{"report_id":"cb210078-1f31-485b-bb55-4b6688752b01","version":6,"status":"done","tags":[],"date":"2026-04-28T16:31:00Z","url":{"schema":"http","addr":"vegas-plus-casino1.com","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"172.67.213.179","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vegas-plus-casino1.com/","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"title":"Vegas Plus Casino : Bonus, Jeux et Inscription en France","dom":{"size":91358,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54377)","md5":"ea0e777eb1f6535e849497b11367ec8e","sha1":"b8fec6dffbed9e4a26e6b88bc608b51afdcb29da","sha256":"3d1b407a3a82e5c755bf3c4b5036209eea83ddae3365287e2d7694f4462d2262","sha512":"8922edb285252c76b5b9dd5b6f85653d678648b9f67f91447f7ad37f229e3d0f7b0097dad135159233576255c20a58aa1d817f7f537834bb7ef1b326d98979a4","ssdeep":"1536:904eoXnz/d2PMv1ZvMy/B4BETdlle84j6NRYoymEuUzdu/vLsZwMKi+pBsT9JQ/T:904eIok99RB4uhbnAmi+puIsW","tlshash":"cd93f764a5cc9d5262a74093fe23fa1fe60c440ed36eef90adfd06a4e3c645a51627f0","dom_hash":"domhash99f939154e55e11091d2d5dbaf38a123","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"vegas-plus-casino1.com","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"172.67.213.179","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T16:31:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"vegas-plus-casino1.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-04","domain_rank":0,"first_seen":"2026-04-28T16:31:01.812352Z","last_seen":"2026-04-28T16:31:01.812352Z","alert_count":39,"request_count":39,"received_data":1857036,"sent_data":19848,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","size":828,"data":"","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-06-02T03:03:59.017415Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/oPxpZvdljw-eOrbukbjGu/_buildManifest.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f0f00e51552fd4874cc226eb6c7fcff","sha1":"7983f3418e202206516eec3ea5adc5e2bd17d479","sha256":"fdad7c2f14b90f330fbfe79a4a5b7741cf8378aae92c050f6abe268dc4d4e9ba","sha512":"934fdeb3a1484b9a231cc7a92105906fbd4135d8dc430876a3708d17e926511d5b8a6a05c0b6b59d6ee54a64ec930bcd4ec92a203ebf99d77c5cb376b23febc2","ssdeep":"","tlshash":"f111bd82010ae61a6ce8fd47373f1363af52c036663c0ab68bcc1d6c55900675f3a822","size":1014,"data":"","first_seen":"2026-04-28T16:31:06.084096Z","last_seen":"2026-04-28T16:40:14.429435Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","size":98327,"data":"","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-06-02T03:03:58.991334Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/oPxpZvdljw-eOrbukbjGu/_ssgManifest.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-06-06T20:17:37.673701Z","times_seen":232126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","size":2571,"data":"","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-06-02T03:03:58.989391Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","size":2376,"data":"","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-06-02T03:03:58.995982Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","size":141013,"data":"","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-06-02T03:03:59.000906Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","size":8192,"data":"","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-06-02T03:03:59.001644Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","size":98298,"data":"","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-06-02T03:03:59.004649Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/pages/_app-8154b0b2bfb4a033.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0f0d0b61c021aaa446fe684ae8d6f29","sha1":"910307305a254a0d9f7e20ef7944979525281427","sha256":"d2becfe827b937e40aeff23ceb4cee60a91ff0a5d547a49d961686095afc0582","sha512":"55a3e9eda2f737b3028c10e37bd8689f96b5671ff90dff6cc838c0def793721fdfdabb071f951c18cb84475efd64d0175d9d640a0e3a71345bc4f9efa29e8ee2","ssdeep":"3072:ii1PkPUKsWkGb4HtlYw0kn5DU+djxlozNm8ad6/QQX+uhuxOEowsB489M4cJkcxa:iiCcKsRGs3dCadhQ7wLNJiRs1+HZ","tlshash":"9da4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","size":487968,"data":"","first_seen":"2026-04-28T16:31:06.068946Z","last_seen":"2026-04-28T16:40:14.509209Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/59-85f6891aff148d7b.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"618a5254b5b06c750668d65c15e9575a","sha1":"b65b9cf762c56bff5e0f9f574383920507a65ee5","sha256":"f57cc362fbc6a9b5dd33ca0fc2e5f4e607ef2c7d3b9266d9dc927b5a399c17fb","sha512":"b3374d77dfcdbbc2cc45a7b311b56acd9848e85212c99037f1835ae417483d15175a4f145d8a5bfd14a5e24bb97256f6d267b7c08f9307f33f2a9fbf4962e2c0","ssdeep":"192:FkzBOuoW97y/Q63zDe+x2r00hPlB3BexPw1jQvj3Elhk81bqVhcIa3uPYHyF9:OzBOHdzPw1a3Shkphcn3KR","tlshash":"bc62d46e498a49ae5a7cc8e4c427910cd7ed6649f158bc70e7a18413b6c7ec831b37cb","size":14862,"data":"","first_seen":"2026-04-28T16:31:06.080995Z","last_seen":"2026-04-28T16:40:14.524051Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/webpack-9cc6eaf2904dba7e.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"417e1f3a33269f7b7a8feb74ce2012b5","sha1":"6202750f45b694030a2433888f0e93ee9986fbfe","sha256":"017e1ecf1dacbb2e158e0661cfaa83fbdbfffb13cf4e753f5cff4dda674b8cfd","sha512":"b430c615f684d58c7cf2e62744481ea2b953abed3b5eb347ca6c3b613a6cf6d774594d2a170bc297be3b26b30efc3b0437bb01533bf3a4e36df052e1afe7d57c","ssdeep":"96:wBfIAgySVpEzqynRRdxEKjmvFqMug1kkNxjByGVPlVHO/jCE2UjKV6zVnRVG/OGl:wB4ySAzxnjrEMOFLBkQNyGzeHjKwVnRe","tlshash":"a9c1c79e72a5f476175365e0493f9056f13e247b781ed0a09b0ac9f4bc34a688533fe8","size":5968,"data":"","first_seen":"2026-04-28T16:31:06.068134Z","last_seen":"2026-04-28T16:40:14.427419Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fbooming_TNT_Bonanza_eab23e7b13.png\u0026w=1920\u0026q=75","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fbooming_TNT_Bonanza_eab23e7b13.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21766\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: rsNlfTOM7gxj80vNfJyVjM30TWfAe1BVsRAQbHPKJXY=\r\ncontent-disposition: inline; filename=\"booming_TNT_Bonanza_eab23e7b13.