin.com/\r\nCookie: _vid=msivgdi3c51547142888; _fbc=fb.1.1786102738779.8389204055\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":97,"data":"{\"event\":\"page_view\",\"userId\":\"\",\"properties\":{\"page\":\"/\",\"referrer\":\"\",\"title\":\"MGM Slots Win\"}}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 11:38:59 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQTS4G22l5j%2BEbXiev8Stl2hHyElg87vtEs4BdFjtiW%2BWXT6Z%2FnrCUmXmKby1xsfCiK0io4too%2Btlavu3zU7d4z1KZB1%2FO4hb%2FKsVCf1udeu58VjW7NP4wlhK%2BasAOdIl5U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a275ff871f84b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":571,"mime_type":"application/json","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-08-07T13:14:39.144795Z","times_seen":17773,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"mgmslotswin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mgmslotswin.com/assets/favicon.svg","fqdn":"mgmslotswin.com","domain":"mgmslotswin.com","tld":"com"},"ip":{"addr":"172.67.188.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mgmslotswin.com/","date":"2026-08-07T11:38:59.275Z","timestamp":1786102739275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmslotswin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Jul 2026 15:12:17 GMT","end":"Mon, 12 Oct 2026 16:11:05 GMT"},"fingerprint":{"sha1":"EE:32:AB:93:8C:E2:91:A1:6E:6D:40:C6:3E:99:A1:10:44:49:0F:C6","sha256":"6B:3E:FE:C3:DD:8D:70:DC:FB:64:0B:F8:62:F6:DE:AA:A2:DB:CA:38:A9:87:BC:22:2E:77:0C:89:AB:FD:3C:31"}}},"request":{"raw":"GET /assets/favicon.svg HTTP/1.1\r\nHost: mgmslotswin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmslotswin.com/\r\nCookie: _vid=msivgdi3c51547142888; _fbc=fb.1.1786102738779.8389204055\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 11:38:59 GMT\r\npriority: u=6,i=?0\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AUED9FcL3V00A916iMzDhDkcSOF1qgmjWvuPTnoM%2BMFG093HtHpPTsQnrg2NHCfooEju%2FkDvs8C2UdAoHqNHReeTPx9kwUvNVlhB58E9uDvOyvaEKAY%2FxcWDWcliAfVSZQI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a275ff887f8eb4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":1412,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50679c0c5e3ed56d05c1d0ed312419a7","sha1":"f9ea27ac71a78da2d61e14b84ea77ce447920d9d","sha256":"c164e1ea36438d14fea9b88996d154275a4c92fd80bfa082c7e00a343f241147","sha512":"163d4097d60ecdcf58cd01ea828e74491b0e27fcf3d40a2e7c56e6c90042d6d9a9b6cb18825052caf8799836ad35a44c1c88ffd2c35ce5d888d23716c27dd0f4","ssdeep":"","tlshash":"a4312e9e77fea185f448e7f8023999b932d36cd33a04d8282bc00c02e98091e9c9588b","first_seen":"2025-09-26T11:40:39.971586Z","last_seen":"2026-08-07T13:24:55.373402Z","times_seen":22117,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"mgmslotswin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mgmslotswin.com/","fqdn":"mgmslotswin.com","domain":"mgmslotswin.com","tld":"com"},"ip":{"addr":"172.67.188.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T11:38:57.426Z","timestamp":1786102737426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmslotswin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Jul 2026 15:12:17 GMT","end":"Mon, 12 Oct 2026 16:11:05 GMT"},"fingerprint":{"sha1":"EE:32:AB:93:8C:E2:91:A1:6E:6D:40:C6:3E:99:A1:10:44:49:0F:C6","sha256":"6B:3E:FE:C3:DD:8D:70:DC:FB:64:0B:F8:62:F6:DE:AA:A2:DB:CA:38:A9:87:BC:22:2E:77:0C:89:AB:FD:3C:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mgmslotswin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 11:38:58 GMT\r\npriority: u=0,i\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nset-cookie: _vid=msivgdi3c51547142888; Path=/; Max-Age=31536000; SameSite=Lax\n_fbc=fb.1.1786102738779.8389204055; Path=/; Max-Age=63072000; SameSite=Lax\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbmjOnBooK3OULcUKic04gCpVehpORPK1BXndoT72Dw1G8%2FLcB1QADbAMX1vlG8U%2BTX1%2FKi%2Fu8FDmvitkOVfc8dhDpPocsZlQ5JbUVg8q1d7RwiMDOBD5CBUJUoegJ9g6a0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a275ff7d1eecb4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105397,"size_decoded":31688,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7373)","md5":"baad436018c06b721618cf230e9a6e50","sha1":"941279b54a5db0e9a59fb2ae620681993dafcc2b","sha256":"bd429b9c4e6a896b02ed582012a6c85d1b0e2f5f87a475490852b5281a9d8029","sha512":"f418d84b2069e26d0ec746ead4475ec2e5bf15e6bda1a52806a6cade66ea5a74f28c3f5884f32a3411050095f993466eaf4e6613dfb27f4eb004df17d6f273f3","ssdeep":"1536:Bd/ghobJO0sX8wl/wPSBwbjkVljR9qRt68XjlwPI6yDyCtbQSGvnliHYy:BBghHF/18k7O/dTyCtbtSiH/","tlshash":"7aa32a23b290113d70b38196a6a777ad35b99003e30689b4b56cb2688fc5ed70777fc8","first_seen":"2026-08-07T11:39:38.217227Z","last_seen":"2026-08-07T11:39:38.217227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1372,"timings":{"blocked":-1,"dns":9,"connect":17,"send":0,"wait":1341,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"mgmslotswin.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"mgmslotswin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}