{"report_id":"cd150623-c534-44fa-a08f-01392cb8a9eb","version":6,"status":"done","tags":[],"date":"2025-10-13T01:24:08Z","url":{"schema":"http","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"title":"Megapari"},"submit":{"url":{"schema":"http","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-17T01:24:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":1,"received_data":4594,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"megalanding2.top","ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-02-01","domain_rank":2915203,"first_seen":"2024-02-01T18:34:54Z","last_seen":"2025-02-24T05:49:26.590615Z","alert_count":62,"request_count":64,"received_data":5032199,"sent_data":33228,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-10-12T22:15:22.841346Z","alert_count":0,"request_count":3,"received_data":243061,"sent_data":1572,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":2,"received_data":79006,"sent_data":1104,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-12T22:12:10.358486Z","alert_count":0,"request_count":1,"received_data":439312,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"apimegaserver.info","ip":{"addr":"104.21.37.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-24","domain_rank":0,"first_seen":"2024-09-24T09:35:30Z","last_seen":"2025-10-11T22:36:30.310036Z","alert_count":0,"request_count":2,"received_data":99088,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/api/api_megapari.js?ver=7.152","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1b5901d8a37b77fe40b5b997f8b271a1","sha1":"fd6293ce98aaeb1da43616c148901353f2e10501","sha256":"e673f45f03f2c4613dda0c60af94a58f23464418097cba76a367d2e23df8553c","sha512":"b34d1900bbe3449dbab293a2f3e86d16cc122d5f2c7aaf114d6075b2e70c7b931380125c8abf9dc1ea1c4e3196cfbffb3543d5db512850d5a83614a393d80d96","ssdeep":"768:UqGV6w+4LywwQMjSmR9yemuS1sky8Fh4PYC+c/Fkd50g3iKcnwb/hyJP9iuBarnp:UHe/BarnVDsV6He/tarkhsVVRv7p","tlshash":"0b13acd0d3bd4ee2e65a92ad6d2d042ce5fdeeb29cbd50fbfc68825b560d011e010972","size":44177,"data":"","first_seen":"2025-04-06T08:06:46.752201Z","last_seen":"2025-12-03T05:37:57.144387Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/js/script.js?ver=10.556","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdb4ce61103368e87dc665ba067b9463","sha1":"18eaa50316ab493f2d0a275e7baa5bf9c32ee802","sha256":"05fe7adbc8c3694128c986c8fcc8cc9a62b7bf680adbd76d767c39cbf45066e5","sha512":"58899c40ee65103c5192d1c526e65fd7b1f400e47f0fa4e8542220fc954959b6925f238400486cfe197c95fbc0581e16bdc9d3afc01bea56f5e480bcfbcc92e8","ssdeep":"768:uedFp4rEcK591t8oyTIOvlXUKTLOgbUzTYOSfKZtKoiw+y/gluRSGjGW7uuhd5X:oBo2Xv1U+KgwHHIKZmov","tlshash":"4de2740870b50576c973512536a7938e366a124b3c04e41b3e9c879a2f95c72e6f2ffe","size":31978,"data":"","first_seen":"2025-10-13T01:24:17.965869Z","last_seen":"2025-12-03T05:37:57.152621Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aa0b4c6a8f48a8f4cf023e2aef8917df","sha1":"4c97278d005860c24f9a109fd9a2bdf62a65299c","sha256":"0a329fcbd17e471cf820d87711b242a3141ded826c15a90a76c0070358986276","sha512":"56ac48e0fae0ba00ce7442b592fff2365714526adaa5fbd0e31ceb4a42bfb5ff1139791a4c5f311fbb70c049dfc80368e7b3ce25ce1c499181c1985e11baa8eb","ssdeep":"","tlshash":"3ac08ca92a5b5c6100b73a558b7f7104b006a31320d0cd313d1eb2844f34e2be665808","size":190,"data":"","first_seen":"2025-10-13T01:24:18.455158Z","last_seen":"2025-12-03T05:37:57.168144Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/js/lang.js?ver=4.27","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1678355da6f6388d69be52224410569","sha1":"dca88a3f95df9b6df6f900f84c50728f8d4263c9","sha256":"eaead72f1db70d93c586655ce012ddfdb1bc810c41d38cebd747347737919ca8","sha512":"4c41636f8bb6324866b00705f6891be65b0e83fd2dc587fae9aa61131c5cc15fb4d724dc8534fd15da37ccca2311fc3f658756525e73299c0634236f24cfce8c","ssdeep":"1536:VK92aGlWwHuj13WBCe2Ad1eqESxnXA75K4cjerz9L07cqzqhbvwAVcm5orBQK:s92aGlWwOJKEIe5K47NL07cqewA2RB1","tlshash":"46c3e556c7e862e500b4908b91422639a696443b5e03f042fc6ca3d43fdd97f72bdb9b","size":122429,"data":"","first_seen":"2025-10-13T01:24:18.081226Z","last_seen":"2025-12-03T05:37:57.161903Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ML5XB0K0ZW","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1019e63d3e3a03e4a4ae88264b8152f","sha1":"f2960d6fb2c66f689ea73f590c106a284b17ca3b","sha256":"0836cef3f0d4db3f76d1d2cd00b92b0dfcfd7e744d69aed25dae2634f0a7ab7e","sha512":"faf92682baeff9db4681dd7a9cc52053e3f73ab151ffc07a1f376071a9888b150ca7cebb92bfdada93becde8d8983538752617433aed99c28638d582b735a338","ssdeep":"6144:BBoV/yp2W4tk0uwbWZJT+Nju5204O0NsYXdXAQd:vRY9m0KZJu0O5","tlshash":"b6940ade73d674225396e078502f01cba57b28a2b45cc89af1c9cde42e74a9a0177f7c","size":438708,"data":"","first_seen":"2025-10-13T01:24:18.085384Z","last_seen":"2025-10-13T01:24:18.085384Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/api/constants.js?ver=2.1267891","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5d63fd82c1f79ca86fbfc85bb2da23a0","sha1":"576909d350b322311202a953f3804f84b095fd64","sha256":"bf08709825e60414d19b0820fc150b4d53207e6a574178769088315f09cbc769","sha512":"8997f736e165cab42830470931c8453650b4a5b061f70d6e5c4b7df954380ae092403850996702e97d7ea5f39d5b9d36fe6890c02b57ae0c3f92904ae99d11da","ssdeep":"","tlshash":"a3c048638033982a11300ee92327c806f31972b1b899c8fa384dc380818ba04d5378c3","size":152,"data":"","first_seen":"2025-10-13T01:24:18.099135Z","last_seen":"2025-12-03T05:37:57.126659Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/js/popup.js?ver=1.18","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cc8001519031e585bbdd9a04c7d0e54","sha1":"6749da113ff79d65c4f074e4c86e3c9459134f8b","sha256":"a85f52b899cab3ae5f6bbb4d2873d761fd05d1d5f55fe15d2c7951c49dfdb89d","sha512":"0099e07992f22de07e717b4339f8314e66231791bd372ec8fb95aec1910bcf61c43e7c328b5a873f6700d51dc4e35e0269a96b2c7eddba50735b5fe567a412e8","ssdeep":"","tlshash":"12016b22b3ed743b459f23aaa1f01e9d6c1794e6ba230c3e189848061582dc45ca15fd","size":788,"data":"","first_seen":"2024-12-21T11:03:11.463471Z","last_seen":"2025-12-03T05:37:57.139803Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/js/validate.js?ver=1.17","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b7405eb0154f9801074cdc75433ab87","sha1":"18dcb4c991f4b47966ffde50e5a4ea1671abea89","sha256":"29366f88eb059d933d53769e6499795f1f07340bb88152ad31bc58c1a6b73d51","sha512":"5dbc4e1c4a65f4b914e43e0a02dd10eaf76e66c43f052f271cd9ffd7a8d5fd57bb28c403470696901b019918505cbae533c13708a5ce24b6d60972470be16e12","ssdeep":"","tlshash":"6141a054eb4204391ae30bdf90f30dc699b065f9f87129f531adcb8826c5bc523a29ed","size":2228,"data":"","first_seen":"2025-02-24T05:49:29.081145Z","last_seen":"2025-12-03T05:37:57.164855Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/js/wheel.js?ver=1.36","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd5870dee03bfbd9f08d136007b9f68","sha1":"e1bdaf0dd503a6ca0c03609396fdda77340de80f","sha256":"a70512e57c7773bcf69e8aba6ef86d11028ebe986db7e2d52afc42cf4ed0b796","sha512":"8fb9e3aa729486ebc47a8f4d4c298ad2382e4d100b3d10b2668d60b32b73490de5e52714d1acd9b5bf12ab4ce12de7a67e32ea168f1561d6738ea1003ba4f43c","ssdeep":"","tlshash":"3a71cdc197ec0afa0d8b6bae508e7fd4e52c00a6e644ac793639d9540768ee300f409f","size":3697,"data":"","first_seen":"2025-10-13T01:24:18.236678Z","last_seen":"2025-12-03T05:37:57.153794Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/wheel/wheel_frame.webp?ver=3.11","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/wheel/wheel_frame.webp?ver=3.11 HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32900\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e34-8084\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OphKue0XE%2By73w4uo4N%2BfHADK1n33ZeDukV79Cn4GPe6J3GTDt5LOe3I3RA2AQF2XpNDPTwGGf1cg4ZoarHdCJ%2F1qwXKYtItVY3PaJ3q0D8%3D\"}]}\r\ncf-ray: 98db088d6c0ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32900,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1e2979c6692b8dd47e32489c203f105a","sha1":"ea97f923beac0ce3266b3bdfaa345d36031db2c4","sha256":"af17834b63c1db5dbf1188206a86d6fdb2f4e4731cb34774786afb2f1f80864a","sha512":"de93239bf34f487b62039e49b794848a5af3a3449711283ac3a9b05494560008f4bcd46a5fac97cdc1d8b3105509fbfbf3f010a5b28adf0f3c8832163f0c2db1","ssdeep":"768:vJXxb0BG4PtBbUAuZ2/QDbK1KWvO7kX28:vJXF4PnyZ2/AKQb7t8","tlshash":"06e2e03bd48f5b8a6fa5a6c1dbf000053ffde1de9201c52c84009d663a5d91987eea8f","first_seen":"2025-10-13T01:24:17.941553Z","last_seen":"2025-12-03T05:37:57.163944Z","times_seen":6,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/js/popup.js?ver=1.18","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/js/popup.js?ver=1.18 HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e34-314\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2FaOuB9aytTV38yuctxVtoyy3XDuQex1KmX0ccPCayEtVrhcnUk9yTXXUnfSJ8Ox%2FhQWaIfatj%2BMPI8HqAzSrlhfSW%2BrMG1O2KRf1AJGaC0%3D\"}]}\r\ncf-ray: 98db088dac4fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":788,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"2cc8001519031e585bbdd9a04c7d0e54","sha1":"6749da113ff79d65c4f074e4c86e3c9459134f8b","sha256":"a85f52b899cab3ae5f6bbb4d2873d761fd05d1d5f55fe15d2c7951c49dfdb89d","sha512":"0099e07992f22de07e717b4339f8314e66231791bd372ec8fb95aec1910bcf61c43e7c328b5a873f6700d51dc4e35e0269a96b2c7eddba50735b5fe567a412e8","ssdeep":"","tlshash":"12016b22b3ed743b459f23aaa1f01e9d6c1794e6ba230c3e189848061582dc45ca15fd","first_seen":"2024-12-21T11:03:11.463471Z","last_seen":"2025-12-03T05:37:57.139803Z","times_seen":9,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.6.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://megalanding2.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18714\r\ncf-ray: 98db088d78bcb4f1-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6696a8d8-491a\"\r\nlast-modified: Tue, 16 Jul 2024 17:07:36 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1538553\r\nexpires: Sat, 03 Oct 2026 01:23:44 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YrIEUpkcPIIbaiySmCjV%2FPmJU%2BN%2FNRLNQ%2FRgL9rLmvZeQ6wekRKTUJKQQFh9rZ9n3MEi0JtINQZheSAPPEwvpdYXoDx2LM2XHkFpuxydeZWexOgu5MkmDzoobokKZgUwnGq7OAZM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96518,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (58966)","md5":"fbf1f3445f2554bce753c92cf6851b41","sha1":"3c73ff1cd7b97c189f139367dbac43dcf5d2c70d","sha256":"e5e202e3c899507992952533f57b634722b69b34241d271963559d31aa33ef81","sha512":"29cdf6def18112acd39a8b801029d571ec90ab2a9db128aa2d021204bdbd6945b853f33ba523c0fe0114650aafd5cc31e0e9d8c53c6f7b950c839193e8be0926","ssdeep":"1536:E6M1MvMaMfMRQk709/bQZMfjSFOlyPG9dXgRw0J:H709/UGGFwyPG9dwRw0J","tlshash":"559373f8e44c05d97732c44bab55b37c65b6f738d5810ca9f02f590c2ad26a822caf79","first_seen":"2024-07-20T00:27:59Z","last_seen":"2026-04-05T12:44:54.154504Z","times_seen":9330,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":12,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/cards/pachinko_bg.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/cards/pachinko_bg.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5518\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e35-158e\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fv3XqCfKVdch8ujsBAp89uI8N6R6AMOGShSawEBNPuHdpRMqWGK4ZcWHd7ClAra8FkmqqQSVYM%2Fhq3OizwOsEZa77h5hYEt6XlDiHmDy6Mo%3D\"}]}\r\ncf-ray: 98db088d6c11b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5518,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"619bf657a806a763765fe69d95b9e4d3","sha1":"4672b68e7bfcf1881674c050f0ef4005cd7bb3c2","sha256":"781745e548cb14d394857201a52a57af9f3f34c0f0f293f7809b2cf93e78bbf0","sha512":"196026b1e1da9b6ce6fd1fc9da310bc8eee932fceeb9064acf60ee78c96e2586d3b14c503de29cd3b05cc4b9ec7558222a9a71f7e5c6cab557cd47c6158d3172","ssdeep":"96:lT4wKb/IJ1vJZJB2uczVPan81qW9lu/kaEDun1WFSH23Fo+RKyCoJcSo0t:iwKDITJZJAuUVanS98sf6n1WxVo/Lemw","tlshash":"c1b18ec47e97c3b7f49ee8eb95396763e22b90be5d734012e651841780e7382238139e","first_seen":"2025-10-13T01:24:17.957413Z","last_seen":"2025-12-03T05:37:57.117387Z","times_seen":6,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/awards/award_sigma_2023.