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EixoXQQs3eA%2B4hu5OlA7Ut%2BEAYifFzkZnfJ43L5rkjjF3kB1G3vlGanrXPaPL1e8I1UenSo7nZIxzY092pXTSzbreW4t2o77D0VB%2F0hw5ENJh7apps623UegoA%2B3OK%2BH7tJE51NRkHyK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e43f6e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7c9d661601d0190b070657e03baa0498","sha1":"2b10101a8e66aab2dfff86c90f9ab453519badec","sha256":"aec3657d338cee0c63f34bcd7c9c958ccdf44d67c07b5055b110106c73ca2576","sha512":"c8f7a1de5ad688b12602fa125026f539f04985c3fc350a308dc8ad8eda8ac7de8be6024e3bc75a738ca40bc66bef6f375034ae5d59befd8de644df0521c73393","ssdeep":"384:0+RzTo+Fne0nvhpFnpdAaegTyLXQbilCH2NljAuPWeRTf9lKjzkHBFLP3WBcoSg/:tRzT5k6hpFpXuLUila2NljAqlV8MHBFU","tlshash":"25a2d183ceb98d29c614272b937155391cb2979f6fc24833aa4a59f871f4ea0f67016c","first_seen":"2024-08-19T20:10:03.101318Z","last_seen":"2026-05-27T00:20:53.031054Z","times_seen":87,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/uploads/win_vegas_plus_casino_1_e2b095b8d1.ico","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:39.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /uploads/win_vegas_plus_casino_1_e2b095b8d1.ico HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:39 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nserver: cloudflare\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\nlast-modified: Wed, 04 Mar 2026 07:50:55 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6agK8dQFyxsIGuAXtGx%2BJbmC8OTs9OrAmYyPhAfwHMRt29gxlPkCWZNjLi7ERTgplNtEz6N5K26PrqT4PqyolknkMGM1BrwAEGFl8q6HZxqwJy2hCds6%2F5OOv6U%2B5CJqxynDxqLuMXJ7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f3773e61e1a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":496,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"8cd57760af4c046427e057cbf219902a","sha1":"247a8b6b640d1b2c74d6c4681e19e8d2e5562023","sha256":"383bf9bda29858fb6fd87035bd2ea7f6a4f9f3c10c69d481b5b99bda4ab08290","sha512":"f2f93559c885aa86a0288cd96e576150f7ad7c1326b153ed65c4e44d61f66e9176f016079a2563649a5f5b006f7b8902af6645cdcf5e744c9bf8013c21f3dc06","ssdeep":"","tlshash":"fff09ec31b00189b5f5db843e46b3530daa6ed1e5115c952252bd5239a408b897e89c9","first_seen":"2026-03-22T03:27:07.2997Z","last_seen":"2026-04-28T18:04:48.295951Z","times_seen":6,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/css/425cb6e228741817.css","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/css/425cb6e228741817.css HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"eee-19cb9e81fb3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ze75eNn76yUpObbiFQwdeTiICKoEjrS8QP2So%2BkoP1rtsieAmZ4dO2BHaYLKkQICXXgj5IblTuLRaUtIUJhXDWJP96XzlDjbC388NhIe28Rvtvr%2FBOwiHakqhtR6IE8ToOazBNqCof2J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e23fd21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3822,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3822), with no line terminators","md5":"18552a6e17838c46016a53e9762873c7","sha1":"3dd15aa95b79296b2894bfbd8fe4a53911f694d4","sha256":"66ecf375917e5eebcf9959e90773c31eff8f779803c5493fc5dd3760600542fc","sha512":"e1e0f9e0f622a0abca95b0eea21d599f23df0abf4d7e40bc5a85c69696ff5c6c97db03271d826ad105410cec045c6f279b66ce0ab29b9b5f4e29065d0265c9f8","ssdeep":"","tlshash":"a371f03a4fd0d438f4eb606f6ba2946d4b18c442ea275bdcff12d82bd1cb3d60562589","first_seen":"2025-04-29T14:40:21.773905Z","last_seen":"2026-06-02T03:03:59.010214Z","times_seen":175,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/chunks/927.a7dc7992c436ba78.js HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"a0b-19cb9e81fb3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8K2wKXp%2BmmojW%2FtXQK2vAFzmQjKDh%2BwcgG4wEcRhRS1nnBy2zmBHKFX4v8062%2BNah7Mvxa61GVM5dFOMhCgQDmMM0W2duTmPKtSQgRutSS9FWSoRa9eV47Jm6Xs517IAfmSu17UO0X39\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e24ff61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2571,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2571), with no line terminators","md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-06-02T03:03:58.989391Z","times_seen":183,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/webpack-9cc6eaf2904dba7e.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/chunks/webpack-9cc6eaf2904dba7e.js HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"1750-19cb9e81faf\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OYhVz%2Bm0V%2BtlbzhzOPU4sRzRQL4%2Fjx7b%2FwCt8Ar1MLWIXsxUv%2FImEoQBsPEaF7NUrbCGkI%2F7pE%2FpqZwVnNurOxSrF%2B2kycWpedGyCpANh%2FdNQN1V3n2BO30QbqtQiE1qmcFU%2BkcxbCq9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e2481d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5968,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5968), with no line terminators","md5":"417e1f3a33269f7b7a8feb74ce2012b5","sha1":"6202750f45b694030a2433888f0e93ee9986fbfe","sha256":"017e1ecf1dacbb2e158e0661cfaa83fbdbfffb13cf4e753f5cff4dda674b8cfd","sha512":"b430c615f684d58c7cf2e62744481ea2b953abed3b5eb347ca6c3b613a6cf6d774594d2a170bc297be3b26b30efc3b0437bb01533bf3a4e36df052e1afe7d57c","ssdeep":"96:wBfIAgySVpEzqynRRdxEKjmvFqMug1kkNxjByGVPlVHO/jCE2UjKV6zVnRVG/OGl:wB4ySAzxnjrEMOFLBkQNyGzeHjKwVnRe","tlshash":"a9c1c79e72a5f476175365e0493f9056f13e247b781ed0a09b0ac9f4bc34a688533fe8","first_seen":"2026-04-28T16:31:06.068134Z","last_seen":"2026-04-28T16:40:14.427419Z","times_seen":2,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/pages/_app-8154b0b2bfb4a033.