{"report_id":"e581b4d3-e568-457f-84fe-a28255e11b76","version":0,"status":"done","tags":[],"date":"2026-10-04T22:40:58Z","url":{"schema":"http","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"title":"MGM Vegas","dom":{"size":137637,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10180)","md5":"edad938e85962e36dab4c73efddb0883","sha1":"8f83acbeae160b0ff621f721aca82850683e9f10","sha256":"87e9deb7ca27b27232379ef7b1a76030184a8abca74353ba2166b621d6278bec","sha512":"aaa0669882a6f6f6340b9ee55bc0e76580d9a4b96ec0cf9cc51fb3e903ae7032d8630bb18efb14f165dd09a0b9f7370079750b04835ba9709e6d0832e868516e","ssdeep":"1536:t0tvkd/5SI0oZHwXzrSm+kaywm9rTR8ijlE9ITyjQbWA2SlW9aiDf:CtvkB5XRhkm8rTyjQbWArhij","tlshash":"25d31a23b190603970b3856664b77b6d347aa003e6468db4f5acb6748fc5ed70b72f88","dom_hash":"domhash76c03b7cdfa87633bd5a6e80ccf37b9b","first_seen":"2026-10-04T22:41:04.70182Z","last_seen":"2026-10-04T22:41:04.70182Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-08T22:40:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"mgmvegas.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"mgmvegas.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tk.mowell.tech","ip":{"addr":"141.11.124.140","port":443,"asn":206286,"as":"1 of 1 Servers Corp","country":"United States","country_code":"US"},"domain_registered":"2023-07-28","domain_rank":0,"first_seen":"2026-03-12T23:01:53.595189Z","last_seen":"2026-10-03T02:41:27.869344Z","alert_count":0,"request_count":6,"received_data":159289,"sent_data":3142,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mgmvegas.fun","ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":14,"request_count":7,"received_data":552569,"sent_data":3767,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eed7ab8fad195231359ad15e81eed71e","sha1":"4ece18ceab865d3fa5d9542b7801009a0b4a72ef","sha256":"17f4364e863afd5ddf64bb58b9fad7193d9f6c5d7501b9cd3ab727d57dd96278","sha512":"bd8006dbe4e4ba24e83b2e2be680c23d0dd669f4332a6a14f91dee03b5ce7135b096fa846b50c64edbdc9bc79c89e8c87798a745217119388f7fbf1e4069e6f4","ssdeep":"","tlshash":"4d71b7ac7eaa503b8cb25479ed4f2163337f502f448dc000f869a6913f52549b96eada","size":3752,"data":"","first_seen":"2026-10-04T22:41:04.721134Z","last_seen":"2026-10-04T22:41:49.152444Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ca083c32f38b2db9e9601665a9d0172","sha1":"7c6d43635d9f4b41b3e85c967628111e9cc98b5e","sha256":"26c2afa009e76e9982b51da7b7d3c160ca11afea4a3459b09f024d0d4cd0f8f2","sha512":"b1c71ab0bb7271215250d1c9b4af1f3aa8ea621a79d74990c0f6f566670b7bbecf261b2d1dd75024c1c292dc4a7486999f41d48e6f512d5039f62ed6ff6a2f85","ssdeep":"","tlshash":"1d110411313a470821c708be3cad5342dc335551999d5332752bd5f12efbe0d2f1d965","size":934,"data":"","first_seen":"2026-10-04T22:41:04.722227Z","last_seen":"2026-10-04T22:41:49.153407Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ff883194a79fa4363b0405483f600a2","sha1":"83a2985f5c84686caa864cc3ba21af3e14ecda1d","sha256":"66427712ac9704a6c328e4991215dbca35b0751178b4a58d284b441b8b23b69b","sha512":"dc63c5e31c3c6340ce222d11e5b57714adf1d8642eec97332e331a8b861d47e29b69fddd720e6c26bd77a6b808f44279c4ddda99a5881a95da14c422456fd5d0","ssdeep":"","tlshash":"ac216675730862aa81e240953d4fa75174730eb1cc89f0c9cc1ed952893ce4d5ab7c7c","size":1405,"data":"","first_seen":"2026-10-04T22:41:04.723177Z","last_seen":"2026-10-04T22:41:49.154366Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3de16343044e06e95b17fa5a06ef3a4","sha1":"3738b30ab76736e351a924ccc198cd0504fe41e5","sha256":"dbfd9a1b7ed82cbda9b886f7610fb80a9323d6bce2ff4c1350d7294e8cea7351","sha512":"2853d42a981e2f5a282cdd888ed52eb9f445bee2f4962302181ac8856b2e11c86b2cc634d74eeed5c7250f39dd9269e077e43d85308b58e7f348d1669fffe954","ssdeep":"","tlshash":"54513eee76d4813b5273a37370dd3e0b41bb4a438066cec1e13e52104aaac5b681fac8","size":2702,"data":"","first_seen":"2026-10-04T22:41:04.724345Z","last_seen":"2026-10-04T22:41:49.155277Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"28684a9783576fc2009826d46120d8e4","sha1":"346143f5bd5b9c6d00dbae536bb031301978625f","sha256":"ba1835369ddb0171ee4f8dcee029da3370352848bf24319de70e878e456c5d9d","sha512":"1308abd505bfede0f6f59bb3ab3a335d8222e936cd72ababb7e6453424556a48203973eae8635ea51bf6d490de1fd8d065ade8fd35448f61e995b9b545ed79ec","ssdeep":"","tlshash":"434176276352126446f860ca352f7b20e1b946324cddb9cddc30c966f93ad3ba4bf654","size":2036,"data":"","first_seen":"2026-10-04T22:41:04.725388Z","last_seen":"2026-10-04T22:41:49.156089Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56200fa4ae473232bffd944a57334b03","sha1":"704fcb7c375667e14143a7f6b956547993f496cc","sha256":"23d5c9390b3e799de2cf19c507016f3578ccc4aca74d6c11c490257789a250d0","sha512":"3431ec0a9124e170f2a0c25aad65323794831f743d58571d0f8657d98cbe22ee0636e68377b1963175bf8af8bdb8b247491d0836deeed4257561ba3c3288d5c3","ssdeep":"","tlshash":"30c08c467113649501b02292b7173b1cb134328034f22ca92a12d5c83032c13e4636d1","size":161,"data":"","first_seen":"2026-10-04T22:41:04.726807Z","last_seen":"2026-10-04T22:41:49.157057Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"471bf3affdbdb28a63ac9cf8b4a292d9","sha1":"d4dcdf2f767ba68f9122644c4709edeaa0c2e9ca","sha256":"3e43453640eeb508bd0cdd7546f1f5299fa03bf2600116c7c09cf7dbb86d60a9","sha512":"1372f361d0d11f4720a27291750e95741d8f4a37aeafadafe6852242a3ef30e765ff2d23ffab771ddcb8c962ecbdfeeffc63b5bf501a236b8adcaf194f7e0b10","ssdeep":"","tlshash":"cbe02b3e382056300ad800adb07ee655b8f123747b9b5423a05edc9d6d68f6859719cd","size":426