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/awards/award_sigma_2023.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5734\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e35-1666\"\r\nexpires: Tue, 14 Oct 2025 01:23:45 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BubyI%2F3NPf%2FcCnQQT3hDygwDy2MXRpdCdXBYDkjIafFqdAeRPXycxUvVPNp04DWre6ZARI%2BzparVfsFjEMHSyK6Hs41LkUSn15uvy0GnP%2Fo%3D\"}]}\r\ncf-ray: 98db088d9c3eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5734,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aae7b0d7b6b953d871f623e424bc674d","sha1":"e9ee18cea3a0288371de5c7e1a4579b72bb604cd","sha256":"b0936a659113b38e36e9c3af0c60f43251dc8ff592d5db3ec6a437d79f05a3ec","sha512":"4732d1b250de1d1e3b8d158dda0488380301fa32c087dcb2606dd8974afe570a9d5b2d5fd662fb61404dda4c59a7b85b6924ca3779b594ef6648128a70866f10","ssdeep":"96:hTiRqj5REFl/xoYZ0o07NAW+E9KuiNoWuxoC85RqJHEaBMKV36sdhhcnfHThMkgb:haqj5anzONZdKuiuxQRaVhcnfzhlg5B","tlshash":"d8c19e01fa284f9875ffb61857b726364df7ac414a478118d047a18cdf43dd6893a828","first_seen":"2025-02-24T05:49:29.052074Z","last_seen":"2025-12-03T05:37:57.1495Z","times_seen":8,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/js/script.js?ver=10.556","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/js/script.js?ver=10.556 HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e34-7cea\"\r\nexpires: Tue, 14 Oct 2025 01:23:45 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BBPx%2BGVBadof9hAjg6JteKt8eguaHbCPC83ELmsUPlZqkWdQkfJydFDcbZVKCEuGCIcMLxzId4jVq5OTfZyBONTe1N1CKQAwpVLVmUpOj9k%3D\"}]}\r\ncf-ray: 98db088dac4db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31978,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"bdb4ce61103368e87dc665ba067b9463","sha1":"18eaa50316ab493f2d0a275e7baa5bf9c32ee802","sha256":"05fe7adbc8c3694128c986c8fcc8cc9a62b7bf680adbd76d767c39cbf45066e5","sha512":"58899c40ee65103c5192d1c526e65fd7b1f400e47f0fa4e8542220fc954959b6925f238400486cfe197c95fbc0581e16bdc9d3afc01bea56f5e480bcfbcc92e8","ssdeep":"768:uedFp4rEcK591t8oyTIOvlXUKTLOgbUzTYOSfKZtKoiw+y/gluRSGjGW7uuhd5X:oBo2Xv1U+KgwHHIKZmov","tlshash":"4de2740870b50576c973512536a7938e366a124b3c04e41b3e9c879a2f95c72e6f2ffe","first_seen":"2025-10-13T01:24:17.965869Z","last_seen":"2025-12-03T05:37:57.152621Z","times_seen":6,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/cards/card_bg.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:45.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/cards/card_bg.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/style.css?ver=5.22\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4276\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ykCuuQzBbEbuLpswg3QQ%2F9gxxpFedxhEwJ3fZCITItrvmlCzLCaKdilbyHToEbHDZRumPGtXFEfCkWibNP7ZivXOMd2kiaKhh7pGBOEvO4%3D\"}]}\r\netag: \"68b07e35-10b4\"\r\nexpires: Tue, 14 Oct 2025 01:23:45 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98db0891e9b021fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4276,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"869f1800d85fcc60ac76aa41db11c5f5","sha1":"59b1eeefd36b2761b0f48ac576bd86d7b596545a","sha256":"bbc993e30143581d13e8cc0cdd42b84abeba2f3aa63fa6cdc1396eba98e50bfe","sha512":"0f9d7837c5a0dc65d017adbda55176fee5dfb38acc20be8bcb7d1c2bbc31926f682e4b09287514bd8f3ab533c84b9f8e75f3db726f01bce9a38abe9ff6278012","ssdeep":"96:i14lcow/GX7lMqxsUQthiJWc3wyXJxG/UDGqGg6Qd73NK3PHkEZiJXD:iSNw/0lTQthiJ7w6Jxxa1Qi3PHkEZUXD","tlshash":"66919e5fac41e933d84b6b02be20c65253ae470732a8307d0b8591938a64394fff7c79","first_seen":"2025-10-13T01:24:17.972046Z","last_seen":"2025-12-03T05:37:57.132637Z","times_seen":6,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/api/bonus.json","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:45.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/api/bonus.json HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pbbxvhTkrVF2EbGR4Rdg6SiqnYAbMB7uNFYVR9MoNGBPlr9ftbq2d1d8PoV3xLmtmo%2FSO9rTdRk94ymSHRAV7NuOvP65ZlgH%2FYCDyNeNG2E%3D\"}]}\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\netag: W/\"e55a-63d6f11c6dca9\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98db089419d321fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58714,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b6d792a222977a4223f5a7bf1155de37","sha1":"86cdcdfad112969d6b5968be21ed964cd6a2643c","sha256":"13e0ba811663b277734f3eb19619399ab5e8b0f4686c6332dbcec4b95be27e84","sha512":"985c23f4802fea5ec61d2e58a492be0928debc9814d8d72640d1403670ebc4494f92fd3b40b7feb5005453cb292404afb206b260068ceaed48f853165cfc3846","ssdeep":"384:zbee0e5/vwJLtomwFt1rJkeIyIQ+OPkLDReNHo5WFaXGeZ4nQebekFmEI/eZe6eJ:nt2etMJS4NTDGmGLXA","tlshash":"ac43bfabe80d609361602edfb5cdb5ec952d621d0e0179c669328fd8938ae3841737fc","first_seen":"2025-04-06T08:06:46.740098Z","last_seen":"2025-12-03T05:37:57.154902Z","times_seen":7,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/favicon.ico","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:45.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/favicon.ico HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Oct 2025 01:23:46 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1fde-63d6f11c296e9\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9bm7yXQAz8vJdyBH19r19drLf8CFGtYD4aZSsdeuaZif6fH3NWQ%2FaVE8%2BsKI4vqnip47KQ9Mq0%2BtBU%2BAZYRvrUXARUX2hF8grr1N5q8Cny8%3D\"}]}\r\ncf-ray: 98db089469d921fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8158,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 44x44, 32 bits/pixel","md5":"73ff96ef35f109cd6c9c0f3264242b6f","sha1":"f53776408b98797605c8386f6fc67e7b7850962e","sha256":"12cbde79286e4419fb3004671efc50dc6229a69a7e7250f24feec6844ff40a73","sha512":"9f7441929a63bfb45ccc7efd714a7f371399c2a81dafd32565d0199955f220ac3c3c66e36be35dfd1fff60b2d041a551569e8d8b9d23b2128cf1ba11c39ba147","ssdeep":"12:0RFyWINqD44muaYd24a44kQaqDG444+HvSFl44KM2qR9w91jg+jtFPfalaRa6rRI:eQN1ufdjZPEEHYIqj6E+jXPyl8xDdmf","tlshash":"7af15ebb76b601d0ce8a9a35b21a56717034bd57cdd1e197b012f1f1f1fde0a3a0294a","first_seen":"2025-02-24T05:49:29.078901Z","last_seen":"2025-12-03T05:37:57.165732Z","times_seen":8,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/wheel/777-roulette.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/wheel/777-roulette.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 90714\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e34-1625a\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WDAVjHS4aRxMFFHnWiuawmU%2FL0MZSQqo8E9J2qYEtDWLKKyDI3TdrAylQjg%2FyLSXTg6USNrKApPbEcaexg0XXjcnhDkkO4bVzPfh4ROr7B4%3D\"}]}\r\ncf-ray: 98db088d6c06b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90714,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a413e52e1c1efc4f8049cc1da9cef5c8","sha1":"9857bfd05a5d8196097daabb1ec3799f03c3ed83","sha256":"6fe109088f0a8b18dd83fc24ffda8fc8ac381f66321383f88cc7f29a2fa4cb6c","sha512":"69c8b68327768f180441299acc56f73266962ebd059b6556bda45404edd53c6786d16696bfca7b83f9771f171eafd98adc99068cb74a76cce605347f59576a92","ssdeep":"1536:e8cvwKAZi9TJPr3ob8ED+tA3CVnSBE61OoSe9p2QRPCYYxQO9idwvjO:e8VKoi9ZGbatdSqoS9goxDvj","tlshash":"0e931270acaf142694404f17254097e6ecbcc1254839586853bcf2bfc06e796aa3fa5f","first_seen":"2025-10-13T01:24:17.988108Z","last_seen":"2025-12-03T05:37:57.108754Z","times_seen":6,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/payments/sepa.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:46.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/payments/sepa.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nCookie: _ga_ML5XB0K0ZW=GS2.1.s1760318625$o1$g0$t1760318625$j60$l0$h0; _ga=GA1.1.1795566812.1760318626\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Oct 2025 01:23:46 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ojRCFSNuYeIaLH6MP4ooTizMtU5GJcfdXZW%2F9Bsnxbadujhk7c9YDdFNGtH5OxwHaNgQX%2Fk2aEsD0Jc%2FCwuiXCtIC1nU9iBziRAIYf6VPQw%3D\"}]}\r\netag: W/\"68b07e35-2d069\"\r\nexpires: Tue, 14 Oct 2025 01:23:46 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98db08991a2e21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":184425,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d0cf0150bee5046d97a29c549b8b8d5","sha1":"f77fc803a99d979dc644db7959fa0af230d2295b","sha256":"bea9369ed88ae9a0bbf8640825ab56724988b8868a4fe8e620c5329f46d8cb00","sha512":"970dc1094a395b29c324671cbc8c3e2da618a9437a5be52bdc064aa5a712f59e9ba8f81581eddf684af80558b2bbec75b619688677d943868d6951c0cf53ab1a","ssdeep":"3072:v2vnDwAXe+nFGWjezG0rMSV34JBrY9v2szSQntMxGPM4+bwiK9QY:vAncAXeGFGWjea04SVoJNYMS2GPpiK9X","tlshash":"bf04022c9c77be7fef905ce0d46609483de7986ec99d857822c14a3383745a1952ff82","first_seen":"2025-10-13T01:24:17.993066Z","last_seen":"2025-11-04T07:20:44.94109Z","times_seen":3,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/wheel/blue-chip.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/wheel/blue-chip.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4350\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e34-10fe\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rsSXUZm2XGWVeqnY3ZmPmqLbVJPJf2iuY%2FmP0E%2FX6zIMGV5RQHeiHLq1c%2Fmpq0gaHhp6%2BTMDcSndlFHoFVkrhDGbj0uOiTVLiZ72S1X%2FRE4%3D\"}]}\r\ncf-ray: 98db088d5bfdb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4350,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"049012efdfdb1b5e5de13c5601e8d369","sha1":"e12619bb74a9fd2a75b502fd5b65a7706228bbd8","sha256":"25edf0c09e582609991b2c54851e699f727676a08a1f3a66092b16aa07f94318","sha512":"89fe2a84d41a6a95cbdb968f49116092c75ad84191298a479cbee3327f9c21ff703ddd941cff9178b5fdf766e3327e9da2b3bc7055237e61acd6216c0722d148","ssdeep":"96:V0rk4sdGcqbzhQtfCQ1V5cl4PKA4jI4n9OB4LtXcYah:GFsdGfbip32lHvziYm","tlshash":"96917dc3765fb5f4cf15d4162688c892309c8121fbe56afb4e036c2e205ef7595ee444","first_seen":"2025-10-13T01:24:17.998468Z","last_seen":"2025-12-03T05:37:57.115495Z","times_seen":6,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/wheel/ace-of-spades-blue.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/wheel/ace-of-spades-blue.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4962\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e34-1362\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WS%2B%2Fgc7nOvBPcfpIOcyCDOgqe99TnRHUEtF09smbRVWJYaaXdBt5iDvjJ1nYPzscHOvdtBWnQmTVckyOd%2BdDotgRsdOt4d4vEez3BJfQ4JE%3D\"}]}\r\ncf-ray: 98db088d5c04b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4962,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b1241f02438a91f9683443a99ae674bf","sha1":"9fa59da6ad73369884ae8440b44aff2f26df4453","sha256":"72bc0c819bc9e36bc7883bd7a102aeef076d497d87c4b5b4a72b2d77fb854b35","sha512":"32bb3869c1d0b15381e5336c609b8c8a909070085ef0222aa6e94397dabc2cb8b7e5d75f61f7f019d4b1440d176e53b1d2972c48d3ffaaa6ce59882666a26a7a","ssdeep":"96:t3983f9KyeT8Hv/rTpY8FtIqU4ZtDDZNii6j2ps:t3O3fBNYbMtfZNN22","tlshash":"3ea15dc452e0b09c2bd0633152750f950aba3fb8d5c56bd47f417c330e658e998ad371","first_seen":"2025-10-13T01:24:18.001944Z","last_seen":"2025-12-03T05:37:57.125074Z","times_seen":6,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/error.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/error.