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-8154b0b2bfb4a033.js HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"77220-19cb9e81faf\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DQnV9WJ%2FBT%2BsJ20WFurIR7YP4%2BZy9peWvA1CFq%2F0pMT2%2F6nrmreEaPGj4qIUx5QHhFED0pfOwbVsJjPp%2BZMx9FPCQCkW%2B5TAzpeCAVO4oZbrzgGNZ%2FTh5fcnXTwek1twv8U7TXeFF%2Bfi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e2582a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":487968,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64562)","md5":"c0f0d0b61c021aaa446fe684ae8d6f29","sha1":"910307305a254a0d9f7e20ef7944979525281427","sha256":"d2becfe827b937e40aeff23ceb4cee60a91ff0a5d547a49d961686095afc0582","sha512":"55a3e9eda2f737b3028c10e37bd8689f96b5671ff90dff6cc838c0def793721fdfdabb071f951c18cb84475efd64d0175d9d640a0e3a71345bc4f9efa29e8ee2","ssdeep":"3072:ii1PkPUKsWkGb4HtlYw0kn5DU+djxlozNm8ad6/QQX+uhuxOEowsB489M4cJkcxa:iiCcKsRGs3dCadhQ7wLNJiRs1+HZ","tlshash":"9da4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","first_seen":"2026-04-28T16:31:06.068946Z","last_seen":"2026-04-28T16:40:14.509209Z","times_seen":2,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/chunks/966-2601235ce9ca419d.js HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"2000-19cb9e81fb3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aJ284Rbwv9s0ACk2AyUHgqWnhXLh2%2Bena2Op%2FM1uYwunutwtt4ND3K7CPYDnF972OXmAz3hHX%2BR2afJAxRjhxx%2BlUANzmwCFeF2s2rPGiRNstkWne5MQpf3WutC9DhS%2F5tjP46xue2Me\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e258391525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8192,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8192), with no line terminators","md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-06-02T03:03:59.001644Z","times_seen":269,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fbooming_Gold_Gold_Gold_5de62fa3a3.png\u0026w=1920\u0026q=75","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fbooming_Gold_Gold_Gold_5de62fa3a3.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22892\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: X4+P2NT7clIGAMVZ26q1ERSrxW2lYGUxe2YzOTEiigQ=\r\ncontent-disposition: inline; filename=\"booming_Gold_Gold_Gold_5de62fa3a3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l0KPqi3JogkOhmpv3toexq%2Blw1Mc4vAcm1Nqg%2FnCDvGUQXcRZ8S%2BnYOtoiwv2HyoNGgMjj%2B2Y7p5DXEyQ2%2BhvH2kFCtEaG7Xir7Rx8aKJ%2FmTGCBrMU6mTGdKpRX8qWiol2YxROiOmkC7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e43f601525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":22892,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a8b94f48e2fd11cb50cac27fc86d9346","sha1":"5c70ea2c22699346e5b3861641339a1d2d6c57eb","sha256":"5f8f8fd8d4fb72520600c559dbaab51114abc56da56065317b66333931228a04","sha512":"fe8743c6c2a1215f636679fd201d71b82cadc779781b7161575ea8c96b1f8ca1eb9dd85f7922755968ae943fe71c9d17d36564947b5a9fa5b32b003ec9ec7832","ssdeep":"384:xUFhEi6MF0xzDZZiClIrogNEMzHiF0O4kVNor4I4bAbsXxsUOplwM:6SiVF0nlkxLg0O3osJXsWM","tlshash":"7aa2d0e4c277cdc069969c8322eb944671186b891c83e473d47a94aa37e991d3e0d72d","first_seen":"2024-08-19T20:10:03.128818Z","last_seen":"2026-05-27T00:20:53.03917Z","times_seen":92,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2F1spin4win_Lucky_Cash_And_Spins_22bcde6483.png\u0026w=1920\u0026q=75","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2F1spin4win_Lucky_Cash_And_Spins_22bcde6483.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20670\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 9a+gOWjPYY4qiluwI6mRt6tBY5cKmf2dMiZew8Zltd0=\r\ncontent-disposition: inline; filename=\"1spin4win_Lucky_Cash_And_Spins_22bcde6483.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uK%2FetsStld5D11y4J03ohdlDzFWd6KO5VjJimT9DyIjN3wQDZLpMkdbm9Mnw%2BpTfcnv5EoYDzw09sY4J%2Fa3vUR%2Bp1C2QL6PYuIkcvAvpie7LwUvPcVLwkAxC29C%2F3aHKEuxBm8UvqGYb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e43f641525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":20670,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f7f85b96f2e8ceb54d3d46dec321ae25","sha1":"e3c6fa402468a91bd3197cdee784301c017d93a1","sha256":"f5afa03968cf618e2a8a5bb023a991b7ab4163970a99fd9d32265ec3c665b5dd","sha512":"ad6205008eda336419d800350d86a09be7b0b5e2b96cc1e00637f2de6ec1d9c486eae2154deec67b55281d0f27407750ac0fdf97d70d7be9e75e5c38bc7983cc","ssdeep":"384:eJAiRDRkcPDx6TD5VcHAEdapxkppUHafktrvnTm7gCVQb+vHHhpiu:eJASRkc8TD5VcHAmpCdm7gCVQSHHXiu","tlshash":"b592e09a2d4bfb07548a6dfe39d02b437e8968160618c1fbd44422c7ad75ac8fe4c479","first_seen":"2024-08-19T20:10:03.129742Z","last_seen":"2026-05-27T00:20:53.039784Z","times_seen":89,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/api/report-error","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:39.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"POST /api/report-error HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vegas-plus-casino1.com/\r\nContent-Type: application/json\r\nContent-Length: 89\r\nOrigin: https://vegas-plus-casino1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":89,"data":"{\"text\":\"https://courage-dream.top/m4r2mz?aff=max-chi\",\"domain\":\"vegas-plus-casino1.com\"}"}},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Tue, 28 Apr 2026 16:30:39 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cd96I%2BIAM4ZJYeBqvZcAoD1sjH5kCFNKPo0Ku9%2BuUQecVeICG%2BVfPCiE9iDLBzkUvqqOuYHC9MzbGPpU3vUMm7YTNaqyaQ1fAaMRj2tdPTCYF5EVJx51ZU0jd7PDY%2BCJlfXU4lFrrk9o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f3773e5dd091525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9fe3cb2b7313dc79bb477bc8fde184a7","sha1":"4d7b3cb41e90618358d0ee066c45c76227a13747","sha256":"32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864","sha512":"c54ad4f5292784e50b4830a8210b0d4d4ee08b803f4975c9859e637d483b3af38cb0436ac501dea0c73867b1a2c41b39ef2c27dc3fb20f3f27519b719ea743db","ssdeep":"","tlshash":"2cc08c26351e2c0c96a322b402c36a50d092c3304c5a19004600420371c31168ac3315","first_seen":"2023-04-05T07:27:09Z","last_seen":"2026-06-06T19:12:09.753206Z","times_seen":95880,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/media/c1b11e140b58cf5a-s.p.woff2","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/media/c1b11e140b58cf5a-s.p.woff2 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vegas-plus-casino1.