{"report_id":"54a6ca47-252d-4889-99e9-0b713f0afb67","version":0,"status":"done","tags":[],"date":"2026-08-07T09:07:53Z","url":{"schema":"http","addr":"zenvorix-luckyreward.click/","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"title":"Sizzling Hot Deluxe","dom":{"size":559183,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29689)","md5":"c520d9555eca720b77708234c767e16f","sha1":"1810e1ca816da45926efad9a950d48f7fbcc41a8","sha256":"b9f9a8a63af8e0fa5d26db0a046da24794ec7645683a8a00e9a2b6f1ad1d32f5","sha512":"b0abb8ec2463d2e0a6726fbe91e397087396d5b6d3f2e714d1e9565931ddcff2ee0bcba60dc4791554af2ad8859f567b9002db149a8c3ddd31581f18d3ed0a1d","ssdeep":"12288:3yfKnKu1vSr9xSQoNyAAKu1vSr9xSQoNV:9nn1v+9xSQoNyAAn1v+9xSQoNV","tlshash":"d8c4bf20acf654370183d0c22e669f4a6ee1fa03964b8741b7bd87d46fdad8aed0745c","dom_hash":"domhashf2222295bdc652850893349c13d9e45a","first_seen":"2026-08-07T09:07:56.983024Z","last_seen":"2026-08-07T09:07:56.983024Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zenvorix-luckyreward.click/","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-11T09:07:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"easy-image.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2024-10-22T20:51:12.623208Z","last_seen":"2026-08-07T08:55:37.696546Z","alert_count":0,"request_count":44,"received_data":1997362,"sent_data":24821,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"zenvorix-luckyreward.click","ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-07T08:55:37.030535Z","last_seen":"2026-08-07T08:55:37.030535Z","alert_count":62,"request_count":31,"received_data":1776889,"sent_data":30041,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11b181aa0039c7b370507f511fce752b","sha1":"54db509f4ec5de178ddc84a8a8beaebc0200f8d3","sha256":"2a90c5d1638ceb81ee1374d8caa2d9be4bf02277bbab484f9e1a3db852a2026f","sha512":"42fbcd4f7e1e721870dd3b900686197fc820fde53f3987de1f4ef497086dcd16cba8a9b102d353394ecd0bbba88ec08e086dc21b217bbaa1108c6bbefca76682","ssdeep":"","tlshash":"848000080aa302a002b33a30322baf00323a808002800200a880e22b28238830a820a0","size":29,"data":"","first_seen":"2026-08-07T08:55:42.421488Z","last_seen":"2026-08-07T09:07:57.024765Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"429cdb0b708825ca70cfbecd46a784c6","sha1":"c86c1305ca7d02f3ef706d1a10e1b69249a8bc77","sha256":"fd550a3040e2a3f20a70dcd9391d03d743baa201a1067c853428247a27b485bf","sha512":"c4179a098594dcc5273e078654ea45c2b1a0c7e5633eeef39d8a5a5c9695872c42aa2673df482c19f552c8dd6ae8f07d2b75ba66a450aa013b8bb719766f73e7","ssdeep":"","tlshash":"aa8000002e020c2b32f32cba223aaf08a20f80020b020800ba80c2bb280300302003e2","size":29,"data":"","first_seen":"2026-08-07T08:55:42.422926Z","last_seen":"2026-08-07T09:07:57.025532Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ecddb3cf770d96ae10479438d0f285e5","sha1":"e65a257b71d9166b74c1454abdc80006bfc12646","sha256":"bf81674abaaf0cb82f968c56d6b4af3f68599f5dfdc7ab41f5c07591b096e0d5","sha512":"3abd74e4e67312f847113e1ef9e0adee18c630cf34d21c1439a2c3775b587aca32476505a89904049598567af4fef882e55b96d52ccc5e7b42039e2324b23ad0","ssdeep":"","tlshash":"448000002f020823a2b32c2a223eaf20a30f800a0a000800aa80e03b282b00302203b2","size":30,"data":"","first_seen":"2026-08-07T08:55:42.424333Z","last_seen":"2026-08-07T09:07:57.026152Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"230bb8ccc497dd96309abb995fef4031","sha1":"0269939db434cb46118fa6b0ae802bf935963d81","sha256":"2841551c92374559286f1db761324e29d6cedeced8e84f6b3fd14e678f3b90fb","sha512":"b3b2a78aee755e59371ac460c21f1c409a166a8a69031538105cb35d03e2a0f7e8379034ca8f34bd3044f0dd36cae0ef5ebaffe79e3282742d7eeecef27e71b2","ssdeep":"","tlshash":"e48004050501037d0173155153533f00173573404d100040d440c51734430330510454","size":35,"data":"","first_seen":"2026-07-25T05:49:00.166915Z","last_seen":"2026-08-07T09:07:57.02677Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d09fbc327990b7706a6e4cc06194a4da","sha1":"c0a845bce553438c0ff61e8377b4a3c1bbf185e1","sha256":"7859b7e646dfe26c8adbb9e2038c02f737a3a26cd9c1f38f88d289694fcefab3","sha512":"5f46a448e72f6fd68c0050d20151b37b413a0ed0bb7f80960175aacd15b58a0fd5f45dfe64b88c8c02376ead894c08e5c0b20fb6c5cf875e5dc71db83bd0d21a","ssdeep":"96:wzM3BAEtkPJAVt+SwHe3/rQrH56uxQIsASffRWOh17bTA09A0gRST:wY3BAEtuAVt+SwHe3/rQrH55PsASffR1","tlshash":"f4c1e04c40f3a1a209f761bc5b4f6225b57a50133509ce847e6ccb806f59f2e9af26de","size":6077,"data":"","first_seen":"2026-08-07T08:55:42.42695Z","last_seen":"2026-08-07T09:07:57.027382Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97a717da8ebf63780899f410c2b7c245","sha1":"62d14930710ab932c733ef266e97797cac5f0ca0","sha256":"a1f6f441f1f4d434e1070cf4585fc3a7f7bd7ffac25663bdc4650280fac2ebe5","sha512":"089d92bb2bf915d4eb255a4c33c2445c6fce7a68bf147756c1d61a3fe22d1c07c3746fa54317a2c4205a5729ee1303e6276465252a35fb7fd5bf5a042c883d8a","ssdeep":"","tlshash":"1901237d1895b0e633f93975d65b662d72fa0b103001d4049d65c0003c7dc6b1c16ccf","size":677,"data":"","first_seen":"2026-06-24T20:08:35.142067Z","last_seen":"2026-08-09T13:52:39.474222Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/main-function.js","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c66a3e6a336213c01aaa1639954048c","sha1":"51437752dac52904d6e4e0fdcf1024297fc8bf43","sha256":"fd618814f8eb17c513033bf3bb2603c25fdadd187479446e4aeaec04b77c7c03","sha512":"33c8fd74e7dea05f46efb6fb9208993c4aa69eee975f807d405dc2584d25ca9325d92f3e2c18bef818d2fdd2ed80a92677373e634c799ec6f872054bf8c75767","ssdeep":"384:SHh+xRlYlTlLoU/rBH29P2Ih7BoxesD/puVS7lefp+n7kxwJ5oAVRap+dgTTS4/i:SB+LlYlRR/929MtisEw4LTQrXsZbKd","tlshash":"65e2504c66fb01268267b06e4f8f51143637a00b385dde287e6d4b806fd192d81e6feb","size":32173,"data":"","first_seen":"2026-08-07T08:55:42.336442Z","last_seen":"2026-08-07T09:07:57.012068Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/uaParser.js","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fae74f6b710e428ad5ca0378fc339859","sha1":"0d8f92bc5fcfb0ef72ee329f0a0763524443b5bd","sha256":"9735a83f5152c01eefe3ca9457e3b440502b60246d60f232196eb36c126f2125","sha512":"092f093612174c0f84c491a2e9ff03b4ee160ae90aa16ebd5f83e80a7c128efb6e8099629c9c88d7a330f9313a1a3d78e561d295b4fdb446dd18266fe75e46ff","ssdeep":"384:69M5d42wb/6iOD0tRqwkdZISkzVBv2ETttl9rsATHskN:69CKyzDYRqZduSAZ5tl9rsAT1","tlshash":"0b92da3ed365bf2093bee589c51790002d3a5c3adb41b0f99ae4b540e8d6db1129f7b2","size":19383,"data":"","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-08-07T09:07:57.005137Z","times_seen":288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/reviewsLazyLoad.js","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"205197aa6d691dd228f197aa9d4115f0","sha1":"e9c9c886cc3209eaad1e522cf8e7d3f01d2903a4","sha256":"176ca8d96461c63d4f054becf7d443c9f45f10e5e2461be2a6364f2e216b628b","sha512":"b2223d578957c6e0435ed8c976d49478e22d520bbb5a20c3b3da589cba0973f7cfa076c237524cae25b4c1bd6f8dfd25a2451b13d0c69dff2ecb5b132d70ffa9","ssdeep":"192:Iq+mVwgeuAu9F5prXMjQpUdeUdnXcYLtckCD+fUKPQx4iH9AMOSN5kp29HSnuQLr:IBswSAi5pM/79vLtckURdHkkpc","tlshash":"00529324319361366213e0ee5a8f5355b934f2133207c818b64d975c6febd2d83aaafc","size":14481,"data":"","first_seen":"2026-07-25T05:49:00.113621Z","last_seen":"2026-08-07T09:07:56.985263Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/sendUpdateLead.js","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c06b9a540ab015bd9ca9046e3171308","sha1":"35ad10e82d8706e6bac97d6c83cce7bcbb39dd77","sha256":"87d664d15256da8723382824060f211a581d15d603c3d2cb5aa9665eff1c04fc","sha512":"8edc39809aa80b36ba48ca299cc2c9a1959bb0bf810071b4a54e8bf16ffc4cd0af060ab67ed82642cc41470b725dca1164e8b8d35c4ec50ece3dc55dc2245787","ssdeep":"","tlshash":"1f71334468a775c964f320a997df114ab1b6406b10a5d0447c0cef44afe4a3e2afefdd","size":3704,"data":"","first_seen":"2026-08-07T08:55:42.381714Z","last_seen":"2026-08-07T09:07:57.007954Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/prompt.js","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44ebc534ff78e60f1b65bf973fce02e0","sha1":"cf48af00a3fefee9965b4ac1b8857f4036a2a252","sha256":"ff398de885567f110214c619e2421fd329a9aa4b873f2480a953acc6cc61f898","sha512":"6bd669dab5a3c5daa5e34b892b3a7b156afea0bec86c91ae9ce6b46946300a65ea26d2fb8edf361bd89739f377457a12b5f93b07cf193be60a8e862c0bad8518","ssdeep":"","tlshash":"cdf022200baa18b1a01b336e8f1f1e84233174a72d225d203d5d4c8dcf816a842b2be7","size":453,"data":"","first_seen":"2025-11-01T11:14:12.483716Z","last_seen":"2026-08-07T09:07:57.011608Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/firebase-prewarm.js","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"98f6624f3b06d19e150a3ba54c6aea64","sha1":"5d048957e7d4d912a918520e5f266481007283d6","sha256":"56d236c1f22ec636017694031d58e458d3a53ce2ba4c06c76626c5189220094b","sha512":"0937f3065b315946f17a02d30991c7f62e637badc12fa26a6e7a68aec12d97c8fdd91d4effa092bc41145df86c8b8f14ac8c4560c1ebdc8cd2e6efcdcdea69ae","ssdeep":"","tlshash":"4f51fd4a599bb06b4f2370beca4f6105f5bb000b4d0ecb05795eaa615fb267403b2acd","size":2474,"data":"","first_seen":"2026-07-25T05:49:00.120428Z","last_seen":"2026-08-07T09:07:56.990002Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/translate.js","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99c0d4f9a645bf2c48bcf1789692ff1a","sha1":"90ccdd603c5035a69c77d340db76e503d6efb48c","sha256":"5d8725968df266c2a1d0d513b9e02a52d2c68ea48b23733a5b7103dbe1abca87","sha512":"04cbbe9e8ecdae18b08e3a21264e15c37efd00313e7f9cb5847fa681c25a879657e82d2a6938e17fe32454849503612a226ebd1f5dd2d9e133228fc58270d98e","ssdeep":"","tlshash":"5271974cb0f2010d5993b02efbeb6895b224985b0265fe183f5e45436fe393dd39e689","size":3637,"data":"","first_seen":"2026-04-10T07:45:47.001447Z","last_seen":"2026-08-07T09:07:56.993492Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/jquery.min.js","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-08-20T14:18:03.492198Z","times_seen":31190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"jQuery.Deferred exception: can't access property \"toLowerCase\", language is nullregexpLanguageBrowser@https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/translate.js:17:36\ngetUserBrowserLanguage@https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/translate.js:22:25\ninit@https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/translate.js:7:14\n@https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/translate.js:90:15\ne@https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/jquery.min.js:2:27028\nDeferred/then/l/\u003c/t\u003c@https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/jquery.min.js:2:27330\nsetTimeout handler*Deferred/then/l/\u003c@https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/jquery.min.js:2:27594\nc@https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/jquery.min.js:2:25304\nfireWith@https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/jquery.min.js:2:26053\nfire@https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/jquery.min.js:2:26089\nc@https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/jquery.min.js:2:25304\nfireWith@https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/jquery.min.js:2:26053\nready@https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/jquery.min.js:2:29112\nP@https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/jquery.min.js:2:28884\nEventListener.handleEvent*@https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/jquery.min.js:2:29264\n@https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/jquery.min.js:2:220\n@https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/jquery.min.js:2:225\nmap[type:undefined]","filename":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/jquery.min.js","line_number":2,"column_number":28648},{"level":"log","text":"ServiceWorker registration successful with scope: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","filename":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","line_number":10,"column_number":27}]},"http":[{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/crown.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.627Z","timestamp":1786093645627,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/crown.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 81760\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67b7cca2-13f60\"\r\nlast-modified: Fri, 21 Feb 2025 00:45:22 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 884\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/07/2026 14:30:03\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 670af711d8d0836b74be2b8e4d79aa5c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":81760,"size_decoded":82696,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"848fa1f789169a626828a82d9c0d76da","sha1":"ab94e203b562c6f3f6c7c3f93745d87f54aa8205","sha256":"3d8ec7c466455386a1af7488b118b645800e00ba6a9b0a6eb46ef13f4a907736","sha512":"8eea87de5e4b47e3c6701bafd749d6f54cdfbb94352e84d8c9616f8d11f3b8cdfd20744c7418d5860f7568cccd4adfd678cb55e5275a0e8855101c15cfdf519e","ssdeep":"1536:h7G/vdMLpvhG75VT8oLBO03c5Bm7wCvojoeh3R:hnrs5VT3O0s5BRcI","tlshash":"fb8302122f6f791bd54a62fc13d71f1132199f10a3d15cae4ee237022a5b096be35cae","first_seen":"2025-03-26T16:41:42.41338Z","last_seen":"2026-08-07T09:07:56.984154Z","times_seen":64,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/zeus.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.636Z","timestamp":1786093645636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/zeus.