,"data":"","first_seen":"2026-10-04T22:41:04.727952Z","last_seen":"2026-10-04T22:41:49.159048Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e5a1f24d85e9560e9691cfd6fe23ffe","sha1":"96add6f43305cfd1cd81127f5cbb1f8817d387ce","sha256":"42e3aca0eb7f24277c91b6f4c2e87b2e975e5fc5a6e1b67d9214937e707cd8b9","sha512":"7179c2fde26d306fbe3d1115b957228a55e31e2a53cf8c66bac2f045bcb4da2cc8c1be571b5c5328ffc3326b8f2b294cb8097fa407588a9cb086fd2db9b66525","ssdeep":"","tlshash":"cf61a5baf2862221e642a07b307ba7163037a213edda5050c7e65a641ddaf1b873295c","size":3305,"data":"","first_seen":"2026-10-04T22:41:04.728889Z","last_seen":"2026-10-04T22:41:49.160305Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a41cee30fcd327d5887e61053728181","sha1":"40ff53cd5ed9d8f70c01401741b474cf849104cb","sha256":"8fa63ffd0a48a658b8ba59ecb3f4c8010af5d6d63da5997217eeb5dbd3d9fcb4","sha512":"62a743b553440e8ec6561884d2df9d2eabf437059462f235914822f172d09f2dc93a3cfc8ca3740e85047a2f333e2affea5c8f912dab5a330b0bfe7fc1bba936","ssdeep":"","tlshash":"0c11e3be79123132bb97922a596f214e3435005b1611c1562b38f158bfe0f85176fde8","size":863,"data":"","first_seen":"2026-10-04T22:41:04.730424Z","last_seen":"2026-10-04T22:41:49.161649Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e0ceb4f54f3d8fd9e7581f31577f217","sha1":"64a9b65e12c96f07c2bca4703f7b8f14c8d824d0","sha256":"016960a8b2f1b94e424a51533a9535dd2f3c1ba06f3a301184f87b5e68fa2e20","sha512":"1654e795bbd8d2a1771aac325aa4d08e40049eee2a7d3be15f1ff107a2a79de82c9adf5d5e06e7252576e27c477ebd2e297139e30a975f381aa732b0a94100fc","ssdeep":"","tlshash":"840195f67685557612db5aa7337e5b447576105978c10031182c48485978dd6833add8","size":790,"data":"","first_seen":"2026-10-04T22:41:04.731379Z","last_seen":"2026-10-04T22:41:49.162484Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"641dcfd17693ce4a417a97424b7b2951","sha1":"81ac927ed4f48bee424586d1b3f67d19eb33af39","sha256":"42e0cc6051f7c53b5eb1e02de7d23f088ec4e2693951f96b7464f11a6775250f","sha512":"d35d5742ed9b72a4c787a6fa18eeb4304578ff92866af62d8343bc70fbc5659be70e9a4715dc0f7eb403b6cff9af49c5ead5b686ec0384b1981d504c4b6c27ca","ssdeep":"","tlshash":"e2f02bf73921d4380df62df722b6d7c57033d1592c5660569d1cbec57430c4b0a69d59","size":524,"data":"","first_seen":"2026-10-04T22:41:04.733489Z","last_seen":"2026-10-04T22:41:49.163165Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0cb2d4f3960de12c4d6be7b42bffe7fc","sha1":"e8572ea09c7c46f58b7b2a0a311614a02fdade95","sha256":"a28ddb09b1db1995d7c4cd96490c038162adc5c187d9366efef15a9b2b0a30e7","sha512":"17a89656642ba9322603a0c9c3d70ddfc773266bcb6ee7daff48901bc26749e505072148df5638e11a4a3087f3d97a72d7f397262d413f69522aa76f0dfca1eb","ssdeep":"","tlshash":"df210cb775c925f107cfbcbb316fa7846b722564ad10e0048c2dc90c18beec6a036ad4","size":1243,"data":"","first_seen":"2026-10-04T22:41:04.734697Z","last_seen":"2026-10-04T22:41:49.163811Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e1e09d3bdc566656defa57344fcdffc","sha1":"1694f44193a936e5894452b15c8ebb3837ac408f","sha256":"1f1cc557747fdc78faea020c1d6493cdf73012e915fc2bef130fdd923c96ce18","sha512":"4cb04b65f1dd58f23bcb24b8f42b08d1eb83e976c98b75aaee9d889597e6fc76405fe346ae90583e641d2a7dd872800159cf9cb5ec0b7029678bc923b4481f15","ssdeep":"","tlshash":"5741c93bb16221769db3a13adbaf6785747300d7000ae4107c9dad842f54b8a1ab7dca","size":2434,"data":"","first_seen":"2026-10-04T22:41:04.735846Z","last_seen":"2026-10-04T22:41:49.164544Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b578a08fd37b95e924eff772b9ccc001","sha1":"8a70fccbfb7bd5f85f3fceb4a42ba5aa781478b5","sha256":"c03186ef7f57598ff1a4fab33f6ab75e8abbd0b5f69add02368c93cb6ebc5206","sha512":"25417a44b36e47f0c2f758e1f87e56ab08f068a7d6bc0def58c11c36ba7f051d42caee63f86e6cacc8dba8e739e7633d85b7e78780230f33f9f7ed5b31c69af2","ssdeep":"","tlshash":"51d02e67f7b062f568ebb1364206ba4a203304ca000aea300815ac027898f081539aab","size":249,"data":"","first_seen":"2026-10-04T22:41:04.736931Z","last_seen":"2026-10-04T22:41:49.165465Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c25124d40886a22c27367b01ea37ef6","sha1":"3f577c042b49557c133411f216c05b62be56fbd2","sha256":"423314f37a1ade8518b10028170a381777d9f4b8f5f65d3827189918d5a10e3b","sha512":"07115eb68f9e3e1d1cecd13520a645d4ed58e13b5eeaf48e40cec7531cac1454f22dec2f7fe2f77140cf878d36185fcb0be2ea20faee19782080989b4a1a6e84","ssdeep":"96:Eo0cvURB5kMdyrxj3wrCmswr2O3AKrZGMsqRoUEwEh/u:EoZUbfYl7wJswSO3Not2uLh/u","tlshash":"43c1b93162e40034e1339026b01b7b8d38358017a607e649ba4ca1757fc9eab7f35ac8","size":5980,"data":"","first_seen":"2026-10-04T22:41:04.738603Z","last_seen":"2026-10-04T22:41:49.166143Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5626a6eaa7d8c465a0d01719de8fd5ae","sha1":"6c91f06aa0e4a176affa7cefc9c47969c05bf1e5","sha256":"c378a61d4c4ff056af580eba9a4bdaf0d39eabd52adad51d3fa30d1b80727649","sha512":"15318eced8a36f8bb9845d369eec7d3d4e1c4fbff894dfae8fdf508cd74d1584632320ebaf937b500b25aef1c02763c2ede5a9f071ed042759300bcd8dd9153a","ssdeep":"768:Tyw4/H9hNTR8ijlEmWIswyjQbWA2SlW9ASOh:Tywm9rTR8ijlE9ITyjQbWA2SlW9c","tlshash":"8fe2a4bb7573343819eb907a62afb308367350631985dc50786ca4156fa4f470ebbed8","size":32214,"data":"","first_seen":"2026-10-04T22:41:04.740074Z","last_seen":"2026-10-04T22:41:49.166836Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e60461e8e535f213d4ce81956c06162a","sha1":"749d45acf7febf11d56615db78791e1dd0e9f99d","sha256":"034aabd88c6d002ad9796d464d893512583c9a4bcbb8cb64f4372d5f61e9adfb","sha512":"4cb7d1f49be0037648d52dcfbe853723462aa7b4c