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15108\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"3b04-19cb9e81fab\"\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ileRCevAGf3goTfw%2BtE7q7xUEQYolAam8hZ3eOBgW7JgZS7ZySC1Bpph60VtHKjRBKQd7szVM0kDIXZE0v37w%2BN2fok1Cwk6yszcRrsRg1IxXKy0Umyf96uVLc3PlzmuzQgoDJOjoviX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e23fc01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15108, version 1.0","md5":"368f3e99ee207a4a2e2584eba7d3c82f","sha1":"9f907e41605807c4bf4f960745698b1e430a716b","sha256":"963fc62d2cf3e59e6f338db71b85b5ea86dd009fff859116d51a31a9b98d1d30","sha512":"2eb180c4cba21fa77eb89d801d6e55fd10acebe3a25e99228e3ca5861447a393aa60420a21f3cd573cedf5107dd391b5e5e1fcf5e09e799f2cbe7a6826eda2b2","ssdeep":"384:VHJTAkiZnTfVU4LSYdh7Db82J2Werb7VVX0m1+cz7aNw:VpTA9xTfVOA5o0erb7YmcGaNw","tlshash":"c562e16e92dc05534d2bd6f84eebd8cc7bd0f8548133af233905a62a854b810f218be1","first_seen":"2025-06-16T02:04:53.862041Z","last_seen":"2026-06-06T05:47:14.560815Z","times_seen":356,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/chunks/framework-10ae643bd7ba2303.js HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"226d5-19cb9e81fb3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=if9gkcce%2FY0Rct%2B%2BO3IAVoUmXBhKHCg%2BO9j761wThnmR%2BzgrTNMGklQA1GGYn4xe6mOTRGP%2BCpkT8VXmeDAoHHwsfvtBRC8Y2xfc5XxTE%2FftfTkmgeIBYMOR7y7IP%2BHswaWamGkutRl3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e258221525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":141013,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65202)","md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-06-02T03:03:59.000906Z","times_seen":287,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"89fc-19cb9e81fab\"\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2Fm%2BU2Aw0XxkFcqy51uNnnC8cwzLYVgktqaoOP3cCJvjq8GIq6dy0QlQCQUWypH8%2FUAq94wPiGtyiKRdZbFw80N7%2BS20npYrB7CFoso%2BMnOPWAmxSCkWI%2BbzdyL%2BgY%2Bodw5%2FFu8WG%2Fqi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e3bd8b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-06T15:56:41.92608Z","times_seen":1777,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":163,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fimgonline_com_ua_Resize_HK_Sb6wy_G67a_c8357f40c2.png\u0026w=256\u0026q=75","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fimgonline_com_ua_Resize_HK_Sb6wy_G67a_c8357f40c2.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3676\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: O-jSPT+EosLjJo3FXsATxEg7GTYHgWheCmRwFbnCNRY=\r\ncontent-disposition: inline; filename=\"imgonline_com_ua_Resize_HK_Sb6wy_G67a_c8357f40c2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jdvm2EJ7R%2B%2F6WZJrAobtk2Rpv0dMEFFKWaFiOwTAlgIGNiJ%2FLoQn%2Fa6w5Xq4c0gT2JpBGckIMViTfdpuDYXVDy%2FFtrlC3Qygp8IGlB7fD5HRlnJy2Cw1rLScIoxCWLSnhwuSskJoL0x5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e41f0e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3676,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1cf08deec74e25f30534559e99028ca0","sha1":"b2c1c87c0e9fea9735fd954706d83de9faf2b784","sha256":"3bf8d23d3f84a2c2e3268dc55ec013c4483b19360781685e0a647015b9c23516","sha512":"06dc665bf55c281601d100dbe8e4167463f7e01934ae2a6428ea964efba6028e9da711897a15c66388940c812cd56452770ef6e0cbab674cc5668a494562d190","ssdeep":"","tlshash":"83716df3bd00f43e170b9b561e4fc6b111411e176a7466cd04d84f76d9bc81cd2aa2a4","first_seen":"2026-03-22T03:27:07.324012Z","last_seen":"2026-04-28T18:04:48.301324Z","times_seen":6,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:39.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"89fc-19cb9e81fab\"\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ADf1xYdP%2F%2FnNp8CAqnmNPW%2BRMVR%2F17yVZ2aehGhBc9ZfHW2IYn9l%2FYLs3RTGCWBLzQlPuLDq5MM9egk6cK5UTZzonyN1y2rVb965DsjCHXIwPFsz%2FDqHULR7Rkb2X29oJQLxNx28uhvi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e6c8841525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-06T15:56:41.92608Z","times_seen":1777,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T16:30:37.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Next.js\r\ncache-control: public, s-maxage=10, stale-while-revalidate=59\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FOznQXyhahLoHIjxPT0JwJOJMTFKo6UyQLzDf4z6YI7xD7KI420uz9kPdAGt5V9%2FS%2FZatWYiMSmdWNhExvIsry4s94ZjRXcdhRi6hRQST8GMKbxUtr9ueUjJSUAhZY6nOYE057ymUiuN\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f3773deeb244e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}],"data":{"size":84793,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62379)","md5":"7a6079cbc9ed1a5216f396b9205dda92","sha1":"96df5049db0f9692360a6cfa3209c9c57ce428d9","sha256":"df61d574906cb13e20b2c2dc379c03e810d2a3b0e8cc7186a8dcbde12be1debd","sha512":"ffbb589e86ed68bca672163aea99cd4118956160bda1848c11bf7d057bbd593686a17af45aa5522e0dff570b00ff5194e3ac4734f697b14d504cb8a9178e39af","ssdeep":"1536:fWsMxNd+xKxDNvMSDhyBETrBNYT4j6NRYoymEuUzdu/vLsZwMKi+pBsT9JQ/H9eD:fvzo1JbhyujCnAmi+puIsD","tlshash":"72830864a4cc9d5256e75193fe23fa0fe509040ad36eee94acfd4a84e3ca85f11627f0","first_seen":"2026-04-28T16:31:06.074798Z","last_seen":"2026-04-28T16:40:14.528421Z","times_seen":2,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":47,"dns":24,"connect":1,"send":0,"wait":337,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/media/9f0283fb0a17d415-s.p.woff2","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/media/9f0283fb0a17d415-s.p.woff2 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vegas-plus-casino1.