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e35-da105\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASOBGoNN824cQt0ztSVsxXfofAx%2BfdDTuaGCcazMeIYPWevwXQThevzxttqcuTQzbs505c9NJo5NLa6HNrvlM6r9OEWLMBUwTL9gpw3yVSo%3D\"}]}\r\ncf-ray: 98db088d9c42b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":893189,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"738e70555670b8925c6f67b5b197147a","sha1":"6655ad0209ed0e5a12770170416208f80c911bff","sha256":"b2cf6bf327102217c8b3c9b63d317925d29f14b1fc3146e10420429386d8b233","sha512":"fa92fd66ae93efa74f5f10319cc0a41207f3a08727353411d0be971828e2b88ad71b1ac2ada127b0d3ec08e70d190776d7895a3e176e556973756e37b11c8037","ssdeep":"12288:pIb1tmlZ/PGfX/wZulaBNV7IDspuDksZSjrY4HrEF8veHfn00Ms59rIpBFXyVl2:Obzl/YeaJsDspuDlSjk2438w5ClR","tlshash":"0e1523364d817e5a81285bb434cf592c0dc04687d56be0fec4a3d5fd26ee6839c1ac6a","first_seen":"2025-04-06T08:06:46.730927Z","last_seen":"2025-12-03T05:37:57.110734Z","times_seen":7,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/flags/EN.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/flags/EN.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e34-1fb\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FK1aBudg88Qr39aTU7xfBR8njSZAQr5iClJpywXb7CmPHTemPK5s3dqcXPXSWXC3tE3sclJieWFa3ZU0inGtIV9LoOHaPSefbxOSRBQh344%3D\"}]}\r\ncf-ray: 98db088d9c44b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":507,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc3a39afaee6e0df2cb4c3e634e4eebe","sha1":"aa7d74f075b17285196f4fc4e503227e3e7fefc3","sha256":"cab1a4d232ed84ef167d6d630e8d41957a40914bcbf9f6fdbd37f3ea3683f597","sha512":"176cbaf25c26e5d618c1b3b848ae0a4a9205e4fae2f9f2c187ae1fdd473ec280f2583d28f18cdeda30ea36e52e2be4dc4a6eb5bd25de247da1d387ea6483a017","ssdeep":"","tlshash":"09f00ee560dcc52e9f079312ab4d3586806500db030892c9f144636f3c087571e8e7c9","first_seen":"2025-10-13T01:24:18.010753Z","last_seen":"2025-12-03T05:37:57.150289Z","times_seen":6,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/18+.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/18+.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e35-b60\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZCwE9YyA5c11Q1Z%2FuuPvj3VtV3rTRjIHdEnuKjlwjyu95lI4BeKuyKGUEHli9c9eOt2aevRbXHYtnzBsgfx0uYiGFX5J0gigeeCTX2%2B38y8%3D\"}]}\r\ncf-ray: 98db088d8c2eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2912,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c599310c7446144d63d1bf532f0732a4","sha1":"68cc14215bb207ff74a9d83dea956fd595b8694c","sha256":"d5b81dfae4156aef77da3c94c4377c36833c554fd06421d98330e02c5563c1c1","sha512":"812917a023accad0997c00bb5bc701e215d8f6fcb8b9de652471a4f49021aadab88afcad34392681953f5f2c12434fc31c7e4805fc6d9fa707330ae55008bf74","ssdeep":"","tlshash":"61515df15114df0949657cf412e3598c9f5914effc5ed359ed9c352608dd822182838f","first_seen":"2025-10-13T01:24:18.014923Z","last_seen":"2025-12-03T05:37:57.112474Z","times_seen":6,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/logo_desc.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/logo_desc.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e35-102e\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0PM1oehHa5sC9Oo5hVDYqFeIOF5AIAZosMo32JONRUlctofCTaSQUFTYdQjTtQMpOWv2hFC1Ck44kHzA7rrFUHJF8CZuz3M7K6mTlBvCPFQ%3D\"}]}\r\ncf-ray: 98db088d5bf9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4142,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0083eeca986f969603025799d9dc92bd","sha1":"f2457820164d86327660afff4bc93d048f66a694","sha256":"f3229536e331ed5e50eed7074f1f38556709102b59a0fc0d356e10207e870e71","sha512":"7af30468006f42324bc1b47ebfb5b4c967eac48208b9db2a4a8f1aa3c2ccda7406408d0ca8fc01476352c48b73235add4717442dfdfd473ae8cee2cbe6fd0e34","ssdeep":"96:lLyG0EuSz3pm8AnNNh9Mmvo8amvlZLnjA:lLyGaS1m8AwmvMobnM","tlshash":"b181b8ea33a491cca40dc7f6afa185f41b6c6072fc894545dbae0a750091c4dde1bf47","first_seen":"2025-10-13T01:24:18.019094Z","last_seen":"2025-12-03T05:37:57.141985Z","times_seen":6,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/wheel/wheel_inner.webp?ver=3.11","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/wheel/wheel_inner.webp?ver=3.11 HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20694\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e34-50d6\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZkoHVgU5Dn%2Bm7pl2pJK%2FJPcJhZgDaZCht3AO%2FSgdReVW3%2BXcBf4untcVHN4b3k8lOo8GnTcKBFDnPUSc%2FJlXA%2Ft22eFsq6Yt%2FOzO%2B1ygADM%3D\"}]}\r\ncf-ray: 98db088d6c0bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20694,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f2ef634f8fe9aafd9135b47b13c5551","sha1":"48923bf98715bd182853a1da6684d7e8a74fa401","sha256":"978767cf00513821ce01fe968f3524bd0d8c5350951c0d34ad9f70246c53c214","sha512":"c1daa0aa379700cf4c1ddb9e752c33590e3d627909476fb3dc0894856ff30195f4561dfc2840ef90bfad2ccd21c147a5d6119e1fe89e3061cb0c7ef764023e42","ssdeep":"384:uwYPWJ+2WKnPtMNjsxoCM63GA15K7iAeFRsDaDtlsyC1lMgQYAtQa70ZVxMhMrZh:uZPWJHW4S2xA6zMOAebVjs0WUQaPK","tlshash":"d892e14b5257b4a2769ca9179222336f72aa384003fd224102c42b738f79f0757a3a6d","first_seen":"2025-10-13T01:24:18.022278Z","last_seen":"2025-12-03T05:37:57.130498Z","times_seen":6,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/mail.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/mail.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e35-311\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iJYRZjsYyzGM0sraSOarSaq0WuJH5EuZA%2BCnePh8BmTslcvra2ko8en%2Fps4XQlfTMq4nALKY%2B38fqNQ0NICXz9LSCMULUyKZ4vbe5jTBYEo%3D\"}]}\r\ncf-ray: 98db088d6c14b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":785,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f4cfdc57b9ff26958415bc18d382a6f","sha1":"47ce18c88c776a59c9c6e16dff294e7c531224e3","sha256":"115968563df908749c3b9a47b0cbd5d5ff649775fcc871acf5f6b1dd7cc01c7a","sha512":"1a19ab474eb0cf7e5815e3f173ca67cb112976db1fc7ff7200002c23c7a11c3bdc14ab24050cce406b84b9e2403d2cb41ac59a53b333b4d17832bfec2427fefe","ssdeep":"","tlshash":"12018e659234e1b428596734ed34b5a0f46f24f7df51c9c382c08d1270759df908dac6","first_seen":"2025-10-13T01:24:18.026672Z","last_seen":"2025-12-03T05:37:57.15803Z","times_seen":6,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/js/validate.js?ver=1.17","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/js/validate.js?ver=1.17 HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e34-8b4\"\r\nexpires: Tue, 14 Oct 2025 01:23:45 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fy9Om%2BdGA1czMj1lh6aHUFN6ORNgxfTL88GVrDohHBVJQ8399bu%2BcKPeJL%2B89qWPLjbEWj4%2FrgeZBpAsPHdHgyPXrKWYudkPCmgrtIQMBPA%3D\"}]}\r\ncf-ray: 98db088dac54b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2228,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"7b7405eb0154f9801074cdc75433ab87","sha1":"18dcb4c991f4b47966ffde50e5a4ea1671abea89","sha256":"29366f88eb059d933d53769e6499795f1f07340bb88152ad31bc58c1a6b73d51","sha512":"5dbc4e1c4a65f4b914e43e0a02dd10eaf76e66c43f052f271cd9ffd7a8d5fd57bb28c403470696901b019918505cbae533c13708a5ce24b6d60972470be16e12","ssdeep":"","tlshash":"6141a054eb4204391ae30bdf90f30dc699b065f9f87129f531adcb8826c5bc523a29ed","first_seen":"2025-02-24T05:49:29.081145Z","last_seen":"2025-12-03T05:37:57.164855Z","times_seen":8,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/api/payments.json","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:46.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/api/payments.json HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_ML5XB0K0ZW=GS2.1.s1760318625$o1$g0$t1760318625$j60$l0$h0; _ga=GA1.1.1795566812.1760318626\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Oct 2025 01:23:46 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XeAYziBU25w0NZYnGT4gOHXSkyl9N1Y0lqlBCWpUqAb7ZFVCdXtZvBykodqJYiZChOGcBz7Rb9RnzZOYHjEL0a6MN1W%2BGldT%2B0nqbZ28cBU%3D\"}]}\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\netag: W/\"2aeb-63d6f11c6d8c1\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98db089509eb21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10987,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a50fb786fbb0e36247c3838cac506532","sha1":"ad9b8489845239c08a582202a2d200c8b7990e28","sha256":"f21e73f878e97aba9e361e7dbe61df5b87d57daf4f766df08805533297ba0671","sha512":"48ec5522b2d7bef58603c113644b51305b3d2ad024417bd2c163b509c9c4703bc210952198886b5da2254615547305e759f08b39b3d77a3659c56afb2d8481df","ssdeep":"96:X23x2s2E2KG2I232u2KxW2f2a2D2w2b2o2tI2Ul262Q232Z2o232y2W+2r2v212q:WNc2bEYvL5D0o74","tlshash":"773249d3a53d0e6f403b92142220dd84eb9fb5bbb48d8d950e06f7ba572f43015a1abd","first_seen":"2025-02-24T05:49:29.074839Z","last_seen":"2025-12-03T05:37:57.155851Z","times_seen":8,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/instruction_3.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/instruction_3.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14242\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e35-37a2\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zcYwD2PmRO1B3X%2FhRdpz2N%2FGC956Fv3YvVRtXdIyyZTx82cRc0zgKX2iHP1ER4o35qrnt90yOve8XGoO6GXPS%2BU7Zn99Ti3njl09LnpZPUc%3D\"}]}\r\ncf-ray: 98db088d7c22b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14242,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"242d7cf1d4ab7e18c2d568b1e3bfdf22","sha1":"291d7c3f88ef640e3728494b89bddef3b968efc6","sha256":"c37385e3f11b47ab82264fe0238a2b1745e297f1da5abe869150eff0970684ae","sha512":"6d650b6761393c1e6787938e2249d12371748aed10ff2c6809ab6c97a46746786debea0459bc78774a258f73b9cf314799a853fab29c1635cd3c98dc44a9912d","ssdeep":"192:gLaSuC1DQcVj3pLJZm8KeiFhHMKErLL/4gigRGGumihTulSPQPrYMNEMs62EjYwW:Kzu+DfRJObFJgzdigRgmihSl3VT7A8Y","tlshash":"1052df6d9f34ae2e374ef8adf86a02ec0affec05833d81112761105312d1a5699cb953","first_seen":"2025-02-24T05:49:29.046654Z","last_seen":"2025-12-03T05:37:57.167596Z","times_seen":8,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/adv_1.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/adv_1.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e34-727\"\r\nexpires: Tue, 14 Oct 2025 01:23:45 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kpUGAXjhxiGpqkCqwA5N2xx4HvCkAj%2FoELsNasfPOmLoWssj2qTDcOGhPvLaQiIs22aMmpsW1w0N%2BNyaz%2BV3GAHUO%2BETngzzAvGPU0AlnMQ%3D\"}]}\r\ncf-ray: 98db088d7c23b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1831,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"00f438b56255e6f66ac1493676c69f29","sha1":"ad5684ee2afd0b69a567fa344f242bd8c485bae0","sha256":"4f1b1a7f3778c989c937be36e70eceaca849e69f96e3b05372473a79535bfe54","sha512":"896a35fef5e22b03261a7fe1cf40cd2b9dd8eccf1b3f6b8630f31be1766a403b1594a695270823894e9e4fcc87f5d203c3c4c80498c8f07bca8d6c971851b989","ssdeep":"","tlshash":"1631b7e1a3f8e5f4a50dcb960707d579764234767b004898c3924fb5b0a504f5c85de3","first_seen":"2025-10-13T01:24:18.047604Z","last_seen":"2025-12-03T05:37:57.160332Z","times_seen":6,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/awards/award_sbc_2023.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/awards/award_sbc_2023.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6190\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e35-182e\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHNFyXfRL9rSdG9Qf5LOtoQvyB30N1p89h8roj2XVaX5yOyhM5GQK0nDD3KzcRT4pUDJOiZQBrDphnrIUubwghi3wukcNESx6rYBegoXCpY%3D\"}]}\r\ncf-ray: 98db088d9c40b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15d051316c4498d0525653a377d6bea6","sha1":"db3dfdcb0c6238b707c3ef1a32211ea6a41786ae","sha256":"957ee0563a4e66a003efd71524d547f81d4fdc2f5724b2d84a0caab5a1ecd990","sha512":"a35bc5fe36ae4a6dffc71319a6558f9976278df6d0240fbbea8e246d9c4ca67cf4b8ddf1c5f48fc1c2904971d01a94c45545f4d3000af744457bc2e29311f67f","ssdeep":"96:IrIfh/mZdFOHC6BwLeKQGv1mIty/bJjIYzJ406I1g3Agnmatst3R/Op6R:QIfh+UHwQGvKjIYzJ406bm2s6p6R","tlshash":"90d18e8514f2c715bc55fd32ac4608369a05ba67431f3a2c102f0885a7fdd5641fadef","first_seen":"2025-02-24T05:49:29.052853Z","last_seen":"2025-12-03T05:37:57.131289Z","times_seen":8,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/flags/NO.