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 136852\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-21694\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/15/2026 10:15:26\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6e60c8413a7dd06774069d570d64a13c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":136852,"size_decoded":137789,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ea40266545caa22557c38d644075dd6f","sha1":"15c73b4fd8ec8182caa19db4361fedb248ed37d0","sha256":"149221b0e9dbfc51a1c26bce5cc7938ba8aba81f45edf42d2457a111d6b1e07f","sha512":"4333ac13d48c21a5d2032de6b63ee13795db53efb38f5aa79e148d8a687a22cb833a1ea3ea9c79cd91604794e9ef433193c548886dd8ee417410c751e5317a52","ssdeep":"3072:hHfIdAMQuTI0wjLlm/eg0hC3IZy9CY5nuyhfXjOpEtfM:BfIdAMn6ueBaIZy9/uaPapE9M","tlshash":"39d31242e102d104e791b1b348c88f27a1fb75393c1316ea1f7a4ade45f7b8a6a5f1d4","first_seen":"2025-08-04T09:14:47.347312Z","last_seen":"2026-08-07T09:07:56.984683Z","times_seen":62,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/reviewsLazyLoad.js","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.655Z","timestamp":1786093645655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/js/reviewsLazyLoad.js HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f4ukk%2FY6rrs0kwwRRb0zKdtZXE3Bsc1g5QK3uR37Ul%2F%2Bn5zPMQOTpEXPirTzx3Vacg6qKnsgLs9dYy7Re5d0GeBLzmQ%2BxLZ19QWzwgiGKu98vCpF8FK108WR2ECOSUXq1P38Rw0CdFYUevI7rw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a27521855e3b0b45-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 843\r\ncache-control: max-age=14400\r\netag: W/\"6a71ee27-3917\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14615,"size_decoded":6116,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"205197aa6d691dd228f197aa9d4115f0","sha1":"e9c9c886cc3209eaad1e522cf8e7d3f01d2903a4","sha256":"176ca8d96461c63d4f054becf7d443c9f45f10e5e2461be2a6364f2e216b628b","sha512":"b2223d578957c6e0435ed8c976d49478e22d520bbb5a20c3b3da589cba0973f7cfa076c237524cae25b4c1bd6f8dfd25a2451b13d0c69dff2ecb5b132d70ffa9","ssdeep":"192:Iq+mVwgeuAu9F5prXMjQpUdeUdnXcYLtckCD+fUKPQx4iH9AMOSN5kp29HSnuQLr:IBswSAi5pM/79vLtckURdHkkpc","tlshash":"00529324319361366213e0ee5a8f5355b934f2133207c818b64d975c6febd2d83aaafc","first_seen":"2026-07-25T05:49:00.113621Z","last_seen":"2026-08-07T09:07:56.985263Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/92.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.671Z","timestamp":1786093645671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/92.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21446\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0553-53c6\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:23 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1029\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/06/2026 17:48:33\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5be892c0fb518e709e4da514a8ca6394\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":21446,"size_decoded":22382,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 228x342, components 3","md5":"dffb632cb6455976aba38c5504c124ba","sha1":"45863a0a4db16945e320748f50513a41b42efb30","sha256":"e6f7b5f54603a810432d573613e51fb7ee16e5d53ee12b2b3bbe757f209f8d15","sha512":"f9666938047156dd8fcb44f7a1d01e1b901c4ac23347cc40ea702cfb9f6f40db32207128fdc815f764f90c807be2d729229fa841f6a1d0d477eea84eda2fa610","ssdeep":"384:rPzy2XthpRnCEbUZQWw5z1Jz6psUFHI3lc+GQyEtD8p1U6ciVkS/pGMNCTvWs++H:r22XthPbUyWKqvgc+G8tD8A6t/pGn7H","tlshash":"efa2e15556d60fe02900932b8cd60a8bcb3c4179b1c3fc9d5086cfce6ecbb9a0982f59","first_seen":"2025-09-24T04:03:22.003113Z","last_seen":"2026-08-07T09:07:56.985777Z","times_seen":14,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/49.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.675Z","timestamp":1786093645675,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/49.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16944\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed054d-4230\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:17 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/06/2026 09:02:23\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a7406f5e03ef4938731135c67dd33a40\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16944,"size_decoded":17880,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 312x251, components 3","md5":"6b7c1c326bd95be01ba8457a8ecb0880","sha1":"b6d816ee8306c41945b42e2297b36fa66945fcbc","sha256":"fe91967710f4b649541fd8256dad1769bbc3ce0980334948d1c5119d16625f4d","sha512":"1475675b2dc2f75e82bd87db3fd2f610205d10ba6857d53ee400c9493f14a5986c9b982b7354e1de11a81993eaded7d556640c4d57cdc9e0c0b6fb07966e867e","ssdeep":"384:eJh9HsY3Dps5N7qHn92o7B7K+S3xkIX66K4Y9OAIe+tSAWJ4Ev+S3:kh9MZk92o17Kz3iIXvKXcAMtG4MJ3","tlshash":"c372d09d1e8034c7ea30657f542ee3855ddaf6437a916d4702aa43fcbe170e262a062a","first_seen":"2025-08-04T09:14:47.391428Z","last_seen":"2026-08-07T09:07:56.986318Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/49.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.695Z","timestamp":1786093645695,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/49.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23111\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0466-5a47\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:26 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/02/2026 12:22:29\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7a12c3057fe487621ba2bbe5b9346088\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":23111,"size_decoded":24046,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 307x451, components 3","md5":"751cad703f7f512cc861640105adbf1d","sha1":"362b4c3df16316a2adf527d74a89a0331fb146eb","sha256":"766faadd0d13d55353a0ae9a813b1a0e7b45ca835e6554b5d8c4dd38424b5f7e","sha512":"48e204bbb207c3c39b6e23ed75b0fa00a977b75796fb384d03dcdf32a65a726b9f223c10aaee4035910bf2a7b77a0a796368802155472730d25750b03ebb2f55","ssdeep":"384:1AbRRgpJsnFbRfu/q1T4ZMH+HjCeHIVWzM1Uc0xClL2QIxYMr0hmoh5w:EHgrsnbZJ4ZDHjC4I4zGwk9er03o","tlshash":"56a2d0625111d1d04b664134bece92608e81f09cb7f6031f74d62ed228dc6f990abb67","first_seen":"2025-04-20T09:00:58.012301Z","last_seen":"2026-08-07T09:07:56.986851Z","times_seen":37,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/85.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.713Z","timestamp":1786093645713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/85.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18523\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046c-485b\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:32 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2026 14:39:03\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7d0841af38ddcf0b192fcce99a21e60f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18523,"size_decoded":19458,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 313x208, components 3","md5":"904ce4bfde4b80b898fb8b303a75fa3c","sha1":"d55383009dcb5fa340ed701710205215e408c3c5","sha256":"16810ba10da9f16c49931a9eb157152067c7e039ac7338615823a59d285e09cf","sha512":"81fa121c348b835336ea59f4e0fed4dbeadf29100cc1ab6bc81705918d4c3249d5f2be4cbd2abe4152c396e3d92f144376f82df20b6c41a803b4d5a17d659cce","ssdeep":"384:iHzfa7c2AjXBKN4bLDtL06oigB5DaAbmC1NGxRRGX7d6ufoRhqeH5:iHmw2AjRf+6KVamn1NmLkUcoRUeZ","tlshash":"fe82d0b3633f7113ecfe0cd7364907588b88a34d61f15c0a64a9a0fe5444c8aaad2b65","first_seen":"2025-06-19T06:56:57.164204Z","last_seen":"2026-08-07T09:07:56.987421Z","times_seen":26,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/style/style.css","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.393Z","timestamp":1786093645393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/style/style.css HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnAmk2Zh7912TkFgFF%2FB5ABbcReLISyiSfEpxsphn9x8Ra8wgqCbt4eVRJaNFrRTl8O1biuNFteRuLnQhwdCdIXBA5RGlnScCoCjZi7hKiInIhvQ%2Bh6l7Qtfwt7f7p6l7fAPYbfXKpnMDyoxdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: text/css\r\ncontent-encoding: zstd\r\ncf-ray: a2752183be1f0b45-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 843\r\ncache-control: max-age=14400\r\netag: W/\"6a71ee27-8c02\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35842,"size_decoded":8890,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"672be63be984e640047ded4e0755cace","sha1":"7d90283dd50230f63bde0d19cf649020fc6b1856","sha256":"953c0c0aad55de84b096497e5e46fbd7b0086354f30950158368dd6473ada13d","sha512":"f81e4d7e6e122e40ef78e3b4d0ec3e665f0db3037193775232e3089584618d45971ae4bc18c2d52f2399774b20ea47fca7ce821e635eb863fc83ad89ad0ab446","ssdeep":"768:XyyOgh0FwE92m14JEtPeqFcFTTDiC3LcUOuFZBpXFVWM/wprtzP1NyNEFHwVBeYn:Xfh0m0X6JeeqydTDiGLlzjXzWKwprtzk","tlshash":"1bf25182957429247917d8457e63af91333da183820ed9b8fbd4306cdfca3d59852bce","first_seen":"2026-08-07T08:55:42.37373Z","last_seen":"2026-08-07T09:07:56.987777Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T09:07:24.557Z","timestamp":1786093644557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Fri, 07 Aug 2026 09:07:24 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xBMFhIQhPZvHCr8uTt0V20mGSUGuRh8KZq1BIcV1G9ZOEyM61bYeuPFNpZyNBVY4JPSkTpNqnGC%2BweZ%2FSwq1Hf%2B0aRXVug3SUBM%2FxcXxdMfATyRvUCFMMU1HTkSHVKxPf8CBEdkKzV77nL8DCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a275217eedfa0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T14:30:40.349614Z","times_seen":17992333,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":54,"connect":15,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/images/screen_3.webp?options=content","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.607Z","timestamp":1786093645607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/images/screen_3.webp?options=content HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a27521850e300b45-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 843\r\ncache-control: max-age=14400\r\netag: \"6a71ee27-11286\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WPOUReHpL03guqd3lyERT%2BtlL4QoS860RbgLjW4qXqEiKbBsN3dEgBx9e6c2QfYCUV8lIxCvZAps2vV%2BtfpNs70b7S5cOWB4FrKZRTCITB%2Bq8cyGrT3Yxyy1UwgMTgHQNDWvVRfYEaskS64wOg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 70278\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70278,"size_decoded":70996,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 557x941, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"31bdff6c6ace3ebf7e15ca55f8b6226a","sha1":"eb3cfd267826942fc34a909158dfafd77c0b391a","sha256":"791acbe22d5be5a66dfeaff06c0c93d63619fea360e95353378129c8eed62e59","sha512":"d6bbb272072b3209946a84fcf99aae4c485370f41348328428131a62f7150c9af627926930df58e1c8973d4fd7483590d78e84e82fcf56bbc92f2ff8451b0e21","ssdeep":"1536:nWhYxSxP0zdTiFAyUlT9WtAq3P5EQssuPEOQge4ZBtMbMUC0jO:WhYxyP0p+T898lyQsFtv3Ka","tlshash":"6e630200842a580b6cbfbc22d52155f1c3ffeab759d351a83fbce5a0122db98835569b","first_seen":"2026-08-07T08:55:42.343453Z","last_seen":"2026-08-07T09:07:56.988902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/75.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.694Z","timestamp":1786093645694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/75.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19754\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0551-4d2a\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:21 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/05/2026 10:15:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9c76116958fefefdc8c88b1509c893c1\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":19754,"size_decoded":20690,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 223x335, components 3","md5":"5881c5ce2eab3223dda135a51a70305f","sha1":"6cfbd2b58b6c8d3fd4b110058903d022310d04d3","sha256":"542678a5dd8613e6dd2125ba1e5dbe20b24d55c363caae7d54b8ba9fa59e8235","sha512":"7f5b726e4af10da01f384e86003796a17271960faafc1fce4d1ea6ff66cf26c78a71acd5512f1779d7748b1ff6a129f5f46d12079675a9cf4eddbed35dccca53","ssdeep":"384:qGaFnQDXyLqzJx7y6NIR81lfYl2j33YHb/tQZwxjPfPte3lUJ:q9QX3zjw0dzkVxxTf1e3lS","tlshash":"6f92e1e0c1c09668b8f71fb9996301af760dbb80dd6364759c6821c6bd90dc59c5b7e0","first_seen":"2025-06-19T06:56:57.168711Z","last_seen":"2026-08-07T09:07:56.989485Z","times_seen":25,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/firebase-prewarm.js","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.392Z","timestamp":1786093645392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/firebase-prewarm.js HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BeVfMlMmUMPyNMHzKUS4hkWrkfiX0kVH%2FSlxPj0HbtniSQiOpjHbEAgFDMnK6ijFMgqDsaL%2FdnZRZ0vwqChjHqq86Vta%2Bb6UH1zmPX12bidTVk%2FFRAEJs2cfRmCydCboYkOcf2aDllLJrhEZUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a2752183ae1e0b45-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 843\r\ncache-control: max-age=14400\r\netag: W/\"6a71ee27-9aa\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2474,"size_decoded":1913,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (305)","md5":"98f6624f3b06d19e150a3ba54c6aea64","sha1":"5d048957e7d4d912a918520e5f266481007283d6","sha256":"56d236c1f22ec636017694031d58e458d3a53ce2ba4c06c76626c5189220094b","sha512":"0937f3065b315946f17a02d30991c7f62e637badc12fa26a6e7a68aec12d97c8fdd91d4effa092bc41145df86c8b8f14ac8c4560c1ebdc8cd2e6efcdcdea69ae","ssdeep":"","tlshash":"4f51fd4a599bb06b4f2370beca4f6105f5bb000b4d0ecb05795eaa615fb267403b2acd","first_seen":"2026-07-25T05:49:00.120428Z","last_seen":"2026-08-07T09:07:56.990002Z","times_seen":6,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/icon_star_black.svg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.601Z","timestamp":1786093645601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/icon_star_black.svg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\netag: \"67ae0046-fc\"\r\nlast-modified: Thu, 13 Feb 2025 14:23:02 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/16/2026 05:28:52\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 