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21336\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"5358-19cb9e81fab\"\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p95e7pZZwTveFGuI%2BErgJxrnfYaaFUop3lcvUMFnH3ZVJGILP4atcWBJt6dpaIbL7hR84rACR%2BbP84uzBJ07%2FA2sfRKYUKxACOB054M7bJWA4HyIbMcwyK5FOOucXN0GK%2B18xJVCnwjZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e23fc81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21336, version 1.0","md5":"0e35c6fd40c2ab9ef2d5b97baeca2f2d","sha1":"781b1852315aad9bcf111a3017ca734ab6dcd6b9","sha256":"07a6f958db51de42694ef87e2c01b9cf5ee415047b2fd17ab1c313c772a6804e","sha512":"7f76da76841e131252106ff1d70e22908753364d612e9b807d9332f89b13c759b1b9d05ac5983055b48bf99b441a2a07301db2c93fbb79323e492c238df1d7a9","ssdeep":"384:h9WnIiwq4BeuEc4AZTT4ZWgC9UCzpulxbC9WzQFvCY98IW1NoTXVY23sC6:LWIix4BayT0ZMUQpulJCuQF6IW1NgP3O","tlshash":"4ba2e1080f4b3a18eda72c8972acb57498741c208f8ee2770cd42859365e652fe3fe57","first_seen":"2025-10-20T15:26:06.98799Z","last_seen":"2026-06-04T14:06:59.774258Z","times_seen":269,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/css/dd79dc2c5a9a9197.css","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/css/dd79dc2c5a9a9197.css HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"a112-19cb9e81faf\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aIi3QbDpjXXA11oEuKGQMv99vR9TZAr5QKdUMbZVxrRPgHB%2BqihqrWTCE%2Fl4BIovq1P6eUIL2zgN%2FCV7DWcR5zk0QGJr%2B0%2B%2FGq69akEo0YzTUlQiJD6248OOantCzd5dTKk9zTDlMFSu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e23fc91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":41234,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (26798)","md5":"93e37c199f0ae59faefffcafacc5f00c","sha1":"a18665363dc58467e599d2bd59c1d63443bf8902","sha256":"d91a05b2ad13ad076307787468b87cd94e7dec4beefa460fb9b6c1e13473ccb5","sha512":"22f1cce98b2a8190e8fe8a83f883915899f1eeed64ebc5006757b2e0bcdba68ac5ef53f2f69439648c2dd3a9d58d0cce4585b5e5b79516718e9e2e3d73959d28","ssdeep":"384:gi4OZg6oxkmT0Ew2zXf0MrREq/XisHZ7aVWMMqLswaDGvi1vPTnx6G8S3yvVQW78:f4OZwQ2x8jeDqeTnwVA","tlshash":"4003c921e619702dd8fbcc6732ca7f1766184402f5950d69fa1b866ccecb9271b93bc8","first_seen":"2026-01-03T15:12:30.994041Z","last_seen":"2026-06-02T03:03:59.004085Z","times_seen":256,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fsoftswiss_Elvis_Frog_Trueways_c67568b187.png\u0026w=1920\u0026q=75","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fsoftswiss_Elvis_Frog_Trueways_c67568b187.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21966\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: h75VkDwuLRO4afqmu-ggsPb3P2A1dvFhT-wD8ax9xzw=\r\ncontent-disposition: inline; filename=\"softswiss_Elvis_Frog_Trueways_c67568b187.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qhe8g2BCm2Q4qbZjmA1R4slGPeqQmsP41%2BrpbpAL7XlAAxbgJeetMbXY%2F8MB31NngnEBQIg7Vry91Ap3zydZnwsEgRWn1IFhOICkJj537qA1gpOjYc%2BsggaEDuuXTjcpnLqixX5Sj%2Bpo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e42f431525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"89fe905b87b7b4316a388a0303eef23e","sha1":"63748ae1a9b6af0c90f463288063d7e9859f82b0","sha256":"87be55903c2e2d13b869faa6bbf820b0f6f73f603576f1614ffc03f1ac7dc73c","sha512":"ece5089d0b693dd8f4047be81010bfde68a3a1566fc93139c39e0d01281c0c84c9fa4121e00c451d22bfb5e4b1c1adc80bad001f7e02195ce99c345992c9f021","ssdeep":"384:7cDVuiOKc+mjDb/RRWjVeMYFCPUo/yEpAKY8LSMd/QzvbeHmY3gaw:AIecf1sjwvFGnyEpATGCrbTft","tlshash":"76a2e1c573d33e77833e41718a788973101264c6c553bd5ac6347acfaa422e2579471f","first_seen":"2024-08-19T20:10:03.133116Z","last_seen":"2026-05-27T00:20:53.029806Z","times_seen":91,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/css/352d5236847d301d.css","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/css/352d5236847d301d.css HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"644-19cb9e81faf\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RT1CHZHXwRY5O23hY1JZiEm5EHVZ8bZkqjTYCcdudZmToyHjoZZHgyzq5Fb77x7xEKKLmdEM3c0mphzJp%2FPK1JrJe%2BiGvbcO5mObWlNdNZSNHfc451kQ6e2Ux1znIYH2BCLIpLPGNSbT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e24fed1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1604,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1604), with no line terminators","md5":"d861c7ab0c20ce2a7a153e0a29f1f60a","sha1":"fc6bd3dab3f134d21c58832d9de3f830d62f1ec9","sha256":"4ded20bf9809d391e7e962e1395b3522283ca30f52fe7a86155d1d5b4b3789d5","sha512":"0f8ba9f03c97e33b8a6a9c2cda9bb1a130f8e2b72e70254c382de16ba63d39be6516245f7e740cb52a947fb85c32939217c29b9d982f330bed19c438322db91f","ssdeep":"","tlshash":"0a31bf1195c2af35f9bba4a95fe0367f7816584887fa0ddac2d5f35582ce0d2831c54c","first_seen":"2025-03-27T03:50:55.637284Z","last_seen":"2026-06-02T03:03:58.995344Z","times_seen":268,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/chunks/546.767fc6323cdbff4e.js HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"948-19cb9e81faf\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M6oJ7n%2FyMOrW%2BWCnuPpvxI%2F2f6TfRdexN9gOWlYfu7OYuofd1r4m2zjKSNmcin5Pk3veWgI3i%2BqsifK68%2FZPxEpUI1FFFWsQe%2FY9L62WmTmUZd%2BYo6cTHykzA3eY2giNEoae8NTFLnc9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e248191525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2376), with no line terminators","md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-06-02T03:03:58.995982Z","times_seen":268,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"1759-19cb9e81faf\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVPYgrHNnU8k10EniwDg%2Bzj3d%2BSoot7llCs%2FlN7SL90wqOmO7XGHeHOpTsc%2BV7JcAupjoNaiPDATw1uHnLTiLvki9kYVtw4JZbAOlwIlprtJqZ8AEhiTLtoI2WjPxDJt36%2B0I3%2BWIlmo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e23fcc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-06-02T03:03:58.987189Z","times_seen":264,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/uploads/scrnli_18_12_2023_16_04_05_50ad914533.png","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /uploads/scrnli_18_12_2023_16_04_05_50ad914533.png HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 384206\r\nserver: cloudflare\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 07:50:55 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5GA4kmL2Rko2CFDTKMzXJmhFnamTftmskZxowxZsdbVolThfURBfB6ZsSmqu%2FFHe220eVKzglklOAdvwLcBAqnCouYqZUPcEtK4FTQ0c3%2FfFB7p9geEOZsJZRbapXwkdXEkGP%2Bt5G1mg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e3ad571525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":384206,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1635 x 521, 8-bit colormap, non-interlaced","md5":"dbedd52edd8d4acb7f59f15709ecd3d6","sha1":"af90b535d04881b8fd1f54d7f20d6984e2cbb57e","sha256":"369a7190b99377267f8f184158daf20799ee4b423f7827df3ed98dc23038dc84","sha512":"49eb518a2df93585453035b6e1e572bb366b6c7021b8580dbd249408e538de2e64e64a1d287de1c5577efce0626c2dfb152d02e6f08abc7b4c9345373dd48e26","ssdeep":"6144:tDOp9rSDFrSMy9kk7N/tJeJsU6Ga8balkFg9DrUlBbzmishcvDTY4Yw/QrB6srcL:tip9uS1X7N/DeJB6GjOkuNIe72vY4/Qq","tlshash":"ad842382a85fa578f01f86742dff4680a1f2ab181ff029973b48de438257f55d1876e8","first_seen":"2026-03-22T03:27:07.314816Z","last_seen":"2026-04-28T18:04:48.3188Z","times_seen":6,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"89fc-19cb9e81fab\"\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjF%2FkZ%2FLRvlcUF%2BkAZ1PBZxwm9slN8cOoH7QE6ojg3XqQw1x11lYYFTZZlO6LsOqQKMtTuh7Kj8%2Be0rDptDmxmAv5oVRA7o2V59%2BYNuPTbd198E7CWGZMYNeP54Upy8h%2FLz6ocgnqtci\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e3bd921525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-06T15:56:41.92608Z","times_seen":1777,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fbelatra_Big_Wild_Buffalo_88e93f38de.png\u0026w=1920\u0026q=75","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fbelatra_Big_Wild_Buffalo_88e93f38de.