9dadaa7a53870d9bf13cb47a5dd443b22c9795edf7fc74a65ed7522933aabcb98f118cddc13d76632d42831","ssdeep":"","tlshash":"f5018ca29565185a369711191a395f42363613f97bb25221b06d3e7b3085b8bc302b5c","size":852,"data":"","first_seen":"2026-10-04T22:41:04.74159Z","last_seen":"2026-10-04T22:41:49.167567Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9784e0afde70b7f3d0d3e193cc54cfa8","sha1":"301219189f4d5f0970e00e03d0e87a28e47c0d93","sha256":"2d389ff1fd3be7bcd4967f84b0ef61e0c1528e2cc8c1f9b121c16ca809fddff7","sha512":"14923553aaa2d51cbfc096f939a332ed9f0303b5863d7341649c7d28699cd5972b9160c81cf48b5fbd22715f166950181e2e91e1bfa138daadb8dd0cb408a808","ssdeep":"","tlshash":"24311411b415226cf9e838bb7b2fab01b22dc61a7c1258c47d4ed4b41b91fc392265f4","size":1774,"data":"","first_seen":"2026-10-04T22:41:04.743524Z","last_seen":"2026-10-04T22:41:49.168229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"837f0d03cffb477a547234fee9667525","sha1":"7eeae3587f1d87abffc25e59acc285eecb4930aa","sha256":"ff81e758aae4ff0c9961e8add7a401adbd8c6f2d52d8fb583928d9b9c5e4b2a9","sha512":"64231551bbe50a354a9140defc14055d94f1b7ed8da6751661996c5916c4c59c90b966044671d08a0b5e4aebd58e7339e863993ef85373ddf706bc51129fe9bd","ssdeep":"","tlshash":"eb01d0d0e78065b5c74ef75b626fa30d5835f232ce01d2440a2ec5893a9d603b61ae6e","size":779,"data":"","first_seen":"2026-10-04T22:41:04.744657Z","last_seen":"2026-10-04T22:41:49.169055Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee0a436fc3459d34217f23c5871f6a7d","sha1":"1c9533f9bf46c60dcc8d0f28b5871d404d8ba4de","sha256":"513d69f71fe753733745888caf6a4bff796c05dd9c617bb83a7eb4338be943cc","sha512":"773fc94eae21a0daadb6cdd4ca332910ab7095243b7a1e944b719cf7180012dfe72b48ddd4b4e2ee31a5e991a32601376fe71dd5e06462d395ea6fa6fb5da22a","ssdeep":"","tlshash":"960199e1f493032e89c762a3441ba18cb072408ea70a0125cb3748e36e1cdcef590f79","size":667,"data":"","first_seen":"2026-10-04T22:41:04.745646Z","last_seen":"2026-10-04T22:41:49.169793Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk.mowell.tech/ad/events.js?pixel_id=906955588677310464","fqdn":"tk.mowell.tech","domain":"mowell.tech","tld":"tech"},"ip":{"addr":"141.11.124.140","port":443,"asn":206286,"as":"1 of 1 Servers Corp","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"df788874223bb75b78eda3632e7c8bc6","sha1":"0ee00a5099f6eea01cccc0f13332b5befc8690c2","sha256":"60003934073cd73c1b1f42d43b099cd6583aa21d4ebd952d347c0e4ec0687b77","sha512":"d8979f56f9c4629fb6abd4692d1b640d1330a958e471528bb798fb1c95fbcf839af4f382bc80e7aa6422bf87311d62d0661a304a7fd22dabe5b9c6a2826c079c","ssdeep":"1536:ahD7/sW6bN15GdIGU4/hOuhdFvs0uJnEwPrWwwuV6h5eDW9b8lmhEizhONeh:YD6bN1Or40u+wPrWwwu46h5vNy","tlshash":"8ce3d6cdf6c6b0a512f774b8812f620bb27b6a55748a8481d226e4d07c78a4f5237f7c","size":152501,"data":"","first_seen":"2026-10-04T22:41:04.706976Z","last_seen":"2026-10-04T22:41:04.706976Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk.mowell.tech/tracker/retrievalbbg?pixel_id=906955588677310464\u0026callback=getCachedBbgCallback","fqdn":"tk.mowell.tech","domain":"mowell.tech","tld":"tech"},"ip":{"addr":"141.11.124.140","port":443,"asn":206286,"as":"1 of 1 Servers Corp","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6fcb6fca05021484e4e780e166e4977","sha1":"30ffa2ea4e0d40f0ac9b51d82b45ea7011233cd9","sha256":"895ec6360cf43c4b16abdaf769abb237236ac1bedad698623e3fb7192e6c221b","sha512":"4b4399cb20822006af6ce4364b3d758cc0fbc1b25f0a292f3d20631ffe6883c7c8fe58d91e16e62d890ba1566f2856fc8d49ed0a8ee1e72ad27be42c85bd1bec","ssdeep":"","tlshash":"1f7000800a020e000c228322a83222b0238820000c88080008a2038b080000a8a00300","size":24,"data":"","first_seen":"2026-07-29T04:43:37.850162Z","last_seen":"2026-10-04T22:41:04.717365Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Аналитика] Сессия инициализирована: uid=анон | 2026-10-04T22:40:28.955Z","filename":"https://mgmvegas.fun/","line_number":1109,"column_number":439},{"level":"log","text":"[Трекинг] Загрузка страницы: / (413мс)","filename":"https://mgmvegas.fun/","line_number":1109,"column_number":558}]},"http":[{"url":{"schema":"https","addr":"tk.mowell.tech/bigoad/trackingview","fqdn":"tk.mowell.tech","domain":"mowell.tech","tld":"tech"},"ip":{"addr":"141.11.124.140","port":443,"asn":206286,"as":"1 of 1 Servers Corp","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://mgmvegas.fun/","date":"2026-10-04T22:40:30.703Z","timestamp":1791153630703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mowell.tech","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 01 Jun 2026 02:50:47 GMT","end":"Thu, 17 Dec 2026 02:50:47 GMT"},"fingerprint":{"sha1":"9B:29:CD:43:F9:84:84:A6:8E:00:6B:A2:D4:02:66:0F:00:8B:D4:04","sha256":"8F:C4:58:4C:B9:75:32:7B:89:31:7B:4D:BE:06:12:45:C3:C4:1D:16:78:CA:B1:CC:74:2F:7F:27:DB:B9:D0:8D"}}},"request":{"raw":"POST /bigoad/trackingview HTTP/1.1\r\nHost: tk.mowell.