96c6c059e65f96d374d378e42ba18680\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":1130,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd7c9a36b018cd09c80d3c69bb83579b","sha1":"0b7c5758965fabcb509db70b94e2ecc62592a331","sha256":"5a29eb18c76586c2f55eedce4c2b46fa158df9148af71ade04a7934f9c5d312f","sha512":"ea7c5bd48d77a405845f935d5eaa3d373c246679f7404888b96d29ef2acfd38f64fe6fb54e75f77c6fc101f72310d6889a9d25cc95a6980dad9d7c1e7fa26f96","ssdeep":"","tlshash":"93d095752034da58cc55c651f2f75cfe6497d0db71c500c29549731170c086f4c59974","first_seen":"2024-10-12T23:01:03.367525Z","last_seen":"2026-08-07T09:07:56.990576Z","times_seen":178,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":10,"connect":2,"send":0,"wait":2,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/images/security_icon_n-4.webp","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.609Z","timestamp":1786093645609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/images/security_icon_n-4.webp HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a27521850e320b45-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 843\r\ncache-control: max-age=14400\r\netag: \"6a71ee27-c8\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NBvonDZZ%2FoOXsRVjSilySel18giHT%2FGYMp%2FCvdO2raJ%2FtFBELWESTrnWYMP%2Bv8fWUfpFnatePQMJ5AiTUYuGP3ExtEVO1PNfcw8VRIf%2Fe4YzsF3ovpDtSXYU8X%2Bpbyhb0R9yUGK3l2%2BBD%2BSf7g%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":925,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df61c422ecae7409b8697262192a44fc","sha1":"d402d28a126d995638a2f434ddbd2b276887b599","sha256":"329ad3c7ac436f964c7a8cfcc6a74c859b51cdabd8974a65f0836410b11f2dc5","sha512":"32b50246ff38917d79c18c2750fdddafd991ebb72f9b1eadf0ff928fa0f083ee1c6ba74f697549e50743e89e1e9fb547e666a895801669c7ac65219691492562","ssdeep":"","tlshash":"63d023089d27c1984e281f1d15b145941e748d547102836d1111c5d8e0304102e5698d","first_seen":"2024-07-13T05:31:04Z","last_seen":"2026-08-19T10:35:58.778668Z","times_seen":849,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/images/security_icon_n-1.webp","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.610Z","timestamp":1786093645610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/images/security_icon_n-1.webp HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a27521850e330b45-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 843\r\ncache-control: max-age=14400\r\netag: \"6a71ee27-23e\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hvCZ8hpuOYE8%2FV9yDTyUCtFvF0GoojVyXWmhPntGULNrJrlT8K7VpQ0vZKbiOHyQh%2BpLKdbpmonpsm3SLIyrUeVckRMPRs55UwrumRqlB5aOSGnMqb7wjXqq2AEtpaSbKtJDkSE8jFz%2B1lrSow%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 574\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":574,"size_decoded":1288,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"16735dee72b009f6085c85bf194c313b","sha1":"0f7409a79c4926442e1ed59d10dbb87f290ea0a5","sha256":"3244abdb32f757760de0676e5a5c71e45558014437b3e3f437efd110a722dd22","sha512":"d280b78c80f8541ca9617dd50969109b38c2488f125dab50b5fd5bcfe5329fbb7fe28f7f09cdd52df7deb65c1f147f2b071beab7ce23bfc39104121c142bd606","ssdeep":"","tlshash":"eff041cbdb8e2ee4238b68600da0191601af340281000a840e04682367a03f8b9dc497","first_seen":"2024-10-04T10:42:22.386228Z","last_seen":"2026-08-17T04:12:06.165314Z","times_seen":169,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/45.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.707Z","timestamp":1786093645707,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/45.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8276\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed054c-2054\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:16 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/12/2026 22:51:50\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a3646fc6786dde4da8892f38053566c6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8276,"size_decoded":9210,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 119x178, components 3","md5":"f42c3291b4af1e580b822578aad89b04","sha1":"69c89e91821e64c30d484d931e5fe34f3710f258","sha256":"8e71e7386dc194c67af786ccbdfcfed9b7fac1c839d6c86e75c0d28d01ff8026","sha512":"861ef448eda27845939480a34c6e994e93dcde216328bc0d5dfc3383c63433d8425eef928949b3fae4f3561162a53281342f9be48b0c60f654d120529823901a","ssdeep":"192:IQEET7uEehheNt7Hvpvk8iJgMlO0pjkzJZniU710zyQU2d:IQh7pehh07HvpspTlDpjk/np710bd","tlshash":"5602aec4cbda0388f7269076306892b57ce6b38f0a1817bd58b581cfee216029d65de7","first_seen":"2025-06-02T23:22:33.553189Z","last_seen":"2026-08-07T09:07:56.992062Z","times_seen":52,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/52.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.620Z","timestamp":1786093645620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/52.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8554\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed054e-216a\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:18 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/06/2026 17:50:30\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6f2d073785dbfecaf262c593a5eaaf58\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8554,"size_decoded":9489,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 188x125, components 3","md5":"213a4330a72d29eee60928838b77e7dc","sha1":"b2775c8b29c3778bc675946601300a182ad8ac63","sha256":"02534ae2fa33aa12a1509bc3cc790fde1941ca6d36574a8cb3cb5764cd900d93","sha512":"907e8f6d04e7ae80e4e93a229ffd5b9f66698fa4428b9723580c3f4c7cccac3a2ce849b061fd3925945668736b6c634894f673767ee3de32901b30102644290e","ssdeep":"192:GGbd3vWZK/x/ZKHcXTx91+b+jwbf5utdV1+xZKNK2:GihveGGPbrT5p0o2","tlshash":"f302b0567d56049af4ac006a8a3c66583e44c74f33b6d35b9580aef30d4a330ad7e2cb","first_seen":"2025-08-04T09:14:47.397398Z","last_seen":"2026-08-07T09:07:56.992962Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/translate.js","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.649Z","timestamp":1786093645649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/js/translate.js HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p1nsKJTkcR4ct3z93KGsCHpL6qjBGS69S%2F%2Ft7dZa5b%2BPU5RT9ucoUZ0tN3U6YBCTe17Zr2Gt70VzcCa%2B2bboF4VQ8Eeeo4S%2BvrCCynxEKcOqA885WXtQElxSr1366AqYcE%2FCtPYpMZzq8CIYMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a27521854e370b45-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 741\r\ncache-control: max-age=14400\r\netag: W/\"6a71ee27-e35\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3637,"size_decoded":1749,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"99c0d4f9a645bf2c48bcf1789692ff1a","sha1":"90ccdd603c5035a69c77d340db76e503d6efb48c","sha256":"5d8725968df266c2a1d0d513b9e02a52d2c68ea48b23733a5b7103dbe1abca87","sha512":"04cbbe9e8ecdae18b08e3a21264e15c37efd00313e7f9cb5847fa681c25a879657e82d2a6938e17fe32454849503612a226ebd1f5dd2d9e133228fc58270d98e","ssdeep":"","tlshash":"5271974cb0f2010d5993b02efbeb6895b224985b0265fe183f5e45436fe393dd39e689","first_seen":"2026-04-10T07:45:47.001447Z","last_seen":"2026-08-07T09:07:56.993492Z","times_seen":78,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/67.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.680Z","timestamp":1786093645680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/67.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17060\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0550-42a4\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:20 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/03/2026 05:10:39\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5daaa01e219f22dc78a5edcda98b07ed\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17060,"size_decoded":17995,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x420, components 3","md5":"affde62c705a40a7601ed4ac17aa89a6","sha1":"a47840b970e4667c3024571da4ba04192b0c1e55","sha256":"3d42a48ddbbdf7f2445512bf27cc792efefb828c326205bd2c1da97b85ddf8ce","sha512":"ccc9e9447309bb9bf7030000a79201ab74334e8023b73665e131865081a4d2185bbe37d2f04581510d3b3b3c253b0489e3b592f7fc826748e448ad25a795840f","ssdeep":"384:VXTo28PFgCEZgYIgJlwE9GbJr7+dFzj6m13eLZ3keWMX:RTQPFgCTYzD9YeFXBeLpt1","tlshash":"c772d03fe1849e16d21d67b91354a267cde8ec9a108acf0a81742ccdb460e74da7cac9","first_seen":"2025-10-11T07:27:17.971295Z","last_seen":"2026-08-07T09:07:56.994021Z","times_seen":27,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/15.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.724Z","timestamp":1786093645724,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/15.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25305\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0461-62d9\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:21 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/02/2026 03:38:31\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8343074279e3aa83f8fe5c9b972028f1\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25305,"size_decoded":26241,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"b4a1f83f73f1484d01019ebd722df9f4","sha1":"80e3d0d2c0475cc24ef48fb83c5856360c42f99c","sha256":"0717d1765be7d42e0be66b86d7ac3f25f60fdf01ceddbda6e04878a9050ad711","sha512":"dc3b17a0f9664d510c25e93121618454e5ade2e1532bfdae1ef04ac817fb1e1613a514b7b67549f6fdc4354e76195e360055346886198b255794d24aae67b048","ssdeep":"384:KNepcl5Q4IJcf/uNDpmXmBy3IL6HEKsP60B5ooAAfvRGNKk5Cb8L5QgyIOTB5/r:Kspck+/UFskwJgJbAKk5azgyFt5T","tlshash":"46b2e10fb7c10e9f1552a5b81e28ebba8b9d850eb22c317d742167c98d2bfd95033d12","first_seen":"2025-10-13T17:06:19.60978Z","last_seen":"2026-08-07T09:07:56.994551Z","times_seen":24,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/images/icon_close.png","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.727Z","timestamp":1786093645727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/images/icon_close.png HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a2752185ce3f0b45-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 843\r\ncache-control: max-age=14400\r\netag: \"6a71ee27-1ab\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Tz2zkMph3V2iGWiKMD9Lh9byX3WYr348LowCFQ33pFuhMIVFb8XyFTPFCFdR0zWp%2B0ASDaXH8Iwu9rPbrOk5%2F1NyLgqCC7Omq1f4Iu8ytFQunQXjkXhTxHl8LaXlma3Ae30aEW5VMP07MgAjQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 427\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":427,"size_decoded":1138,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 4-bit colormap, non-interlaced","md5":"26e9ae28962f669b44198d28293dbe30","sha1":"27b6e3581b6c98fc5934f4e4af1698cab270ef7e","sha256":"f67d193e6472e73251254135e0eee99f529bb8d14c4e434d40d9e7a53a37ce9e","sha512":"dc5c4c572e3094a73106b7f014ba89fa0f27aa9b1c2603c21656eeb5f930cbc353f08f4d9a3a2e295063404f0f1d44920f4b88b401577557c2a7feaf0bfdfda5","ssdeep":"","tlshash":"82e02b8af33849bad677a09ea2353a67bb689e6564580019c41671bd47701869106056","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-08-07T09:07:56.995042Z","times_seen":287,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/fonts/Roboto-Regular.ttf","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.862Z","timestamp":1786093645862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/fonts/Roboto-Regular.ttf HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: application/octet-stream\r\npriority: u=3,i=?0\r\ncf-ray: a27521869e410b45-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 741\r\ncache-control: max-age=14400\r\netag: \"6a71ee27-29144\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CC6RkyCnyZiIKY7n0azsbfM0BvWGkXHruwqCZEaF1hs34ZnHopk3yOjE%2F%2BiRJ0nMWVadViFBo8rojxBLdJDRaaBWYb1lYlyM%2FcnhIJWuJc41f6lON%2BHenhbwySEXBiAPOllNx6fj7ofyMD3LHg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 168260\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168260,"size_decoded":168998,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob","md5":"8a36205bd9b83e03af0591a004bc97f4","sha1":"56c5c0d38bde4c1f1549dda43db37b09c608aad3","sha256":"4e147ab64b9fdf6d89d01f6b8c3ca0b3cddc59d608a8e2218f9a2504b5c98e14","sha512":"e96b43b0ca3fd7775d75a702f44cd1b0dfd325e1db317f7cba84efdf572571fe7594068f9132a937251aab8bd1f68783213677d4953aca197195fbe5db1f90d7","ssdeep":"3072:5y2goL/sAQRuzzlPrvRwhRFUzMWlYfxJVBxV+aYT3qPXI0yH4yDuNOIOU7og2NE/:xOmCeu+bqPeHr0WUMxNE/","tlshash":"83f3d601d642aa19c6d6b2787c7cb3be4c75e82dfd4a602734e5af2115c8c05ec69bbc","first_seen":"2023-04-07T15:31:36Z","last_seen":"2026-08-20T12:39:29.326041Z","times_seen":10632,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/book_of_ra.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.625Z","timestamp":1786093645625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/book_of_ra.