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23336\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: um5JvSs61wtREZ4fYJeuVZFG49yLHdJQfQxj69WSHS4=\r\ncontent-disposition: inline; filename=\"belatra_Big_Wild_Buffalo_88e93f38de.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hy2KAzXjwMXbQ6tJtslfl1oXN7PxIWz1Q5PSbHXDIIIOd72GcFHAUuY1GSGoXihMt06wwuxZDw13C%2F63kqTcCzhrvJO4PxzK7%2BFGlCyue%2BzNaBs6MJLLwnd4cNZB%2B3YKpQhV76o4pVGw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e42f201525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":23336,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4cf03c14ea2e0929c09871fd8edbe0b5","sha1":"e82a4fbb214910e3e83460521fe777c78615e4cb","sha256":"ba6e49bd2b3ad70b51119e1f6097ae559146e3dc8b1dd2507d0c63ebd5921d2e","sha512":"762421c57ea1e1ad84e18332aed52b64549ce88901e182708e13493e73c9c0933a749050e804d5232e00e5c5ecb0a0eb3d5a18b81b45b2b3f0434d4424685ad2","ssdeep":"384:QeW+eh5s3NTd5h9UXKgqcglgf3S3aC2QX0qhtx+I7zOFCKZ2FISWKbNndmdQ8aEH:Q5s3NTbU6Vcglgf3S3/XdXx+InPRISF4","tlshash":"d7a2e0d641f39996a6057069a88d56fad2838e10ccc4bd179984a8f31c5fe338a74fc6","first_seen":"2024-08-19T20:10:03.092554Z","last_seen":"2026-05-27T00:20:53.016151Z","times_seen":92,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fredgenn_Black_Wolf_0a8ec1c933.png\u0026w=1920\u0026q=75","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fredgenn_Black_Wolf_0a8ec1c933.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21852\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: -U77pMGf5wIflLXK5FT16xq39RkD7+2Vse+9BiIQbMs=\r\ncontent-disposition: inline; filename=\"redgenn_Black_Wolf_0a8ec1c933.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DhhbF%2BCAqeGmZVkWLG8T188sFWMezb3EcP7MREUVUCu0mHwKZTYhZ2nkmgktyBeEcXYDqU3jfNP7FHwBMSpjhY8jQZQl5FAepJN3Pw72D2m5fRWjHo2lZFVl0eTUGSVWI8qZUX7zyW20\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e42f281525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"53bedb6b67e143164bfa4534fa4f36d3","sha1":"bff968fc4a385ba40ea1a47a2707b4ea24b2e15e","sha256":"fd4efba4c19fe7021f94b5cae454f5eb1ab7f51903efed95b1efbd0622106ccb","sha512":"b63b0dbd6e04300b3c9960af0e34f4cbbbaf938bf476da0fb5556a09c96f312bcf26594b575a17e6d880532a64d9f2668468353b7f4e7aa93c1b6ed670806e2a","ssdeep":"384:pjrM7MlwcHoSV9gGVyZMmz+BZLG6qR4tycM9VghKWHKC6kZr32KcFEP+YW3U51A4:hrMotISVa+yZruJqjcUqhKB+4Kcw+YWO","tlshash":"18a2f1ec78fe79c856add688316621f5094c75982a727ee88484173760cdc10dc3fb3a","first_seen":"2024-08-19T20:10:03.131774Z","last_seen":"2026-05-27T00:20:53.023385Z","times_seen":92,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fsoftswiss_Dig_Dig_Digger_e775d7f45b.png\u0026w=1920\u0026q=75","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fsoftswiss_Dig_Dig_Digger_e775d7f45b.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26962\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: AzSFO1WUx2-1VIIgfxOwWyI90fx8TGb3o4bJatAWqNM=\r\ncontent-disposition: inline; filename=\"softswiss_Dig_Dig_Digger_e775d7f45b.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvHtto%2FjZ7r4g164%2FibEzn%2B7CX0SF6cVpeLI1%2BeD2fA4gFVl%2FKO38XI%2FcZEB595hZvgs8tg4GgARXE9GImXCfT2Rj0QeSfEBirs%2B6WW6kWJcab6jcV2iKjDbi3dffXdTjEOLYRuFCSoc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e42f381525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26962,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b7f1024608ca6e96df2fd83dc6ceb2ba","sha1":"43bf1e14d076bec914f5bdf95d10dd1d1fb80538","sha256":"0334853b5594c76ff55482207f13b05b223dd1fc7c4c66f7a386c96ad016a8d3","sha512":"392de0371c69d790394b15cbe6bf1abdd3e1652107256547cf341ac78dad216068cfb11ae5e03d697ee99d4fec454ffe79ff13782838aff067b3c0cc7f1aa062","ssdeep":"768:wvBOc9f8BWKrVGs4XerHFP691vwUfCwHrioqXdypEx9iqVfE:w/9frKrws4XerlIvpCwHkNt9igfE","tlshash":"37c2f1217e92890ca77dd0bbed9374a87cf0466c466270378c03829977ddaaecb1d64d","first_seen":"2024-08-19T20:10:03.123447Z","last_seen":"2026-05-27T00:20:53.035608Z","times_seen":91,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/59-85f6891aff148d7b.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/chunks/59-85f6891aff148d7b.js HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"3a0e-19cb9e81fb3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jarUaibQ6z0ZBEWkxLDowJQY1VbGoayZeBAqwxryc8uAEVPFPW6z7d0TTKq6GGDzPKzBGuqShMBl2GNTX%2B3fnyIfH5rRC449Dn5qFubugcqC%2BbmtPsyQ9eqK4KygOEeYm4rn3oSBXv7M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e258341525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":14862,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14862), with no line terminators","md5":"618a5254b5b06c750668d65c15e9575a","sha1":"b65b9cf762c56bff5e0f9f574383920507a65ee5","sha256":"f57cc362fbc6a9b5dd33ca0fc2e5f4e607ef2c7d3b9266d9dc927b5a399c17fb","sha512":"b3374d77dfcdbbc2cc45a7b311b56acd9848e85212c99037f1835ae417483d15175a4f145d8a5bfd14a5e24bb97256f6d267b7c08f9307f33f2a9fbf4962e2c0","ssdeep":"192:FkzBOuoW97y/Q63zDe+x2r00hPlB3BexPw1jQvj3Elhk81bqVhcIa3uPYHyF9:OzBOHdzPw1a3Shkphcn3KR","tlshash":"bc62d46e498a49ae5a7cc8e4c427910cd7ed6649f158bc70e7a18413b6c7ec831b37cb","first_seen":"2026-04-28T16:31:06.080995Z","last_seen":"2026-04-28T16:40:14.524051Z","times_seen":2,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-67c545f8362cb3f5.js HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"33c-19cb9e81faf\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lxhYIxK3ce70SQtWgip7sIkHPTh6Yp2%2FfvR4tde3y3Po9Q%2BLXzX77fIfAQ2HVW56UC%2B46fuOoDaxRnLtykHMv1Dytmtdz1qt%2BjnwfW4RBiRmYsjWvKSgz%2FLlLurPJpyt%2BNKPOOUwUF3o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e2583d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":828,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (828), with no line terminators","md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-06-02T03:03:59.017415Z","times_seen":251,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/oPxpZvdljw-eOrbukbjGu/_ssgManifest.