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:46.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/flags/NO.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nCookie: _ga_ML5XB0K0ZW=GS2.1.s1760318625$o1$g0$t1760318625$j60$l0$h0; _ga=GA1.1.1795566812.1760318626\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Oct 2025 01:23:46 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K3TDBQZD1b9N%2B02ZBVMtFAUCoc6MLouGWNp3qxxFyE7I%2BD4LI06%2F5xzEkKygP91e5nrXpy6%2BAcPA8YFn%2FTnvloBxh%2BKAYUwizn%2BKDxjOUxs%3D\"}]}\r\netag: W/\"68b07e34-280\"\r\nexpires: Tue, 14 Oct 2025 01:23:46 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98db08992a2f21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":640,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f449964741febae53c47a8ad4ac314f9","sha1":"83a3ac21ce51777a13315cb17ce1be57d374cfea","sha256":"662388f9e084e53dcab16035b4e5610a7d3612f9e5418ebc1526a37cad91ef6d","sha512":"05f7a8d1bf9ab56e8b3c4dfd13cadb169a6150f20c1ae26b26d22638f9fda7c5a55fa1577cbd2fd5e52ac7d800409a47129253ed16203e4562069d8d31b0cb6a","ssdeep":"","tlshash":"d1f07de571dcc21f9f175312bf8d399e912244dba349a4d4b109e57fbc88a9b1d043c1","first_seen":"2025-10-13T01:24:18.055066Z","last_seen":"2025-11-04T07:20:44.931855Z","times_seen":3,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUQjIg1_i6t8kCHKm459WxRyS7m0dJ9pQOi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:45.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/montserrat/v31/JTUQjIg1_i6t8kCHKm459WxRyS7m0dJ9pQOi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://megalanding2.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Oct 2025 01:05:22 GMT\r\nexpires: Sat, 10 Oct 2026 01:05:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 260303\r\nlast-modified: Thu, 04 Sep 2025 17:10:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39580, version 1.0","md5":"adbb74ed85ae03bafbc689d12c4b009d","sha1":"7f3b99b45e6d2fcfc6236e972f9eca353cf0d130","sha256":"d7143d0ded43c36b8c4ff4a0df9fba2d356d27f64d38f33d962ec5977f928d31","sha512":"d91511c5a20c5b851b6363603959dc520622c0202e2c39b8bd7cacf95f597bccbfe4595cda9785639dbd216e1a45c980e8e54c94a778165b6d81b83192d57a55","ssdeep":"768:GtZDr7XQiUGTkhuSlVGpCRf0p0lBYtg8PdVc4vtSbga/azp8kAUuzqksy8G:GzP7xyhuSlwpq7R8Ve6UN/ad8kLufsyP","tlshash":"e30301c6940ca5f9dcaa027bfc5e0cfa39654cb89c0a6b9c5f89e7634165cf2425ca4c","first_seen":"2025-09-05T00:54:06.266401Z","last_seen":"2026-04-05T13:13:18.470817Z","times_seen":124422,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":190,"dns":1,"connect":32,"send":0,"wait":29,"receive":33,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/webfonts/fa-regular-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:45.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.6.0/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://megalanding2.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 25464\r\ncf-ray: 98db08922a31b4f1-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6696a8d8-6378\"\r\nlast-modified: Tue, 16 Jul 2024 17:07:36 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1634835\r\nexpires: Sat, 03 Oct 2026 01:23:45 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0tLB0%2B%2F%2BkrJ0AkDs5A4k7xvmEUB3B6FmaXhwj9pUaSjdT39p2xym8TqtAyPncZtCHam79NNvNer2Mf1iaR4JhUXML4r5Q%2BwWE2hsdf%2FeMHXrup8b3xdqAivp59TuvXkGGMrNBeDA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25464,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 25464, version 774.256","md5":"2d89b49ac28614e9ccd9c81308b5120c","sha1":"46e272db3db1072791628679bc469112c8e41017","sha256":"c732f106e91bc618767fbac8e2c7b27e5c736d477b2bb4fb83f597a43198c33c","sha512":"ea52d931fe445178877aa558f6c7702b6f5836a938d51809605317f8c690356022745d4495aae3ea7018e8314a5e4c583fc58b28dded6309a2e1c37a89160bb7","ssdeep":"384:47kVrsDbxAmlq9YVDlI4zwZ0HupU6LnbbPT78/MktAxlkAhxA+iQ4QE8w:aCrsHxll7l4pPTnhjmI4QM","tlshash":"19b2e1bdb1ff69e474742512c5f42129760fe59aef31cb2a34a0e676f2460d826dc1b0","first_seen":"2024-07-20T13:53:50Z","last_seen":"2026-04-05T09:26:04.974154Z","times_seen":2512,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/payments/usdterc20.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/payments/usdterc20.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e35-5ca0f\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NoPiIvwyMJA3A832DiyGIpVmz4WFzQVh15s95q89%2Bv7BurQdPWF2dMNlQY7W5H4pnnQrw3qCPtMcVmtcv1wQzhavQPlGGGUlFvQdBqTNYcU%3D\"}]}\r\ncf-ray: 98db088d7c1ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":379407,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"311441aa5cb597ac73f1aa0a2825f895","sha1":"a2a787dee9a0cd5b6fcfe939525967a69452ff36","sha256":"be46a9d70ea280dc2f9dee3864c1adc9b26e8f4662b8a8f55c37d0a0e241dc76","sha512":"0afa59f597c951d3243310281eea704095ffe244275ccc7a1e5b57335d853b89454b1dd87c6b258fed7fd85ae26c11c56112697aa2a355e287b6a51e43ceda82","ssdeep":"6144:Q5WXiLGvf2hYspHWoVaZa/5Z+Z4La2Mf7:y+iCv+OCHWoVAaOH7","tlshash":"09847c7a4c5cab9e33321c6ecf43247e3e8665edb20980df299f75edd2660549660ce0","first_seen":"2025-02-24T05:49:29.071056Z","last_seen":"2025-12-03T05:37:57.158827Z","times_seen":8,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/bg_hero_nooverlay.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/bg_hero_nooverlay.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 97756\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e35-17ddc\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CM7mefGOGRAvuILd1UxKFkQLSBPRNvtgnuUGlp0mXccftEKV60tjagba4%2Bv%2B%2BsckdRasc%2FaXhQPpV3AwZigCO6pFrjrTgny5%2FFMI6%2B0bOak%3D\"}]}\r\ncf-ray: 98db088d5bf6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97756,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x988, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2adb959b680fd9399e3eb935d801501e","sha1":"d5b9c7c2da13c9c2797dd9b4aa4f32fd73dfb6bc","sha256":"8f144c6ce6e42cec9b6a2f36b878bf860632621223d8d0c5dda8dc547290f962","sha512":"d95e2fa590d7d0f22f0f93ba14d7443ec69ee507f750cc73d9df4a2dbb09a8eb5a9efb2174b88ca32b664e33f5c22fdc76c10c262929fe9e27419ea013153819","ssdeep":"1536:yukTuYsrYn9PkvNYoqD3gGvRiHLZaRz9RBmvR1ANZmZS1fkeWHaCL24RwXqbHVzI:y6r9UD31sHLZgRU51ANQgf8D2yxDpqma","tlshash":"4aa312af6073131c50747af9a453083898e84afbed938517e61490b6d80f1f9792f9f9","first_seen":"2025-10-13T01:24:18.068687Z","last_seen":"2025-12-03T05:37:57.144964Z","times_seen":6,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/instruction_1.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/instruction_1.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6492\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e34-195c\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X4Yu9FMjVtjPSF%2BwRWu6w0ZyF0VtQr5%2FPgDQF6c3BAElH1FaAPBwahV2csUpFQzjYa90J7WWLh6Cd%2BV0aG0ZqWs9RVZuuDWs91lAJvMHk04%3D\"}]}\r\ncf-ray: 98db088d7c1cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6492,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"011d09b3347bd937b36bf1b3b4727404","sha1":"d306ced79c4020d59a971b16a0c81d40c1286263","sha256":"176ce7875a2d93cbbbdb921f70c28c85d1813463fd749950afa45727def086ba","sha512":"63151ec043602f3ea9dfa953cfc1a330a7410d64d8c403759202b9a351164a0d63bebdadb46e23b17d14fd241ac4948490bd66e8ffbcd723f3a74130ea94a40c","ssdeep":"96:Ab8wNtQblNXWR/sC0ApZF/mkyvKyGeva33v6KsGNmBlKOa5hJRmSiCwbac154luK:7wNoWR/q6TpyPYvcKOMT3d5V","tlshash":"29d19e499000f74c7c70a32dabf21387a4be2e13846af519ba1fae4d1efdc7525da018","first_seen":"2025-02-24T05:49:29.045122Z","last_seen":"2025-12-03T05:37:57.122631Z","times_seen":8,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/fonts/gilroy/gilroy-regular.ttf","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:45.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/fonts/gilroy/gilroy-regular.ttf HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/style.css?ver=5.22\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: font/ttf\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"13b58-63d6f11c6d0f1\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HCOKMf5QHE84EAH9lDcjMJV5a2oNsRxUAwPgpcc7BSz60VL3L3YzVqcJ75TXznlD8ICb19E35itSHnA5JmwqCQFtwyNosucgbuU2dkvE5bY%3D\"}]}\r\ncf-ray: 98db089239b721fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80728,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 22 names, Macintosh","md5":"ae5e7255973ffe09b53f07a2805232a8","sha1":"8017fa012735b7328e737c58373e264b76323c60","sha256":"8bbb8f0f4fd01f8b8a00e316ef160a6a5863ac834ff077abb758a11ce758b598","sha512":"11b23bc3ce07ccaa75c06465b3056e8fe6114b72dae268d6f05adeec453040ac8800ea973328be84de4e39988964379606fc0ab222c84263d0032f8c8c5866c7","ssdeep":"1536:eMNHyQHrnQ/UZpiN3oNgqsJ6X4jCf2tb0:eMNSQHrnQcZ/mHXq","tlshash":"fc831a827f06655ac1679e3a1fe3e3319f30f524be9a134bf0c7aa355cc62892d52349","first_seen":"2023-04-11T13:41:59Z","last_seen":"2026-04-03T23:30:44.384645Z","times_seen":168,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":124,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/js/lang.js?ver=4.27","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/js/lang.js?ver=4.27 HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:17:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b831f2-1deed\"\r\nexpires: Tue, 14 Oct 2025 01:23:45 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IGuwr1LVEYhMbihZbFaiVqMrTzb0nAiWRoA%2Fh6M15YihI5VQWTGFwkiBEDOB3QnAxAQ2vwQSQkS2g54gxuutxy9LHgxwHGc9s1dPrwuk8x4%3D\"}]}\r\ncf-ray: 98db088dac51b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122605,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"d1678355da6f6388d69be52224410569","sha1":"dca88a3f95df9b6df6f900f84c50728f8d4263c9","sha256":"eaead72f1db70d93c586655ce012ddfdb1bc810c41d38cebd747347737919ca8","sha512":"4c41636f8bb6324866b00705f6891be65b0e83fd2dc587fae9aa61131c5cc15fb4d724dc8534fd15da37ccca2311fc3f658756525e73299c0634236f24cfce8c","ssdeep":"1536:VK92aGlWwHuj13WBCe2Ad1eqESxnXA75K4cjerz9L07cqzqhbvwAVcm5orBQK:s92aGlWwOJKEIe5K47NL07cqewA2RB1","tlshash":"46c3e556c7e862e500b4908b91422639a696443b5e03f042fc6ca3d43fdd97f72bdb9b","first_seen":"2025-10-13T01:24:18.081226Z","last_seen":"2025-12-03T05:37:57.161903Z","times_seen":6,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ML5XB0K0ZW","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:44 GMT","end":"Mon, 15 Dec 2025 08:40:43 GMT"},"fingerprint":{"sha1":"02:50:AA:DF:C5:16:76:73:9E:ED:AD:C4:E5:98:EB:E7:2D:B9:C3:33","sha256":"6C:68:2F:0A:C2:03:62:A1:8E:7B:3B:BB:D6:6D:96:A7:78:6C:78:0F:1D:F0:EB:77:84:A5:4A:DD:07:44:9B:DD"}}},"request":{"raw":"GET /gtag/js?id=G-ML5XB0K0ZW HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\nexpires: Mon, 13 Oct 2025 01:23:45 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143975\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":438708,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6653)","md5":"f1019e63d3e3a03e4a4ae88264b8152f","sha1":"f2960d6fb2c66f689ea73f590c106a284b17ca3b","sha256":"0836cef3f0d4db3f76d1d2cd00b92b0dfcfd7e744d69aed25dae2634f0a7ab7e","sha512":"faf92682baeff9db4681dd7a9cc52053e3f73ab151ffc07a1f376071a9888b150ca7cebb92bfdada93becde8d8983538752617433aed99c28638d582b735a338","ssdeep":"6144:BBoV/yp2W4tk0uwbWZJT+Nju5204O0NsYXdXAQd:vRY9m0KZJu0O5","tlshash":"b6940ade73d674225396e078502f01cba57b28a2b45cc89af1c9cde42e74a9a0177f7c","first_seen":"2025-10-13T01:24:18.085384Z","last_seen":"2025-10-13T01:24:18.085384Z","times_seen":1,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":199,"dns":0,"connect":15,"send":0,"wait":50,"receive":73,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/wheel/dice.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/wheel/dice.