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 179446\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2844-2bcf6\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:56 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 583\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/30/2026 19:20:56\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 170e214b9ead7310a2ca47d2dc4e462c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":179446,"size_decoded":180383,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5e34752edfa8ff55bbf5c2e2f1048612","sha1":"565eedd24fadc3d873dd2cc065637e86704b6812","sha256":"12f896383679cbdd332b993d3083ca9d5e83d1c73afa27fd1ecbcb20ad519ed4","sha512":"ea8dd42f9ce35f3cf4106f40c8b55e1660fca267bad3bd919da6380036fc4eb7b37a06411182f74859d71f555dfda3a13c23f1047d73446be97f21878e1a60d6","ssdeep":"3072:yjpqBXZh/6ctuEdYdXcK5khjHedHEftp7NTsDlvNFMLJvt282QeBko6:KpgT/XtzKM+RMpRTsDx7m+82Qeux","tlshash":"3004238302189ac896a33f519e89c17ff755f272474bb40323ae596e64bdd93c83762c","first_seen":"2025-08-04T09:14:47.411763Z","last_seen":"2026-08-07T09:07:56.996124Z","times_seen":72,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/images/icon_arrow.svg","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.580Z","timestamp":1786093645580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/images/icon_arrow.svg HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MK40lKweV0EYtb0klQ1FWrLAGmOmqsA65G5GHsCGKOM3pSj1KUNHRy1pIaMloi9knFe0W2Xz03G9Y4YXFD3L5CvtS3S17uzdmOHH4IAy63hlhSWNG2cSxhSi4dRhQW3xeFS%2BuAIrUcezJmYIZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a2752184de2a0b45-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\netag: W/\"6a71ee27-db\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":858,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b43d99f133288e69bbbf4086d2e6ef32","sha1":"f405ed0c6a2240746d942d4af0014a310a058d44","sha256":"ac79cfa70fe0b3820fa22be89a4220bfa05de2b99f3ee68bb10a7a35937c245c","sha512":"1ebc17375039ba8c9aeccef936efcff9785c1b12995b9d18fe5d3f0ffc545595c5ebc728ab4cd3dc1cb54108a45849920c922e6feafff9f30e6c35bdb248d7e1","ssdeep":"","tlshash":"efd0a7be554c990145044f525d59316772b674cd53c804b9e54175e07ce00d79d5dd78","first_seen":"2024-08-19T13:45:40.065042Z","last_seen":"2026-08-07T09:07:56.996565Z","times_seen":276,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/icon_download.svg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.603Z","timestamp":1786093645603,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/icon_download.svg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\netag: \"67adffaa-226\"\r\nlast-modified: Thu, 13 Feb 2025 14:20:26 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/16/2026 05:28:52\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 48bb1e60884383958ed98c8fd3edcd0e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":550,"size_decoded":1287,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"359c897b8171e46840e87873725ca8a0","sha1":"b8dc0aa03d7e3d78ee971dfdc384730bbca08412","sha256":"1266bd734a167b46b287221ff03697cf323e198d441a3ab274fad08f35ea016e","sha512":"6d8b6a95b5de2f4d2e2e82d8f0e9c394c52dd9ad7267f9d7ec82aac4f61fb938c53deb9b5628646a6382ae996efbfda42e4e6a859872132d83f8a7ca2ac292eb","ssdeep":"","tlshash":"30f08b2470ffc5c6db08c61396e0b0ff773267c412498424f19359e921dc6c56d38599","first_seen":"2024-08-19T13:45:40.062311Z","last_seen":"2026-08-07T09:07:56.997055Z","times_seen":278,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":9,"connect":2,"send":0,"wait":2,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/elvis_frog.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.628Z","timestamp":1786093645628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/elvis_frog.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 193236\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2844-2f2d4\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:56 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 583\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/01/2026 11:08:06\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fdde931a5bfbf458d81f8f2459d45126\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":193236,"size_decoded":194173,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a8006892e21041a0dba05702f829d593","sha1":"604801563a320bca8523e5233c583fd866208dbd","sha256":"5cdfd83c50b3314b1c6cd78d33fceebf25290fbac1c263ba972664d08c30bc7f","sha512":"8a0c18f7bd412e8b4a9999a0ede772500571f7f2dd843bf6b1c67fd3fa47c66dfdb263b236e649fd89fd3d63b607de5cd23621f9ef44590a4a8397fc1bd714b0","ssdeep":"3072:5D1wWP0Dxtbr/NRxlbo3VBZDKGHqvyZSqfwvcDWGGIDcJJSgOITLsQUvJLjQIM/n:5D1RStbr/NRxlbSVHRHqvywvSWGTIJJD","tlshash":"231412387c652fc54c174bff23376c86de6baa0704cba0bd1aca5ed960a504686d9738","first_seen":"2025-07-04T00:17:04.652842Z","last_seen":"2026-08-07T09:07:56.997547Z","times_seen":50,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/sweet_bonanza.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.633Z","timestamp":1786093645633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/sweet_bonanza.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 88304\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-158f0\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/25/2026 15:30:13\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f29ceee4ed2fe5de89c3cca96256efeb\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":88304,"size_decoded":89240,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"869cd3c56bf90dff1800f9d15c570331","sha1":"a2ded4502224f3f51b010ff8f9d4768e9d536afa","sha256":"7befff9e0259bba05ae796e2bc198bd44a534f563365c20935b6c39339399dde","sha512":"764998cee89bcf28d5187684603ad4081448772336af2291a71e2ac437a6a513812c9f741e6436fc815a54fa5ec6372e66927fe9911ff3c267c630a7df1eb240","ssdeep":"1536:4UjB+ih0mpgfrYSbOVBUT/aYWjQLK+Gte1ckYGzOG+PC8j0QrjMa8Ht:4YSmpGUTVBUT/ejQLYte1clk+Xj0Wu","tlshash":"3d83025556a3fe47eb15f07951e930104061b37f022b69cbb23a13c1dad3c6cba263a6","first_seen":"2025-07-04T00:17:04.645939Z","last_seen":"2026-08-07T09:07:56.99874Z","times_seen":83,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/wolf.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.635Z","timestamp":1786093645635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/wolf.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 137564\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-2195c\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 884\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/20/2026 14:48:33\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 423ee60c5513aff20ea2a5fa8baf6a80\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":137564,"size_decoded":138501,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ef8df6e855e45f74c02cb4859599217f","sha1":"d7b73f4c1d923758431dee5078f33eacbd7fdb58","sha256":"f8689ccf0837be953f3a23c301235a6b0a65c9df28f2f03b42717dbde532d553","sha512":"5ade7656026bf9b96f0c532071fc9041716d419b90e87cda3c86279b1b6f7fc0ab91b2211876d8fb10394dcf7d48582fecb330b18abd8ad09ecfe3fc30e8ac50","ssdeep":"3072:scsx66esCxJ1PChLSTnZIx21LsG0KCNEu2jr29WH6+P8Gl:hXzjdP4LEnZIwr07NEu2jr2KfD","tlshash":"31d31296b330826cfc41f337aaccbfc5776166b8c1143841e6927f71a670168c9b969a","first_seen":"2025-03-26T16:41:42.431484Z","last_seen":"2026-08-07T09:07:56.999238Z","times_seen":44,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/manifest.json","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:26.074Z","timestamp":1786093646074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/manifest.json HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W8MNJ6aKJ2Y0x29PO0ZZKxAbn2tYjeqojC27llMvnKKjmB0nXxTLqh73VlF%2BGvaoJFVH8yoD6hyPL50EogyJXMgOQ90zulow8a4Mw4%2FQRq3EOdbzrVUOUUc4F%2BCYSaehh9lFOOLhr91xvkSNTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:26 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a2752187fe4f0b45-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\netag: W/\"6a71ee27-406\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1030,"size_decoded":1002,"mime_type":"application/json","magic":"JSON text data","md5":"fdc5743be7adb716dd19c416c0922236","sha1":"12dc95460cff990fa0a9a497eb8a8dd5d44a9900","sha256":"48f4884c47e2fe735d50ebb29388634cd6242a89f8108db8e05b63a57c74d2f2","sha512":"f82f7ab1a1e552b9b3846c3d680b1638d18dc92001f06705acb9f869d8390f333cf249599dbf811127625306074910e5877c9ffa122e9fdef06fe5920addf4b2","ssdeep":"","tlshash":"93115ea18834694373ee50e705c16282a6e1dc2f6ed0350ef34e419c4bdd5bab8727bd","first_seen":"2026-08-07T08:55:42.379221Z","last_seen":"2026-08-07T09:07:56.999718Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/verify-dev.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.596Z","timestamp":1786093645596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/verify-dev.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 153554\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"6a6991b1-257d2\"\r\nlast-modified: Wed, 29 Jul 2026 05:37:53 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/31/2026 22:09:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 21ede70eb4431e7a32741045b914e74c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":153554,"size_decoded":154491,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"752088d18b9187515deee402d722eea7","sha1":"099152f601d20b9f51ab7ba219451678324af8f1","sha256":"24d8fe55458411889035da5302e4fba047d9370d566692774a6aaff2ebaf84cf","sha512":"7be56f083a072fdc20c8d288cfa5441148593dfbfc76ce31f9fff9b9e9a5f5492b1d611c2002ea650b00adab0b300f34f3b378afe0475abf6c2a8949a2055b40","ssdeep":"3072:Yl61k7W9TJM7ye/3t5Onfy9/x5ZGtj3T/klJV2RbtxbuBA:l12UJZOzyf8/Q9wJV2fxbb","tlshash":"48e312a10f237b4ac335013b44cd0a554bc12764922f897176bf16566be2cba3fb326e","first_seen":"2026-08-07T08:55:42.39751Z","last_seen":"2026-08-07T09:07:57.000246Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":15,"connect":1,"send":0,"wait":5,"receive":6,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/71.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.617Z","timestamp":1786093645617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/71.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16638\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046a-40fe\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:30 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/07/2026 08:55:04\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8a5fd5fdc61b3760ee6e689eb150143c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16638,"size_decoded":17573,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x376, components 3","md5":"4d58485aac54263314b3d04851e67b6f","sha1":"ac17b8622b50d8dad43ca63e0e396009b390801e","sha256":"4b9affaeaa3a9bc4df53b2cb1d76f92a4c24e1a52e86794f4611eef4ad876f13","sha512":"6b1c359fdfd58f969146ae89fafcefcd8f2dbc83527e357911c8091743a27f3d8f66278f2c6e94218bc2236dd87158e91a7dc8d9e065b76136d1366ae762b8c2","ssdeep":"384:eDFuXsJ9QvgnnMOqdBoeUbNJ7Urth/Itc2Jk/UrpAQ5/jieV:GFuXsLXMO3+TUSQFjieV","tlshash":"9472d0f3708b85dad4c0f27256d4a4e564778b8a613f624f705d00d4a923ad5d9f20ae","first_seen":"2025-07-04T00:17:04.661831Z","last_seen":"2026-08-07T09:07:57.000732Z","times_seen":21,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/bandidos.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.638Z","timestamp":1786093645638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/bandidos.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 188194\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2844-2df22\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:56 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 883\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/06/2026 13:32:33\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c7749a15a2d63ac672ce1ee90009d7ac\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":188194,"size_decoded":189131,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"37287497604cf78034242690430823ea","sha1":"c33816cd0f03e740eff309d511e00cf8dfcef663","sha256":"f30590bb086d3fa111881f686941f96235af94781b62970f5d54d27c4450cbf6","sha512":"3628bfccb0db0ac946302625ac2372726921760f300b2b2985feb80d50c6927089e6526ad57b05d5d2b322f4957a9bb7e4db39a7ec2623ab4c49dca49bdf6401","ssdeep":"3072:662evVAAfRb79Uh3qeMPIb7Nh+1UGs7q64RX6GHoAodczOkCEdoufSIK5T/5ckLd:66LVA2ZZM3NMP67P+Fs7yX6G3oevCkoj","tlshash":"610412521513dce8fc216a639f3ea578fcdc6e01b46993a07fa52d1b49832d4f0ba474","first_seen":"2025-07-04T00:17:04.607626Z","last_seen":"2026-08-07T09:07:57.001256Z","times_seen":38,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/jquery.min.js","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.645Z","timestamp":1786093645645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/js/jquery.min.js HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rslVxtkC%2BL1dMY9ykWiIkyEKvyToOQN6V13Aye3UQLTTtUV7qCo09Lc7%2BsyR9usuAzg%2F%2Fj7bLQQPbi1oXe9RrWDhFcKPu84spGdPRKXX6xm%2F6W8bPGVgD1vnRocZmEb7O0bQ7K%2FEFrw1MgsH5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a27521854e360b45-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 843\r\ncache-control: max-age=14400\r\netag: W/\"6a71ee27-155ec\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87532,"size_decoded":33037,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-08-20T14:18:03.492198Z","times_seen":31190,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/65.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.677Z","timestamp":1786093645677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/65.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25307\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed054f-62db\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:19 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/06/2026 15:35:38\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4c923cbdf2bba4e920343770527b6073\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25307,"size_decoded":26242,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"c06933a75ff7468dd52697e72d165f90","sha1":"4cfb9acbd4a6fb922af15452c6fbd579fbb8d4db","sha256":"43cb7c4608778c37b2cafa8f66ec04393c7fc00508f7539e6b7544b190bf484f","sha512":"1f2f797c72ff7cbe17001541b5e14582a57784e30e069dc7152b1dcd8671cd11f2be24a886504c9c1fc07da6758b1a757818cc6d289d485402b904665f7f9128","ssdeep":"768:JLvZE+u8ulgFY+bhc1+P5lIPQWfX8XStZtciXQxIDTvRS:NvYlmFYJ4lIoWf8DigxIDTA","tlshash":"06b2e12e219caf4dd4242d32a7f64aab01105fdb9f95f9822f617edb052323492dc6e4","first_seen":"2025-06-19T06:56:57.169673Z","last_seen":"2026-08-07T09:07:57.00221Z","times_seen":22,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/23.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.718Z","timestamp":1786093645718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/23.