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1230\r\nReferer: https://mgmvegas.fun/\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://mgmvegas.fun\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1230,"data":"{\"it\":1791153629454,\"title\":\"MGM Vegas\",\"referer\":\"\",\"resolution\":\"1024*1280\",\"lang\":\"en-US\",\"url\":\"https://mgmvegas.fun/\",\"host\":\"mgmvegas.fun\",\"cookie_id\":\"BA1.1.8825451882.1791153629\",\"session_id\":\"BA1.1.8449882264.1791153629\",\"pixel_id\":\"906955588677310464\",\"timestamp_ms\":1791153629475,\"extra\":{\"action\":\"page_view\",\"configId\":\"906955588677310464\",\"sinfo\":\"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\",\"aes_iv\":\"DYwqv0lDVvGnERpA\",\"aes_salt\":\"6466988757\",\"wst\":155,\"drt\":461,\"lgt\":932,\"b_version\":\"v3.11.0\",\"from\":\"bigo\"},\"event_extra\":{\"event_from\":1}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 04 Oct 2026 22:40:30 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 126\r\nbigotraceresponse: 00-d9c02bf61f423cee81c593f41c4b8f9e-0-00\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: token,content-type,bigo-appid,bigo-uid,bigo-device-id,bigo-host,bigo-uri,bigo-hash,bigo-cookie,bigo-signature,bigo-auth-token-uri,X-Auth-token,X-Client-Lang,requestid,common-ext\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":126,"size_decoded":628,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"16189296a129c4964e61442756debc65","sha1":"6be7bea9901d30fddaf76f6648d2eb9f8785df41","sha256":"4361e39b2cdfcc31664b8837b5902d3d543649957d3d7c973ab6c2762fb6305c","sha512":"e6bd0186d76d44cd55e9bba67c99ee37969ea087b7ec426c3c8e43e24df6657308b1a50a7a7222f103d7a2bdeff258e66b48dc3e3ae68c8e3f474ed160612cde","ssdeep":"","tlshash":"9ab092d7b18a05a12c73b209526657c8224f02922e284a10c90917aab93b597a2cd474","first_seen":"2026-10-04T22:41:04.703512Z","last_seen":"2026-10-04T22:41:04.703512Z","times_seen":1,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/assets/ic-1790392720815-4oxcl-slotscasinothumbnail.png","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mgmvegas.fun/","date":"2026-10-04T22:40:29.279Z","timestamp":1791153629279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmvegas.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 10:48:00 GMT","end":"Wed, 30 Dec 2026 10:47:59 GMT"},"fingerprint":{"sha1":"28:6D:0E:74:7A:92:FC:42:07:61:23:02:87:96:E2:77:C1:F8:E0:51","sha256":"73:56:A2:1A:7F:35:C9:F0:E0:AC:96:42:7B:A1:B5:BD:52:38:28:78:6B:F6:52:9C:21:70:DB:33:F9:B5:1A:65"}}},"request":{"raw":"GET /assets/ic-1790392720815-4oxcl-slotscasinothumbnail.png HTTP/1.1\r\nHost: mgmvegas.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmvegas.fun/\r\nCookie: _vid=muuemh383fceb3ab2eac; _appok=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_vid","value":"muuemh383fceb3ab2eac"},{"name":"_appok","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 04 Oct 2026 22:40:29 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3600, stale-while-revalidate=604800\r\nx-fe-build: sep5-gatediag\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uhFbZnjcTbqpU8bUIAm3ep%2Fgh1WbjYAWkZXx19NaYkq6VbEX6fSEfSQFKs1XN3vuTi21BNcLSrhtWJOKfmYL%2BnMWWmRtpp1H%2F%2BSD1%2B9KTtQRmGzcP%2Bbjkq3dPOY0AnM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a457b0470d485ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 90158\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90158,"size_decoded":90835,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"2ec85f7a5e365c4b1e1a076ae48d2e45","sha1":"2e9be9d215cd6cdd4249cc9e1925c8d9d284e15c","sha256":"d71aab78181e4a339ce4b1c2f902f58613b4ae25da4be2cdfcfec09d698fcb57","sha512":"b2f5a4c62676e3dee03003f577d6e62d7f6df5d75a35a408dcf344909b16e4043e0126db962f0375d72394dd8ff1a23b93edcce12823abeb4b11643e085bb453","ssdeep":"1536:2vC0lL9937/sycSfM9hqlfF7mtzbAN/Mpsj6y2zg0ojlEi/vuEFtksTo6o0z:9IzzNk9hcFytHANktzjojlEOXFtS6oO","tlshash":"ec9302772737ece998ce050e97689535f08726149903183fe106ab2e377766c81b3e97","first_seen":"2026-10-04T22:41:04.705618Z","last_seen":"2026-10-04T22:41:49.14963Z","times_seen":2,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"mgmvegas.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"mgmvegas.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk.mowell.tech/ad/events.js?pixel_id=906955588677310464","fqdn":"tk.mowell.tech","domain":"mowell.tech","tld":"tech"},"ip":{"addr":"141.11.124.140","port":443,"asn":206286,"as":"1 of 1 Servers Corp","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mgmvegas.fun/","date":"2026-10-04T22:40:29.163Z","timestamp":1791153629163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mowell.tech","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 01 Jun 2026 02:50:47 GMT","end":"Thu, 17 Dec 2026 02:50:47 GMT"},"fingerprint":{"sha1":"9B:29:CD:43:F9:84:84:A6:8E:00:6B:A2:D4:02:66:0F:00:8B:D4:04","sha256":"8F:C4:58:4C:B9:75:32:7B:89:31:7B:4D:BE:06:12:45:C3:C4:1D:16:78:CA:B1:CC:74:2F:7F:27:DB:B9:D0:8D"}}},"request":{"raw":"GET /ad/events.js?pixel_id=906955588677310464 HTTP/1.1\r\nHost: tk.mowell.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmvegas.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 04 Oct 2026 22:40:29 GMT\r\ncontent-type: application/javascript;charset=utf-8\r\ncontent-length: 47704\r\nbigotraceresponse: 00-ecb9f91567a6499b277d8969f223d28b-0-00\r\ncontent-encoding: gzip\r\ncache-control: private, max-age=30\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-headers: token,content-type,bigo-appid,bigo-uid,bigo-device-id,bigo-host,bigo-uri,bigo-hash,bigo-cookie,bigo-signature,bigo-auth-token-uri,X-Auth-token,X-Client-Lang,requestid,common-ext\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":152501,"size_decoded":48283,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65504), with no line