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/oPxpZvdljw-eOrbukbjGu/_ssgManifest.js HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"4d-19cb9e81faf\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkRbzlEHCeAWvfvrWnRPhY19HW5dnd79Sj8yiyPP1HgJvqO9QtkYkb1CDSNQxHGacMuSaoKOG6FJHF09FxpEypF32uj1ZZzMQYezGmgOHAlHH0WXBvFdtxQiZUu1RLtilQKqOKZandtO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e2584c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-06-06T20:17:37.673701Z","times_seen":232126,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fsoftswiss_Candy_Monsta_f926a8f5ef.png\u0026w=1920\u0026q=75","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fsoftswiss_Candy_Monsta_f926a8f5ef.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22730\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 62t4TcX051OuvjJyhm2gc55hyCONJ1dRuCOFnSgXYss=\r\ncontent-disposition: inline; filename=\"softswiss_Candy_Monsta_f926a8f5ef.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2FSZkzSkTXheSF3t6Vs7oySCkE99EjLYX%2ByEwJNYwqUY0GvCwy3rRaFW7qnkQiaOvpDuvJSWlvS547QQwNXiiA5%2BzxQRQtpmBetkewa6LHbLVV7HwGOKBsWi7Yt4en%2BwBviw57dLKQLY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e42f321525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":22730,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8766790b2d633a9f78ac939b1049c0f6","sha1":"0dc71d15e64969a630ff4b417f5f5b0e27109d74","sha256":"eb6b784dc5f4e753aebe3272866da0739e61c8238d275751b823859d281762cb","sha512":"ef4256c0073f5a75d3ce978de14a0cabc25f655f40c699ac2bf644c79fb55c56d344ccd38ccca03a1d8d07caa60c7c9b3b0e48e4abf0d5a622a78421bc75dd2f","ssdeep":"384:NpstdaWUT2MGuaPjWcLdsJ5igaXFrW0LZmZvgHvscvJS1Far24+uo9AmFk2brxcK:NGeCMG9CcLdzpPZHvs8JSFaP+uoemmC1","tlshash":"02a2d0cbde0aa040ab15d96e4c72120bfe7d99c27f048f6c84d753a0193adb145e87d3","first_seen":"2024-08-19T20:10:03.127Z","last_seen":"2026-05-27T00:20:53.0343Z","times_seen":89,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:39.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vegas-plus-casino1.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:39 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"1759-19cb9e81faf\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K16wTO%2FtwOsDv5vyqT21wf4pyVdJyCyJ0AEj5yzrkUXEG1ji0csCIFH%2FC6z13LSbhUlH6dwux5wGXwedEc9ggiTBfzYswSHHgwbkyhSF3ohsedAQaDpAYh6aPIPTEuCPqeqHBCpmX0S4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e6e90c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-06-02T03:03:58.987189Z","times_seen":264,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/chunks/main-69b63e2e16716907.js HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"17ffa-19cb9e81faf\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R9dUd2V8bgZh3Dr9RBNDZIapeJKGB5TPFwgGIpSauVaDvsJT4Ej2vpPEjnsCLDnbM2zy05lxXOZrNRZRMdXreFmpMlE4TYt3CfzXnTFFk6Plna2erIL5l2wyhPFVSsyHiMC272YH1lPe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e258261525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":98298,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-06-02T03:03:59.004649Z","times_seen":271,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/oPxpZvdljw-eOrbukbjGu/_buildManifest.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/oPxpZvdljw-eOrbukbjGu/_buildManifest.js HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"3f6-19cb9e81faf\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2FfX2FH3863Bmp0VjxgrH5MegAo%2FREivyeNOR8B84ozwmLmVZNx5m16W7z3qGd%2F7ZrAMzFMbYBW0lHYOViARdaLuLR3fLFaZF%2BFlx3hryTrjJsQLGrLCxrXu0XwDYS3xjslZNoohHdtf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e258431525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1014), with no line terminators","md5":"6f0f00e51552fd4874cc226eb6c7fcff","sha1":"7983f3418e202206516eec3ea5adc5e2bd17d479","sha256":"fdad7c2f14b90f330fbfe79a4a5b7741cf8378aae92c050f6abe268dc4d4e9ba","sha512":"934fdeb3a1484b9a231cc7a92105906fbd4135d8dc430876a3708d17e926511d5b8a6a05c0b6b59d6ee54a64ec930bcd4ec92a203ebf99d77c5cb376b23febc2","ssdeep":"","tlshash":"f111bd82010ae61a6ce8fd47373f1363af52c036663c0ab68bcc1d6c55900675f3a822","first_seen":"2026-04-28T16:31:06.084096Z","last_seen":"2026-04-28T16:40:14.429435Z","times_seen":2,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Ftechnology_Treasure_Chase_bd3669fdfd.png\u0026w=1920\u0026q=75","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Ftechnology_Treasure_Chase_bd3669fdfd.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23300\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: zCIeaPVWnF4punngZxRcFtHVNWhPnKUnAqan3q-KNKE=\r\ncontent-disposition: inline; filename=\"technology_Treasure_Chase_bd3669fdfd.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fm3R0Un2p4iZOufpTfUHY7IokviTXBaBBraQrOnb8SQ0xu2aJ0fbvlQtZp9yXHgPFeHngEp1PagE0N0%2FgErcIPvFYGRsoZbJSVRxsuJUFHsByQqsWWOVW0Tj%2FmVeYO23rYzJpUcE7Zvd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e43f711525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":23300,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7f78e3ac142ad309a3e075f80654783e","sha1":"bc5587eb4d5d683441166e772e0f9ab6635b9d54","sha256":"cc221e68f5569c5e29ba79e067145c16d1d535684f9ca52702a6a7deafca34a1","sha512":"4ebc20bb887d30ab624c995626088d14e6271214b1b76964430cbda03c096731af982f1adafb759e3ccff01ef16777ec770fe92078b87869272c46084000bfbc","ssdeep":"384:RXC24RDcPWbUTGDznGTCZIforIpZleh5CWiy4nF4KTVs8F6WQ55OPUJVNZHo:RXUR2JGD7GzRleCjF4KxnQTMGu","tlshash":"e1a2f1812e9cf744e98092ea2dc41d17922cfd194e320964b33c9188eff43ed7438b22","first_seen":"2025-03-27T03:50:55.666836Z","last_seen":"2026-05-27T00:20:53.030466Z","times_seen":81,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fkagaming_Lucky_Star_deb2e6bffe.png\u0026w=1920\u0026q=75","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fkagaming_Lucky_Star_deb2e6bffe.