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26442\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0462-674a\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:22 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2026 04:04:19\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2bfa90a62183781a3042a2ba87e6ac03\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":26442,"size_decoded":27378,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"869fd23387bbda94ddf6e782e64e532b","sha1":"27d74d36bfead1473a6a0a132c564a537ce17b32","sha256":"64af389f2904f5cca0b7fcb2b6bf02519c92ee963b9340dee0bbad2973296866","sha512":"2f599cb97d1c516bef58bcd7c6cac7287ca30cd35759ea181ac2d45a8691cfe18cbee4067ccbdd08de99e93c3872ca27f96cc187789ac09ac798c05abc26cdf5","ssdeep":"768:mXKBYJBaV7i0Bra9RAk5lvKayFlB0PTtcInEi+:KKBYeu0BrajT5lSayFlmPupN","tlshash":"87c2e1e14815c95fd17a2f7a68a6130d66a12a5816f4dac8fe1910fe037beea25e00c9","first_seen":"2025-07-04T00:17:04.66063Z","last_seen":"2026-08-07T09:07:57.002659Z","times_seen":30,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/10.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.725Z","timestamp":1786093645725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/10.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25818\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0460-64da\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:20 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/03/2026 20:01:42\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d82b416164d3877952da8baff65b50d7\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25818,"size_decoded":26754,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x300, components 3","md5":"f77e5a027fb5fce39da9544c07f3b442","sha1":"3cd93a194a3ef118ae3c617298e0efd01f37b467","sha256":"107cebc741036880c2876e2e39d1da9df82f03acaa155a4fc5fb8a3e421b2456","sha512":"81ab496f889f6f29b4f81bc3883da77b386042e3b0536257961f86ba677a0f863a6c445b39fdfb590c0785b6a7f1dbaa43554eef5b045d5f92732387b6cf3314","ssdeep":"768:Y9VWotaEvO5iQ92KUHsr69xFguaNz7137NA3:Y9VWoYEhQAKUM+nFg7Q","tlshash":"02c2e1a9a31c770883389e4458aff9f4b7ee4a73f0566446902417ff282541b392bd7c","first_seen":"2025-07-04T00:17:04.651726Z","last_seen":"2026-08-07T09:07:57.003181Z","times_seen":19,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/fonts/Roboto-Bold.ttf","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:26.111Z","timestamp":1786093646111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/fonts/Roboto-Bold.ttf HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:26 GMT\r\ncontent-type: application/octet-stream\r\npriority: u=3,i=?0\r\ncf-ray: a27521882e530b45-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 741\r\ncache-control: max-age=14400\r\netag: \"6a71ee27-28da8\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e4%2Bjia683zWf3EBnf5NIIrrvWB0FsyrWeh99%2F02JZ7TUYM%2BU2bkkZ5z1TusAcSpj9sSmcBRdQQW9CxdOn6yPGivBRu244LLPqeU5lMZz0VqjcyB%2FuP7HdMm9A9niXfVZCmBcZ%2FkHNQqxHZcwDw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 167336\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167336,"size_decoded":168076,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo","md5":"b8e42971dec8d49207a8c8e2b919a6ac","sha1":"62442a18a9fe9457c1afeabf683d263a691b7798","sha256":"ec685a46105296fe46c8744da4a11cf8118ba6c11271941766f7a546df6aa7c7","sha512":"3bd40ac788d44626fd640ec67ef04ab0364816b5e8c831f2077bff8805cfe6890ca29274b476f933f6e96ddaa16f4e2f3f66c616dff7cd88cdcaff7dae8ca5e5","ssdeep":"3072:VBa9dX3CyiSB1/R7O0aXjC1YHeA9bOuPUPT9mYZK9K4N09PJ4X4HXYXXXXXXLnqT:uX6XiuMPT/eK9cnfST80/","tlshash":"29f3f501d2479629cac6b2787c3cd3be1970e429bc6ba11735e4af3149c8945ec69bfc","first_seen":"2023-04-11T21:48:33Z","last_seen":"2026-08-19T14:11:14.508556Z","times_seen":6373,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T09:07:24.919Z","timestamp":1786093644919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid= HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\ncf-ray: a2752180de080b45-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nset-cookie: cl_st=b; expires=Sat, 08 Aug 2026 09:07:25 GMT; Max-Age=86400; path=/\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4yQMXKg1iL%2F7FemBaY4wWnq5pGjNcnGVJbuSp5Ol%2BzDG%2BUFQQIg6j1Jmds9BWynHUMHc%2BLs16r5ptZtwk0ejVRQ8hdIa9w1ahnM6U1Rs5YP6kLTWwh%2BUIkD5GMw%2F5RiJd%2FHfQIeLB9nTtkQNZQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":559352,"size_decoded":179458,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (29525)","md5":"5ad5b9d14372e4b249286f500763448a","sha1":"208dfbae3bbb25fa60f30ac216d298dab3ae2d99","sha256":"3b4eaccd63b7d53824ceed090019d7d764bb5ab04c3f2e504888fe4ae49b6172","sha512":"a62ae86046571a28d8af5952f98b26d5f697484e4affe063ba6ffd543f8c42022344d23858b5257b1f44db1c2267b093491e0477930052b20c1aea63a56a55a6","ssdeep":"12288:4yfKcKu1vSr9xSQoNy1WKu1vSr9xSQoNV:Ocn1v+9xSQoNy1Wn1v+9xSQoNV","tlshash":"d1c4bf20acf654370183d0c22e669f4a6ee1fa03964b8741b7bd87d46fdad8aed0745c","first_seen":"2026-08-07T08:55:42.341342Z","last_seen":"2026-08-07T09:07:57.004093Z","times_seen":2,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/hell_hot.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.630Z","timestamp":1786093645630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/hell_hot.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 65726\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-100be\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 583\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/09/2026 00:34:38\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c1d1e157d84e081f60866161b47644e7\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":65726,"size_decoded":66662,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b53307a4a9c17d96b5c1f2607bd36345","sha1":"5591d01007451a5a1938d54f900b1bbcfbf095f1","sha256":"971ded65329751674860c9a5056affdb9cb7f54dd915ce30a00e2c841014119d","sha512":"d17e9bea231864061dd0b322c7cbe7283c0e3e30c175d72c2583cb32946a071049da106d71710f7512569bea91549c9a55e292d0e796904baf20d3ac7d78df7d","ssdeep":"768:O0+M/IJUmTaMpn8aoi11WBDgCAJgN1izO5U/+rZNO+GNT+5yuXYN7fALJtAwvl:OXMAdTv18MiFtLiSueZkLq5/Xq7ILJt3","tlshash":"45530268d41c0258f344bfb1e85cf5bc8039f214a0685dbaad03b13d6ddb7c6a9b985e","first_seen":"2025-03-26T16:41:42.423961Z","last_seen":"2026-08-07T09:07:57.004613Z","times_seen":60,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/uaParser.js","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.647Z","timestamp":1786093645647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/js/uaParser.js HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iVnnlY0xbCNjUBalhmDFZJYWwvV9x1E11qA4y8guICbsKwIMuN0mDwh6IN4Z0UFEY7trhvDDzHGc%2BNxERhmOrHYgSvEgUYrUxCMXmH8aUlTDFPvFbok%2BOg7s4Dc%2FPsiVJeU2OYtawCDDhYwpfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a27521854e380b45-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 843\r\ncache-control: max-age=14400\r\netag: W/\"6a71ee27-4bbc\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19388,"size_decoded":8667,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19275)","md5":"fae74f6b710e428ad5ca0378fc339859","sha1":"0d8f92bc5fcfb0ef72ee329f0a0763524443b5bd","sha256":"9735a83f5152c01eefe3ca9457e3b440502b60246d60f232196eb36c126f2125","sha512":"092f093612174c0f84c491a2e9ff03b4ee160ae90aa16ebd5f83e80a7c128efb6e8099629c9c88d7a330f9313a1a3d78e561d295b4fdb446dd18266fe75e46ff","ssdeep":"384:69M5d42wb/6iOD0tRqwkdZISkzVBv2ETttl9rsATHskN:69CKyzDYRqZduSAZ5tl9rsAT1","tlshash":"0b92da3ed365bf2093bee589c51790002d3a5c3adb41b0f99ae4b540e8d6db1129f7b2","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-08-07T09:07:57.005137Z","times_seen":288,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/70.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.723Z","timestamp":1786093645723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/70.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17720\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0550-4538\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:20 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1029\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/06/2026 17:50:39\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7401d659cb0bc4c0aa8835148874c9b3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17720,"size_decoded":18656,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"152571f13124d6e7bce09af33e57beae","sha1":"7f883966cbcb35ba35aba3b63469775c80d6aa93","sha256":"5fc38869d09efaefd9e2a56d15cb6ab69bc60d061c0abffa72a91b9a3c0f7dc1","sha512":"b0536cff4b16bc37cafbec6598560542f7287cb135bbb468da15ae89ccb97bd3d7b35e0cec869ac446955dcfb7932da5e82f432a130631390314fda5a7884f8b","ssdeep":"384:OlDP93cywId7OeW47I6+y9xWLNHOP7ItGkk1xFupvF24LT4eZ3:oDaqA1M36+7qU1xFu1EK443","tlshash":"a482d16eeb9eb15af4b1c5381d76077313122e68c835816e381dacc6356c5d8f58f06e","first_seen":"2025-09-24T04:03:22.01051Z","last_seen":"2026-08-07T09:07:57.006401Z","times_seen":22,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/fonts/Roboto-Light.ttf","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:26.112Z","timestamp":1786093646112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/fonts/Roboto-Light.ttf HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:26 GMT\r\ncontent-type: application/octet-stream\r\npriority: u=3,i=?0\r\ncf-ray: a27521882e540b45-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 741\r\ncache-control: max-age=14400\r\netag: \"6a71ee27-28c58\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N1j%2BIC8a94PBSuzmKSM69sG%2Bz7FjLfBmvU2t2p6axXZXoW%2B7EO0QW2ScyoEVjJRH%2FAe6bas3OoCpKJyQwrcLOHo1dr2jTaBzEdd0ywjSnqlnDT%2Fg0iJdAgICkA5DmmMsGDL3u1Om5t2Odfa3Ng%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 167000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167000,"size_decoded":167740,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto LightRegularVersion 2.137; 2017Roboto-Ligh","md5":"881e150ab929e26d1f812c4342c15a7c","sha1":"18788c5d630fa695f9283f6393bfa541b2031508","sha256":"c576c50642271bcdbfffed04f92dc8d6a981daf300914d0a20c8a5a5a57015c7","sha512":"af18febdf3e0d5fc8111e6335bd8cc4fc8dd944910db8a4f3ebae284e3d1064eb793a25588007e3d1cee24051e11cf3328951a3f708375856d54176a53701b49","ssdeep":"3072:BXlLgbEmk0/Dv6QKwRr4T2EUtxq2FquPte/TxDuNOIOU7og2NE/:3qXpSIE6Ey/ux0WUMxNE/","tlshash":"daf3e501d245aa3dcad6f2787c7cb3be4875e429fd5a652730d6ab3255c4800ec68bbc","first_seen":"2023-05-08T00:29:25Z","last_seen":"2026-08-20T07:07:22.420562Z","times_seen":1050,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/icon.webp?options=content","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:26.267Z","timestamp":1786093646267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/icon.webp?options=content HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:26 GMT\r\ncontent-type: image/webp\r\npriority: u=6,i=?0\r\ncf-ray: a27521892e610b45-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 843\r\ncache-control: max-age=14400\r\netag: \"6a71ee27-af16\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SVEX17lRCHSNrowKPoVB0HtYYYCGDJrH%2FdAIOgFt74XyWjoOtUigd0QsI8J0ozApuY9riG7PasXwFQTL6NCf04bF%2FxW4ZR1ghBOTnpBMnd6%2FT6lcezNHInaxqU3oM3nmipGwtTf5N88nsglbYg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44822\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44822,"size_decoded":45542,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5eb25b166a807b4585f1cb24c1c96338","sha1":"702c527f5f45b8e2e1348af593f7dd6640215be9","sha256":"948766b48dc1c1991271e5679783bd416b7425ac4e0f4784b8e58a251699c631","sha512":"b6d979144e9347ded90372f92a6fd4feb0abbb4bc474e79952471379e98c99651ad6becfe2b2e28da3fda11a49922e6bb13edca3898dcd2dcd2ecac1322274ee","ssdeep":"768:oVNmXPY/Nr745lylOcnlm60CK0pVhfWhQEZioGkq5dn9sEuQdSpaLMqR9lXNNErc:WNmXPY/NX45lyOWv0CK05WhM0wdnCEuU","tlshash":"061302fed160c33199d6851c61a2a01dfa5ace78068f95f3e732e60a84d00e6eddb717","first_seen":"2026-08-07T08:55:42.331329Z","last_seen":"2026-08-07T09:07:57.007398Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/sendUpdateLead.js","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.390Z","timestamp":1786093645390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/js/sendUpdateLead.js HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6txtp1ATIY8HcVVTG1mPB7%2FIZ%2FAfozFhlOCz8M%2FmpIuoWgEQjcuMu5n2rIaQotlHqvvUsf%2F4XWbkTfHRodPL0PvGKmsLeLSq64C0F%2FLOdV4omJb9I%2FANl7Mbv3pPOLI%2B7iGfiXJGjBJ4xzoNwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a2752183ae1d0b45-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 843\r\ncache-control: max-age=14400\r\netag: W/\"6a71ee27-e78\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3704,"size_decoded":2162,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"9c06b9a540ab015bd9ca9046e3171308","sha1":"35ad10e82d8706e6bac97d6c83cce7bcbb39dd77","sha256":"87d664d15256da8723382824060f211a581d15d603c3d2cb5aa9665eff1c04fc","sha512":"8edc39809aa80b36ba48ca299cc2c9a1959bb0bf810071b4a54e8bf16ffc4cd0af060ab67ed82642cc41470b725dca1164e8b8d35c4ec50ece3dc55dc2245787","ssdeep":"","tlshash":"1f71334468a775c964f320a997df114ab1b6406b10a5d0447c0cef44afe4a3e2afefdd","first_seen":"2026-08-07T08:55:42.381714Z","last_seen":"2026-08-07T09:07:57.007954Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/78.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.672Z","timestamp":1786093645672,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/78.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14895\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046b-3a2f\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:31 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/03/2026 17:35:31\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c8b363bd4d8efb45b4552790b0f692e3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14895,"size_decoded":15831,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3","md5":"74134aa47f5eaf8884ee297fb8087ee7","sha1":"788c8e34e5a602e481fd37de3da0da74c2783d58","sha256":"5fefe06f1364b947d07bccde51c20b67e00d0983975fe25e6b16928a5bc2f214","sha512":"69c75b46c33b45b999c99888f54d2ff81b78ffc91c2287f646ebdd77e2d5d1f440ba793a933aedda0124eae126e6459a7354e3c84461a5ddd4349fe870ab6999","ssdeep":"384:RlhKOWBwbX4ROy2YHXX+2wY5fd7h06W4CqmLI:RpWB8KZXvw81has","tlshash":"4a62d0212304fc1ad3ae52e2483cdfc7910e391e96d28a71c17d7b4359e9d999d0d688","first_seen":"2025-06-19T06:56:57.165167Z","last_seen":"2026-08-07T09:07:57.008533Z","times_seen":24,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/64.