terminators","md5":"df788874223bb75b78eda3632e7c8bc6","sha1":"0ee00a5099f6eea01cccc0f13332b5befc8690c2","sha256":"60003934073cd73c1b1f42d43b099cd6583aa21d4ebd952d347c0e4ec0687b77","sha512":"d8979f56f9c4629fb6abd4692d1b640d1330a958e471528bb798fb1c95fbcf839af4f382bc80e7aa6422bf87311d62d0661a304a7fd22dabe5b9c6a2826c079c","ssdeep":"1536:ahD7/sW6bN15GdIGU4/hOuhdFvs0uJnEwPrWwwuV6h5eDW9b8lmhEizhONeh:YD6bN1Or40u+wPrWwwu46h5vNy","tlshash":"8ce3d6cdf6c6b0a512f774b8812f620bb27b6a55748a8481d226e4d07c78a4f5237f7c","first_seen":"2026-10-04T22:41:04.706976Z","last_seen":"2026-10-04T22:41:04.706976Z","times_seen":1,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":29,"connect":32,"send":0,"wait":53,"receive":49,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk.mowell.tech/bigoad/trackingevent","fqdn":"tk.mowell.tech","domain":"mowell.tech","tld":"tech"},"ip":{"addr":"141.11.124.140","port":443,"asn":206286,"as":"1 of 1 Servers Corp","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://mgmvegas.fun/","date":"2026-10-04T22:40:30.704Z","timestamp":1791153630704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mowell.tech","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 01 Jun 2026 02:50:47 GMT","end":"Thu, 17 Dec 2026 02:50:47 GMT"},"fingerprint":{"sha1":"9B:29:CD:43:F9:84:84:A6:8E:00:6B:A2:D4:02:66:0F:00:8B:D4:04","sha256":"8F:C4:58:4C:B9:75:32:7B:89:31:7B:4D:BE:06:12:45:C3:C4:1D:16:78:CA:B1:CC:74:2F:7F:27:DB:B9:D0:8D"}}},"request":{"raw":"POST /bigoad/trackingevent HTTP/1.1\r\nHost: tk.mowell.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1212\r\nReferer: https://mgmvegas.fun/\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://mgmvegas.fun\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1212,"data":"{\"it\":1791153629454,\"title\":\"MGM Vegas\",\"referer\":\"\",\"resolution\":\"1024*1280\",\"lang\":\"en-US\",\"url\":\"https://mgmvegas.fun/\",\"host\":\"mgmvegas.fun\",\"cookie_id\":\"BA1.1.8825451882.1791153629\",\"session_id\":\"BA1.1.8449882264.1791153629\",\"event_id\":\"page_load\",\"value\":1,\"monetary\":0,\"pixel_id\":\"906955588677310464\",\"timestamp_ms\":1791153629628,\"extra\":{\"load_t\":\"1085.00\",\"sinfo\":\"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\",\"aes_iv\":\"DYwqv0lDVvGnERpA\",\"aes_salt\":\"6466988757\",\"b_version\":\"v3.11.0\",\"from\":\"bigo\"},\"event_extra\":{\"event_from\":1}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 04 Oct 2026 22:40:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 93\r\nbigotraceresponse: 00-914de1a8f38921c7fd90693d555e3af6-0-00\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: token,content-type,bigo-appid,bigo-uid,bigo-device-id,bigo-host,bigo-uri,bigo-hash,bigo-cookie,bigo-signature,bigo-auth-token-uri,X-Auth-token,X-Client-Lang,requestid,common-ext\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-06T02:40:57.197605Z","times_seen":18873320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/assets/InterVariable-subset.woff2","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mgmvegas.fun/","date":"2026-10-04T22:40:28.922Z","timestamp":1791153628922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmvegas.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 10:48:00 GMT","end":"Wed, 30 Dec 2026 10:47:59 GMT"},"fingerprint":{"sha1":"28:6D:0E:74:7A:92:FC:42:07:61:23:02:87:96:E2:77:C1:F8:E0:51","sha256":"73:56:A2:1A:7F:35:C9:F0:E0:AC:96:42:7B:A1:B5:BD:52:38:28:78:6B:F6:52:9C:21:70:DB:33:F9:B5:1A:65"}}},"request":{"raw":"GET /assets/InterVariable-subset.woff2 HTTP/1.1\r\nHost: mgmvegas.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mgmvegas.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _vid=muuemh383fceb3ab2eac\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_vid","value":"muuemh383fceb3ab2eac"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 04 Oct 2026 22:40:29 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3600, stale-while-revalidate=604800\r\nx-fe-build: sep5-gatediag\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KYED2SqvSK9i8SeXbr0QbHpxeXkR%2BMEbHDetfzLXKc7TkCdNVPW7ugc7QgI33EYzgeQg2O97DFPzX9clTfcoO24u4S2u1EwKLjPL%2BVTkYDRi2n9gAyqGO%2FURy2nrJWI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a457b044ccd15ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 99732\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99732,"size_decoded":100404,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 99732, version 4.66","md5":"004dd38d15eda8a9214c41994beb8e97","sha1":"e40dfc111f30fc2a8f6160136625f020aecd5ca1","sha256":"6729dfb89cf8331936bba17c452d74207b5850c96d550e5ad8351db4aa97b287","sha512":"0b0d6d623ade27c159bcfb4882d523b403111171580f36f13cfec7fc0f4399818238305e9f116422e269bdff936deb20cc8a10ef6d45a25ed891ec5a4cff38f3","ssdeep":"3072:RPONyuVp0bPAs2JMNVxLSgISn4xiQoIaD:RkmAs2C31SgfyiQolD","tlshash":"92a312931c3ec6b06a61222580d8fffb858598aeb355f395c54c52e14baa394b423f73","first_seen":"2025-11-17T13:12:04.960091Z","last_seen":"2026-10-06T02:04:57.182465Z","times_seen":45,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"mgmvegas.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"mgmvegas.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/assets/164953f4-87e1-4608-b0cc-bdd28cc38bc.png","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mgmvegas.fun/","date":"2026-10-04T22:40:28.924Z","timestamp":1791153628924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmvegas.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 10:48:00 GMT","end":"Wed, 30 Dec 2026 10:47:59 GMT"},"fingerprint":{"sha1":"28:6D:0E:74:7A:92:FC:42:07:61:23:02:87:96:E2:77:C1:F8:E0:51","sha256":"73:56:A2:1A:7F:35:C9:F0:E0:AC:96:42:7B:A1:B5:BD:52:38:28:78:6B:F6:52:9C:21:70:DB:33:F9:B5:1A:65"}}},"request":{"raw":"GET /assets/164953f4-87e1-4608-b0cc-bdd28cc38bc.png HTTP/1.1\r\nHost: mgmvegas.