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21696\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: S6nscazm6FtIpgPWdArg-GyF8hqTFwRrGZ5s-V0ICCg=\r\ncontent-disposition: inline; filename=\"kagaming_Lucky_Star_deb2e6bffe.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=APuB7hTGyXBNMcQUXwzgh50T8Il4SdAyEVQ%2Frn7nhsXchF22sX3t2jtBVG%2F2rdG7flNNuPqpQkOWeIF%2Fqu7XMq%2ByCzkxawvXazx%2BA78o8h22M6jK96kTch8yA38upG27yvmtp9obrLH1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e44f8d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21696,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5a2926f8601ca3f339e217178f1d8ff1","sha1":"23e4daf9e3c32e46d6cac6f0464bb6bad825177a","sha256":"4ba9ec71ace6e85b48a603d6740ae0fc6c85f21a9317046b199e6cfd5d080828","sha512":"05efd3d7fb0a219ff7f864b4c27c41d932f4b33d15a3d38eff80f722edecd0dd92b4df3bcaa4b9a65dd9c44b4b627e7188f7343d2c639d67abe4b068a921a279","ssdeep":"384:I4QqxWxwwQ/jtWeDIJj8fR1vNvD6PnKgMILmEu9YdsL75eBpV1e09GUNSAydyZD0:IVqxWxj+WeJffFCnDM609lsPZ9/p8","tlshash":"3ca2d0d3e78232f1981699dda22899a3cf439177536c573cac764b6f1a22284977024b","first_seen":"2024-08-19T20:10:03.131059Z","last_seen":"2026-05-27T00:20:53.020285Z","times_seen":89,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/static/chunks/492-27fcff75637ccad1.js HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:32:03 GMT\r\netag: W/\"18017-19cb9e81fb3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7XK8Tmik13ea0EoxNera%2BqaA%2F5G8ypDTr1TLhO6ee6RzDCOVJ%2ByW%2BvsMXIAjQ%2BLPjY9p8EEhYOHyKB0%2BTzlQFEXw4%2FyHP%2FYVA%2F6GKR9fBuGNJXdKpkIXBfiSdtt4cGScv1yS1r3Cl8%2Bq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e258301525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":98327,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-06-02T03:03:58.991334Z","times_seen":271,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fsoftswiss_Aztec_Magic_Bonanza_9710f0cffb.png\u0026w=1920\u0026q=75","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fsoftswiss_Aztec_Magic_Bonanza_9710f0cffb.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29982\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: JR2Enbs4kzfL5MG7HLHJOiF77ljUO7jmqskB9x8ZSyk=\r\ncontent-disposition: inline; filename=\"softswiss_Aztec_Magic_Bonanza_9710f0cffb.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I5xlq4RfMrUGu%2FrweqF7SOQeqEJX7YwRokyRu%2B7Ckii5zqk7oPOgFvIAW2B7dYoEMNqWqwbv7r6V%2BfeW1LN%2BPxUmy9YGfFmD7TDeMk75gfAVbQyhBJ3Lx7k%2FUNykd2Pbk7zl0bm2tfoI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e41f121525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":29982,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fa1f178cec4921ae3eeb5931973a7e7f","sha1":"a58afa1dbaedccc362c8033468bd693c5091a794","sha256":"251d849dbb389337cbe4c1bb1cb1c93a217bee58d43bb8e6aac901f71f194b29","sha512":"7daf2f93512667d5bf20704b0a932eef7166af34a62db7fee3fe8979487cacff9def7a0b2a53c34836c9341b3491cf4423487fa78fd6556a53ffdc11fb73e777","ssdeep":"768:VDfWwLEZ51IAy8xU7WdpD0n/T0X2mMGTYzb5Z:VawLs51NU7WdpDaT82kYzb3","tlshash":"8ed2f214fe0f452ca893eaf649c6469e4b30688152f843a087015df18f27d3a4e9dedb","first_seen":"2024-08-19T20:10:03.135853Z","last_seen":"2026-05-27T00:20:53.038543Z","times_seen":91,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vegas-plus-casino1.com/_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fsoftswiss_Lucky_Dama_Muerta_b2c63f6fa9.png\u0026w=1920\u0026q=75","fqdn":"vegas-plus-casino1.com","domain":"vegas-plus-casino1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://vegas-plus-casino1.com/","date":"2026-04-28T16:30:38.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vegas-plus-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:01:36 GMT","end":"Tue, 02 Jun 2026 12:01:35 GMT"},"fingerprint":{"sha1":"76:96:BF:89:E5:61:67:3C:8F:5D:F2:14:31:21:6D:47:7D:76:9B:92","sha256":"59:00:38:72:D5:52:B7:17:61:6F:D6:1A:F3:FE:10:D3:B6:81:21:96:83:19:D5:1F:59:5D:56:EC:53:AA:F0:B2"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fvegas-plus-casino1.com%2Fuploads%2Fsoftswiss_Lucky_Dama_Muerta_b2c63f6fa9.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: vegas-plus-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vegas-plus-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30852\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: hRj2QR1zy82mJwKSBTgBjI-BRAv-cEKborTVEp9NDuo=\r\ncontent-disposition: inline; filename=\"softswiss_Lucky_Dama_Muerta_b2c63f6fa9.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kp8405dqIPm%2FJO40dhfCtsibkCsmxEVlIIHwTrJ3dtpwY%2BB5i%2F0rMO3F7g%2FskSUyE6EUUuw5EulHRbmgJBnTyMs2%2BKETP%2FjgpMZ7X2HtoeTHpVXIShexQUZb3MnM0kRriUNy2vrwaJmi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3773e43f671525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":30852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c120dc49625e377c78fb0ddbc94c7968","sha1":"86111549bf5cbe47ca253f09307b3fe0cf7152b1","sha256":"8518f6411d73cbcda62702920538018c8fc1440bff70429ba2b4d5129f4d0eea","sha512":"a6c767679113f05b533f8d92d271e9b3817c123c3fcb07cbf8810773cdb5d8da21dbbaab4c7fedd2192ceba699ee24ed61f955a2eba97bfb513abf7f08607576","ssdeep":"384:1nbwJXafXoA2+zUXgY4E3aU7fx4VctE1CHXNSpv6YBFR3E3Vbsww1gjb1yksHELp:1nbyqwzg+gHy77ucth9gvj1Eli2jY5I","tlshash":"8bd202a6d24e354b23ae6c86345f2716d3557df4e4624c6f004ace2dfe7d2691a9303c","first_seen":"2024-08-19T20:10:03.125147Z","last_seen":"2026-05-27T00:20:53.026542Z","times_seen":90,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"vegas-plus-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}