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.683Z","timestamp":1786093645683,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/64.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24771\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0469-60c3\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:29 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/03/2026 20:05:35\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1e782aa780bae6145ba252237976935f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":24771,"size_decoded":25706,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"c624955555c8524cbb18717d53ba5d46","sha1":"e4e9867dd0d9cf8444e91509489095daeb6d6d5f","sha256":"bc1d2e40163ec5e7a9425ae8f8d61ec9995f0be6eb4399d7344af3d261deef0e","sha512":"9043e7ff0ab1448a143ddb54e3beba6e723e206e00bcb4acf80fe23097d659803f67d70d2a0493b1588b8af5f7ff32d3333d4d78140d91ffefd478923a4bcd11","ssdeep":"768:oX69j09FEKk/uE8mBEkJxr+H38jd40/AgnVWT:oX69jKxBK+HMu0ognQ","tlshash":"3ab2d0466757b444e1fd4eb5dd4a039ee0cc8638fa3a3b95a11672d01d348632abf348","first_seen":"2025-09-22T08:45:43.411586Z","last_seen":"2026-08-07T09:07:57.009057Z","times_seen":34,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/12.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.704Z","timestamp":1786093645704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/12.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20633\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0548-5099\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:12 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1029\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/07/2026 08:55:04\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2078e4f91f954512f49da60c03aa758d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":20633,"size_decoded":21569,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 228x342, components 3","md5":"adbc08ca5a6f482d60b2e027644be382","sha1":"0842d20a626b59f831b23f169d1d55b8a8164bc3","sha256":"845b9b76e34df587f1355cf90c8465e5341c119253c320700069f434075e8e52","sha512":"a5a364c68637ab6d76fc660bf5fd53adc7cbd849ab9fd6506246cfe4fd745bbead14f181ba99d2a1eff1d647027190fee0b70769d9e0240f0d5d046695c9c67f","ssdeep":"384:rsZHCn0l8UhOkC0eMJ3OH8WdTGiNJh0PWDsQSudIcDyBLe6h8jS:4En0vBneMJFCNJq+gNHThQS","tlshash":"1292d01dca9b770f891c02bb15ec0712f94c579484faa638a3ed5ae498b35df21d0935","first_seen":"2025-04-06T10:47:32.159892Z","last_seen":"2026-08-07T09:07:57.009502Z","times_seen":17,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/10.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.705Z","timestamp":1786093645705,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/10.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22953\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0547-59a9\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:11 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/06/2026 15:38:34\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b32c026ce72152495e7aee6e6c7d107e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":22953,"size_decoded":23889,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 260x390, components 3","md5":"edfffd612f848d9e1fed5c97322e2d9d","sha1":"ac73b368061846dffa5e189d3fbcd18bafcbc67c","sha256":"5d014909e60a6fd6428f5a576277127af7bcc1bef62ff922d47759a6dd8d58ca","sha512":"737237f2979e1c2f3fc5b41a22561d2f2cbb7330872b6e64272c04a7671a65b55bf954da021b7569d0b3b5622acd5c5355a5b8919025cad4e851ab5a7ac3b5a4","ssdeep":"384:gkzmCeh12YzqfiAp0Un5kDSic2UDdjjU0FG2sm7G0JuqGao7e3+wsLulAn9uvqSO:xyRSzp7n5MSphjg02mKIG7eOGS9utO","tlshash":"6ca2e1e66ac10946c9871d32bb3c235589df2c2ddb504f327452f8e29bc9660d2cadce","first_seen":"2025-10-11T09:20:45.333416Z","last_seen":"2026-08-07T09:07:57.010002Z","times_seen":16,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/icon.webp?options=content","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.586Z","timestamp":1786093645586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/icon.webp?options=content HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2752184ee2d0b45-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 843\r\ncache-control: max-age=14400\r\netag: \"6a71ee27-af16\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v9Y2yFgyEIIS8EzirCUwGpMr49gFs1lUoajDLaYMC6P0ly3GEucsyoOpwkxLL%2BOUuBF5if8RuaprB0YjJyBw%2BnXnGVajtFzuG2treoOJa84F7eRO6%2BDEwndVFIvKNkHsnS27tpTIUcsAYJAYRQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44822\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44822,"size_decoded":45539,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5eb25b166a807b4585f1cb24c1c96338","sha1":"702c527f5f45b8e2e1348af593f7dd6640215be9","sha256":"948766b48dc1c1991271e5679783bd416b7425ac4e0f4784b8e58a251699c631","sha512":"b6d979144e9347ded90372f92a6fd4feb0abbb4bc474e79952471379e98c99651ad6becfe2b2e28da3fda11a49922e6bb13edca3898dcd2dcd2ecac1322274ee","ssdeep":"768:oVNmXPY/Nr745lylOcnlm60CK0pVhfWhQEZioGkq5dn9sEuQdSpaLMqR9lXNNErc:WNmXPY/NX45lyOWv0CK05WhM0wdnCEuU","tlshash":"061302fed160c33199d6851c61a2a01dfa5ace78068f95f3e732e60a84d00e6eddb717","first_seen":"2026-08-07T08:55:42.331329Z","last_seen":"2026-08-07T09:07:57.007398Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/images/screen_1.webp?options=content","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.605Z","timestamp":1786093645605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/images/screen_1.webp?options=content HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a27521850e2e0b45-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 843\r\ncache-control: max-age=14400\r\netag: \"6a71ee27-11daa\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rjFafX5EMwaqppItcpCbWhSVcusOdWnjgdaOoaKdCJInET1FcGIid8OVaDY5JkoFIqOhxsoNRA%2BYS9gyGKoQnPfimyGFDJAcXG6bDhIHfdrlwr24vKaH3rhexamsSlXl6VuFuiy4CZh9Aadp7A%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 73130\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73130,"size_decoded":73844,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 557x941, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ea6a37e6c3abdd0d4796e60873914c96","sha1":"280ea4f56c783fa384eb56d8855195be894d0b00","sha256":"0a7072feed8d0b8d5b96b749e1063ff4b7d57eac45f9f3569a29079b1b16382d","sha512":"df28ecf4518158a83e7e453b4b2b04be3ece63b7df5618b229bb4f45a6bf73895803d0d334ea084526ddb9a683917dfc555d714442c63169b408153ddd92c3d1","ssdeep":"1536:X8f7Hrx9b64lwsLti4b7Yn6i/WWuZ1MfxTrCI9mXv7FxyPcINY3fjq:Xw19b6Vwimhi/mZKfpC/WcIIfjq","tlshash":"aa6312315a73812beec748e1896e6f6af0432578195b60b1f6113436b59363c9e8d3f2","first_seen":"2026-08-07T08:55:42.388039Z","last_seen":"2026-08-07T09:07:57.010487Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/images/screen_2.webp?options=content","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.606Z","timestamp":1786093645606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/images/screen_2.webp?options=content HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a27521850e2f0b45-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 843\r\ncache-control: max-age=14400\r\netag: \"6a71ee27-1490e\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zfF5HE9Rl%2F8%2FdVIQWE90oTymi5LYzPFvChxBphOjoV5XCR7ojoKY3yoV%2FPH6NRxO6hoX4MzNtQFacvm2q3R8q0xIWMcT37Zoa4W5nVPqOMhO7To6rB4vXYFr3qvxCdgbsMH34GAO5sZYubiKJg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 84238\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84238,"size_decoded":84956,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 557x941, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9051f859d43849e71c7289d471a1e7b3","sha1":"71ad24756f2e9ab1794fb774ae1ff9e31264f36c","sha256":"66ac261d8b2b151c608b7e7aca9aa7ea2a8ab04631a31f3cd37a09237ad5f12c","sha512":"7dab3e7500ecb4c27951cb097f8b00e7cc0dd7426e2f7f572444e503fbaea82e0389bc063ff44c6aaafaca0e17fee48f0ddf79a0b0139d00ef6ec1209373ec3e","ssdeep":"1536:eX0mbYtCwsk2TZJsFv/Fof6SXiCfs11dDDknSW3HWvVI6iW5hYOrcQIkA:Yx0Sk8oSdUhYh3ATXY+cQIZ","tlshash":"66830230cb9b8bc1352fd9a17479d4615d2f4d2fbab15bb7eba0171379393102698e20","first_seen":"2026-08-07T08:55:42.349609Z","last_seen":"2026-08-07T09:07:57.011018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/prompt.js","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.651Z","timestamp":1786093645651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/js/prompt.js HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=REErGTqYTKGYox0pt9RColfTZjHfxFv%2BoPKC%2FqyCRM5u5g%2FWRG6XQs7RLKaHApmKrKVRbtwAHj9lpTiGX%2BONP7EpqszOAPPSr3J3eFWxXFBMwnEWh9WIgZKrp%2BnCwbYpxU20CEzjURQpRdnJhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a27521855e390b45-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 741\r\ncache-control: max-age=14400\r\netag: W/\"6a71ee27-1c5\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":453,"size_decoded":941,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"44ebc534ff78e60f1b65bf973fce02e0","sha1":"cf48af00a3fefee9965b4ac1b8857f4036a2a252","sha256":"ff398de885567f110214c619e2421fd329a9aa4b873f2480a953acc6cc61f898","sha512":"6bd669dab5a3c5daa5e34b892b3a7b156afea0bec86c91ae9ce6b46946300a65ea26d2fb8edf361bd89739f377457a12b5f93b07cf193be60a8e862c0bad8518","ssdeep":"","tlshash":"cdf022200baa18b1a01b336e8f1f1e84233174a72d225d203d5d4c8dcf816a842b2be7","first_seen":"2025-11-01T11:14:12.483716Z","last_seen":"2026-08-07T09:07:57.011608Z","times_seen":85,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/js/main-function.js","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.653Z","timestamp":1786093645653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/js/main-function.js HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lM9Kr4NGDTYH%2Bd579MUtUUAHURJ9YJKoHpFF4K0K7xAFd29NT0%2BZkKmRKLDIb2EFMNSwmU0Xsn1Xc4qgxRuIC0Dkeoe2whsNSc215eOTRFhmtO1fQemuaDMkk8KpsKHaEz8wbTLTdpYPyVH4uQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a27521855e3a0b45-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 741\r\ncache-control: max-age=14400\r\netag: W/\"6a71ee27-7dd6\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32214,"size_decoded":9649,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"9c66a3e6a336213c01aaa1639954048c","sha1":"51437752dac52904d6e4e0fdcf1024297fc8bf43","sha256":"fd618814f8eb17c513033bf3bb2603c25fdadd187479446e4aeaec04b77c7c03","sha512":"33c8fd74e7dea05f46efb6fb9208993c4aa69eee975f807d405dc2584d25ca9325d92f3e2c18bef818d2fdd2ed80a92677373e634c799ec6f872054bf8c75767","ssdeep":"384:SHh+xRlYlTlLoU/rBH29P2Ih7BoxesD/puVS7lefp+n7kxwJ5oAVRap+dgTTS4/i:SB+LlYlRR/929MtisEw4LTQrXsZbKd","tlshash":"65e2504c66fb01268267b06e4f8f51143637a00b385dde287e6d4b806fd192d81e6feb","first_seen":"2026-08-07T08:55:42.336442Z","last_seen":"2026-08-07T09:07:57.012068Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/images/icon_star_black.svg","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:26.082Z","timestamp":1786093646082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/images/icon_star_black.svg HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tUDY8qKACKrnMu2zHpZdfIxzem28PjlT4maa9ZPAq%2FtPjc098JQM4igk9ijuMuQUMNAJsEPfJjXUDhnsZX0WgQIKpVRW7N%2FrEyi5%2BRK%2FkFYIqNKeZppXiN8HUK1PYpia%2ByN2ER0I0ck9HzfDRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:26 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a2752187fe510b45-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nage: 843\r\ncache-control: max-age=14400\r\netag: W/\"6a71ee27-fc\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":891,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd7c9a36b018cd09c80d3c69bb83579b","sha1":"0b7c5758965fabcb509db70b94e2ecc62592a331","sha256":"5a29eb18c76586c2f55eedce4c2b46fa158df9148af71ade04a7934f9c5d312f","sha512":"ea7c5bd48d77a405845f935d5eaa3d373c246679f7404888b96d29ef2acfd38f64fe6fb54e75f77c6fc101f72310d6889a9d25cc95a6980dad9d7c1e7fa26f96","ssdeep":"","tlshash":"93d095752034da58cc55c651f2f75cfe6497d0db71c500c29549731170c086f4c59974","first_seen":"2024-10-12T23:01:03.367525Z","last_seen":"2026-08-07T09:07:56.990576Z","times_seen":178,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/4.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.616Z","timestamp":1786093645616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/4.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7296\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed045f-1c80\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:19 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/04/2026 08:21:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 313d14bf7e47ae08c324fcf509d0169a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7296,"size_decoded":8231,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 160x199, components 3","md5":"dbef34ef36423377eedb464acfa50d13","sha1":"c8861da33610a32d4fa01b7dd305ba76f107f86b","sha256":"02ef05a5eeded34d5b0b59c4206638ed4ce467635ba368f4fff49f5fce5d1bec","sha512":"1721f76351c7538341f3482f7f39d270f89fbd43160c25e7009b2608e1fbf2a9841ffd8cf3d409f25841bb618439acd18898ebf0ca20d3a4c905762b0a1bc120","ssdeep":"192:nEjFPdaEM7Uj1d4ZFW9FBRjx1qgiA4MX3GJS4BL1x:ER1FRBIFmBRdviAOS4bx","tlshash":"6ee19f82619c2b10e1b857727a445e9ca730a431a35efb2cc647b4dc4ed33f91319e24","first_seen":"2025-07-04T00:17:04.636819Z","last_seen":"2026-08-07T09:07:57.012595Z","times_seen":21,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":8,"receive":4,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/joker.