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmvegas.fun/\r\nCookie: _vid=muuemh383fceb3ab2eac; _appok=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_vid","value":"muuemh383fceb3ab2eac"},{"name":"_appok","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 04 Oct 2026 22:40:29 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3600, stale-while-revalidate=604800\r\nx-fe-build: sep5-gatediag\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XezLKKddh8poV26QnTybZcmftYgNc%2FxxJ%2B%2FkPqGnNIGs7Cv%2B%2FZQuYa8qfJdV5lO7kN7uxCEpdFKu6AwowSsn0AdeLZ00FZWDzOV3KNI48pPv8xWSqmL8IU8VHR03Eg4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a457b044ccd25ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 220242\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220242,"size_decoded":220915,"mime_type":"image/png","magic":"PNG image data, 1000 x 575, 8-bit colormap, non-interlaced","md5":"9067e22650d3ba2345d01bf291544788","sha1":"83aee1ac4faf90da1f28ef283af537c6459f25e1","sha256":"738b5fccb5e30faf2a6dcc96f00a1bedf19c2d9b288a1b6675bd99448bfbbbe4","sha512":"3347f0655ee805b710f5fb3a4991746eac843959a8be055d28b617d9f8e4da796d48e0058bc81f526f654cd545e03b81190d4a1063d797a31b6f0b92ad497928","ssdeep":"6144:oo4eKO1MrhzdtKEseGIAuqWsqVOQY0Qq7QBU+4:seizyEseGIFqWj33QZBh4","tlshash":"ba24230a17f1ca767da354a6af43c5f6ac11810cd49900366f27787a69c333da7cae6c","first_seen":"2026-10-04T22:41:04.713313Z","last_seen":"2026-10-04T22:41:49.145341Z","times_seen":2,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"mgmvegas.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"mgmvegas.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/api/app/installed","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mgmvegas.fun/","date":"2026-10-04T22:40:29.165Z","timestamp":1791153629165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmvegas.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 10:48:00 GMT","end":"Wed, 30 Dec 2026 10:47:59 GMT"},"fingerprint":{"sha1":"28:6D:0E:74:7A:92:FC:42:07:61:23:02:87:96:E2:77:C1:F8:E0:51","sha256":"73:56:A2:1A:7F:35:C9:F0:E0:AC:96:42:7B:A1:B5:BD:52:38:28:78:6B:F6:52:9C:21:70:DB:33:F9:B5:1A:65"}}},"request":{"raw":"POST /api/app/installed HTTP/1.1\r\nHost: mgmvegas.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mgmvegas.fun/\r\nOrigin: https://mgmvegas.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _vid=muuemh383fceb3ab2eac; _appok=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":[{"name":"_vid","value":"muuemh383fceb3ab2eac"},{"name":"_appok","value":"1"}],"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 04 Oct 2026 22:40:29 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t0MkqeX9v7X8IyUNgnjj9H9YKdAS5%2F0HIQ%2Fruedg0FPmZDj4ffU2%2F1mq56F76aHM4x2%2BJWnpQweiVC5AjklkCLP1ALxplSI%2FynKb5g0w2TdeAXY1IOB5HoLsmMNvsRQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a457b0464d2a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":608,"mime_type":"application/json","magic":"JSON text data","md5":"a7720110cae00797123ab2b68eff4a53","sha1":"63538309343c8fddb55a3eb796dfafae9e8f2141","sha256":"d751f6b4e7accd7e48898f5e8622552a6a65d60129c6cdbf9c159c86a1abec71","sha512":"602dafb7633edfcf93194e6f96efa7e96e7dd41dfeabf4af39db9e4d7a86d38f6453b76c6282d6e70b3930a913bffe53d4261b3f5bbced64a4530ef3bee3a607","ssdeep":"","tlshash":"7480008b002823a800a803c28000a88082030a003a282a88c0aaf02c2ac23aa2220b02","first_seen":"2026-01-02T15:40:44.663867Z","last_seen":"2026-10-04T22:41:49.143087Z","times_seen":15,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"mgmvegas.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"mgmvegas.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/api/analytics/event","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://mgmvegas.fun/","date":"2026-10-04T22:40:29.185Z","timestamp":1791153629185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmvegas.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 10:48:00 GMT","end":"Wed, 30 Dec 2026 10:47:59 GMT"},"fingerprint":{"sha1":"28:6D:0E:74:7A:92:FC:42:07:61:23:02:87:96:E2:77:C1:F8:E0:51","sha256":"73:56:A2:1A:7F:35:C9:F0:E0:AC:96:42:7B:A1:B5:BD:52:38:28:78:6B:F6:52:9C:21:70:DB:33:F9:B5:1A:65"}}},"request":{"raw":"POST /api/analytics/event HTTP/1.1\r\nHost: mgmvegas.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 93\r\nOrigin: https://mgmvegas.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmvegas.fun/\r\nCookie: _vid=muuemh383fceb3ab2eac; _appok=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":[{"name":"_vid","value":"muuemh383fceb3ab2eac"},{"name":"_appok","value":"1"}],"method":"POST","post_data":{"size":93,"data":"{\"event\":\"page_view\",\"userId\":\"\",\"properties\":{\"page\":\"/\",\"referrer\":\"\",\"title\":\"MGM Vegas\"}}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 04 Oct 2026 22:40:29 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MZk59tYXz2aHCePtyOxlaFj%2FUmpnhOPkpWdI3vZ6wT%2BalP4EFXXImPl9uZXgB4mBzqVoouzg0WXSSVe3Af7n6deVmkLQBOyFnkxglr44yGO3ti8vGSHudvBsVSHdELU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a457b0466d335ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":557,"mime_type":"application/json","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-10-06T02:22:23.697834Z","times_seen":22644,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"mgmvegas.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"mgmvegas.