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11218\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e34-2bd2\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p1liSghDAqMnIQr%2F6mVciwqFWJh2JJ8f3yhf%2F7nY2z9CUiye%2FLfhOVMRI1fvTHEVzgXoYAmB3wxfg2vSoLO1NUXOXWNaJABCVFWvlLMe7ds%3D\"}]}\r\ncf-ray: 98db088d6c07b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11218,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"952465461229339f37ebba2416a16968","sha1":"7818ff1d9d89bc0eaa13c1e54d3d381658012aa2","sha256":"bf72a4b34259c5b827e8260af93fd6864621886a9cebb778e44f95f356e3c29d","sha512":"6000d808a1c856046d9a388484f0f67e86d6ad891c4a972a7f057c1f95eac094100eecd4d13bba0592dee83a4dc9f9f39ef38b4b704e4617c6d7b1e579cfe230","ssdeep":"192:49ugzkYWykRjL8xO6eQRRbXiVwklwIFxhcxQRcpC2jvbupBVT9pXFFt:8kYWygL8NbtklwuhcxZk2nwT9pXFFt","tlshash":"e732bffd5b9fd6c00c15febc567027ea941f35a97207e68aa33b42d98956089c48e0ac","first_seen":"2025-10-13T01:24:18.088846Z","last_seen":"2025-12-03T05:37:57.127435Z","times_seen":6,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/awards/award_iga_2024.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/awards/award_iga_2024.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5896\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e35-1708\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CL34O0yPLoBPIs0qXODAwvIhJJcu3O52M9j%2BIwdB%2BQOoCrC9qns9sNjxSkzAlas8w26TowbXFD7hhcF78r8xi7UDoR8qoGburt1T%2B0Yx6QA%3D\"}]}\r\ncf-ray: 98db088d8c36b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5896,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3d3ed90875f58cf03d9f40168590bd40","sha1":"3884df381caed48e0955eea5d824856bbfb430b7","sha256":"7635f80b540205d4ce1c1b5fbd0d419f0f1329524f6890b6d42a4d4677a3e639","sha512":"11a412b6ae42add9125e93154c7c122f2ad1e40fc639f9944e7277c6708be3dcd44fe668f7a0a38cd353c081c657947e9e315808e7d89a52025f196066c4fb5f","ssdeep":"96:Iu8ZaUpA7+0PV0KBJVfK5+9O8ucYULXVFLgmmUKp/36SddadDlFqQLo2EiFrO:IuIG+SfYM08XYUJgMExsD/L7LI","tlshash":"69c17c9396bd745a7dc480e0ab59946776ee06936e16df0f134f2d9b182d4c44b3b083","first_seen":"2025-02-24T05:49:29.049933Z","last_seen":"2025-12-03T05:37:57.161232Z","times_seen":8,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/payments/usdtbep20.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/payments/usdtbep20.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e35-5c942\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2F9k5Acc%2BBWUt4GEvqyZ4tU6us3FkEZUOakSyIPqpp4RBwwxdOUz9HQ%2FHlA1BFCZhUaZgHgOljH1xqbkMQBqhyAPzgRxlgDw1blJQ1WRc7k%3D\"}]}\r\ncf-ray: 98db088d7c1bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":379202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f48970b8cc4349acfc5a18679ae678ae","sha1":"041e419950f945e599b2dc1bf36d40e4a38e52e4","sha256":"261dd97889eef521983418bce5f9aa8a8def3bb39efcbfb2d6d02d6cdfde65a7","sha512":"ce60e9a956120a075667d419622974d686dbaf9a6994972c51c77c2349cd093699e1fa8c2e0598d00a24316d0276553f560076f1a4f810c44b0bc1c02167188b","ssdeep":"6144:s5WXiLGvf2hYspHWoVaZa/5Z+Z4La2Mf7:e+iCv+OCHWoVAaOH7","tlshash":"46847c7a4c5cab9e33321c6ecf43247e3e8665edb20980df299f75edd2660549660ce0","first_seen":"2025-02-24T05:49:29.069554Z","last_seen":"2025-12-03T05:37:57.122037Z","times_seen":8,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/api/constants.js?ver=2.1267891","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:45.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/api/constants.js?ver=2.1267891 HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/js/script.js?ver=10.556\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mnYEHlgjkVIANkR7d2KCVTOpQzgs9rXxOoQ182MklMDU8agyS7nzV0XVuojF0S3jphu1IYB%2BCZhb67KqsHNgS9JHeCSTYbcO8XNOVicgJhI%3D\"}]}\r\netag: W/\"68b07e35-98\"\r\nexpires: Tue, 14 Oct 2025 01:23:45 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98db0890295221fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5d63fd82c1f79ca86fbfc85bb2da23a0","sha1":"576909d350b322311202a953f3804f84b095fd64","sha256":"bf08709825e60414d19b0820fc150b4d53207e6a574178769088315f09cbc769","sha512":"8997f736e165cab42830470931c8453650b4a5b061f70d6e5c4b7df954380ae092403850996702e97d7ea5f39d5b9d36fe6890c02b57ae0c3f92904ae99d11da","ssdeep":"","tlshash":"a3c048638033982a11300ee92327c806f31972b1b899c8fa384dc380818ba04d5378c3","first_seen":"2025-10-13T01:24:18.099135Z","last_seen":"2025-12-03T05:37:57.126659Z","times_seen":6,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:45.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://megalanding2.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Oct 2025 00:32:32 GMT\r\nexpires: Sat, 10 Oct 2026 00:32:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 262273\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-05T13:48:53.426438Z","times_seen":308190,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":223,"dns":0,"connect":30,"send":0,"wait":34,"receive":21,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/wheel/arrow.webp?ver=3.11","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/wheel/arrow.webp?ver=3.11 HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1880\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e34-758\"\r\nexpires: Tue, 14 Oct 2025 01:23:45 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2NjTBq1YYBWmzpVk1%2FDBqYNgHyBSZk8jZXbgSOYLOYQITc8GCZWowYNJ%2FcoPOwyu1Mc1Z3OctZaMKz43EgQCHctN%2FHFxv9iyKGMsp1mqAxk%3D\"}]}\r\ncf-ray: 98db088d6c0cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1880,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b82a26eb7a809747d2db2691ce584193","sha1":"9d39b7b2f52c6f5b12fcdf7bc2b999b46495f054","sha256":"59d3d024155efbcd8248ae74f4fe84cee399066182203e296b8f3ba05c4425f7","sha512":"d3bb40f9e463eb1040a7791b97ae392c1c98985321399ab47ce723c2b702f5c7922ab239adbe90f425ffbcaaee395a169d099a1841e573542fe94bc68a35fe46","ssdeep":"","tlshash":"a0413bde1ff52f8cca4486286a98b002e738afe2157406f732c3c627321825d7212632","first_seen":"2025-10-13T01:24:18.108066Z","last_seen":"2025-12-03T05:37:57.146646Z","times_seen":6,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/awards/award_sigma_2024.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/awards/award_sigma_2024.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5848\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e35-16d8\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JtZqaiJIDpBqq70VGvsyKSZydZK1UJ86aZAi2zo%2Fd%2FKpRw9ltWYnuZYVOdl89QSQBAW2DD4v6TcoUiB7rSrGe%2BosLoc8RYGExHKSiav5JSQ%3D\"}]}\r\ncf-ray: 98db088d8c30b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5848,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"195b031d50eaaa7f38c83a0884c93d4b","sha1":"e632ce19d7a222ad8da9d4f79684e8395b1b3795","sha256":"10de8d8b0585652303d3ab75d722d1966a7e69ebcea3d2f6b20c85212474b7b0","sha512":"0fd6b266538421e7006a66bb68ce096b14a19ecf0ebde31360373814d3dd174f262b2079af10ece265f85e2a55f074002ba90fd45eec844884409475a2d1be8c","ssdeep":"96:Ngu9wMiqOKQdGlsXhw16eHyMWWG5yjDdqE4xpglZjEJEokjpJdWtf3AxKN6x:niqQGSRw16ftGhqE4kkMvdWtSn","tlshash":"32c19eb0beebe4f6ff75048d686a8f61995c1005cda025590316f069c6060fe91b7fc6","first_seen":"2025-02-24T05:49:29.048365Z","last_seen":"2025-12-03T05:37:57.109688Z","times_seen":8,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/normalize.css","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/normalize.css HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e35-3e6\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=roAINCF2kdDLtys8S2hjED%2FukJE12vSNhoJotoM%2F9m5AxSTUt9V%2FuynLw99C%2F%2BskyEdSTK8e9k68AiphC8Pt5u%2FWovkmxcjjcSfAMx5UEzc%3D\"}]}\r\ncf-ray: 98db088d4bedb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":998,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9a60dbe3f2f279adcbd91d2b03329edc","sha1":"4a3045b4e1308a532649bd32eecb7bc4424045f2","sha256":"444beaef9cf98b6ab43f413d16c7fa03572f1d97ab48fb3d5cd9d7af57b125bb","sha512":"83417b3c0148b7d2f019eeb9826ecf3b92844ccd85cd3940c5eeb1354bae4a674d4de4aa0d805dad435237ac37751e9222cd930087ea2b6d2f83ed1cd2982c84","ssdeep":"","tlshash":"e1119edc312376dd93224b64b7f64b21af0400b05f1b126eb8e49da1534a5b42ba636f","first_seen":"2025-10-13T01:24:18.11585Z","last_seen":"2025-12-03T05:37:57.166827Z","times_seen":6,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/api/api_megapari.js?ver=7.152","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:45.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/api/api_megapari.js?ver=7.152 HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/js/script.js?ver=10.556\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xTB%2Bkh1NP0%2BK1AjVvpoUaHXKTwA1QdrYny5efNu70LGl74sTPxdkFkltDLkOQq6m2K%2FyO5rnF%2BgvKeD%2B62UviAkanJFZ95ZSS%2FUvdqCb3W0%3D\"}]}\r\netag: W/\"68b07e35-ac91\"\r\nexpires: Tue, 14 Oct 2025 01:23:45 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98db0890295121fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44177,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1b5901d8a37b77fe40b5b997f8b271a1","sha1":"fd6293ce98aaeb1da43616c148901353f2e10501","sha256":"e673f45f03f2c4613dda0c60af94a58f23464418097cba76a367d2e23df8553c","sha512":"b34d1900bbe3449dbab293a2f3e86d16cc122d5f2c7aaf114d6075b2e70c7b931380125c8abf9dc1ea1c4e3196cfbffb3543d5db512850d5a83614a393d80d96","ssdeep":"768:UqGV6w+4LywwQMjSmR9yemuS1sky8Fh4PYC+c/Fkd50g3iKcnwb/hyJP9iuBarnp:UHe/BarnVDsV6He/tarkhsVVRv7p","tlshash":"0b13acd0d3bd4ee2e65a92ad6d2d042ce5fdeeb29cbd50fbfc68825b560d011e010972","first_seen":"2025-04-06T08:06:46.752201Z","last_seen":"2025-12-03T05:37:57.144387Z","times_seen":7,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/cards/coin_plip_bg.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/cards/coin_plip_bg.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3806\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e35-ede\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vcnsT9%2BEIwlBGx%2BJNlWyNQWKZ8JVR2Ma%2BZ%2BpsSLmmmXTnVT%2FOf0Ikzb%2FHylfCI3YYUcAaxvkVS5CfF6GpMRLUUHxGCLhqyJaZJ%2FwLHHZhME%3D\"}]}\r\ncf-ray: 98db088d6c0fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3806,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"862e2ea1f7c74d7117ccc71f01960159","sha1":"81523522cc4e4f23b513a8d496e4daad0d771173","sha256":"06c6e8e6c485e74b12bb79370601304d94a5b391e2fe9632a43c2b8c1c51b26a","sha512":"e96eb28d0d56fd55840435f66a98371890ba858dab3eb502376f411c2ddf2a0adf74bbc928013e8a46ebd21b710411dea83bd48e8a5655e8d4517faf7a343cb3","ssdeep":"","tlshash":"2d717db9704f81dec95abce2a66925101a3ad8647c8a8f1afc478862df807118f3dd34","first_seen":"2025-10-13T01:24:18.123243Z","last_seen":"2025-12-03T05:37:57.125853Z","times_seen":6,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/awards/award_casinoguru_2024.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/awards/award_casinoguru_2024.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7986\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e35-1f32\"\r\nexpires: Tue, 14 Oct 2025 01:23:45 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H04DIoQdCEE%2BOJPHmPzMHOS98%2FKIU1NEdCjzikd7F7QgtSys4W3SXSV%2Fk%2BIulfF9K5slYd%2Ba4TI10XwvFuRTYsbmdycZO%2B8ieNEoeAju7EQ%3D\"}]}\r\ncf-ray: 98db088d8c37b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7986,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a63a0c044db67c0ccf1f15227a49a5e","sha1":"832da6021f0809b80fa82c3d957cc69fbe46e70f","sha256":"99ad35e38cfd70e95eaf3c6d066706c137b599e484092e01e669d99da52c32dc","sha512":"7f6fab1d7b6d2b4023d787e15dde2aadf2c17505cdc392f4d4aa9a4fdcfd09ae3364c322b562d1f1d90d0e980f780eaef20aecd9ee787bf85aa8cdfd337a82a4","ssdeep":"192:JpYj6KvHp3whqyH96nNM1KAkWGFwmsR9ZmcnUnsuQD:JpYjhvpJiQnAx7+GIcrD","tlshash":"cdf1beeaa35290130c9388996a39fcf35045f78d9687274a352f092d1a781d46f4af08","first_seen":"2025-02-24T05:49:29.050619Z","last_seen":"2025-12-03T05:37:57.136548Z","times_seen":8,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/awards/award_lcb_2024.