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.632Z","timestamp":1786093645632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/joker.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 100540\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-188bc\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 884\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/25/2026 13:44:10\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e6c2561d8f486a00fe9c7e061e80adfa\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":100540,"size_decoded":101477,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5db3b114e4ef7291b41f9b7844698123","sha1":"82abd882c3f81f04064c7efc5567cee09bd930c6","sha256":"2565f22d64f5ee93da486cbacb48a6c9bc1d84c08e9033082564e92391fddb1b","sha512":"dc04e76a3227c1979955dab9790a35733d2b6cf1fd4dbd5a1f0b069819a45f2897fd1ff50ada5a81ac190a2930ba3606e712d5d19321a6971e80e1b31844abd1","ssdeep":"3072:0XqsEOUO4mzB/9A1UdpzV3Azqf600doYYS5ZGdt:0XVEOAmzd99R3Ahx6t","tlshash":"2fa312d10922c10bcb1db277e7d46b8b77323a550eed5ac14ad1e19867dd6ae2116308","first_seen":"2025-07-04T00:17:04.650617Z","last_seen":"2026-08-07T09:07:57.013088Z","times_seen":63,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/31.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.708Z","timestamp":1786093645708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/31.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27662\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0464-6c0e\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:24 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/01/2026 14:39:03\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 763f030efe499f0c32bf93861ded0e1a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":27662,"size_decoded":28598,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 228x342, components 3","md5":"b35a9e11aadb3940f8bd05cd8dfdceb6","sha1":"c19414c0644ad31218716bf73fa2b14276da8e50","sha256":"8089c23f9f3b23973eb2f6f1a3ace1a8fda83788b8b4bf67be687bcd7692d00a","sha512":"67fac0fb942e2859da71291801d0a52ffcc8cee4f0172f8b70d683a71d24eea7a1a7625fbc27997bd419e3617a7d53b72cd1f63c7ffd3e4812560af0fd4aea30","ssdeep":"768:q3Q7oBFVZCNHFHK/qk3u+djDVUE+bYEdwK:P9NlHOqwHVUE+UEdwK","tlshash":"c9c2e0bbfeb67d30f709927daee45845f56c0040e99409362ad16be0b4fcc81bb17499","first_seen":"2026-03-15T02:44:29.414634Z","last_seen":"2026-08-07T09:07:57.014034Z","times_seen":20,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/images/icon_point.svg","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.584Z","timestamp":1786093645584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/images/icon_point.svg HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8enY%2F07Q8ztJX5A2GFSvulrTY%2BMgMU0uX4Y2ONtJhXH8smqNtC%2BbwtyKFw6ikj350%2BsTcnGbJ4S4a%2Bzw9jb%2FVWxnIn1vqnzAjCeb1fSQ8LfjjdtMCfg0ORj3VJgk%2FF5rqmJC8MEcPWtx1PVi8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a2752184ee2c0b45-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nage: 843\r\ncache-control: max-age=14400\r\netag: W/\"6a71ee27-3b5\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":949,"size_decoded":1104,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b8d819ea14a41d457702cc80af95fdc","sha1":"42648c53f7d9efd1447fc7f63ff43b7b36866012","sha256":"2cf31df5b105adeee79efb9d94fb767c0cb05a552d231835ef8c258d05fbc977","sha512":"5931f2ea2a9164cbc339d8c9ec6305db92781b9cf4f19838f749faebdeea725e3a450d963825ad47b4c55f607e8ff1410c68470eeea7802d0ecc5e9980aec695","ssdeep":"","tlshash":"c71108f3fc6a06dbda57b303ad8618a407bfb8f91347a18c5818cf3ba294154c795b20","first_seen":"2024-08-19T13:45:40.065888Z","last_seen":"2026-08-07T09:07:57.014491Z","times_seen":276,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/icon_18.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.604Z","timestamp":1786093645604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/icon_18.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 372\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf22e9-174\"\r\nlast-modified: Fri, 16 Aug 2024 09:59:05 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 884\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 68acfcbdf27abf034e617ae130e94846\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":372,"size_decoded":1304,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f486e9cbe8211f66adc8b17c0f0d6c8","sha1":"9bff2faaadb43aa410a39b09c32e1f38cbc393ea","sha256":"d189311ea5cbefe56171921828cbc8f1c9d573c99832d801cce072d830523161","sha512":"8df29019097617c82b65a8b916cdb1078cfa16c0cca4d65ab41a82606cddadf04e31fd337c8a04b6a721aaddfc5b36b39f670a6447098e640ddc86cc40c46340","ssdeep":"","tlshash":"d1e0f8006f2a0927cc0899032a624c48d23363a6e8f3b40097eab0c6f8764ab6540c1d","first_seen":"2025-03-26T16:41:42.39254Z","last_seen":"2026-08-07T09:07:57.015368Z","times_seen":229,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":8,"connect":2,"send":0,"wait":2,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/61.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.678Z","timestamp":1786093645678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/61.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18376\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0469-47c8\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:29 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/06/2026 20:37:13\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f7c479bd3a76a3defbbe252872340925\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18376,"size_decoded":19311,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x230, components 3","md5":"c08ab63b8652dc1b948c5d18e4487f20","sha1":"7460396255f8535b01661d7c02bc06c51e960767","sha256":"622a790146334f3efa1d3084af1182eaa873d661cd56a9003ab8783a66740486","sha512":"0d76bc63793192ac36bb498db118dd877a23cc282f5dc7bac417d1b0b3c6aa188d30c6bb8402e3ff859b864adc41bea5659b5795cff454b72c40d6c707dd0b7b","ssdeep":"384:bwX9Ci/M/r0p0zeI0iTEFk9LVTai568UgtqwJi7l6rPcRBNUuvtZYxIoq:yCi0T0p0vKW9gkLqwi6TCUQvp","tlshash":"2482d18740011f308abb2315973c08dea4f66c685d68eb7e22eb70e0f9b4cb1459b61e","first_seen":"2025-06-25T02:14:17.521258Z","last_seen":"2026-08-07T09:07:57.0159Z","times_seen":26,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/68.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.685Z","timestamp":1786093645685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/68.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7217\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0469-1c31\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:29 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/03/2026 17:35:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5d76a33581375d0e75c7a5cf67da631a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7217,"size_decoded":8151,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 153x225, components 3","md5":"34755471756c55a765fcf28fb459da5f","sha1":"8164a6469f050744405af63724c55c0771e02eb3","sha256":"26e4f4449484a9468ffda1cd3f691cb1931ada8c1b002ba4d90e9ca6a64ab493","sha512":"7b9f83c38705e71b2c4bf561facaca5d6689771f0a93d497db16270a35219bed1b1ea0bbfc3742fc69286bbe933d1c335e8ad109fb30a9ff094da6d99ecaf292","ssdeep":"192:gCHsLSlC8Ees3J9sC1AoqBXYnZI2RMEcxXPtle:gIsLSlCheIq86NPtle","tlshash":"dde1b04766690e30f50413b1cafb1faa0ef9b54374be8c2c179924ec6e6aac1800a114","first_seen":"2025-09-22T08:45:43.428368Z","last_seen":"2026-08-07T09:07:57.016414Z","times_seen":32,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/90.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.693Z","timestamp":1786093645693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/90.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23121\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046c-5a51\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:32 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/06/2026 19:49:30\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 68719170cdb0c9a29cf0ca6f996c6013\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":23121,"size_decoded":24056,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 228x342, components 3","md5":"52ff68e081c4d67a6a445e5d8126330a","sha1":"6a7eb2e7d72d10fd154cf66d64ad8f8ae727ca20","sha256":"bb9beeaf9b4babedb32e19eb0a624ffaa3a387f32b8bf7fd8e8bc7184c8cd266","sha512":"4f10970c096edea14754ca9accaf53fa779df4e158d9b2fa4b9e491173f7f24bfd1dcaad90ed37c7640bb3bd821c07a64e64a105e0461dd154702e25bb5eefdd","ssdeep":"384:rbdJYgJBannx/hlH/Jl2+orOp3OrWmMna6cUFa+TCdpWHeUmYn0XKARw5L:Hunx/vBlWrOlYWRnaNsa+TCdpVIBAa","tlshash":"87a2f13fdbd2e456f1141e36130bbc23932371a90cf261c864de66d53a77e0b4a99b41","first_seen":"2025-06-03T02:54:06.004026Z","last_seen":"2026-08-07T09:07:57.016936Z","times_seen":22,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/2.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.711Z","timestamp":1786093645711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/2.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15340\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0460-3bec\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:20 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/03/2026 16:51:59\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f747a0080d322b1966584e18171d6d70\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":15340,"size_decoded":16275,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 249x313, components 3","md5":"a7e3fafcaec61899e75e80cc5e9408db","sha1":"c8a97d280efc9c208b46d46d8fe2df395c70052c","sha256":"833b4570d636c10c4202abe5a9c32e04a1d897ad17fe1673e0098d23b53c0ff9","sha512":"d5ea5181d6ca53903a7bf1a8e72aa696b994e667543c2c3ba33c469c1453c576979ef1aeb6ae840f1b5b511f91f4ae4741e2b183e8758b01a27a5d3c7b8797e3","ssdeep":"384:1sjiW/0baHkuJPL/W/Rui57V5NbkFOMEqt3cjZNf8dACtUb/:1sjTyaEuJPa/RuihNCOBVjZh8TtUr","tlshash":"8a62d0128e16d57efb6d0d29ea5047bfd9c0b14ad482a0cf07d211dad0c1aededbc426","first_seen":"2025-08-03T23:29:43.506231Z","last_seen":"2026-08-07T09:07:57.017443Z","times_seen":46,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/48.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.720Z","timestamp":1786093645720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/48.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18960\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0466-4a10\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:26 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/07/2026 08:55:04\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 16450445a73aac27f95f5b920efd6980\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18960,"size_decoded":19895,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 230x345, components 3","md5":"2014c3327f37687612ab8af6da35f7b8","sha1":"04de51028966d327f2341b72beb35ce241cf58a6","sha256":"2f49ab60fee41487d63e3b453299735a0bdd6437671bdc482666d1d88e7155aa","sha512":"207d5f0ea3c6deb95e402139ff2c1c243d74ee0600bb4b1dca233c1cd3500e9c56b7141ddcd60a21091f93bf2be0caf9aa2fafff174ff0a808d50b4ee26a7153","ssdeep":"384:Hp4fl9b3tGGoPenjC6Zkd29RHIUvKUy1nEXHhibX9af6Lo1uNxPXnC:Hp63tG10TkyO2y1EXHKta3GPXC","tlshash":"6182d08337551631c938a464bbacb6c3fd17b80ca6bd5d7c0a9762e0a1b31da856f508","first_seen":"2025-07-04T00:17:04.623831Z","last_seen":"2026-08-07T09:07:57.017978Z","times_seen":36,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/24.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.721Z","timestamp":1786093645721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/24.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12708\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0462-31a4\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:22 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/03/2026 17:22:10\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 72b68fc99bc0e0d9659d8c60d7814123\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12708,"size_decoded":13643,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 167x250, components 3","md5":"6012b4e052600579e565f43b811a1873","sha1":"7773c048588126f7c68ac97ad2b144e67889b236","sha256":"5f2fdc0e141b3c5e5e40ec89d40ad32543d7c26eab7f883068548895b2b20b4d","sha512":"9b9feac8fba433246a9311204ab1e23e0fa30d2a7a6fde114b236463c2cc56398982860c55d593c61a51285643fc2f2e96b738f090e0fc4f47afb9932d14bb08","ssdeep":"384:cnrEk2zyrBc0W70jAr+mjHsoyo7I08CaRawYmguT7:cnQkuEc0W7sWMoycI0ERFzdT7","tlshash":"b142c0ef82bae99d4628223d7b16897161d3131f5e30b2abe25c80d624506f38df1722","first_seen":"2025-09-22T08:45:43.470568Z","last_seen":"2026-08-07T09:07:57.018497Z","times_seen":16,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/big_bass.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.624Z","timestamp":1786093645624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/big_bass.