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/assets/favicon.svg","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mgmvegas.fun/","date":"2026-10-04T22:40:29.281Z","timestamp":1791153629281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmvegas.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 10:48:00 GMT","end":"Wed, 30 Dec 2026 10:47:59 GMT"},"fingerprint":{"sha1":"28:6D:0E:74:7A:92:FC:42:07:61:23:02:87:96:E2:77:C1:F8:E0:51","sha256":"73:56:A2:1A:7F:35:C9:F0:E0:AC:96:42:7B:A1:B5:BD:52:38:28:78:6B:F6:52:9C:21:70:DB:33:F9:B5:1A:65"}}},"request":{"raw":"GET /assets/favicon.svg HTTP/1.1\r\nHost: mgmvegas.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmvegas.fun/\r\nCookie: _vid=muuemh383fceb3ab2eac; _appok=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_vid","value":"muuemh383fceb3ab2eac"},{"name":"_appok","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 04 Oct 2026 22:40:29 GMT\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3600, stale-while-revalidate=604800\r\nx-fe-build: sep5-gatediag\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ycrehweSvPPAdhhRUdAGe8HPXcqmLh900%2BZAp2KwV273Hl2xii7LiecW9r%2BOozYPn6JLK8oWanlh5bv6TFBvmNINZeayO22hv4q0ek%2FjGQ8FmAgQZeLpuWWJpP7uEzE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a457b0470d495ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":1451,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50679c0c5e3ed56d05c1d0ed312419a7","sha1":"f9ea27ac71a78da2d61e14b84ea77ce447920d9d","sha256":"c164e1ea36438d14fea9b88996d154275a4c92fd80bfa082c7e00a343f241147","sha512":"163d4097d60ecdcf58cd01ea828e74491b0e27fcf3d40a2e7c56e6c90042d6d9a9b6cb18825052caf8799836ad35a44c1c88ffd2c35ce5d888d23716c27dd0f4","ssdeep":"","tlshash":"a4312e9e77fea185f448e7f8023999b932d36cd33a04d8282bc00c02e98091e9c9588b","first_seen":"2025-09-26T11:40:39.971586Z","last_seen":"2026-10-06T02:40:14.600478Z","times_seen":22447,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"mgmvegas.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"mgmvegas.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk.mowell.tech/tracker/retrievalbbg?pixel_id=906955588677310464\u0026callback=getCachedBbgCallback","fqdn":"tk.mowell.tech","domain":"mowell.tech","tld":"tech"},"ip":{"addr":"141.11.124.140","port":443,"asn":206286,"as":"1 of 1 Servers Corp","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mgmvegas.fun/","date":"2026-10-04T22:40:29.639Z","timestamp":1791153629639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mowell.tech","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 01 Jun 2026 02:50:47 GMT","end":"Thu, 17 Dec 2026 02:50:47 GMT"},"fingerprint":{"sha1":"9B:29:CD:43:F9:84:84:A6:8E:00:6B:A2:D4:02:66:0F:00:8B:D4:04","sha256":"8F:C4:58:4C:B9:75:32:7B:89:31:7B:4D:BE:06:12:45:C3:C4:1D:16:78:CA:B1:CC:74:2F:7F:27:DB:B9:D0:8D"}}},"request":{"raw":"GET /tracker/retrievalbbg?pixel_id=906955588677310464\u0026callback=getCachedBbgCallback HTTP/1.1\r\nHost: tk.mowell.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mgmvegas.fun/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 04 Oct 2026 22:40:29 GMT\r\ncontent-type: application/javascript;charset=UTF-8\r\ncontent-length: 24\r\nbigotraceresponse: 00-024940c5a9f1dbdd6566a6d6b6700225-0-00\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: token,content-type,bigo-appid,bigo-uid,bigo-device-id,bigo-host,bigo-uri,bigo-hash,bigo-cookie,bigo-signature,bigo-auth-token-uri,X-Auth-token,X-Client-Lang,requestid,common-ext\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":537,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b6fcb6fca05021484e4e780e166e4977","sha1":"30ffa2ea4e0d40f0ac9b51d82b45ea7011233cd9","sha256":"895ec6360cf43c4b16abdaf769abb237236ac1bedad698623e3fb7192e6c221b","sha512":"4b4399cb20822006af6ce4364b3d758cc0fbc1b25f0a292f3d20631ffe6883c7c8fe58d91e16e62d890ba1566f2856fc8d49ed0a8ee1e72ad27be42c85bd1bec","ssdeep":"","tlshash":"1f7000800a020e000c228322a83222b0238820000c88080008a2038b080000a8a00300","first_seen":"2026-07-29T04:43:37.850162Z","last_seen":"2026-10-04T22:41:04.717365Z","times_seen":5,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk.mowell.tech/bigoad/trackingview","fqdn":"tk.mowell.tech","domain":"mowell.tech","tld":"tech"},"ip":{"addr":"141.11.124.140","port":443,"asn":206286,"as":"1 of 1 Servers Corp","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://mgmvegas.fun/","date":"2026-10-04T22:40:30.701Z","timestamp":1791153630701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mowell.tech","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 01 Jun 2026 02:50:47 GMT","end":"Thu, 17 Dec 2026 02:50:47 GMT"},"fingerprint":{"sha1":"9B:29:CD:43:F9:84:84:A6:8E:00:6B:A2:D4:02:66:0F:00:8B:D4:04","sha256":"8F:C4:58:4C:B9:75:32:7B:89:31:7B:4D:BE:06:12:45:C3:C4:1D:16:78:CA:B1:CC:74:2F:7F:27:DB:B9:D0:8D"}}},"request":{"raw":"POST /bigoad/trackingview HTTP/1.1\r\nHost: tk.mowell.