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/awards/award_lcb_2024.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5934\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e35-172e\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XiuakWxXz31%2FRUU4gFGhw0%2B9YW9cU%2F11FZEMfFQgRFyvuN83hpdLNRO8YhN9HZZGqW%2FcyniPS0fSJ1PX%2FbOp%2FuGav5jIDOU4VmIA7SwTjGA%3D\"}]}\r\ncf-ray: 98db088d8c31b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5934,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"179f8bec9af45972f81ccc143240bbbc","sha1":"4c27074bda4a326ee200fdded74b47c4c8f72610","sha256":"01e11ab1123dcf5e9c97d286144fa0dde13d2c14328e5102e5d386e4be04569d","sha512":"eed73c5970061dffafa86bf06c2986056e8d9caa22bcca9d365c8cccd3dd9c66dfc5410eabf4678163cbded3d6a648f98c955ea3e32b9413824b59226301c198","ssdeep":"96:0ACnWkkeKZ3vL0LR+kukFTnfAqQfN1ob8krYIM+4YyUWNp5qfmrMWHeUhfYlDsQD:0akXFukRfAqK1obbrHH471xphfrQD","tlshash":"56c17dda2b413a4f078d4d141caa0b216eed858f48e71730a5df41a2bf015c367abcca","first_seen":"2025-02-24T05:49:29.04905Z","last_seen":"2025-12-03T05:37:57.148878Z","times_seen":8,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/scroll-arrow.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:45.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/scroll-arrow.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/style.css?ver=5.22\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpaBb8%2FgpYj8cgVXmimnrTCxhgx%2Fcq2ehHeaeGa6EKD6wK77aAtDPlniLQM8N%2B7oWedRbqJS7Jm%2BoAWoveznUzpbZomk3cXwq4gScEyEkKY%3D\"}]}\r\netag: W/\"68b07e35-f4\"\r\nexpires: Tue, 14 Oct 2025 01:23:45 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98db0891e9af21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3d14e8ca2b03c7d7cefe640d93200b2","sha1":"ecb33045e11408df20db880eeb0a3e7d14a4baec","sha256":"f26dc816b6ae66ec0557446925f7dad5ad80f61229f977ce4e26470f53b2f7ac","sha512":"e8da881024613cade63787a33493c49649a2d15c67be2f934e2725e921a32b88bca91210d43fbd0bf326b87df006bcd99f42c9e0f05ff72117cc70939f95e691","ssdeep":"","tlshash":"86d097f91088a83cb3a18324f660302134a390920a8c085ee8903c73700458b397b9fd","first_seen":"2025-10-13T01:24:18.135439Z","last_seen":"2025-12-03T05:37:57.123208Z","times_seen":6,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apimegaserver.info/api/accounts","fqdn":"apimegaserver.info","domain":"apimegaserver.info","tld":"info"},"ip":{"addr":"104.21.37.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:46.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apimegaserver.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 16:52:10 GMT","end":"Wed, 03 Dec 2025 17:49:48 GMT"},"fingerprint":{"sha1":"66:86:83:5B:E2:18:57:CB:35:11:E4:B7:4E:55:AF:B5:50:81:50:10","sha256":"66:78:5F:F2:03:07:24:90:1B:F8:06:5D:31:81:1A:EF:89:BC:04:0B:D0:2C:01:07:0D:26:6B:A3:46:32:1F:D2"}}},"request":{"raw":"GET /api/accounts HTTP/1.1\r\nHost: apimegaserver.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megalanding2.top/\r\nOrigin: https://megalanding2.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:46 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nx-dns-prefetch-control: off\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j4qAfEGAnqJ5JQYf0NCMt1q2FBtJR5jWs0WweWtTmAiocQEA1e54%2BzM7hysrWEN2jphGZewnrprltCJls8zf%2B4DDVy%2BeTXKkFcubC%2BLSmSA%3D\"}]}\r\ncf-ray: 98db08970b5b712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97551,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e423d58e9ec963c08970a3471c7bdf3c","sha1":"2cf4552fd77572dd2282cba5d58d7a74ad2347a9","sha256":"23e8de9b7f2c672be7677501e384f20ea2dc77c362b75075b4838dfcfb77ec3d","sha512":"d35c4c545165801cbdaf8429b0c2fabb0cd3f9dd49255dc888104fdc723c67af6d4afbf5dc7ec1c4398f1b2537688a5274ab0698f4f66a9bb7f9243798eb8211","ssdeep":"384:8TOu7odDmdZkiq5ghKFxkISnFCW2wbfFWeCPXEfGnlS46Tvo9hfvB:Yolm4kOCOckP","tlshash":"a3938d8cf6901def05b03ac4bfe26466369fc2e09045cbb5ae5ba8c545eb420d4ad737","first_seen":"2025-10-13T01:24:18.139849Z","last_seen":"2025-10-13T01:24:18.139849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":709,"timings":{"blocked":263,"dns":63,"connect":1,"send":0,"wait":184,"receive":0,"ssl":195},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/payments/visa.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:46.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/payments/visa.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nCookie: _ga_ML5XB0K0ZW=GS2.1.s1760318625$o1$g0$t1760318625$j60$l0$h0; _ga=GA1.1.1795566812.1760318626\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Oct 2025 01:23:46 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h0KnHUYeWSTLJwr%2FZV043L%2FlGKftMMYLojzomws1S1SFuoRDInedyakxZyFdqU5OP7uCFgpexGTMrxMZLfHEjLITZgVSaOvoqa4aslXpkuM%3D\"}]}\r\netag: W/\"68b07e35-5ba2d\"\r\nexpires: Tue, 14 Oct 2025 01:23:46 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98db08991a2c21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":375341,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc068ef07ac9da8dce9fe707ea177b6e","sha1":"9caa96a9b3a2ebe9d0e49268b5ab03fa02e1d124","sha256":"11d8a64cf38396c1d3b9d937455c99df1db8104023ecc25954bd029edf132582","sha512":"0c5c740456ae6b49ccf554f1b93c99ea02e6ab548b3b865f5ba7d4a15eb074b2153fdea5ac841db5870cf7dcbaa0b36098f029e4d007cf0e985ffa23a0d7558b","ssdeep":"6144:qG6VS5dpHGSTJACfRRB+uC+nYjrENlUC5c4m9e49ML78V6tyDfasd+hI1omT:f6urHdSmBc+nSENKKc4m8dLzsDfazhIr","tlshash":"e5849eb385d25fbad46460fcb55d1a41ac9c9072310cc8fce9d8ea7622bbc54caad473","first_seen":"2025-10-13T01:24:18.144052Z","last_seen":"2025-11-04T07:20:44.952966Z","times_seen":3,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/wheel/pachinko.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/wheel/pachinko.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12440\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e34-3098\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0AS7TQFQahEtDMb1a0iDbj17%2BQW5L78coqIpsEdv41vMZwjJUTW1cl%2FtZtx507XeVpfVzr4Hox8yl4sLAGkvDaLxh7RqvS98%2B8Ekms5b4qQ%3D\"}]}\r\ncf-ray: 98db088d6c05b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12440,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"55a7a8568ee4e17f2055eb6801359a15","sha1":"f9a5329087c48d8e798820448bb7f744c8f4e731","sha256":"c727b3e59b43a7c06039e6573646a2049d9451b114ed2a613d607b46c7f4a949","sha512":"ca71f203fa596c47198c036131dbc575491701b35da4933bab0c802e2a7935401b4be38800b3010db5bc022821430d3957b3a8d7faf6d8a9b10fbf1b5c86b614","ssdeep":"384:619jv2dpM+uBqKJPLM2pUDm4haHvfQN4xpV:K9acz0Khey5XQk","tlshash":"c742b09dd9d17067ef7c5a587bb40c38acdd2295c8b8f291c4a40dc22e18e7dc1a0d87","first_seen":"2025-10-13T01:24:18.147501Z","last_seen":"2025-12-03T05:37:57.145744Z","times_seen":6,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/payments/usdttrc20.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/payments/usdttrc20.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e35-5c9f4\"\r\nexpires: Tue, 14 Oct 2025 01:23:45 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2knBN102zv0o%2BXiBcnubQfJoxVTPb8rHWvZHxdW0tqz08wKFWPBB%2FeoopAr%2Feq4dsj53e9zqfcB7fC5txFFtt3%2FIn%2BXHuloFCxgNfUAXHo%3D\"}]}\r\ncf-ray: 98db088d7c19b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":379380,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5db99e17cc2e445f98b03485bb44d149","sha1":"7556bac0696a34c07444bd19f18e8028b91dc40a","sha256":"0bb006712455912fd212d5f6a00a6ba6fcceb55b754219eed72ad85806c36df9","sha512":"a5ca00f6a04abb157c8aec7758e20284af31033af692d3f48f8164b62a31c82b233d47b87dee9045cc7ad958b76504e93d686c14f80e091d8841f1f3d0e046e8","ssdeep":"6144:Z5WXiLGvf2hYspHWoVaZa/5Z+Z4La2Mf7:7+iCv+OCHWoVAaOH7","tlshash":"59847c7a4c5cab9e33321c6ecf43247e3e8665edb20980df299f75edd2660549660ce0","first_seen":"2025-04-06T08:06:46.721704Z","last_seen":"2025-12-03T05:37:57.148381Z","times_seen":7,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/awards/award_egr_mp_2024.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/awards/award_egr_mp_2024.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9852\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e35-267c\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YF0xtilZaA046%2BABds4E1NueFLAP2nNJwZfi%2Fkoj0UA6cA6U8cKDWd7DMf5cS5GOgLymQJUqTMk177idMsPF%2BYGgtzd2kGfNZKIAdYL103w%3D\"}]}\r\ncf-ray: 98db088d8c39b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d70b9af0ca8c60c31598a7d88457718c","sha1":"52ebe96442c207640d69fbc9cacad04f7ac341a3","sha256":"39bafd1e49f19c621efda82b7809055d838d9b3946bf91d12abb3c891b818065","sha512":"54132929ec6e27774b2b6c65a4958624db1526a4ba37894cd8085b420d07152f529eecc958fd0e4829a2769b608bb36174a4b52c796256b41af2c181703c6969","ssdeep":"192:/mzA3eDy4I2kk3Cphd2LTE2l71DmoAPFgdBM5U8cPOCbrF83LwabY0:/AAuDblCDgHEESoBfBGCbrFYLns0","tlshash":"4c12cf4cfed1ac0de55a31491b6611068bdfe9e103edfd5ebe04da0a24e15b4f2b9844","first_seen":"2025-02-24T05:49:29.051377Z","last_seen":"2025-12-03T05:37:57.121149Z","times_seen":8,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/adv_3.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/adv_3.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e34-12d8\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZMcFnImNwNHsyIqF0eJJLKkKYsjEkNZ03GTgNdn1j2R7DmLufNtKBb3g8rt6OLWVuLB4VYfmsFuocTTNNoGhpqgGm%2FBc9ctujh4%2FYrWRhFo%3D\"}]}\r\ncf-ray: 98db088d7c25b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4824,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c63cc502d94381777e37e9bd52bb474d","sha1":"42b0bd7297923e291cd1e85fdf8b5187b7863aed","sha256":"89fb56a80d256b7761406a7c49b880c1c828c1e508693033960c0eda9f199484","sha512":"e7011ebf19001fe27473bed974ee38c82f42fe551eb32c1691eba4855082920ae617f88214b81ad18db11e8de8050365c6c91cdb7cf0362abed2ee0eb1ddc5e0","ssdeep":"96:oExcoiXWNSnyzGanfLFMuRs2OD3morLijDvR8TngnEvIhiSm4z8:oicoyWwnE25mor+jDvRpnEwY4z8","tlshash":"73a18499a3f9b2e8b006fbf8435658313f937ced3921c0a943f96c90d99100c5a58cd7","first_seen":"2025-10-13T01:24:18.159403Z","last_seen":"2025-12-03T05:37:57.135812Z","times_seen":6,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/cards/card_bg_question.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:45.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/cards/card_bg_question.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/style.css?ver=5.22\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42344\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zXs7YjUCQU1L%2F9zVLs0Kn8rUgsuD1aQYgA6e7BeiCArAk%2B1%2FUrakXH6oB9NJCTQHh0QZqFqKJm5FxnMewxIx3fHQ%2BV4tzlrbtIaJOy41PAc%3D\"}]}\r\netag: \"68b07e35-a568\"\r\nexpires: Tue, 14 Oct 2025 01:23:45 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98db0891e9b321fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42344,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c12771e8c9d7e030afddf98be308785d","sha1":"5eb25cfcee86354be1c5bb2e594851f26b81857d","sha256":"67cb4eea8d0e1930c6debb7c7b49d6a2a90d7749f2380e2f5bb569f3d74347c8","sha512":"57dadf3dce09a044eea45fdd8bc93d5ef9d01d94271bf27aaed3b021fd919cf7324274a45b21026598fbd8561ec06587cb0cb962f02b1699c9135ce8c6dcd1ce","ssdeep":"768:lfw925Jh02iW9QRaFTwli6omnUoZ1R2tjU4/sA37Pv1IfAnOhsy9tBCL:Wg5V19QAWfZ1+jUNAT1suxUY","tlshash":"6e13026a3eed53d96166c4acb74f069b2d8059717fcc3ea30428cbd79b644987360648","first_seen":"2025-10-13T01:24:18.163634Z","last_seen":"2025-12-03T05:37:57.124194Z","times_seen":6,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/wheel/coin-flip.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/wheel/coin-flip.