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83540\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-14654\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 884\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/23/2026 10:39:08\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3f41ec8695399ada074f322dc902940e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":83540,"size_decoded":84476,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"160f3df3444691f8d4cd64548c1a55e6","sha1":"5960b875a1456af18f4c22ef7eacf000b3459313","sha256":"10231a4d0dcc5ce61b743462f20bf3c8c6fb2b5bd5394b73ae6ed9495569a1c4","sha512":"ec66b704fb3614e37c22e69a37c875d495e9e2881938cea12b6d382ca1e6b6ea44218547a59148b5d776a7c8fb56a8e2855cbb940ca49a59d74402f2156dca78","ssdeep":"1536:OeAPFjM+H5DW/a01AZVhy5ZyiCidhXZaO12vvDI2tvi92WfHbj5me/vmoTajG:OrPFjMrA45E+d9lADI2piIuHbgcNKG","tlshash":"778302ec175e8798c2a20ff4c9c201d3f68277558663d1293f9f512a00dd799ea3e3a9","first_seen":"2025-03-26T16:41:42.411759Z","last_seen":"2026-08-07T09:07:57.018993Z","times_seen":68,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/images/icon_zoom.svg","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.583Z","timestamp":1786093645583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/images/icon_zoom.svg HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Nu677cTMZDrXNLn4%2Bm%2BGxlPu23PWCwT0GPUwXkL3%2BZBvJo1%2BvXALRPbI%2FA%2BcQrWVKSQafZQWw6Uzc6YxdOW3m%2FdCdy638Cxo%2FIaLPeYGM3tOxIMEaDxI6MPHeeJIJLmeM00mHwfePReZCUcgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a2752184ee2b0b45-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nage: 843\r\ncache-control: max-age=14400\r\netag: W/\"6a71ee27-3f2\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1010,"size_decoded":1128,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d00e097c840d9f1d02b5d70bdd6b4c6","sha1":"324c3df851e8cc590e6bf7ca4993268012773a06","sha256":"ebd6e763c431a2c5af2d04463719b7002f112f9539e9b1b0a90269a229f50314","sha512":"6363bf519581cd82a76cb62e344f1cdffe1bf5c6753d8c555e4104cbf456201c569abc49171c296d91cb1ef6c01e195f4bac6bec5752de3acac258548345be9b","ssdeep":"","tlshash":"081178969013d7c88d434af4fc37584e8d2919bea7a4b2fa40443e9cb4df4d8d9578e0","first_seen":"2024-10-12T23:01:03.386102Z","last_seen":"2026-08-07T09:07:57.019471Z","times_seen":276,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/images/security_icon_n-2.webp","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.612Z","timestamp":1786093645612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/images/security_icon_n-2.webp HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a27521851e340b45-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 843\r\ncache-control: max-age=14400\r\netag: \"6a71ee27-c6\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=64%2FgdMayVQr83Pcv9%2FYKcuDVQnnaTruoQ0q7ve8WdAe7B7Zja1Lg0xGtP6G5tReJaWqdnYdtITpFFsjSOowT%2Fm8jhHczLgDrZOaefVohb%2FVWMp9u%2FpWsjZbBAgi8jx9EcPS87TfN7RhPMfBxww%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 198\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198,"size_decoded":915,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ac1664b06f112ae930716445d9765a9","sha1":"064752fdedd5ba2d38ef36617111de68133cf6b7","sha256":"c55aa588c9480ee7851d578b3306c80f5548f9ae5b3bc9afb5d126e5ef0652f0","sha512":"c00d5d5cb2e5e0afcf3b315a2649da2611ae0e3b75e5677aaf6e851bcb8afd49582161a06c80374e3b47942258ab54379cbfaa8a6ea772b2ad97a33a18fe69cc","ssdeep":"","tlshash":"dad02292cf2508280a732c0a0240442511f3589c20c3ea31a6a62cfa4c3f74b666aa00","first_seen":"2025-06-13T11:43:17.267674Z","last_seen":"2026-08-18T07:42:31.576664Z","times_seen":147,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/13.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.687Z","timestamp":1786093645687,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/13.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18036\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0460-4674\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:20 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/03/2026 17:22:10\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bc65a22d0ac384e636d40c4bab09311c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18036,"size_decoded":18971,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 204x306, components 3","md5":"a4b280f6bce1fbd650afa03c0fa6f3e5","sha1":"0eb2c5c9325345183dbc340fe73d559089eb8526","sha256":"72caf737b1ef98d637f7b077acae284291ddb6ca9ab1cd81030cda75b34beeaa","sha512":"8e1457ae1ce208eab63da6ab9a159b6f80a21cb2d7a694de1ca88b4b193f90cd56c5be1c05318c20ebed663b499694ec9f7c42ef6c3ba1195f29da8218c42fa4","ssdeep":"384:yQobMk5AIEp+ZyYsIKXMQDhzUMLek4SvAnEFf0LGcFed2tfiik+:2Z5Atp+ZM9cuUMqYcEKLGckDik+","tlshash":"1282d00ea08c855b5079adbc44e1ae1c9f98903182e7c8f6c53b7bfa74babf318d5540","first_seen":"2025-10-07T08:12:00.877154Z","last_seen":"2026-08-07T09:07:57.020504Z","times_seen":19,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/api/leads/link/80329db3-c9b2-4b46-aaad-f05dbfdcba6f/event","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:26.122Z","timestamp":1786093646122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"POST /api/leads/link/80329db3-c9b2-4b46-aaad-f05dbfdcba6f/event HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nContent-Type: application/json\r\nContent-Length: 154\r\nOrigin: https://zenvorix-luckyreward.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":154,"data":"{\"events\":[{\"name\":\"full_page_loaded\",\"datetime\":\"2026-08-07T09:07:26.084Z\"},{\"name\":\"update_lead\",\"datetime\":\"2026-08-07T09:07:26.084Z\",\"is_bot\":false}]}"}},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ndate: Fri, 07 Aug 2026 09:07:26 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a27521883e550b45-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://zenvorix-luckyreward.click\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=umjCrsO6bd0GfcXYlDpaMbPcaplqswBLltQyBGFs4i25p7odcOKA4sZMjNZxWa%2B94o7ftsJd64q8uYBOFK9V8J3p42WzX1spdQiUcFVzxatRDhvcTW3diRkPiQgQl7IX%2FDAXIuf63Hr4rDDCWg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1555,"size_decoded":1607,"mime_type":"application/json","magic":"JSON text data","md5":"ce1db2bab89f0e96ccb436474d62ea03","sha1":"d1d735199d1a2628459f06083470f9155c7aa4be","sha256":"07dce2fc1f9b4ddeabe8f1e5f75cb2f14970794d128e801556c51677f42aa07d","sha512":"c2bae2970453fbd44edaf371d6c8ee2b6228007dfff49dd0a91722b56580fdc6ae8bececa34e98e1efdce15a7770e682f5092e211612335e446360691c144c94","ssdeep":"","tlshash":"9f31655b4454ecb259d69a83ab9bbd0149bd4c7f71d21828e6b85f281ccf4fa2102426","first_seen":"2026-08-07T08:55:42.409917Z","last_seen":"2026-08-07T09:07:57.021346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/images/security_icon_n-3.webp","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.608Z","timestamp":1786093645608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/images/security_icon_n-3.webp HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a27521850e310b45-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 843\r\ncache-control: max-age=14400\r\netag: \"6a71ee27-c8\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7Q4KSoH4e%2FVqe0W3sVxYQ4nAlSJ7ApOcTxbYgBkt7UoSwtNz8rZdhv3znGWliXaGmRxSL1JrAzW783S81K5T74g0gcXat1vF7JM%2FCzaa37%2F%2FbESIRXlUL53Y4NgSkx1dMqRRLu5Hv7VMVOSMQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":915,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26ae874f3b7051bc5b112960c251080f","sha1":"1d6b38f7fe58dc79cc66cc0a3ee42caaa096b686","sha256":"8c66b3cb207515328ac21bdbbda1b90a74d7cac66267352048bfd7e4e1efe627","sha512":"88dbfe63b9a7374528308bd4ac891535c310ffc2277c3a44004772accea7115d8a1df77ecb56edf573000df4afc79e7e9524b4fb8c8e8dbac2384860306f0c31","ssdeep":"","tlshash":"2fd0224aeeae8a646d29fcb53453e630123aca8a21a4b0b0c85702e941b04f02e01c8b","first_seen":"2024-06-06T20:30:57Z","last_seen":"2026-08-19T10:35:58.770476Z","times_seen":994,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/62.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.614Z","timestamp":1786093645614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/62.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18573\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed054f-488d\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:19 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/07/2026 08:55:04\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8386f6de9974b691662e154fb8c48d37\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18573,"size_decoded":19509,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x360, components 3","md5":"1e8af4934c75dc6c80cdb69c07ffd579","sha1":"cbe7bf91ea77937a7d9db1c47d1ec160c5c79cbf","sha256":"cc91c594dae989d6584e239c5f921a84043a9416e78a25f18c075cbb9af0ea96","sha512":"8abcde9ac95d2b90ce1c210d3292fa9757a6c7d9af42d190a9e35d886e8da4d31447670ba790fa67f82415b74df1455fdaddc1f2ce710114670e4d2b09953535","ssdeep":"384:MdbpQFG+TbDCoPt0iiLru9qqD2+eMIfcNBrctHEg0xwMr4PFBAl:MFpyG+TPCoPt0iUruBD2+LIfcNBI9EH1","tlshash":"9782d08854fb0cf3ae7e59f4d2350ac86b0507b552702aa4ffa3acd49d09fe89865112","first_seen":"2025-06-03T02:54:06.005593Z","last_seen":"2026-08-07T09:07:57.022488Z","times_seen":18,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":8,"receive":5,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/3.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.622Z","timestamp":1786093645622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/3.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19305\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0460-4b69\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:20 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/03/2026 04:13:05\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3b045805c09450422753f697131e1e67\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":19305,"size_decoded":20240,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"f43bc2f0099834f279ec38c617d1c719","sha1":"290a891ae298b557479cc4e2879aa0aad724e1be","sha256":"589916655936a718cd2b4c7d95bc85d665d8fd17e06655bd2efaa9c0f639dba5","sha512":"310227dda11ee474568ad47aa336c95c98d60421027beb55e705a34a7ee3fc2782090165d313b184436dfb1d66874d591055243d58cbb673ea6aa4938f9a45bd","ssdeep":"384:55NSLGGhKRwwprDt/Tc97aGD4qagjsQ2pGVVKl/bdRK:zsLxhKOwprx7c97aGD/ZsYXyK","tlshash":"ad82e11912f41824cca448f6d783db744b7d2dab7d39212eae11e8e84ce39c0af4921f","first_seen":"2025-04-06T10:47:32.14767Z","last_seen":"2026-08-07T09:07:57.023103Z","times_seen":27,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/22.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:25.709Z","timestamp":1786093645709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/22.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 09:07:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5555\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0549-15b3\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:13 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1029\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/06/2026 06:13:07\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1eddecfc1449ed5b4662a840c3003d38\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5555,"size_decoded":6490,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 169x155, components 3","md5":"c87ec322ede17b227ef5c20b590bfeaf","sha1":"f42da05f8e9fda4813c6a566aa3a8c0f754360d0","sha256":"11c9f414532be68d065cffd874c328d8d15162902ebf8adab2baec270daa0981","sha512":"20115c16d9b65fc4f3d9974ca8189abdec3f7f267ad1dd06303aa635a1d59b7509ce23fbc9b97f4d69f4fcc25d634a708660c96d4764132b5c5d62687b6e2d99","ssdeep":"96:BnqauzzRxhaP8+PoYqcvrjaYuDV3En38BoWNJxoD3CDN3U/CEMxjK0u:BsRx00kqWr2JC3p2lkqjjK0u","tlshash":"4eb19e87233aaa12e1fa7730f32b4d007d08a569f11181da058a87ce515797ea7a2266","first_seen":"2025-06-19T06:56:57.16017Z","last_seen":"2026-08-07T09:07:57.023665Z","times_seen":27,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/fonts/Roboto-Medium.ttf","fqdn":"zenvorix-luckyreward.click","domain":"zenvorix-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.10.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/?lead_info=bGVhZF91dWlkPTgwMzI5ZGIzLWM5YjItNGI0Ni1hYWFkLWYwNWRiZmRjYmE2ZiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2dvLmFwcDR1LnRvZGF5L2NsaWNrLnBocD9rZXk9MDk5NDQyNjEyNWY1NGVlNDg2Mjc2NDQ5NGRjNDgxYjEmbGVhZF9pZD04MDMyOWRiMy1jOWIyLTRiNDYtYWFhZC1mMDVkYmZkY2JhNmYmc3ViMT17c3ViMX0mc3ViMj17c3ViMn0mc3ViMz17c3ViM30mc3ViND17c3ViNH0mc3ViMjI9e3N1YjIyfSZ0cmFjZV9pZD1iYTFjNWI3ZS1kYWU0LTQyN2EtOGUyYi1mN2ZiOTg3ZWI5YjA\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-07T09:07:26.110Z","timestamp":1786093646110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenvorix-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 12:14:04 GMT","end":"Mon, 02 Nov 2026 13:12:45 GMT"},"fingerprint":{"sha1":"66:45:35:E8:BC:48:71:06:EF:7B:4E:C2:95:73:9C:96:FA:43:5D:E6","sha256":"C6:7B:40:4D:EE:13:58:C3:13:EE:13:8C:9F:33:A0:1C:9C:37:F5:9E:36:75:A9:53:25:68:D2:4D:53:B8:61:8F"}}},"request":{"raw":"GET /3eece416-944a-4b87-bf2a-630bae7adb74/es/fonts/Roboto-Medium.ttf HTTP/1.1\r\nHost: zenvorix-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zenvorix-luckyreward.click/3eece416-944a-4b87-bf2a-630bae7adb74/es/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 07 Aug 2026 09:07:26 GMT\r\ncontent-type: application/octet-stream\r\npriority: u=3,i=?0\r\ncf-ray: a27521882e520b45-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 741\r\ncache-control: max-age=14400\r\netag: \"6a71ee27-292c4\"\r\nlast-modified: Tue, 04 Aug 2026 13:50:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dnl%2By8otI04IJWkj0Ifk2PAMjD7OEsH%2F25nrWZJBkKn20XpALbKOhCGLEfCEsrQ4FD%2FCvQD31ctmvzSHjS4q4%2F1UMIaZmBo8n1KbeQCfgsBZmEzgANoZkDanCCotnk69FOU7GrBJKobadWlhCg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 168644\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168644,"size_decoded":169382,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med","md5":"68ea4734cf86bd544650aee05137d7bb","sha1":"3c6a09fcc6a454924c81af7dff94fc6d399ed79b","sha256":"9d0d55a303bfd13b79a87721f65185e93f235e2d77fe398b2dca67ac519915f5","sha512":"5d55a41b845f3a3ae9b08cee5258348dfd83dac5f0a0e48159cd85c141c614a02f8f474fa683d2bfbc451d49dd3b749820662d403b2e3fd3f16a242eaca64115","ssdeep":"3072:wqmtn5wkex8r6Qym7KCkygAKuXylCC9ptSUXl8j/6afWRCgqdhASD/80/:n25wklN7T3QtSUXz7XfST80/","tlshash":"73f3d701d241bf25cac6b6787c7c93be4cb5e41abc4aa52730d9ab3159c8805ec58bfd","first_seen":"2023-04-05T23:29:00Z","last_seen":"2026-08-19T20:40:02.245581Z","times_seen":2123,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"zenvorix-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"zenvorix-luckyreward.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}