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 446\r\nReferer: https://mgmvegas.fun/\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://mgmvegas.fun\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":446,"data":"{\"it\":1791153629454,\"title\":\"MGM Vegas\",\"referer\":\"\",\"resolution\":\"1024*1280\",\"lang\":\"en-US\",\"url\":\"https://mgmvegas.fun/\",\"host\":\"mgmvegas.fun\",\"cookie_id\":\"BA1.1.8825451882.1791153629\",\"session_id\":\"BA1.1.8449882264.1791153629\",\"pixel_id\":\"906955588677310464\",\"timestamp_ms\":1791153629474,\"extra\":{\"action\":\"init\",\"configId\":\"906955588677310464\",\"wst\":155,\"drt\":461,\"lgt\":932,\"b_version\":\"v3.11.0\",\"from\":\"bigo\"},\"event_extra\":{\"event_from\":1}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 04 Oct 2026 22:40:30 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 126\r\nbigotraceresponse: 00-c6f2695dc7d69af726431fbba84176b8-0-00\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: token,content-type,bigo-appid,bigo-uid,bigo-device-id,bigo-host,bigo-uri,bigo-hash,bigo-cookie,bigo-signature,bigo-auth-token-uri,X-Auth-token,X-Client-Lang,requestid,common-ext\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":126,"size_decoded":628,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"66dadd3ae739ca581b242059298343d8","sha1":"786ef597af00de93d0b0e25e0759de80211b41cb","sha256":"77a4311dba6d6ee3130286e229204273cedd876c19ef6c1f0bce03d8807afa5f","sha512":"eb72a5c57642103f62269c84aa0640e3df6cd349109e6cefd325151dc60020b1424d615fd27e517ebdeb2fb5a7a9e40ddfb22aad15f6331c5a57ae515fce5f3c","ssdeep":"","tlshash":"ccb092d3b28905a21c73b209522a1bc8624f02922e684a00c94917a9b96b19ba2cd874","first_seen":"2026-10-04T22:41:04.717962Z","last_seen":"2026-10-04T22:41:04.717962Z","times_seen":1,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmvegas.fun/","fqdn":"mgmvegas.fun","domain":"mgmvegas.fun","tld":"fun"},"ip":{"addr":"104.21.52.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-04T22:40:28.574Z","timestamp":1791153628574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmvegas.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 10:48:00 GMT","end":"Wed, 30 Dec 2026 10:47:59 GMT"},"fingerprint":{"sha1":"28:6D:0E:74:7A:92:FC:42:07:61:23:02:87:96:E2:77:C1:F8:E0:51","sha256":"73:56:A2:1A:7F:35:C9:F0:E0:AC:96:42:7B:A1:B5:BD:52:38:28:78:6B:F6:52:9C:21:70:DB:33:F9:B5:1A:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mgmvegas.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 04 Oct 2026 22:40:28 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nset-cookie: _vid=muuemh383fceb3ab2eac; Path=/; Max-Age=31536000; SameSite=Lax\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BlV4EXDmD7bGKxZtXkTEKj9tZIXOxZVxfobFh%2FeErFErp40%2FxBhbDlBJyCAr81Kzo1BjZxDA9s6x%2BM9VmtlbNlvL2LUOVGAZxgGJUMwI0USOFYf4zs78kAqIBy1W0Pg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a457b042cc455ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"_vid","value":"muuemh383fceb3ab2eac","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"_vid=muuemh383fceb3ab2eac; Path=/; Max-Age=31536000; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136468,"size_decoded":33036,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10228)","md5":"db46b11c4ebed6ca1acc77bb6c6795bf","sha1":"6f09706177978c2b9ea1935de7e0ad7bd4308dfb","sha256":"be8d4232372509bc37b7211df8d62894079804be6cff68c864d420ad849ee160","sha512":"3f227efc94962a328bcfa7300244a67db89536595314525be6b17bded35cd3fdce4c4dd8a6f2a6f41cdcfb04b6143cd5d70e8aaf9bdb345056651f27f95cfcb8","ssdeep":"1536:L0tvkd/5S/0oZHwXz38Z+kaywm9rTR8ijlE9ITyjQbWA2SlW9aiw:AtvkB5sRMkm8rTyjQbWArhiw","tlshash":"21d31963b190603970b3856664b73bad347aa003e6468db4f5acb6744fc5ed70b72f88","first_seen":"2026-10-04T22:41:04.718933Z","last_seen":"2026-10-04T22:41:04.718933Z","times_seen":1,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":4,"connect":21,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"mgmvegas.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"mgmvegas.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk.mowell.tech/ad/pixelfile.html","fqdn":"tk.mowell.tech","domain":"mowell.tech","tld":"tech"},"ip":{"addr":"141.11.124.140","port":443,"asn":206286,"as":"1 of 1 Servers Corp","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mgmvegas.fun/","date":"2026-10-04T22:40:29.463Z","timestamp":1791153629463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mowell.tech","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 01 Jun 2026 02:50:47 GMT","end":"Thu, 17 Dec 2026 02:50:47 GMT"},"fingerprint":{"sha1":"9B:29:CD:43:F9:84:84:A6:8E:00:6B:A2:D4:02:66:0F:00:8B:D4:04","sha256":"8F:C4:58:4C:B9:75:32:7B:89:31:7B:4D:BE:06:12:45:C3:C4:1D:16:78:CA:B1:CC:74:2F:7F:27:DB:B9:D0:8D"}}},"request":{"raw":"GET /ad/pixelfile.html HTTP/1.1\r\nHost: tk.mowell.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmvegas.fun/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 04 Oct 2026 22:40:29 GMT\r\ncontent-type: text/html;charset=utf-8\r\nbigotraceresponse: 00-e9e5975e43b91f3e7e7f58135b7cfcd1-0-00\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: token,content-type,bigo-appid,bigo-uid,bigo-device-id,bigo-host,bigo-uri,bigo-hash,bigo-cookie,bigo-signature,bigo-auth-token-uri,X-Auth-token,X-Client-Lang,requestid,common-ext\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3419,"size_decoded":1816,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"b17c49209ebd6f929716daa7d9f696b2","sha1":"43d0bc2b26836331b1ea86a9221a1cad1df3c988","sha256":"d778c8275424390327e02ad86037d83942622f7064e65a77baafffd51211abf7","sha512":"719ee4336bfade5b09b3fcd0fc7ff4af92b45ffdd0669083ddd68ae28b84201969240cf1c89f7163091f1d31a38cf46a70e51c1a83058457d199e540708adc3e","ssdeep":"","tlshash":"1b612f9e9ce784a600f7202d2f9f721536a39093102dde447d4ca7824f60e378daa3d4","first_seen":"2026-03-14T07:53:26.479798Z","last_seen":"2026-10-06T03:28:41.290231Z","times_seen":498,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}