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18868\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e34-49b4\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=feVzHyU03xNFZn1v9VZSkgBzHbJy3Y2XhE6gnT1%2BD9pjeFQb9%2FpANZsP9gBQPGLFV9AG74OkS9yhj3ONBrnwK496%2BGMJxiGcF0V89nbrv1Q%3D\"}]}\r\ncf-ray: 98db088d5bfab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18868,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"17685a825f17c9e786995328295bc53c","sha1":"6175d0afc370dab7c59c215b6e7159e8c68f95d0","sha256":"2213e81eee255afdba1254e763bb93181479bda1beb5ddf3049135e04c2f1409","sha512":"5cafea59c1ef5cf841e1b6e9d4fbcace19d6965820bb62d60dd485d9383a24d39380bc7cb8d4a0fb5a466cb9a184a065733fd77ab72c511266da7962ba932ea8","ssdeep":"384:VoC9nYiKtGSU6GrtJKzDqH4dFZ4qlsxTRJtweZ0VzT:utGSUVpJMDqYdD4JT7Dwv","tlshash":"6882f0573359290cc1b8c5349e61c76afc2e9e9b0e330619471f7ac13e718274aaf47a","first_seen":"2025-10-13T01:24:18.167445Z","last_seen":"2025-12-03T05:37:57.151173Z","times_seen":6,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/wheel/red-chip.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/wheel/red-chip.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3916\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e34-f4c\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KAAYeTNV446TfrYR7cVismI9FvVR4JLOtM9740SplDKWlD0YwJPL5%2BR4dOX8M3Emq7gtlLuFJj2sb34WhWSMaplNYzgX8LkZNUMstFU28Cw%3D\"}]}\r\ncf-ray: 98db088d6c09b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6838c93c32d0f44ecfc09ff9ea455739","sha1":"f1768bafd6163f6bc29143f8fde153d2b08fadce","sha256":"8190c81ee829e2c07c1b3c0a92a29751fa3a679a83fc60b64315069ecf10201a","sha512":"5905da053f3f94b565c01d2324f63b8541cecbee44e1d9f47a6e1b4ee44700c37c7a17bcbf7108917791ad655118828f6363fd689a6e458e99200cdc016ca10a","ssdeep":"","tlshash":"0c813a9149c289824946770adb7c7f2ed18b6aa9853df22b1ae8011e40c4bd88ff2246","first_seen":"2025-10-13T01:24:18.1785Z","last_seen":"2025-12-03T05:37:57.143513Z","times_seen":6,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/payments/mastercard.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:46.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/payments/mastercard.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nCookie: _ga_ML5XB0K0ZW=GS2.1.s1760318625$o1$g0$t1760318625$j60$l0$h0; _ga=GA1.1.1795566812.1760318626\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Oct 2025 01:23:46 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rA2q523ZSra6gHqVZmey2qOTb0Auj0B6k2cIN4eWbD2gqDJgk9hx2Tyde%2FQfSOfwzywVBQCMkqML1S8kXc5HywySuG7Mh476s5DTHGGdHGk%3D\"}]}\r\netag: W/\"68b07e35-3ad6f\"\r\nexpires: Tue, 14 Oct 2025 01:23:46 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98db08991a2d21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241007,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9cd3c5accee49a8a3dc3c74da7aca224","sha1":"9f8de59aa18b31550913ab9e86366a0119852486","sha256":"de541db2d437dab3fc5b455c57ba090e5df3f4219383a21df14e1a4bc1903c6f","sha512":"8b43316b6eddbcf29a0aa9cee09d067fe5d6107fd47177d32df99c895ad78ec231abdaf465796dfb3ddb9101e9dca16ef2989f4a76cd6b9ad17560ed443b3a50","ssdeep":"6144:Vk6+SsBUrNsW1/PXE1Zi93pqr5D90bJcZ85VM8NE+:/jNsuP93e5D0SZzeP","tlshash":"853449626c9e7b4c3b370ebf138701be3e2461ee15188aefac8d59d1e052a04e745de5","first_seen":"2025-10-13T01:24:18.204028Z","last_seen":"2025-11-04T07:20:44.962116Z","times_seen":3,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 13 Oct 2025 01:23:45 GMT\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3908,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"935871d1a732f1e46db8fac63abf0dcd","sha1":"1c67935ab647d6cb5bfa911856397443ab4a64ed","sha256":"b8eec3c6430ec7af2ae527219f944b1f3fde1695eb73efc2a56b3cabb23e2481","sha512":"2a9cb9036467308726cc6b979cab5e2c7159ec088436136f4aefc70cf43b6e90c7ebd277697beca525b052f2a8f8dc5909d9b9e5e4b09afc930e290a7195a571","ssdeep":"","tlshash":"2481c0910517a504da471cc523cf7e26de0e66767494d5797ffe2ca8bdeac220324b2c","first_seen":"2025-09-05T02:18:57.460387Z","last_seen":"2026-04-05T13:53:52.878425Z","times_seen":46741,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":224,"dns":0,"connect":22,"send":0,"wait":32,"receive":0,"ssl":236},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/adv_4.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/adv_4.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e34-b4e\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ge86C4rDRq%2BDapnQ9kIqSr1Jql7oTN4wyDEMMlwZeMzinNwgP7qMxEXzA6Iwh6bpXZf0ww0yNZidE0sap3Zg3DJTET5W53KSVnemQtUQwmQ%3D\"}]}\r\ncf-ray: 98db088d7c26b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2894,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c74f8d72d09fcdf30bed5ffe7ee91d2c","sha1":"4395ed9a0ee024cc88851789654c12bf5d199d20","sha256":"4225c493fe9846487a8fa2aff917651e4f4d321b743a9a92b9e6cdde3eadc3dc","sha512":"cedc6f38e47a4dab6b0b08f164e8e56f4d1f7e360b60c480fbb5bc68282fa51331f371f4f5abac943cd8309ade28b77cbc15d5e9e6e0eaa19a2a2a3367656039","ssdeep":"","tlshash":"5b5190b1a220957c700a5bbcd331b8e1fa963ce62bd6d1a951e6dca1e16440d88cccd3","first_seen":"2025-10-13T01:24:18.224252Z","last_seen":"2025-12-03T05:37:57.138899Z","times_seen":6,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/js/wheel.js?ver=1.36","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/js/wheel.js?ver=1.36 HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e34-e71\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WXwq%2FCyNJe%2FaFBK4EkuqCxWWlQVL4lC2P4UHOdMVYCk75HaBMZxVBGAcDuM%2FnDOqW9W7nB3cqtgJLDY7b%2BakHvoQvzYLzfTbuU4WSZd9HJk%3D\"}]}\r\ncf-ray: 98db088dac50b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3697,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"6bd5870dee03bfbd9f08d136007b9f68","sha1":"e1bdaf0dd503a6ca0c03609396fdda77340de80f","sha256":"a70512e57c7773bcf69e8aba6ef86d11028ebe986db7e2d52afc42cf4ed0b796","sha512":"8fb9e3aa729486ebc47a8f4d4c298ad2382e4d100b3d10b2668d60b32b73490de5e52714d1acd9b5bf12ab4ce12de7a67e32ea168f1561d6738ea1003ba4f43c","ssdeep":"","tlshash":"3a71cdc197ec0afa0d8b6bae508e7fd4e52c00a6e644ac793639d9540768ee300f409f","first_seen":"2025-10-13T01:24:18.236678Z","last_seen":"2025-12-03T05:37:57.153794Z","times_seen":6,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-13T01:23:43.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/ HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ez6MHXgrEt0rM%2FMdKbFKHsH2CEe4fEEO5FRtrZyi1vNcIL%2F%2FXGrmETWk9ixaEFgPcVFwwnrXIjtI1sU%2Bj79b06LBpMqdN%2F6jvQTHrxCb%2B4I%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98db088b2ab5b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":21391,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"4a61bbeb1fb11418902af85741cfea44","sha1":"4ba779d516f8ee374783341c594e60b8b852a439","sha256":"322ed4424065a9369d8ea7a9c9da4c750b422ff5e5227812ecba22477a13d3b7","sha512":"ed52ddc6a90989481e1fa4786a746c5f9f46c9bc85a517e02d1fa4f5ea80cde74f2440b479d3a6e84f4508fd4c7a2233e07d088676afe2024fed6106da020d34","ssdeep":"192:p2G4PMCzxRu28282V63e9wICOeKS+aguOHsRNoQ:p2Gazmrrc63eSKS+oRNoQ","tlshash":"5ea2d97060c569b3617390d64a627f5afec48343960a940a3afd2b932ff3d83d91386d","first_seen":"2025-10-13T01:24:18.246815Z","last_seen":"2025-12-03T05:37:57.137492Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1347,"timings":{"blocked":609,"dns":330,"connect":1,"send":0,"wait":128,"receive":0,"ssl":276},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/arrow.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/arrow.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e34-119\"\r\nexpires: Tue, 14 Oct 2025 01:23:45 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xYZyluRs2ptEyPP6rworQB8CToJAiaO5DLD3rTiJGIkGSnNQhxQt4SOJ%2BZxbpzD1znJQsYXjqN2Zlmth%2FupL7uMd%2B8psPQhshueTdSZXIv0%3D\"}]}\r\ncf-ray: 98db088d7c1eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"343cbfdda2c1d16e21f0f217b5e90664","sha1":"4d6fbe6ba4cbb1af55ad06ad4716386d54ea8495","sha256":"9381d54bd61dec0dd5549de4d6c7ee066dcc83e802cb574cebfea23a3443b4e6","sha512":"9423aefaf0b15d80552578cd41dde5b25e01c8e8f902a857bf93b835c4c3e57371576982f38f229a921cf4d2da121f28c27be366674859555b1e5e42f6392b01","ssdeep":"","tlshash":"c9d05ed6f49c6700854477268b2a1025b432f4d399da50a7efe1251bbb488f36c61ef8","first_seen":"2025-10-13T01:24:18.256909Z","last_seen":"2025-12-03T05:37:57.159718Z","times_seen":6,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/adv.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/adv.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1822\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e35-71e\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nO64PYT%2F0%2FVT%2F4YJYAqF0fj5XqGTnIIfXEXxAoBP7vOtHPRNY6GUfRUwvdbQ0S8wmSVXN0m0%2F%2Bil8tysH5PjjD4FmVc30AvwOgpHCDMM6Ro%3D\"}]}\r\ncf-ray: 98db088d7c2db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1822,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ea94f5fa858742bb0490525a27bb758f","sha1":"e84a1027aa2df2b02d61f1fa1a27f8bc077c3e8e","sha256":"990eeb3780da63e72e18038c253fe5a44f0aad9b12eb364b0c2af6d99b46b8d5","sha512":"4eced5c3e2b50c621612da0cbd25f530fb4654f4d38ff01eb03df6185bc4c6ece6a2def8c649ba791fb156a15b7932f8813fb99b7a60f8a691e1522816270ea4","ssdeep":"","tlshash":"99314b5cef9a59dbc5fb1ae1550af583b2b1c2d109048d5a80c778082c2659cf26d476","first_seen":"2025-02-24T05:49:29.047631Z","last_seen":"2025-12-03T05:37:57.151968Z","times_seen":8,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:45.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.6.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://megalanding2.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 118072\r\ncf-ray: 98db08921a30b4f1-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6696a8d8-1cd38\"\r\nlast-modified: Tue, 16 Jul 2024 17:07:36 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 457851\r\nexpires: Sat, 03 Oct 2026 01:23:45 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SCmleULQlm0JTSBQbWjAhXJ0QzaidBg2xyGBaV29hwYMCMQbC4KcO46tVwgjA5ZqOJ1luf1Foi0caHoToX6x3V1CxLoMYOIreM5W6%2Bkigl6cG5Ugkxx1V6oIQq2IG8e3ed2YiC%2F%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118072,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 118072, version 774.256","md5":"715d593456fa02fe72a008a72398f5be","sha1":"e948290773216dc1b50c2121314a8cf918c22b54","sha256":"c411f11975d26eb04cd2aa3c071181d4b18e489f1fb97060d4176a3531dfb36e","sha512":"1f63209c93a462c2690442c9cf1c3e5a67f2df7a67dfcda2cb81292a2dbb90641aa0ab81c25323a1f2d9f0fa09b3421d136ae5228c47e581c51912ba284de46e","ssdeep":"3072:3wqMZaMDlYfb+t0YI4WlLL7rE2ZjX+B+pdJpimtm:gpZNYfytUxH7rnZj+Szpiz","tlshash":"71b3137922e526408e9d0e3bbf7b6a6ec7f8719ddbd4c10aa7d18469001738ed8d842c","first_seen":"2024-07-20T13:53:50Z","last_seen":"2026-04-05T13:23:18.913158Z","times_seen":7033,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/phone.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/phone.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e35-396\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JhBxMbPjaJI5OLNEosl0C2GOIRyfHtYvJ4xEiAfYfbm9wYY9i%2FpNWmeJySYYFO4DkbuFPfW1y9zNmA9pORsSdWxUWiwR6ujWCC6GxTTDq18%3D\"}]}\r\ncf-ray: 98db088d6c16b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":918,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d6d1d5c5f78f6204a0cbf9098718e650","sha1":"5263b813c22e3d8e5c12689122937e9001e74a99","sha256":"5330e5e3a9c7c9677405c48a34a33f38e4eac35218987ef668c4afdb1e3017e6","sha512":"50c19185c794ede76b5271ff39880435b585b5b9f6c6b2376f04b2f50ed10d89a878f8c23f64b9fce2a733ef4ec2d6d1e070e695da91360bb256d5181242c263","ssdeep":"","tlshash":"f5110471929463d0a181c3e1c81754d0656e78f797cacff8cbb41841e15092f801d8c5","first_seen":"2025-10-13T01:24:18.307903Z","last_seen":"2025-12-03T05:37:57.128312Z","times_seen":6,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/style.css?ver=5.22","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/style.css?ver=5.22 HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e35-8688\"\r\nexpires: Tue, 14 Oct 2025 01:23:45 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C6KUoVaBTCKE3O%2BGf8LjKep2MjA8ATId2iAMpo10hHwZ5bSRh93aU2bEvFeLtzKiThOp7bo3pHYFXtBnJzErZT%2FHT3Fo1O0L0F4Tsgh%2B%2BeA%3D\"}]}\r\ncf-ray: 98db088d4beeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34440,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"38cc4d27c0070fcbf4c71bd60ad6bd5a","sha1":"642fc3f64003dac9a9f019e735a69e1318fd1467","sha256":"bec912ac6b6b9edf03417022b03a4802a53abc63665640081d0ed67871e7776f","sha512":"c5233d34e60a11842ea8bd3251d79feb4e200958191c840fe6825a9178045513b598b68ed305e7c9dc1a7fd12ff9e62db68edb6d45591d91ec7ec2291a949691","ssdeep":"768:yvaKOwM9NOcUT/95Vu/yl5w70MjnhGn2zzrkqr+MB4KoMcqmwatiknFsPXuFt9:UM3OcUT/n1Zwa42","tlshash":"fcf295a83917204aa343a798bbf01f598eb89071ab0f05ff71d7254d82d45f867762ce","first_seen":"2025-10-13T01:24:18.326782Z","last_seen":"2025-12-03T05:37:57.134094Z","times_seen":6,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/cards/crazy_time_logo.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/cards/crazy_time_logo.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4426\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e35-114a\"\r\nexpires: Tue, 14 Oct 2025 01:23:45 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bm1tz2SKjrJimS1jBy4sjB5pD9A78gX61RL8va2GXBjtF%2F%2BQwVsDmSoj2Tip2tAEVCkojWrd%2F19WF%2By5d8KcH572QfPaQO5vvJsb6%2FRhuCA%3D\"}]}\r\ncf-ray: 98db088d6c0db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"98a1cfecf64a9d9a2cc7fa33c6c70847","sha1":"27c11943b8329fc0f81264cb9a84b5758cd7f742","sha256":"6bad8e0783ed249e2e2a553717bf53bf45ff48c9bcef98eebfc5376ddbf6cfb0","sha512":"9ff412f43c061bf8ed3b8d5bfac70a000624e4fe90468f82f59751ef0ff33b0acb37eca13dca0964f9c4e73b6e8b946877402ef3433d782340e40a46d9c1771c","ssdeep":"96:wpc5en6JYBtqQ00TlgOQj/Priz8aMhX4UbroL7RnFqZHJ+Gl:w40tXrTlgjj/PriQXhoxZIJ+I","tlshash":"a6918d7fd1aed4c5cfc04d9fc17d6445c26885298ed174404cf6aabeacd531d2a630e9","first_seen":"2025-10-13T01:24:18.339721Z","last_seen":"2025-12-03T05:37:57.147507Z","times_seen":6,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/instruction_2.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/instruction_2.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8996\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e35-2324\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D8Cpto5h%2FhwykaPKAQWoFllaJeU7oBu38Ly1zqrHm8pHXS2NFAGKPGOOtQQKUf6JZsFvD7cABsqZCRNvoKmJJuWejar%2BcrXJh3q95O7z3D0%3D\"}]}\r\ncf-ray: 98db088d7c20b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8996,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e8e5db698c5e0e43d733f1a60db77eeb","sha1":"d8eb240762c44b6205a0c9a665ef410bdc88df78","sha256":"8507c99c63a98536ec702ee0736be8f39df7de5b360679d60c90e139bd6e9f71","sha512":"7a0fc98765fc4a28704bd54e24b1455e24e2ea3becf344675705a811141cdce964c3bbe70eefd0fa07b0c3c8534c4ff0d499a2c85ec34fcf00b7eaacc1c8e41f","ssdeep":"192:sPU2SjAsMnDVGDqRtCZby1fIDcZXlhn7fj/w2veUceZnLNwAk/PB4:sT4Qnx1SLsVhn7LI2vXDnLNwt/J4","tlshash":"5a02af6e44754a7d8f0d9335739fa5af0a59baf74e4a830bb6180f352364c8990817ce","first_seen":"2025-02-24T05:49:29.045852Z","last_seen":"2025-12-03T05:37:57.129179Z","times_seen":8,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/wheel/ace-of-spades-red.webp","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/wheel/ace-of-spades-red.webp HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7726\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b07e34-1e2e\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Ndjr8f%2BsqOU1mWxO9pyeupP3f9QWFjKdBa3cz%2Fpvk%2B2HSVmUh8Cejx7LNtTNKx0yuLVNm4dHSXaSxQ9C%2BNOpXC9d7GydJCBqmWxSGvUtwk%3D\"}]}\r\ncf-ray: 98db088d6c08b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7726,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f77e23378ace283a42c5c3a78ec965dd","sha1":"5ca73622002748b7a759f5a0c56084d4a39d341f","sha256":"1ec3219d04443b7d78c15a396a346250838c59b9b46d12e34555ef95f9db7af4","sha512":"3567147c2ed2d50d8d03b48d3bd8d4ee6645d6058c625fca186fcbc5241bc3f4cff190b40830d48a87244684e4378276ed877d0fe26ae6751d5efb8b21406a8a","ssdeep":"192:kddbj/Cxmk3DlGcsDsKow+OmPNgh6SwvS0g:ej/CxB6DscmPNo6Sidg","tlshash":"6ff1bef08953216ec921a1d33cb8b6462551adbe534ba568fa1b6394b3cc307f76f290","first_seen":"2025-10-13T01:24:18.37115Z","last_seen":"2025-12-03T05:37:57.111585Z","times_seen":6,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/success.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/success.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e34-1211b1\"\r\nexpires: Tue, 14 Oct 2025 01:23:45 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9kWOuG55F0TqvCiY01rLEbttPZ%2BJmYrQwLakLa74feFjWXNxd2nhGcXo6%2FOEhF3HrjaE9C2qo7dMhDNOF%2FXMOSVT1bcy%2FC8uzLtwNhi6bU8%3D\"}]}\r\ncf-ray: 98db088d9c43b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1184177,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"547708491ce10e5eed2c24c9de37ca6d","sha1":"83631855600d57984245bd29d716cba81de7f1c5","sha256":"5de6944cf17df2ddf9edb064f6530416ed993488ee7ea359e6740e274707d3e0","sha512":"321ccf897f78473139c0baf86d867b209755d71457a5a816ed6815c84bbf11a8899a8a8d4c72515bb54615ca36b3c9604b653220e77e2e507e022d66d14a4162","ssdeep":"12288:FUzP6DBpj/vjyp3py7LbHn5+VvcgWa9QaTkGT2j8KgEIfcE6tcpyVKnbQy3mcwY0:fj/LY3MPHvgBZT7f01GuK5WHYWq0H/B","tlshash":"bf253339c9895da1457cd375353b2d2e1af39b89b102a083466a3ac3634fbc3ca5b477","first_seen":"2025-10-13T01:24:18.381111Z","last_seen":"2025-12-03T05:37:57.131852Z","times_seen":6,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/adv_2.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/adv_2.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e35-8ab\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rLyM8bwTz1gjEWti6zBIx60mdcjQCj%2BxvmhlNHqrzwFOhzVDGJh7wexifQYttbME0Fjh%2BNvgBNF%2B3erNTPIPo78UtqgYIHz%2FxZ43mButipM%3D\"}]}\r\ncf-ray: 98db088d7c24b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2219,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c477358f62a2bd40349153d7f46f1625","sha1":"bd92fecbe8f77446b0ed3237f6721ebaa5dfe1f2","sha256":"d4008ad27e227f74afd87e151bfa26a36432973197832157663a18f2fb91959c","sha512":"fe959c86ab1397d584602cae3266e49fa2e77e63cd55a43de50508cca7817ca5923b2deb666b7b5a504d4736c212f9cb83d2aae886f23b556bca796a3e787269","ssdeep":"","tlshash":"ec41a7e022f886dc3604befd8b75a4f53cad3cd66521c564c3e12a26fa1001d49a0ddb","first_seen":"2025-10-13T01:24:18.414757Z","last_seen":"2025-12-03T05:37:57.134989Z","times_seen":6,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/adv_5.svg","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:44.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/adv_5.svg HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68b07e35-43d\"\r\nexpires: Tue, 14 Oct 2025 01:23:44 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vlgGcEJM%2Fd6hSyptylYzpFd%2F5m%2BDhJGSTKMY7%2B340YFhXRB6piOhxHgstgB30uNS0FxEVmcKwM1kVoIGiUrxZCY2ndEjEC6EwO6Cb9cpyS8%3D\"}]}\r\ncf-ray: 98db088d7c27b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b05bf5fb72997108bd3c6c851e481f3","sha1":"5991e130e98c2d809afe30013d3ce53946862549","sha256":"e56301ce1d1821d57188e84a39bc07f9ba573846595d641d12e9907460077a0f","sha512":"9f35206df57433432db5fc1df93dba5e1568ec41ea15eee1c9cb28ff2b0584d0c2259c72679c5714003fa98983612d33c9af6b040d050391803eed4f62988803","ssdeep":"","tlshash":"f011464ffe8cc408b50d61b4d362f2e522a97c545602e0a4f3a39d35a8785211c1a7c7","first_seen":"2025-10-13T01:24:18.424832Z","last_seen":"2025-12-03T05:37:57.119653Z","times_seen":6,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"megalanding2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megalanding2.top/spin-and-win_wheel_rchmd_ww_/assets/fonts/gilroy/gilroy-black.ttf","fqdn":"megalanding2.top","domain":"megalanding2.top","tld":"top"},"ip":{"addr":"104.21.17.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:45.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megalanding2.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:42:33 GMT","end":"Sat, 13 Dec 2025 19:56:53 GMT"},"fingerprint":{"sha1":"D7:7F:13:66:10:95:E0:2A:1A:2C:8F:6E:32:34:74:B0:26:81:0F:6E","sha256":"30:19:5D:3C:5B:57:C4:BC:26:43:98:87:9C:6B:1B:24:B3:E4:D2:8C:6E:CF:6B:26:AC:F9:3A:23:13:FC:E1:BA"}}},"request":{"raw":"GET /spin-and-win_wheel_rchmd_ww_/assets/fonts/gilroy/gilroy-black.ttf HTTP/1.1\r\nHost: megalanding2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/style.css?ver=5.22\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Oct 2025 01:23:45 GMT\r\ncontent-type: font/ttf\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Thu, 28 Aug 2025 16:05:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"13900-63d6f11c6cd09\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ia7aO80VrFG3%2BmNVk3cRVyaUmIYwm94idQhHEs2QDKSx78FtRl5YcgZolwJktmurAfRrdDPIBEVs58sMaSGM5H0E17T%2FA7DRmMFvsE%2BQDXk%3D\"}]}\r\ncf-ray: 98db089209b521fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80128,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 26 names, Macintosh","md5":"d59719bcf2c0c2e0db325ecf56c1d257","sha1":"b657d917cffc57f27ad2dd27e213729606fa6a0a","sha256":"68176a3751bbab100648cdc67faddd7e299ffdc2b48fd71b9835c6181e305287","sha512":"d10403c1a2edae9f42f64e711b8b3a0e005ced6bb8530dea1730b93ea7f7bb2f3acd72b2c65e874a6bff6f9bc14dc94126588e88c215f71e956f4bd542d11e0c","ssdeep":"1536:dp4NYRAbiSPxiY6OpDkdsdcP32f3yLCqCiRAOGA6A5:j4N0gxc+7OX","tlshash":"13734c42ff01d906c663ae391ee3e3319f31b538af5a130ff285a6756c8b2856e50785","first_seen":"2024-01-06T00:20:38Z","last_seen":"2026-04-03T11:34:44.207755Z","times_seen":21,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apimegaserver.info/2ip_code.php","fqdn":"apimegaserver.info","domain":"apimegaserver.info","tld":"info"},"ip":{"addr":"104.21.37.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megalanding2.top/spin-and-win_wheel_rchmd_ww_/","date":"2025-10-13T01:23:46.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apimegaserver.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 16:52:10 GMT","end":"Wed, 03 Dec 2025 17:49:48 GMT"},"fingerprint":{"sha1":"66:86:83:5B:E2:18:57:CB:35:11:E4:B7:4E:55:AF:B5:50:81:50:10","sha256":"66:78:5F:F2:03:07:24:90:1B:F8:06:5D:31:81:1A:EF:89:BC:04:0B:D0:2C:01:07:0D:26:6B:A3:46:32:1F:D2"}}},"request":{"raw":"GET /2ip_code.php HTTP/1.1\r\nHost: apimegaserver.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megalanding2.top/\r\nOrigin: https://megalanding2.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 01:23:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.17\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nx-dns-prefetch-control: off\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=516IotquSIZX9scxct6iONHhADyqbHs78e7h7SIeXMTNr6MHO00ZL5xUbP2nZPhU7RiNmtsaSddYVhkcYA564JCovZrTrP0JDxbvKq0n1%2BI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98db08985ba3712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":39,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"48061c22123b734126a1c88bf9f9b3fa","sha1":"c465eecc393e17f61e5621f2b11641c9396e31de","sha256":"682ff72551903c19719cb3524a6e015ad4632004a0259366d66a5fe1dc86e056","sha512":"66daa25612e478ef8d9b79a6d721d6d7bffcc9831b2e40449f7c2ef4484730752cb4f49da7e5d6135df5f95359801ad8ee2284af00f522121b9ab74cf797df30","ssdeep":"","tlshash":"38900415d151d04747d153400447711013175f0c51171311c40145c050c545c411c4c3","first_seen":"2025-09-04T21:38:46.271428Z","last_seen":"2026-04-02T22:21:06.421246Z","times_seen":20,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}